About ThoughtRiver

ThoughtRiver (“We” “Us” “Our”) is a trading name of ThoughtRiver Limited, a company registered in England and Wales (registered number 10007469). Our address is Building 1000, Cambridge Research Park, CB25 9PD. Our ICO registration no. is ZA221094.

ThoughtRiver provides software as a service for business users to review their contracts for risk and data insight.

This privacy notice explains the personal data we collect, how we use that personal data and the reasons we may need to disclose personal data to others. We will update this policy from time to time so please check our website for any updates.

The Role We Have in Relation to Your Personal Data

Depending on the circumstances, ThoughtRiver may be a data controller of your personal data or a data processor.

If you are a customer or prospective customer/employee, we are the data controller. If your data is processed on behalf of a customer through our service, they are the controller, and we are the processor.

How We Use Your Personal Data

• Prospective customers: To promote our services under our legitimate interests.
• Prospective employees: To update you on roles you've shown interest in, under our legitimate interests.
• Site operations: Troubleshooting, testing, analytics, and experience optimisation.
• Interactive features: If you choose to engage with features or demos, we may process relevant data with your consent.
• Business users: We use your personal data to fulfil our service contract with you.
• Marketing & Advertising: We use personal data to deliver relevant advertising on third-party platforms, including LinkedIn, Meta (Facebook/Instagram) and Google. This is carried out under your consent, which you can withdraw at any time via our cookie preferences. 

Information We Collect Automatically

We collect the following data automatically during site visits:

• Technical data (e.g., IP address, browser, OS, plugins)
• Usage data (e.g., pages viewed, clickstreams, errors, interactions)

Cookies  

We use cookies to improve your experience and analyse traffic. Non-essential cookies are used only with your consent.

The table below lists all cookies set by this website.

‍Advertising Partners 

We work with third-party advertising platforms to promote our services. These platforms may collect data about your visits to our website and use it to show you relevant ads elsewhere online.

Linkedin

We use the LinkedIn Insight Tag on our website and run advertising, including lead generation forms, on LinkedIn. This allows LinkedIn to collect data about your interactions with our site and ads to measure ad performance, build matched audiences, and serve personalised advertising. Where you submit your details through a LinkedIn lead generation form, LinkedIn passes that information to us so we can contact you about our services. LinkedIn acts as an independent data controller for its own processing. You can review LinkedIn's privacy policy at linkedin.com/legal/privacy-policy and manage your ad settings in your LinkedIn account

Meta (Facebook & Instagram)

We use the Meta Pixel on our website. This tool allows Meta to collect data about your interactions with our site (such as pages visited and actions taken) to measure the effectiveness of our ads, build Custom Audiences, and serve personalised advertising. Meta acts as an independent data controller for this data. You can review Meta's data policy at facebook.com/privacy/policy and manage your ad preferences at facebook.com/adpreferences.

Google Ads

We use Google Ads conversion tracking and remarketing tags. These allow Google to collect data about your visits to our site to measure ad performance and serve you relevant ads across Google's network (including Search, Display, and YouTube). Google acts as a data controller for this processing. You can review Google's privacy policy at policies.google.com/privacy and manage your ad settings at adssettings.google.com.

The legal basis for advertising data processing is your consent, given via our cookie banner. You may withdraw consent at any time by updating your cookie preferences on our website.

Disclosures of Your Information 

We may share data with:

• Group companies
• Service providers and contractors
• Buyers in a business sale
• Legal and fraud-prevention authorities
• Advertising partners: LinkedIn Ireland Unlimited Company, Meta Platforms Ireland Ltd. and Google Ireland Ltd, for the purposes described in the Advertising Partners section above. These companies act as independent data controllers and process data under their own privacy policies. 

Where and How We Store Your Data

Your data may be stored and processed outside the EEA. We ensure GDPR-compliant safeguards for international transfers. All data is stored securely.

How Long We Keep Your Data

We retain your data only as long as necessary. For more detail on retention periods, contact DPO@thoughtriver.com

Your Data Rights

You have the right to:

• Access your data (Subject Access Request)
• Request correction, deletion or restriction
• Object to processing
• Request data portability
• Withdraw consent
• Lodge a complaint with the ICO or your local authority

NDATriage Free Trial

Data uploaded via email during the NDATriage free trial is stored temporarily and purged every 24 hours.

Contact

Questions about this notice? Email DPO@thoughtriver.com

Data Protection Officer: Kirsty Alderton, Chief Operating Officer

Date last updated: July 2026