Privacy notice for Rivoatlas readers
Version of 4 October 2026
For readers in Ireland, 18+What personal data Rivoatlas handles, why, for how long and who sees it. In short: what you send us, short server logs, two values in your browser, and Google Analytics and Google Ads only if you allow them.
Who is responsible for your data
rivoatlas.com is operated by IT PROFESSIONAL AND OTHER BUSINESS SOLUTION LIMITED, a company registered in England and Wales under company number 17296656. Registered office: 128 City Road, London, EC1V 2NX, United Kingdom.
That company is the controller of the personal data described here: it decides why and how the data is used. Rivoatlas is not a bookmaker and does not hold a gambling licence. We do not run betting accounts, so we hold no account, deposit or betting history about you; that data sits with the bookmaker you use, under its own privacy notice.
Data-protection contact: admin@rivoatlas.com. You can also use the contact form and choose the topic “My personal data”. General questions and corrections: support@rivoatlas.com.
This notice covers every page of rivoatlas.com and applies wherever you read the site from. Version of 4 October 2026.
What we collect
The atlas has no reader accounts, newsletters, comments or user reviews. Personal data reaches us from six sources only:
| Source | What it contains | When |
|---|---|---|
| Messages you send | Your email address and message; optionally your name, a bookmaker you pick from the list and the address of a page | Only when you use the contact form or write to support@rivoatlas.com or admin@rivoatlas.com |
| Requests to the server | IP address, date and time, the address requested, browser and device description, response status | Every time a page or file is loaded |
| Values in your browser | rv_age_ok (time of your 18+ confirmation) and rv_consent (your cookie choice and its time) | When you confirm your age or make a cookie choice |
| Google Analytics 4 | Pages viewed, how you reached the site, device and browser type, approximate region, a cookie identifier | Only after you allow the Measurement category |
| Google Ads | Ad click identifier, cookie identifiers, whether a visit followed one of our ads | Only after you allow the Advertising category |
| Bookmakers’ affiliate reports | Counts and amounts linked to our tracking codes, such as accounts opened and commission due | Periodically, from the bookmakers’ affiliate programmes |
We do not ask for, and do not want, card or bank details, passwords, identity documents or health information. We do not buy contact lists, sell personal data or combine these sources to build a profile of any reader.
Why we use it and on what legal basis
| Purpose | Data used | Lawful basis |
|---|---|---|
| Answering your message, correcting the atlas, handling complaints about the site | Messages you send | Our legitimate interests (GDPR Art. 6(1)(f)); for business proposals, steps before a contract (Art. 6(1)(b)) |
| Acting on a data-protection request and keeping proof of the reply | Your request, our checks and our answer | Legal obligation (Art. 6(1)(c)) |
| Keeping the form free of automated spam | A one-way hash of your IP address and send times | Legitimate interests |
| Delivering pages, security, finding faults | Requests to the server | Legitimate interests |
| Remembering your age confirmation and cookie choice | Values in your browser | Legitimate interests; storage is strictly necessary under S.I. No. 336 of 2011, reg. 5(5) |
| Measuring which pages readers use | Google Analytics 4 | Consent (Art. 6(1)(a); S.I. No. 336 of 2011, reg. 5(3)) |
| Measuring our own advertising | Google Ads | Consent |
| Checking the commission we are owed | Affiliate reports | Legitimate interests; legal obligation for accounting records |
Where we rely on legitimate interests, we have weighed them against your rights: the data involved is limited, expected by people who visit a website or write to it, and not used for anything else. You can object at any time (see “Your rights”).
Analytics and advertising (Google)
We use Google Analytics 4 to see which pages of the atlas are read and how people find them, and Google Ads to measure advertising we buy for our own pages. Both are delivered through the Google tag or Google Tag Manager.
Google Consent Mode v2 starts every visit with four signals set to “denied”: analytics storage, ad storage, ad user data and ad personalisation. In that state the Google scripts are not requested at all. They load only after you choose “Allow all”, or tick Measurement or Advertising under “Choose categories” in the cookie banner.Our reports are aggregated: we see numbers of visits and pages, not named people. Google states that Google Analytics 4 does not log or store IP addresses.
For Google Analytics, Google acts as our processor. For advertising measurement, Google may also use the data for its own purposes as a separate controller. Read how Google uses information from sites that use its services and the Google Privacy Policy. You can manage the ads Google shows you in My Ad Center.
Each cookie, with its lifetime, is listed in our Cookies and storage policy.
The contact form
The contact form asks for an email address, a topic and a message of at least 20 characters. Your name, a bookmaker and a page address are optional. You tick a box to confirm you have read this notice before sending.
The website does not keep a copy. On sending, the server turns the form into an email to support@rivoatlas.com. Cloudflare Email Routing forwards it to the mailbox of the customer support company that answers messages for Rivoatlas. Emails you send straight to support@rivoatlas.com or admin@rivoatlas.com follow the same route.
Spam checks before sending:
- a hidden field that people do not see and automated scripts tend to fill in;
- a short minimum time between opening the page and sending;
- a check that the form was sent from our own site;
- no more than five messages an hour from one connection. The count is kept as a one-way hash of the site name and your IP address with the send times; the address itself is not stored.
If something goes wrong on sending, nothing you typed is kept; the page shows our email address instead.
How long we keep data
| Record | Kept for | Then |
|---|---|---|
| Form messages and email threads | Up to 12 months after the last message in the thread | Deleted |
| Server and security logs we control | Up to 30 days | Deleted or overwritten |
| Spam-limit entry (hashed) | Only sends from the last hour are counted | Older times are dropped on the next check |
Cookie choice (rv_consent) | 182 days (about six months) | The banner asks again |
Age confirmation (rv_age_ok) | Treated as valid for 30 days | The 18+ question is shown again |
| Google Analytics 4 event data | No longer than 14 months (property setting) | Deleted by Google |
| Data-protection requests and our replies | Up to 6 years | Deleted |
| Affiliate reports and invoices | As long as UK company and tax law requires | Deleted |
Periods start from the event that created the record. When a period ends, the record is deleted or made anonymous. We keep data longer only if the law requires it or it is needed for a legal claim, and then only the part that is needed.
Who we share data with
Only to the extent each recipient needs it for the purposes above:
- the provider that hosts our web server;
- Cloudflare, for DNS, the security proxy in front of the site and email routing;
- the email provider that hosts the support mailbox, and the customer support company that answers messages for Rivoatlas;
- Google Ireland Limited and Google LLC, for Google Analytics 4, Google Ads and the Google tag — only after your consent;
- our professional advisers, and public authorities or courts where the law requires it.
Service providers act on our written instructions under data-processing terms.
Bookmakers. Links in the operator strip and in operator files carry a tracking code that tells the bookmaker the visit came from the atlas. The code identifies us, not you. Once you are on a bookmaker’s site, its own privacy notice applies and it is the controller of what you give it. We do not pass reader data to bookmakers, and the reports they send us do not include your name or contact details.International transfers
The controller is a company registered in England and Wales, so data about readers in Ireland is handled in the United Kingdom. The European Commission has adopted an adequacy decision for the United Kingdom under the GDPR, which allows personal data to move from the EEA to the UK without extra safeguards.
Google and Cloudflare may process data in the United States and other countries. For companies certified under the EU–US Data Privacy Framework (and its UK Extension), transfers rely on that framework; otherwise they rely on the European Commission’s standard contractual clauses or the UK equivalent. Ask admin@rivoatlas.com for details of the safeguard that applies.
Your rights
Under the GDPR, and the UK GDPR where it applies, you can ask us to:
| Right | What it means | GDPR |
|---|---|---|
| Access | Confirm whether we hold data about you and send you a copy | Art. 15 |
| Rectification | Correct data that is wrong or incomplete | Art. 16 |
| Erasure | Delete data we no longer have a good reason to keep | Art. 17 |
| Restriction | Pause use of the data while a question about it is resolved | Art. 18 |
| Portability | Give you data you provided in a common machine-readable format | Art. 20 |
| Objection | Stop using data on the basis of our legitimate interests, unless we show compelling grounds | Art. 21 |
| Withdraw consent | Switch off Measurement or Advertising at any time, as easily as you switched them on | Art. 7(3) |
To withdraw consent, open Cookie settings (the link is also at the foot of every page). Withdrawal does not affect processing that took place before it.
Send other requests to admin@rivoatlas.com or through the contact form. We answer within one month of receiving the request. For complex or numerous requests this can be extended by two further months; if so, we tell you within the first month. Requests are free of charge. We may ask for information to confirm the data is yours, and only as much as needed.
We do not make decisions about readers based solely on automated processing.
Complaints to a regulator
If you are unhappy with how we handled your data, write to admin@rivoatlas.com first. Complaints about the site go to support@rivoatlas.com or admin@rivoatlas.com; our customer support company records each one and the reply.
You have the right to complain to a supervisory authority at any time. In Ireland that is the Data Protection Commission (dataprotection.ie), which accepts complaints in writing. You can also complain in the EU country where you live or work, or where you believe the breach happened. Because the controller is a UK company, you may also complain to the UK Information Commissioner’s Office (ico.org.uk).
Readers under 18
Rivoatlas is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that a message came from someone under 18, we delete it after replying where a reply is needed.
Changes to this notice
We change this notice when the way we handle data changes, for example a new provider or a new tool. The version date at the top shows the current text (4 October 2026). If a change affects what you allowed in the cookie banner, we will not rely on your earlier choice for the new use.
