Legal
Privacypolicy.
Effective
21 September 2026
Applies to
richrick.com and our client work
Questions
Rich Rick Inc runs market and competitor research. That work involves personal information belonging to three groups of people: visitors to this website, the people who hire us, and the people we interview or survey on a client’s behalf. This policy explains what we hold about each group, why we hold it, and how you get it back, corrected or deleted.
01. Who we are
Rich Rick Inc is a Virginia corporation with its office at 8631 Namozine Rd, Amelia Court House, VA 23002. You can reach us at hello@richrick.com or (434) 263-3766, Monday to Friday, 10:00 am to 5:00 pm Eastern Time.
For the personal information we collect through this website and through our own sales and administration, Rich Rick Inc is the controller. When we carry out research under a client contract, the client is usually the controller and we act as their processor or service provider, handling the information on their written instructions.
02. Information you give us
You give us personal information when you fill in the contact form, email us, call us, or sign a proposal. The contact form asks for your name, company, email address, telephone number, the research areas you are interested in, and whatever you write in the message field.
Enquiries. Name, company, email, phone, the topics you selected and the content of your message.
Clients. Billing contacts, postal and email addresses, payment details processed by our bank or payment provider, and the correspondence attached to your engagement.
Research participants. Name, job title, employer, contact details, scheduling information, interview notes, recordings where you have agreed to them, and any incentive payment records.
Applicants and suppliers. Contact details, CVs, invoices and tax forms you send us.
03. Information we collect automatically
Our web host records standard server logs when you load a page: IP address, date and time, the page requested, referring page, browser and operating system. We use aggregate analytics to count visits and see which pages people read. We do not run advertising trackers, we do not sell traffic data, and we do not build advertising profiles.
This site uses cookies that keep it working and measure traffic. You can block or delete cookies in your browser settings, and the site will still function. Some browsers send a Global Privacy Control or Do Not Track signal; we treat a Global Privacy Control signal as a valid request to stop any sharing of your personal data for targeted advertising.
04. Information we gather during research
Market and competitor analysis involves published material about companies and the people who work for them: filings, pricing pages, press coverage, job postings, public review sites, professional profiles and paid industry databases. Where that material names an individual, we limit what we keep to what the research question needs, and we report findings at the level of a company or a segment.
When we interview or survey people, we tell them who the research is for or, where a client requires a blind study, that the sponsor is undisclosed. We record a session only with consent given on the recording. Participants can stop, skip a question or withdraw at any point, and we remove their contribution on request up to the point the deliverable is issued.
Quotations reach a client deliverable without a name attached unless the participant has agreed in writing that we may attribute them.
05. Why we use it and on what basis
We use personal information to answer enquiries, scope and price work, carry out research, deliver findings, invoice, keep accounting records, and meet our legal obligations.
For people in the United Kingdom and the European Economic Area, our legal bases are these: performance of a contract for client and supplier information; consent for interviews, recordings and any marketing email, which you can withdraw at any time; legitimate interests for answering enquiries, securing our systems and conducting business research, balanced against your rights; and legal obligation for tax and accounting records.
06. What we never do
No sale of personal data. We do not sell personal information and we have not done so in the preceding twelve months.
No targeted advertising. We do not share personal information for cross-context behavioural advertising.
No profiling that decides anything. We do not use personal information for automated decisions that produce legal or similarly significant effects.
No sensitive data by design. We do not seek information about health, race, religion, sexual orientation, immigration status, precise location, genetics or biometrics, and we ask participants not to volunteer it.
07. Who we share it with
We share personal information with service providers who help us operate: website hosting, email and calendar, file storage, video conferencing and transcription, survey and panel providers, accounting software, and our bank and payment processor. Each is bound by contract to use the information only for the service they provide to us.
We share research material with the client who commissioned it, under the confidentiality terms of that engagement. We disclose information to our accountants, insurers and lawyers where they need it, and to a public authority where the law requires it. If the business is ever sold or merged, records transfer to the buyer under the same commitments set out here.
08. International transfers
We are based in Virginia and our main service providers store data in the United States. If we receive personal information from the United Kingdom or the European Economic Area, we transfer it under the European Commission Standard Contractual Clauses and the UK Addendum, together with the security measures described below. Ask us and we will tell you which providers hold what.
09. How long we keep it
Enquiries that go nowhere. Deleted 24 months after the last message between us.
Client files and deliverables. Held for 7 years after the engagement closes, which matches our tax and professional record-keeping obligations.
Interview recordings. Deleted within 90 days of the deliverable being issued. Transcripts are stripped of names and kept with the project file.
Server logs and analytics. Retained for 14 months, then deleted or aggregated beyond recognition.
10. How we protect it
We keep client and participant material in access-controlled cloud storage with encryption in transit and at rest, enforce multi-factor authentication on every business account, limit access to the people working on the engagement, and review those permissions when a project closes. Recordings live in a separate folder with a shorter retention clock.
No system is beyond attack. If a breach affects your personal information and creates a risk to you, we will notify you and the relevant regulator within the timescales the law sets, and tell you what we are doing about it.
11. Your rights in Virginia
Under the Virginia Consumer Data Protection Act, a Virginia resident may confirm whether we process their personal data, obtain a copy of it in a portable format, correct inaccuracies, ask us to delete it, and opt out of targeted advertising, sale, or profiling in furtherance of decisions with legal effects. We do not carry out those last three activities at all.
Email hello@richrick.com with the subject line "Privacy request". We respond within 45 days and may extend once by a further 45 days where a request is complex, telling you why. If we decline, you may appeal by replying to our decision within 30 days; we will answer the appeal in writing within 60 days and, if we still decline, give you a link for contacting the Virginia Attorney General.
12. Rights elsewhere
California residents may request the categories and specific pieces of personal information we hold, request deletion or correction, and are protected from discrimination for exercising those rights. Since we neither sell personal information nor share it for cross-context behavioural advertising, there is no opt-out list to join.
People in the United Kingdom and the European Economic Area have rights of access, rectification, erasure, restriction, portability and objection, and may withdraw consent at any time. You may also complain to your supervisory authority, which in the United Kingdom is the Information Commissioner’s Office.
Where a client commissioned the research, we forward your request to that client and help them answer it, since the information sits under their control.
13. Children
This website and our services are for business use. We do not knowingly collect personal information from anyone under 16, and we do not recruit minors into research. If you believe a child has sent us information, write to hello@richrick.com and we will delete it.
14. Changes to this policy
When we change this policy we update the effective date at the top of the page. For a change that materially affects how we handle information already collected, we email clients and active research participants before it takes effect. Earlier versions are available on request.
15. Contact
Rich Rick Inc, 8631 Namozine Rd, Amelia Court House, VA 23002. Email hello@richrick.com, telephone (434) 263-3766, Monday to Friday, 10:00 am to 5:00 pm Eastern Time. Mark privacy correspondence for the attention of the Privacy Contact.
Ask us about your data.
Write to hello@richrick.com with the subject line "Privacy request" and tell us what you want to see, correct or delete. We reply within 45 days, and we will tell you before that if a request needs longer or if we cannot verify who you are.