Privacy Policy

1.Introduction

1.1This Privacy Policy describes how the 3Rive Technologies group of companies collects, uses, discloses, and protects personal information when you visit our website, contact us, or engage with our services.

1.2The 3Rive Technologies group comprises the following legal entities, each of which may act as a data controller or co-controller depending on your jurisdiction and the nature of your engagement:

1.3References to "3Rive Technologies", "we", "us", or "our" refer to the relevant entity within the group that provides services to you or operates this website in your jurisdiction.

1.4Our privacy practices align with applicable regulations including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), the Privacy Act 1988 (Australia) and Australian Privacy Principles (APPs), the Personal Data Protection Act No. 9 of 2022 (Sri Lanka), and UAE Federal Law No. 45 of 2021 on Personal Data Protection.

2.Information We Collect

2.1When you interact with our website or contact us, we may collect personal information such as your name, email address, phone number, company name, and job title.

2.2When you apply for a role or engage with our staffing and consulting services, we may collect professional information including CVs, employment history, and professional qualifications.

2.3We collect technical information such as IP address, browser type, device information, and website usage data through cookies and analytics tools. Please see our Cookie Notice for details.

2.4We do not collect sensitive personal data (such as health, racial, or political data) through our website. Where such data is processed in the course of service delivery, it is handled under a separate data processing agreement with the client.

3.How We Use Information

3.1We use personal information to respond to enquiries, provide services, manage client and candidate relationships, and support recruitment activities.

3.2We use technical and analytics data to improve our website, understand usage patterns, and enhance service quality.

3.3Where you have provided consent, we may use contact information to send relevant updates about our services. You may withdraw consent at any time.

3.4We may process personal information to comply with legal or regulatory obligations applicable to the relevant 3Rive Technologies entity in your jurisdiction.

4.Client Data Processing

4.1When delivering consulting, development, or managed services, 3Rive Technologies entities may process personal data on behalf of clients.

4.2In such circumstances, the client acts as the Data Controller and the relevant 3Rive Technologies entity acts as the Data Processor. Processing occurs only in accordance with documented instructions provided by the client under a Data Processing Agreement (DPA).

4.3Our ISO/IEC 27001 Information Security Management System governs the technical and organisational measures applied to all client data. See our ISO 27001 page for details.

5.Sharing of Information

5.13Rive Technologies does not sell personal information to third parties.

5.2We may share personal information with trusted technology partners and sub-processors (including cloud infrastructure providers such as AWS and Microsoft Azure) who support our operations. All such parties are bound by appropriate data processing agreements and confidentiality obligations.

5.3Personal information may be disclosed where required by applicable law, a court order, or a regulatory authority with jurisdiction over the relevant 3Rive Technologies entity.

5.4Where data is shared between 3Rive Technologies group entities (for example, between the Australian headquarters and the Sri Lanka delivery centre), appropriate intra-group data transfer agreements or standard contractual clauses are in place.

6.Data Security

6.13Rive Technologies holds ISO/IEC 27001 certification for Information Security Management. Our security programme includes access controls, encryption at rest and in transit, secure infrastructure, and continuous monitoring.

6.2Security measures are applied consistently across all four group entities and delivery environments. For more information, see our ISO 27001 certification page.

6.3In the event of a personal data breach that triggers statutory notification obligations, we will notify the relevant supervisory authority and affected individuals within the timeframes prescribed by applicable law.

7.International Data Transfers

7.1As a multi-jurisdictional group, personal data may be transferred between 3Rive Technologies entities in Australia, the United Kingdom, the UAE, and Sri Lanka.

7.2For transfers from the UK or EEA to countries without an adequacy decision, we rely on UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses (SCCs) as the lawful transfer mechanism.

7.3For transfers to or from the Sri Lanka entity, we apply contractual protections consistent with the Personal Data Protection Act No. 9 of 2022 and, where relevant, SCCs adapted for the Sri Lankan context.

8.Your Privacy Rights

8.1Depending on your jurisdiction and the relevant 3Rive Technologies entity, you may have rights to: access your personal information; correct inaccurate data; request erasure; restrict or object to processing; receive a portable copy of your data; and withdraw consent at any time.

8.2Australian individuals may exercise rights under the Privacy Act 1988 and the Australian Privacy Principles, including lodging a complaint with the Office of the Australian Information Commissioner (OAIC).

8.3UK and EU individuals may exercise rights under the UK GDPR / EU GDPR and lodge a complaint with the Information Commissioner's Office (ICO) or the relevant EU supervisory authority.

8.4To exercise any of these rights, please contact us using the details in Section 11.

9.Cookies and Analytics

9.1Our website uses cookies and similar tracking technologies. We implement Google Analytics 4 (GA4) with Consent Mode v2, which means analytics and marketing cookies are blocked by default until you provide consent.

9.2Full details of the cookies we use, how to manage your preferences, and how GA4 Consent Mode v2 operates are set out in our Cookie Notice.

9.3You may change your consent preferences at any time using the button below.

10.Updates to this Policy

10.1We may update this Privacy Policy to reflect changes in law, our practices, or the structure of the 3Rive Technologies group. The latest version is always available at www.3rivetech.com/legal/privacy.

10.2Where changes are material, we will take reasonable steps to notify you (for example, by displaying a notice on our website).

11.Contact Information

11.1For privacy enquiries, data subject requests, or complaints, please contact the relevant entity based on your jurisdiction:

Website: www.3rivetech.com