This page summarizes Riverwell’s approach to privacy and security and directs you to the policies that set it out in full.
Last updated November 12, 2026
Riverwell handles personal information collected through this website in accordance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA). In summary:
Through this website, Riverwell receives the information visitors provide when they submit the contact form, correspond by email or book a data strategy session, and aggregate information about how the website is used. Its hosting provider keeps standard server logs for security and reliability.
Riverwell does not take possession of, process, clean, store or de-identify the operational data of the companies it represents. Initial sessions require no data to leave a client’s systems.
Where a client licenses data, the data is transferred from the client to the buyer, or to a specialist de-identification firm, under the terms of the license.
Riverwell uses the following categories of service providers to operate this website. Each processes personal information on Riverwell’s behalf for the purpose shown. The names of the providers are available on request from luka@riverwelldata.com.
| Provider type | Purpose | Location |
|---|---|---|
| Hosting and network security provider | Hosting and protecting this website | United States |
| Email and productivity provider | Business email and documents | United States |
| Email delivery provider | Delivery of contact form submissions by email | United States |
| Scheduling provider | Scheduling of data strategy sessions | United States |
| Analytics provider | Measuring how this website is used | United States |
The following pages set out Riverwell’s practices in full. Questions about any of them may be sent to luka@riverwelldata.com.