Who we are: [River City Research, LLC] (“we,” “us,” “our”) provides research, evaluation, data, and development services to nonprofit and public-interest organizations. This Privacy Policy explains how we collect, use, and safeguard information on [rivercityresearch.com] (the “Site”) and during initial inquiries about our services.
This notice covers our marketing website and lead intake. When we work with clients, any access to personal data under a contract is governed by a separate agreement or Data Processing Addendum (DPA) that sets stricter controls.
1) Information we collect
- You provide: contact details (name, email, organization, role, phone), messages and files you submit via forms or email, newsletter sign-ups, event registrations.
- Collected automatically: device/usage data (IP address, browser type, pages visited, timestamps, referring URLs).
- Cookies & similar tech: used for essential site functions, analytics, and to remember preferences. You can control cookies in your browser.
We do not seek to collect sensitive information (e.g., health, education records, government IDs) via the Site. Please do not submit PHI or student records through web forms or email. For sensitive work, we will provide secure transfer methods under contract.
2) How we use information
- Respond to inquiries and provide requested information about our services.
- Operate, maintain, and improve the Site (analytics, troubleshooting, security).
- Send updates or invitations you opt into; you can unsubscribe at any time.
- Comply with legal obligations and enforce our Terms.
Legal bases (GDPR/UK GDPR, where applicable): legitimate interests (site operation, responding to requests, business development), consent (newsletters/optional cookies), and contract (pre-contractual steps when you ask us for proposals).
3) Sharing of information
We share information with:
- Service providers/“processors” (hosting, email, CRM/marketing, analytics) bound by confidentiality and data-processing terms.
- Professional advisers (legal/accounting) under duty of confidentiality.
- Authorities when required by law or to protect rights, safety, or security.
- Business transfers (e.g., merger, acquisition) where your information may be part of the transaction.
We do not sell your personal information.
4) Data retention
We keep website inquiry and marketing records only as long as necessary for the purposes above, then delete or anonymize them per our retention schedule. You can ask us to delete your contact records at any time.
5) Security
We use reasonable administrative, technical, and physical safeguards (HTTPS, access controls, logging, least-privilege). No system is 100% secure; please avoid sending sensitive data through unencrypted channels.
HIPAA/FERPA/IRB note
The Site is not a repository for PHI or education records. Where our client work involves PHI or student data, we operate under contractual privacy and security controls and, when appropriate, IRB oversight. Those engagements use secure transfer, role-based access, audit logs, and small-cell suppression/aggregation as required.
6) Your choices & rights
- Email marketing: unsubscribe via the link in any message.
- Cookies: manage in your browser or device settings; optional analytics cookies can be declined where cookie banners are presented.
- Access/Deletion/Correction: contact us to request a copy, correction, or deletion of your contact data.
California residents (CPRA)
You may request disclosure or deletion of certain personal information collected about you, and opt out of “sharing” for cross-context behavioral advertising (we do not “sell” data). Submit requests via the contact information below. We will not discriminate for exercising CPRA rights.
EEA/UK residents
You may have rights to access, rectify, erase, restrict, or object to processing, and to data portability. You also have the right to lodge a complaint with your local data authority.
7) International transfers
If you access the Site from outside the United States, your information may be processed in the U.S. We use appropriate safeguards (e.g., processor commitments) where required.
8) Third-party links
The Site may link to third-party sites or services. Their privacy practices govern those properties; review their policies separately.
9) Children’s privacy
The Site is not directed to children under 16, and we do not knowingly collect their data.
10) Changes to this policy
We may update this policy from time to time. The “Effective date” will change accordingly. Material changes will be highlighted on this page.
11) Contact us
[River City Research, LLC]
[Street Address] · [City, State ZIP]
Email: [privacy@rivercityresearch.com]
Phone: [###-###-####]
This policy is informational and not legal advice. Please consult your counsel for requirements specific to your organization.