Privacy Policy
What Rovyren collects, why we use it, who receives it and how to make a privacy request.
Effective and last updated: October 12, 2026. Contact Rovyren at jim@rovyren.com with the subject “Privacy request.”
Privacy at a glance
We use information to answer your inquiries, deliver purchased services, verify payment, administer access and protect the service. This website does not use advertising pixels or third-party behavioral analytics. Do not send passwords, security codes, full card or bank numbers, customer databases or other secrets.
Current purchase availability: Online checkout and paid assessment submission are currently disabled. The sections below explain how those features handle information when enabled. Clicking an email link opens your email application; it does not submit a form to this website.
1. Who this policy covers
Gladiator Enterprises LLC, doing business as Rovyren, operates this website and offers the services described here. This policy covers this website, inquiries sent to Rovyren, assessment administration and related service communications. It does not replace a customer’s service agreement or any separate data-processing agreement.
When we process your employees’ or customers’ information solely on your business’s instructions while providing an agreed security service, your business determines the purposes of that processing. The applicable service agreement and data-processing terms govern that work. We use that information only for the agreed service, authorized instructions and applicable legal obligations. People seeking rights relating to their employer’s or another business’s records should contact that business; we will assist it as required.
2. Information we collect and its sources
| Category and source | Examples and purpose |
|---|---|
| Information you provide in inquiries | Email address, name, business name, trade, approximate team size, contact details and the contents of messages. Used to respond, schedule discussions and understand requested services. |
| Assessment information, when used | Your 50 answers, clarification notes, calculated score, risk level, submission time and written findings. Used to review the business’s stated safeguards and provide recommendations. Notes can contain personal information you choose to include. |
| Payment and access information, when enabled | Purchaser email, Wix member and contact identifiers, pricing-plan order reference, payment status, currency and price, access-notice time, expiration time and submission status received or verified through Wix and the configured payment provider. Used to verify the purchase and manage one paid submission. Rovyren’s website does not receive or store the full card number or card security code. |
| Policy acknowledgment records | Record identifier, policy version, checkout or activation stage, acceptance time and associated payment session when available. Used to document the terms presented and your affirmative acknowledgment. |
| Service and billing records | Accepted scope, appointments, invoices, credits, cancellation requests, refund records and correspondence. Used to administer the relationship, deliver agreed work and resolve issues. |
| Technical information from hosting providers | IP address, request time, requested URL, browser or device information, and diagnostic or security events may be processed by the hosting infrastructure to deliver pages, detect abuse and troubleshoot errors. Provider logging and retention are governed by the provider’s practices and applicable agreements. |
Information comes from you or an authorized business representative, our service interactions, the payment provider and website infrastructure. A service order must describe any additional monitoring, device, account or log data needed for a purchased package before that collection starts; this questionnaire itself does not scan your network or access your accounts.
3. Information you must not send
Do not enter passwords, one-time codes, private encryption keys, Social Security numbers, full payment-card or bank-account details, medical information, employee files or full customer records into assessment notes or ordinary email. We do not ask for those items in this questionnaire. Describe a security concern without exposing the secret or identifying unrelated people.
Only send business information you are authorized to disclose. If sensitive information is needed for separately agreed work, arrange an appropriate transfer method first. If you accidentally send sensitive information, contact us promptly without repeating it in the message. We will assess restriction, removal and any required response.
4. How we use information
- Respond to requests, schedule conversations and deliver assessments and agreed services.
- Confirm purchases, manage access, prevent duplicate submissions and administer refunds and disputes.
- Generate the questionnaire score, prepare findings and explain recommendations.
- Send service, security, billing, access and policy-related communications.
- Maintain records needed for accounting, legal obligations, fraud prevention and the establishment or defense of claims.
- Investigate errors and protect the website and records from unauthorized activity.
The acknowledgment required to purchase or open an assessment is not consent to promotional messages. You may ask us to stop promotional contact without stopping necessary communications about an existing purchase. We will obtain any additional consent required by law before using information for a new purpose that requires it.
5. Who receives information
We disclose information only as needed for the purposes described here, an authorized service or a legal obligation. Recipients can include:
- Authorized Rovyren personnel and reviewers: inquiry details, assessment responses, findings and related records needed to perform their work.
- Hosting and storage infrastructure: Wix hosts this website and supplies visitor authentication, member accounts and business data services. When the protected assessment is enabled, its access records, saved drafts, answers, notes and acknowledgment records are stored in private Wix CMS collections and made available through the authorized server workflow.
- Wix checkout and Wix Payments: process checkout, billing and payment details when enabled. Rovyren uses Wix order records to verify payment and purchase ownership before granting assessment access. The providers’ own privacy policies also apply.
- Email providers: process inquiries and service correspondence. The prepared assessment workflow uses Wix transactional email to send access notices, completion confirmations and the completed assessment to booking@rovyren.com. Review emails include the business and purchaser identifiers, answers, notes, preliminary score and submission details. Authorized reviewers and the mailbox provider can access that email copy.
- Contracted specialists: receive only information needed for an authorized package or incident engagement, subject to the applicable service and confidentiality terms. An assessment purchase does not authorize unrestricted access to your systems.
- Professional advisers, payment-dispute providers and authorities: records reasonably necessary for accounting, legal advice, disputes, lawful requests, fraud investigations or protection of rights and safety.
- A successor to the business: information may be transferred in a merger, sale or restructuring, subject to applicable law and continued protection under the relevant privacy commitments. We will provide any notice required for material changes.
We do not publish your assessment answers or authorize their resale for advertising. This website has no data-broker sale, targeted-advertising or cross-context advertising integration. Routine hosting, payment and service-provider disclosures are described above.
6. Cookies, browser storage and local tools
Wix uses necessary visitor and authentication storage to serve the site and display plan availability. Signing in to the protected assessment, when enabled, uses Wix member authentication. Blocking or clearing necessary storage may interrupt sign-in or paid access; contact us to resolve an access problem.
The free five-question check and the disruption calculator run locally in your browser. Their code does not send your answers or calculator entries to Rovyren or save them in browser storage. The free check does not request a name or email address. The assessment offer separately uses Wix visitor authentication to retrieve purchase availability.
When the protected paid assessment is enabled, choosing Save draft sends your business name, answers and notes to private server storage in Wix. Closing the tab does not delete a saved server draft. Final submission stores the completed assessment and triggers the review and confirmation emails. The 14-day access limit controls when the assessment may be submitted; it does not delete the server record.
Online purchase and protected assessment submission remain disabled until deployment and payment-to-delivery tests are complete.
7. Advertising choices and browser signals
No Rovyren advertising pixels or third-party behavioral analytics are installed on this website. It therefore does not use those tools to sell or share information for targeted advertising. A Global Privacy Control signal does not need to stop an activity this website does not perform. We will honor applicable opt-out rights and recognized signals if practices change. Other browser “Do Not Track” signals do not alter the necessary processing described here.
Facebook, Instagram and other external links take you to separate services. Their own policies apply after you leave; they are not embedded social tracking widgets on this website.
8. Retention and deletion
We retain information only for as long as reasonably needed for the purpose collected, the service relationship, applicable legal requirements and the resolution of legitimate disputes. Relevant factors include whether an inquiry is active, whether findings or corrections remain outstanding, accounting and tax requirements, fraud prevention, payment-dispute periods and legal holds.
The 14-day access period closes assessment access; it is not a promise that assessment, transaction or consent records are deleted after 14 days. This site does not currently run automatic server-record deletion on access expiration. Assessment records may also exist in the review mailbox and service files. A deletion request is reviewed across records under our control, subject to lawful retention exceptions. When an exception applies, we will explain it and restrict retained information to the permitted purpose.
Saved server drafts follow the retention and deletion process above. Copies in provider backups may persist until the provider’s normal backup cycle removes them; they should not be restored for an unrelated purpose. Separate providers may retain their own legally required transaction or operational records.
9. Security and incident handling
The site uses HTTPS. The prepared paid-assessment workflow checks the signed-in Wix member against verified paid Wix order records and enforces the access deadline and one final submission on the server. These controls must be deployed and tested before paid submissions are enabled. Our policy is to limit access to people and providers who need information for their work, minimize unnecessary collection and use safeguards appropriate to the sensitivity of the information.
No website, email system or storage service is completely secure. Ordinary email is not an appropriate place for passwords or confidential databases. If an incident affects personal information under our control, we will investigate, take appropriate containment steps and provide notices required by applicable law. Contact jim@rovyren.com to report a privacy concern without attaching secrets.
10. Your choices and privacy requests
Email jim@rovyren.com with the subject “Privacy request.” State the action requested and the email or business relationship that helps us locate the record. Do not email identity documents, passwords or full account numbers. You do not need to create a new account to make a request.
Depending on your location, the applicable law and our role, you may have rights to confirm processing; access or obtain a portable copy of your information; correct inaccurate information; request deletion; withdraw consent where processing relies on consent; or opt out of a sale, targeted advertising or specified significant-decision profiling. We do not require you to surrender legal privacy rights to buy an assessment.
We may verify an access, correction or deletion request using information already held and request only additional information reasonably necessary to confirm identity and authority. An authorized agent may contact us with proof of authorization; additional verification may be needed where permitted. We will not unnecessarily verify an opt-out request when the applicable law does not permit it.
We aim to acknowledge requests within 5 business days and respond within 45 calendar days, or sooner if applicable law requires it. If a lawful extension is necessary, we will explain the reason and new deadline within the original response period. Requests are handled without a fee unless a fee is specifically permitted by applicable law and disclosed first.
We will explain a denial or a retention exception and how to appeal. Email the same address with the subject “Privacy appeal”; we aim to decide appeals within 45 calendar days or the shorter legal deadline. If denied, we will explain the decision and identify the relevant complaint channel. New Jersey residents can contact the New Jersey Division of Consumer Affairs. Other residents may contact their applicable regulator.
Some consumer privacy laws have business-size thresholds or exclude information used in commercial or employment contexts. We do not imply that every statutory right applies to every record. We nevertheless review reasonable privacy requests. We do not discriminate for exercising rights. Deleting information needed to perform an assessment may prevent completion; we will explain that consequence and address cancellation under the refund policy, without adding a privacy-request penalty.
11. Questionnaire scoring and AI
The questionnaire uses fixed scoring rules to calculate a business risk indicator and flag certain answers. This is not an automated decision to grant or deny employment, credit, insurance or another legally significant benefit. The score does not verify safeguards or certify security; you may ask us to review errors.
This website’s assessment code does not send answers to an AI model or use them to train one. Any additional AI processing proposed for a separately agreed service must be disclosed with its purpose, providers and safeguards, and any consent required by law obtained before that processing.
12. Processing location and external providers
Rovyren serves US businesses. Hosting, payment, email and support providers may process information in the United States and other countries where they operate. This policy does not promise that all records remain in one country or that the service meets a particular data-residency requirement. Tell us about a required location or transfer restriction before sharing regulated information or ordering services; any agreed restriction must be documented.
External services apply their own terms and privacy policies to processing they control. Relevant notices include the Wix privacy policy, which applies to Wix hosting, checkout and Wix Payments. This does not reduce Rovyren’s responsibilities for processing under its control.
13. Children
This service is directed to adult business representatives, not children. Purchasers and assessment users must be at least 18. We do not knowingly seek personal information from children under 13. If you believe a child supplied information, contact us so we can investigate and remove it where appropriate.
14. Changes to this policy
We will update the effective date when this policy changes. For material changes affecting existing customer information, we will provide a prominent website notice and, where we have contact details and the change warrants it, direct notice before the new practice takes effect. We will obtain additional consent where required. A revised notice does not retroactively authorize an incompatible use of information collected under an earlier promise.
15. Contact and related policies
Privacy questions, requests and appeals: jim@rovyren.com. For service scope, liability limitations, refunds and review timing, use the related notices below. This policy explains data practices; it is not a waiver of your legal rights.