Legal
Privacy Policy
Last updated: 18 March 2026 · Risera LTD · risera-limited.co
This Privacy Policy explains how Risera LTD collects, uses, and protects your personal data when you visit our
website or engage our services. We are committed to handling your data responsibly and in accordance with the UK
GDPR and the Data Protection Act 2018.
01
Who We Are
Risera LTD ("Risera", "we", "us", or "our") is a company registered in England and Wales, operating as an
advertising and marketing agency at risera-limited.co. We are the data controller for the
personal information we collect through this website and our services.
For any data protection enquiries, you can reach us at: privacy@risera-limited.co
02
Information We Collect
We collect personal information in the following ways:
Information you provide directly:
- Name and company name when you contact us via our website form
- Email address and phone number for correspondence
- Project details, budget, and service preferences you submit
- Information shared during client onboarding or briefings
Information collected automatically:
- IP address and approximate geographic location
- Browser type, device type, and operating system
- Pages visited, time spent on site, and referral source
- Cookie identifiers and similar tracking data (see Section 6)
We do not knowingly collect data from individuals under the age of 16.
03
How We Use Your Information
We use the personal information we collect for the following purposes:
- To respond to your enquiries and communicate about potential or ongoing projects
- To provide, manage, and improve our advertising and marketing services
- To send relevant updates, proposals, and service information (where you have consented or where we have a
legitimate interest)
- To analyse website usage and improve user experience
- To comply with our legal and contractual obligations
- To prevent fraud and ensure the security of our systems
We will never sell your personal data to third parties or use it for purposes incompatible with those stated
here.
04
Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases to process your personal data:
- Contractual necessity — to deliver services you
have engaged us for
- Legitimate interests — to respond to enquiries,
improve our services, and conduct business development
- Consent — for marketing communications and
non-essential cookies, where you have explicitly opted in
- Legal obligation — to comply with applicable
laws and regulations
05
Sharing Your Information
We do not sell or rent your personal data. We may share it only in the following limited circumstances:
- Service providers — trusted third-party tools
used to operate our business (e.g. CRM software, email platforms, analytics providers). These processors are
bound by data processing agreements.
- Legal requirements — if required to do so by
law, court order, or regulatory authority
- Business transfers — in the event of a merger,
acquisition, or sale of company assets, your data may be transferred as part of that transaction
- With your consent — for any other purpose, only
with your explicit agreement
06
Cookies & Tracking
Our website uses cookies and similar technologies. These include:
- Essential cookies — required for the site to
function correctly. These cannot be disabled.
- Analytics cookies — help us understand how
visitors interact with the site (e.g. Google Analytics). Enabled only with your consent.
- Marketing cookies — used to deliver relevant
advertising. Enabled only with your consent.
You can manage cookie preferences at any time through your browser settings. Note that disabling certain
cookies may affect site functionality.
07
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Enquiry and contact form data — up to 24 months from last contact
- Client project data — for the duration of the engagement plus 6 years (in line with UK limitation periods)
- Website analytics data — up to 26 months
- Financial and invoicing records — 7 years as required by HMRC
After retention periods expire, data is securely deleted or anonymised.
08
Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access — request a copy of the data we
hold about you
- Right to rectification — request correction of
inaccurate or incomplete data
- Right to erasure — request deletion of your
data, subject to legal obligations
- Right to restrict processing — ask us to limit
how we use your data
- Right to data portability — receive your data
in a structured, machine-readable format
- Right to object — object to processing based on
legitimate interests or for direct marketing
- Rights related to automated decision-making —
we do not make solely automated decisions that significantly affect you
To exercise any of these rights, email us at privacy@risera-limited.co. We will respond within 30 days. You
also have the right to lodge a complaint with the Information
Commissioner's Office (ICO).
09
International Transfers
Some of our third-party service providers may process data outside the UK or European Economic Area. Where this
occurs, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses or adequacy
decisions — to protect your data to the same standard as within the UK.
10
Security
We take the security of your personal data seriously and implement appropriate technical and organisational
measures to protect it against unauthorised access, loss, or disclosure. These include encrypted data
transmission (HTTPS), access controls, and regular security reviews.
While we take all reasonable steps to protect your data, no method of transmission over the internet is 100%
secure, and we cannot guarantee absolute security.
11
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you
to review this page periodically.
For significant changes, we will notify active clients directly by email.
12
Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Risera LTD is registered in England and Wales. Registered office: risera-limited.co