Privacy Notice
Last updated: 17 October 2026
How PayRivo Payroll, PayRivo MyPay and Rivo Finance use personal information under UK data-protection law and, where applicable, EU GDPR.
1. Controller and contact
Rivo Bookkeeping & Payroll Services Ltd (company number 07109621) is the controller for information about website visitors, account holders, prospective customers, billing contacts and support requests. Registered office: 4 Marlin Office Village, 1250 Chester Road, Birmingham, Castle Vale, United Kingdom, B35 7AZ. We are registered with the Information Commissioner’s Office (registration number ZC275194). For privacy questions or to exercise your rights, email marketing@payrivo.co.uk.
2. Employee payroll data
Where a business customer uploads or enters employee, worker or applicant data, that business normally acts as controller and PayRivo acts as processor on its documented instructions. Employees should contact their employer first about their payroll data; we will assist the employer as required by our Data Processing Agreement.
3. Information we use
Depending on your relationship with us, this may include identity and contact details, account credentials, company and payroll information, employee records and documents supplied by a customer, payment and billing status, support communications, device and security logs, and preferences you choose to provide.
4. Why we use it and lawful bases
We use personal information to provide and secure the service, administer accounts and subscriptions, deliver support, prevent fraud and misuse, meet legal obligations, and improve the service. Our lawful bases include performance of a contract, legitimate interests in operating a secure and effective service, legal obligation, and consent where it is required.
5. Sharing and international transfers
We share information only with people who need it and trusted service providers that help operate PayRivo, such as application hosting, authentication, payment, communications and security providers. We require appropriate contractual protections. Where international transfers require protection under UK or EU data-protection law, we use the applicable adequacy decision or appropriate transfer safeguards. Contact us for information about the providers and safeguards relevant to your service.
6. Retention
We keep information only for as long as needed for the relevant purpose, to meet legal, accounting and dispute-resolution requirements, or as agreed with a business customer. When information is no longer required, we delete or anonymise it securely.
7. Your rights
Subject to applicable law, you may ask for access, correction, erasure, restriction, portability or objection, and may withdraw consent where we rely on it. You can complain to the UK Information Commissioner’s Office (our registration: ZC275194) and, where EU GDPR applies, your competent EU/EEA supervisory authority. We may need to verify your identity before responding.
8. Security
We use proportionate organisational and technical measures designed to protect personal information, including access controls and security monitoring. No online service can guarantee absolute security; please keep account credentials confidential and notify us promptly if you suspect unauthorised access.
9. Optional website measurement
With your optional usage preference enabled, we collect limited first-party public website event counts and plan tags. Only authorised platform owners can retrieve aggregate measurements. This measurement does not include payslip or document content, salaries, National Insurance numbers, names or email addresses. Use Cookie settings on any page to accept, reject or withdraw optional measurement. Your browser choice is specific to the site you are using and is not shared with the other product domains. See the Cookie Notice for purposes, providers, storage and preference lifetime.
10. Changes
We may update this notice when our services or legal obligations change. We will publish the current version here and update the date above.
These documents provide general information about PayRivo’s service and data handling. They are not legal advice. They should be reviewed by a qualified UK solicitor before reliance for a regulated activity, bespoke enterprise agreement or a material change in service.