RioCloud Solutions — Empowering Brands in the Digital Era

Last updated: May 2026

RioCloud Solutions ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, store, and share your information — in full alignment with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), India's Digital Personal Data Protection Act (DPDP), and other applicable global privacy laws.

1. Data Controller

RioCloud Solutions is the data controller for information you provide directly. Our registered contact address is info@riocloudsolutions.com. For the purposes of GDPR, you may request to speak with our Data Protection Officer via the same email.

2. Information We Collect

Information you give us: Name, email, phone number, company, message content, and any other information you voluntarily provide through our contact forms, newsletter signups, or account registrations.
Information collected automatically: IP address, browser type and version, operating system, referring URL, pages visited, time on page, and device identifiers via server logs and cookies.
Analytics and tracking: Google Analytics 4, Meta Pixel, and similar tools — only after consent where required.
Cookies: Essential, functional, analytics, and marketing cookies (see Cookie section below).

3. Lawful Bases for Processing (GDPR Art. 6)

Consent: For marketing communications and non-essential cookies.
Contract: To deliver services you have engaged us for.
Legitimate interest: To operate and secure our website, prevent fraud, and improve services — balanced against your rights.
Legal obligation: For tax, accounting, and regulatory compliance.

4. How We Use Your Information

Respond to your inquiries and deliver the services you request
Send service-related emails and (with consent) marketing updates
Improve our website, analytics, and content
Detect, prevent, and address technical and security issues
Comply with legal obligations

5. Data Sharing & Sub-Processors

We do not sell your personal data. We share limited data with trusted sub-processors under signed Data Processing Agreements:

Google (Analytics, Ads, Search Console) — website analytics and advertising
Meta (Pixel) — advertising measurement
Microsoft Bing — webmaster tools
Hostinger — web hosting infrastructure (EU/India data centers)
Gmail SMTP — transactional email delivery

All sub-processors are bound by DPAs and are GDPR/SCC compliant.

6. International Data Transfers

Your personal data may be processed in India, the EU, and the US. Where data crosses borders out of the EEA/UK, we rely on the European Commission's Standard Contractual Clauses (SCCs) and equivalent safeguards.

7. Data Retention

Contact form submissions: 24 months from last contact
Newsletter subscribers: Until unsubscribe
Analytics data: 14 months (GA4 default)
Financial records: 7 years (legal obligation)

8. Your Privacy Rights

Depending on your location, you have the following rights:

Right to access — Get a copy of data we hold about you
Right to rectification — Correct inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability — Receive your data in machine-readable format
Right to object to processing based on legitimate interests or direct marketing
Right to withdraw consent at any time
Right to lodge a complaint with your supervisory authority (e.g. ICO in UK, CNIL in France)
CCPA rights (California residents): Right to know, delete, opt-out of sale, non-discrimination

Submit requests to info@riocloudsolutions.com. We respond within 30 days.

9. Data Security

We implement technical and organizational measures aligned with ISO 27001 and SOC 2 Type 2 including AES-256 encryption at rest, TLS 1.3 in transit, MFA, access reviews, and audit logging.

10. Cookies

We use cookies for essential functionality, analytics (Google Analytics), and marketing (Meta Pixel, Google Ads). On first visit, our cookie consent banner lets you accept or reject non-essential categories. You can withdraw consent any time via your browser settings.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect data from children. If you believe we have collected such data, contact us for deletion.

12. Data Breach Notification

In case of a personal data breach likely to result in high risk, we will notify the relevant supervisory authority within 72 hours (GDPR Art. 33) and affected individuals without undue delay.

13. Changes to This Policy

We may update this policy. Material changes will be notified via email or site banner. Continued use after updates constitutes acceptance.

14. Contact Us

For privacy questions, data requests, or concerns: info@riocloudsolutions.com

Privacy Policy