Privacy policy.

Who's responsible

RiverWood is run by James as a sole trader, based in the UK. If you have any questions about your data, email hello@riverwoodai.com and I'll get back to you within a working day.

What I collect

Almost nothing automatically. The only data I get is what you choose to send me:

• When you email or call me, I'll have your name, contact details, and whatever you've told me about your business. It sits in my normal inbox and notes so I can reply and follow up.
• When you book a workflow review, the booking goes through Calendly. They collect your name, email, and any details you add to their form. I see those details in my Calendly dashboard.
• When you visit the site, the hosting platform (Cloudflare Pages) sees your IP address and basic browser info, like any website. I also use Cloudflare Web Analytics for aggregate page-view counts. No cookies, no personal data, no individual tracking, no banner needed. Covered by Cloudflare's own privacy notice.

No marketing tracking. No advertising pixels. No mailing list. No retargeting. If that ever changes, this page will say so before it does.

Cookies and local storage

The site stores one small preference on your device: whether you've set the homepage to day or night mode. That stays on your device only, and I never see it.

When you click "Book a workflow review", Calendly's booking widget loads. Calendly sets its own cookies to handle the booking session. That's covered by Calendly's privacy policy, not this one.

That's the lot.

How I use it

The data you send me through email or Calendly is used to:

• Reply to your message
• Run the workflow review if you've booked one
• Follow up afterwards about what we discussed

That's it. I don't sell it. I don't share it with anyone unless legally required to.

Who else sees it

A few service providers handle small bits of your data to keep the site working:

• Cloudflare hosts the site. It sees IP addresses as part of normal web traffic.
• Google Fonts serves the typefaces used here. Google logs the request, including your IP, when fonts are fetched.
• Calendly handles workflow review bookings. It sees what you submit through their form.

All three are well-regulated providers with their own privacy policies.

How long I keep things

• Enquiries that don't go anywhere: deleted from my inbox after about 12 months.
• Workflow reviews and ongoing client work: kept while we're in touch, then up to 6 years after the last contact for tax and contractual reasons (HMRC requirement).

Your rights

Under UK GDPR you have the right to:

• See a copy of the data I hold about you
• Ask me to correct anything that's wrong
• Ask me to delete your data, subject to the 6-year retention above if you've been a client
• Object to how I use it
• Take a complaint to the Information Commissioner's Office at ico.org.uk

For any of these, email hello@riverwoodai.com. I'll get back to you within a working day.

Changes to this policy

If this policy changes, the "Last updated" date at the top will change. I'll only make material changes if the way the site actually works changes, and if those changes affect data you've already given me, I'll get in touch first.