Cookie & Similar Technologies Notice
Last updated: 17 October 2026
Your choices about cookies, local storage and optional usage measurement across PayRivo Payroll, PayRivo MyPay and Rivo Finance.
1. Sites and responsibility
This notice covers payrivo.co.uk (including www), mypay.payrivo.co.uk and finance.payrivo.co.uk, including their public pages, sign-in pages and account workspaces. The operator is Rivo Bookkeeping & Payroll Services Ltd, company number 07109621, at 4 Marlin Office Village, 1250 Chester Road, Birmingham, Castle Vale, United Kingdom, B35 7AZ. Contact marketing@payrivo.co.uk for privacy questions.
2. Cookies and similar storage
Cookies are small files saved by a website. We also use local storage, session storage and similar technologies. UK PECR and, where applicable, EU ePrivacy rules can apply to these technologies, not only to cookies. UK GDPR and, where applicable, EU GDPR apply when personal data is processed.
3. Essential functions
We use storage necessary to provide the service you request, such as secure sign-in, protection against misuse, remembering your cookie choice and maintaining requested workspace selections. Essential storage is not switched off by rejecting optional analytics. You can block it through your browser, but sign-in, security checks or requested features may then stop working. We do not treat all third-party technology as essential just because it is useful.
4. Optional usage analytics
Optional first-party measurement is off by default and only runs after your affirmative choice. It counts public page visits, button actions, illustrative-demo interactions and signup steps; events can include a public page and Basic/Pro plan tag. Our measurement endpoint is hosted by Base44. It does not collect payslip or document contents, salaries, National Insurance numbers, names or email addresses in these events. A checkout reference may be sent to verify a completed subscription; stored measurement uses a deduplication hash rather than the raw payment reference. Automatic SDK session/heartbeat analytics and automatic production page-view tracking are disabled in this app.
5. Advertising and separate choices
We do not configure advertising pixels in this application. Cookie preferences do not sign you up to marketing emails and are not consent to receiving offers. Choices about optional marketing communications are collected separately. If new optional technologies or purposes are introduced, we must explain them and obtain any consent required before enabling them.
6. Make or withdraw your choice
Choose Reject optional cookies, Accept optional cookies, or Manage preferences in the banner. Optional choices are off by default. Ignoring the banner, scrolling, using the site or closing the preferences panel does not give consent. Rejecting optional storage does not affect your free trial, subscription or account access. Use Cookie settings, available throughout the app and in public footers, to withdraw consent as easily as you gave it. New optional measurement stops when consent is withdrawn; withdrawal does not retrospectively change processing that was lawful before it.
7. Preference lifetime and site boundaries
We store a versioned preference record named payrivo-cookie-consent-v2 in this site's local storage. It contains essential/analytics choices, the notice version and decision/expiry times, not your name or account ID. The choice is valid for 180 days, our chosen review interval rather than a statutory consent deadline. After expiry, we stop optional measurement and request a fresh choice. Clearing storage or using another browser also requires a new choice. Preferences are not shared between domains, subdomains or devices. A change on Payroll does not change a separately saved MyPay or Finance choice; update each site if you used them separately.
8. What is stored and for how long
The storage inventory below describes the application-controlled items identified in the source review. Browser local storage does not automatically expire: the consent record is checked for expiry on use and replaced when you make a new choice. Necessary application preferences remain until replaced, cleared, or removed through the relevant service controls. Authentication validity and security-provider lifetimes are controlled by those services. We mark first-party measurement records for retention review after 90 days; this marker is not an automatic deletion promise. We retain information only for the purposes explained in the Privacy Notice.
9. Providers and external services
Base44 supplies application hosting and authentication. Cloudflare supplies security checks on relevant forms. Stripe processes payments when you enter checkout. Google may process sign-in information if you choose Google sign-in. These features may involve providers' own cookies/storage and processing, with purposes and durations described in their notices linked below. A new optional embed or tracking provider must be assessed and, where required, held back until consent. Links to external services take you to those providers, whose choices are separate.
10. Privacy rights and complaints
For requests or concerns, contact marketing@payrivo.co.uk. You can complain to the UK Information Commissioner's Office and, where EU GDPR applies, your competent EU/EEA supervisory authority. See our Privacy Notice for information about controllers, legal bases, recipients, transfers and rights.
Application storage inventory
This is the source-verified application inventory, not a claim that every provider cookie has the same name or lifetime. Providers can change their security and checkout storage; their notices apply to those operations.
| Purpose | Item / technology | Use | Lifetime |
|---|---|---|---|
| Cookie choice | payrivo-cookie-consent-v2 · local storage | Remember essential/analytics choices, decision time and notice version on this origin. | Choice valid for 180 days; stored until replaced or cleared. Expired choices never authorise analytics. |
| Sign-in & application setup | Base44 authentication/configuration storage, e.g. base44_access_token and base44_* | Authenticate requests and connect the app to its service. Rejection of analytics does not remove credentials. | Token validity is controlled by authentication. Local entries persist until replaced or removed through service/browser controls. |
| Requested workspace choices | payrivo.activeClientId, finance access flags and payrivo-alert:* · local storage | Keep the selected client and viewed-alert state for requested workspace functionality. Stored flags do not grant permissions. | Until changed, cleared or removed through relevant account/browser controls. |
| Tax-year view | Selected tax-year entries · session storage | Remember the tax year you are currently viewing. | Browser tab/session. |
| Sidebar | sidebar_state · cookie where the shared sidebar is used | Remember the sidebar state you selected. | Up to seven days. |
| Help message state | ClientHelpWidget preference · local storage | Remember whether the account help message has been shown. | Until cleared or replaced. |
Provider privacy information
These documents provide general information about PayRivo’s service and data handling. They are not legal advice. They should be reviewed by a qualified UK solicitor before reliance for a regulated activity, bespoke enterprise agreement or a material change in service.