This Privacy Policy outlines how RIO (Records in Order) collects, uses, discloses, processes, and manages the personal data of our clients, including charities, businesses, and sole traders, in the course of providing Legacy Records management services. RIO is committed to safeguarding our clients’ privacy and protecting sensitive information in accordance with UK GDPR and the Data Protection Act 2018.

RIO collects personal data such as client names, contact details, and record-related information necessary for consultations, reorganising archives, creating databases, and ensuring compliance with regulations like GDPR, Safeguarding, and HSE. This data is gathered directly from clients during service engagements and is used solely to deliver tailored Legacy Records management solutions.

RIO does not share personal data with third parties except with secure, authorised partners required for service delivery (e.g., secure storage providers). All data sharing complies with UK data protection laws, and clients will be informed of any such arrangements.

Clients have the right to access, rectify, erase, or restrict the processing of their personal data under UK privacy laws. To exercise these rights, please contact RIO at [insert contact email/phone]. We will respond within one month of your request.

RIO does not knowingly collect data from individuals under 16 years of age. If such data is inadvertently collected, it will be deleted immediately upon discovery.

RIO implements robust measures, including secure storage and encrypted digital systems, to protect Legacy Records and client data from unauthorised access or loss. Regular reviews ensure ongoing compliance and security.

RIO reserves the right to update this Privacy Policy to reflect changes in our services or legal requirements. Clients will be notified of significant changes via email or through our website.

For any privacy concerns or to access your data, please contact RIO via our email. This Privacy Policy is effective as of 24 August 2025.