Policies

The legal stuff. Written like we mean it.

Most companies write this section to cover themselves. We’ve tried to write it so it’s actually useful — plain English, specific about what we do and don’t do, and honest about the trade-offs. If something’s unclear, email us and we’ll fix the wording.

A couple of things worth knowing up front:

Where your data actually lives matters. Most software runs on infrastructure owned by US companies — even when the servers are physically in Europe, US law (the CLOUD Act) can require those companies to hand data to US authorities. We’re moving Raiser’s infrastructure to UK-based hosting for exactly this reason. Read more in the Privacy Policy below, and in How We Build.

We don’t use analytics cookies. Our only cookie is a strictly necessary one that keeps the site working — no tracking, no consent needed, nothing to opt in or out of.

If something goes wrong, tell us. Our complaints process exists because we’d rather hear from you and fix it than have you quietly give up on us.

Last updated: 21 July 2026

Scope: Marketing site (raiser.uk) only. The Raiser platform (app.raiser.uk) has its own privacy notice within the product.

This privacy policy explains how Raiser Ltd collects, uses, and protects any personal data you share when you visit this website (raiser.uk). It covers this marketing site only, not the Raiser platform. If you use the Raiser platform at app.raiser.uk, a separate privacy notice applies there.

We’ve tried to keep this short, readable, and specific. If something is unclear, email us.

1. Who we are

Raiser Ltd is the data controller for raiser.uk.

  • Registered in: England and Wales
  • Company number: 15855502
  • Registered address: Piccadilly Business Centre, Blackett Street, Manchester, M12 6AE, UK
  • Email: hello@raiser.uk

We are registered with the Information Commissioner’s Office (ICO). ICO registration reference: ZB813194.

2. Where your data lives, and why that matters

Most software companies host customer data wherever is cheapest and fastest to set up — typically infrastructure run by one of three US-based cloud giants. That comes with a quiet catch: under the US CLOUD Act (2018), US-headquartered companies can be required to disclose data to US authorities even when the data is physically stored outside the US, including on servers in the UK or EU. For organisations holding information about beneficiaries, donors, volunteers, and finances, that’s worth knowing — most privacy policies just don’t mention it.

Here’s where things stand for Raiser:

  • This marketing site’s analytics (Plausible) are both hosted and headquartered in the EU (Estonia) — a genuinely EU company, not just EU-hosted infrastructure belonging to a US business, so the CLOUD Act consideration above doesn’t apply to this data at all.
  • We’re actively moving Raiser’s core infrastructure to UK-based hosting, away from US-owned cloud providers, as part of our broader digital sovereignty commitment (see How We Build).
  • As this work progresses, we’ll update this section with specifics — not vague “your data is safe with us” language, but exactly where it sits and who operates the infrastructure.

3. What data this site collects — and why

3.1 Analytics and site performance

We use Plausible (hosted and headquartered in the EU) to understand how visitors use this site — which pages are read most, where people arrive from, and how they navigate. We do not use Google Analytics, Google tags, Meta/Facebook Pixel, PostHog, or any similar tracker. Plausible is cookieless by design: it doesn’t set any cookie, doesn’t collect personal data, and can’t identify you individually — we only ever see aggregate counts, like “this many people visited this page.”

Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR) — improving a publicly available website is a proportionate, necessary use of aggregate usage data.

Because no cookie is ever set and no personal data is collected, no consent is required for this analytics tool, and none is requested. See Section 5 (Cookies) for details.

3.2 Enquiry and contact forms

If you fill in a contact or “Talk to us” form on this site, we collect your name, email address, and anything else you choose to write in the message field. We use this data to respond to your enquiry, follow up if we said we would, and keep a record of the conversation.

Legal basis: Contract (Article 6(1)(b)) where we’re taking steps to enter a commercial relationship; legitimate interests (6(1)(f)) for general enquiries.

We do not add you to a mailing list without your explicit consent.

3.3 Newsletter sign-up

If you subscribe via the footer form, we collect your email address and send updates through Brevo, our email service provider. You can unsubscribe at any time using the link in any email we send.

Legal basis: Consent (Article 6(1)(a) UK GDPR).

3.4 Calendly booking

Our “Book a call” links use Calendly. When you book a call, Calendly processes your data according to Calendly's own privacy policy. We receive your name, email address, and any information you add to the booking form.

Legal basis: Contract (Article 6(1)(b)).

4. How long we keep your data

Type Retention
Contact enquiry dataUp to 3 years from last contact, unless you ask us to delete it sooner
Newsletter subscribersUntil you unsubscribe
Analytics data (Plausible)Aggregate site statistics only — no personal data is collected, so there is nothing tied to you to retain or delete
Booking/calendar dataAs per Calendly’s policy

We review data periodically and delete anything we no longer need.

5. Cookies — and why we’ve kept this simple

This site sets no analytics or marketing cookies. That’s a deliberate choice, not an oversight.

Cookie Purpose Consent required?
Session/security cookie Keeps the site working — session state, security, page navigation No — strictly necessary

We use Plausible for analytics, and Plausible is cookieless by design — it never reads or writes a cookie, on this page or anywhere else on the site. Because there’s no analytics cookie, there’s nothing for you to opt in or out of, and we don’t show a consent prompt for it. If we ever did want to use a tool that requires cookies, we’d ask first — that would be a considered change to our approach, not something we’d slip in quietly.

We don’t use Calendly’s cookies on this page directly — they’re only set if you actively use a “Book a call” link, at which point Calendly’s own cookie policy applies.

6. Who we share your data with

We do not sell your personal data. We do not share it with third parties except:

  • Service providers who help us run this site — our hosting provider, Brevo (email), Plausible (analytics), and Calendly (booking). These are data processors acting on our instructions under data processing agreements. Plausible, in particular, processes no personal data about you at all — only aggregate, anonymous page-level counts.
  • Legal obligations — we will disclose data if required by law, or to protect the rights and safety of people involved with Raiser.

7. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Erase your data (the “right to be forgotten”)
  • Restrict how we process your data
  • Object to processing based on legitimate interests
  • Withdraw consent at any time, where consent is the legal basis

To exercise any of these rights, email hello@raiser.uk. We aim to respond within one month.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe we have handled your data unlawfully. You can contact the ICO at ico.org.uk or on 0303 123 1113. (See also our Complaints process — we’d rather hear from you first.)

8. Security

We use HTTPS across this site and take reasonable technical and organisational measures to protect the data we hold. No internet transmission is completely secure, but we work to minimise risk — and as set out in Section 2, we’re working to bring more of that infrastructure under our own, UK-based control over time.

9. Links to other sites

This site links to the Raiser platform (app.raiser.uk) and to third-party sites. Once you leave raiser.uk, this privacy policy does not apply. We encourage you to read the privacy notices of any sites you visit.

10. Changes to this policy

We may update this policy from time to time — particularly as our hosting and infrastructure changes (see Section 2). We’ll update the “last updated” date at the top when we do, and material changes will be announced on this page.

11. Contact us

For privacy-related queries or to exercise your rights:

Email: hello@raiser.uk
Post: Raiser Ltd, Piccadilly Business Centre, Blackett Street, Manchester, M12 6AE, UK

We aim to respond to all privacy enquiries within 5 working days, and to complete any formal rights request within one calendar month.