
Website Privacy Policy
Effective date: 17 April 2025
Welcome to RIZOM. We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible way. This Privacy Policy outlines how we collect, use, store, and share your personal data when you use our website www.rizom.io.
Please note: This Privacy Policy applies only to the RIZOM website. If you use the RIZOM app, please refer to the App Terms & Conditions and Privacy Notice, which govern any data generated, shared, or stored within the app environment.
1. Who We Are
RIZOM (“we”, “our”, or “us”) is the data controller for the purposes of this policy. If you have any questions, please contact us at:
Email: contact@rizom.io
2. Personal Data We Collect
We may collect and process the following types of personal data:
-
Identity and contact data: name, email address, postal address, phone number.
-
Technical data: IP address, browser type, device type, operating system, time zone.
-
Usage data: information about how you use our website, services, and interactions.
-
Profile data: user preferences, feedback, and any information you provide in forms or community features.
-
Marketing and communication data: your preferences in receiving communications from us.
We do not knowingly collect personal data from children under 16 without verifiable parental consent.
Note: Any personal data generated or collected via the RIZOM app is subject to its own Terms and Conditions and Privacy Notice, not this website policy.
3. How We Collect Data
We use the following methods:
-
Direct interactions (forms, subscriptions, account creation)
-
Automated technologies (cookies, analytics tools)
-
Third parties or public sources (e.g., analytics providers)
4. Legal Basis for Processing
We process your personal data under the following legal bases, as required under the UK GDPR, EU GDPR, and relevant global frameworks:
-
Consent – where you have given clear consent for processing (e.g. marketing).
-
Contract – when processing is necessary for a contract with you.
-
Legal obligation – where we are required by law.
-
Legitimate interests – for our legitimate business interests, provided your rights do not override them.
5. How We Use Your Data
We use your data to:
-
Provide and improve our services and website functionality
-
Communicate with you (e.g. respond to enquiries, updates)
-
Send newsletters or promotional content (only with your consent)
-
Monitor website usage and enhance user experience
-
Comply with legal obligations
6. Sharing Your Data
We do not sell your personal data. Data collected through this website may be shared only under the following circumstances:
-
With trusted service providers – for example, website hosting, analytics, and communication platforms – who process data on our behalf under strict contractual obligations and in compliance with data protection laws.
-
With legal or regulatory authorities – where we are required to do so by law.
-
With mission-aligned partners – only with your explicit consent.
You may be invited to opt in to share your contact details with selected partners, such as The Cornelius Arts Foundation (TCAF) and Ginkgo lab. fonds de dotation, whose work aligns with our broader mission in the fields of global health, and societal impact. If you choose to provide consent, your contact details may be used to share relevant updates, invitations, or opportunities for collaboration.
We will never share your personal data with these or any other partners unless you have clearly given us permission to do so. You can withdraw your consent at any time by contacting us.
Where appropriate and especially in the context of data philanthropy or public-interest research, we may also share anonymised or aggregated data that cannot be used to identify you.
7. International Data Transfers
Where data is transferred outside the UK or EEA (e.g. to cloud providers), we ensure that appropriate safeguards are in place, such as:
-
Adequacy decisions
-
Standard Contractual Clauses (SCCs)
-
Binding Corporate Rules
8. Data Retention
We retain your personal data only as long as necessary for the purposes we collected it, including to satisfy legal, accounting, or reporting requirements. When no longer needed, data is securely deleted.
9. Your Rights
You have the following rights under the EU GDPR, UK GDPR, and other applicable laws:
-
Right to access your data
-
Right to rectify inaccurate data
-
Right to erasure ("right to be forgotten")
-
Right to restrict processing
-
Right to data portability
-
Right to object to processing
-
Right to withdraw consent at any time (for processing based on consent)
-
Right to lodge a complaint with a supervisory authority
To exercise your rights, contact us at contact@rizom.io.
10. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no system is completely secure.
11. Cookies and Tracking Technologies
We use cookies and similar technologies to improve user experience and analyse website traffic. You can manage your cookie preferences via your browser settings.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices, so we encourage you to read their privacy policies.
13. Changes to this Privacy Policy
We may update this policy from time to time. We will notify you of material changes via the website or email, where appropriate.