Policies

The legal stuff. Written like we mean it.

Most companies write this section to cover themselves. We’ve tried to write it so it’s actually useful — plain English, specific about what we do and don’t do, and honest about the trade-offs. If something’s unclear, email us and we’ll fix the wording.

A couple of things worth knowing up front:

Where your data actually lives matters. Most software runs on infrastructure owned by US companies — even when the servers are physically in Europe, US law (the CLOUD Act) can require those companies to hand data to US authorities. We’re moving Raiser’s infrastructure to UK-based hosting for exactly this reason. Read more in the Privacy Policy below, and in How We Build.

We use one cookie. Not fifteen. One. We’ll tell you what it’s for and how to clear it.

If something goes wrong, tell us. Our complaints process exists because we’d rather hear from you and fix it than have you quietly give up on us.

Last updated: 16 June 2026

Scope: Marketing site (raiser.uk) only. The Raiser platform (app.raiser.uk) has its own privacy notice within the product.

This privacy policy explains how Raiser Ltd collects, uses, and protects any personal data you share when you visit this website (raiser.uk). It covers this marketing site only, not the Raiser platform. If you use the Raiser platform at app.raiser.uk, a separate privacy notice applies there.

We’ve tried to keep this short, readable, and specific. If something is unclear, email us.

1. Who we are

Raiser Ltd is the data controller for raiser.uk.

  • Registered in: England and Wales
  • Company number: 15855502
  • Registered address: Piccadilly Business Centre, Blackett Street, Manchester, M12 6AE, UK
  • Email: hello@raiser.uk

We are registered with the Information Commissioner’s Office (ICO). ICO registration reference: ZB813194.

2. Where your data lives, and why that matters

Most software companies host customer data wherever is cheapest and fastest to set up — typically infrastructure run by one of three US-based cloud giants. That comes with a quiet catch: under the US CLOUD Act (2018), US-headquartered companies can be required to disclose data to US authorities even when the data is physically stored outside the US, including on servers in the UK or EU. For organisations holding information about beneficiaries, donors, volunteers, and finances, that’s worth knowing — most privacy policies just don’t mention it.

Here’s where things stand for Raiser:

  • This marketing site’s analytics (PostHog) are hosted on PostHog’s EU cloud, meaning the underlying infrastructure is within the EU — though PostHog itself is a US-headquartered company, so the CLOUD Act consideration above still applies to that data.
  • We’re actively moving Raiser’s core infrastructure to UK-based hosting, away from US-owned cloud providers, as part of our broader digital sovereignty commitment (see How We Build).
  • As this work progresses, we’ll update this section with specifics — not vague “your data is safe with us” language, but exactly where it sits and who operates the infrastructure.

3. What data this site collects — and why

3.1 Analytics and site performance

We use PostHog (EU-hosted) to understand how visitors use this site — which pages are read most, where people arrive from, and how they navigate. We do not use Google Analytics, Google tags, Meta/Facebook Pixel, or any similar third-party advertising trackers.

Legal basis: Legitimate interests (Article 6(1)(f) UK GDPR) — improving a publicly available website is a proportionate, necessary use of aggregate usage data.

We will always ask for your consent before setting analytics cookies. See Section 5 (Cookies) for details.

3.2 Enquiry and contact forms

If you fill in a contact or “Talk to us” form on this site, we collect your name, email address, and anything else you choose to write in the message field. We use this data to respond to your enquiry, follow up if we said we would, and keep a record of the conversation.

Legal basis: Contract (Article 6(1)(b)) where we’re taking steps to enter a commercial relationship; legitimate interests (6(1)(f)) for general enquiries.

We do not add you to a mailing list without your explicit consent.

3.3 Newsletter sign-up

If you subscribe via the footer form, we collect your email address and send updates through Brevo, our email service provider. You can unsubscribe at any time using the link in any email we send.

Legal basis: Consent (Article 6(1)(a) UK GDPR).

3.4 Calendly booking

Our “Book a call” links use Calendly. When you book a call, Calendly processes your data according to Calendly's own privacy policy. We receive your name, email address, and any information you add to the booking form.

Legal basis: Contract (Article 6(1)(b)).

4. How long we keep your data

Type Retention
Contact enquiry dataUp to 3 years from last contact, unless you ask us to delete it sooner
Newsletter subscribersUntil you unsubscribe
Analytics data (PostHog)As per PostHog’s retention settings
Booking/calendar dataAs per Calendly’s policy

We review data periodically and delete anything we no longer need.

5. Cookies — and why we’ve kept this simple

This site uses one cookie. That’s a deliberate choice, not an oversight.

Cookie Purpose Consent required?
Session/security cookie Keeps the site working — session state, security, page navigation No — strictly necessary
PostHog analytics cookie Understand how visitors use the site, in aggregate Yes

When you first visit, we’ll ask whether you’re happy for us to set the analytics cookie. If you say no, we genuinely don’t track you — there’s no fallback tracking method running quietly in the background. You can change your mind at any time via the cookie settings link in the footer, and you can clear the cookie yourself through your browser’s settings at any time.

We don’t use Calendly’s cookies on this page directly — they’re only set if you actively use a “Book a call” link, at which point Calendly’s own cookie policy applies.

6. Who we share your data with

We do not sell your personal data. We do not share it with third parties except:

  • Service providers who help us run this site — our hosting provider, Brevo (email), PostHog (analytics), and Calendly (booking). These are data processors acting on our instructions under data processing agreements.
  • Legal obligations — we will disclose data if required by law, or to protect the rights and safety of people involved with Raiser.

7. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Erase your data (the “right to be forgotten”)
  • Restrict how we process your data
  • Object to processing based on legitimate interests
  • Withdraw consent at any time, where consent is the legal basis

To exercise any of these rights, email hello@raiser.uk. We aim to respond within one month.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe we have handled your data unlawfully. You can contact the ICO at ico.org.uk or on 0303 123 1113. (See also our Complaints process — we’d rather hear from you first.)

8. Security

We use HTTPS across this site and take reasonable technical and organisational measures to protect the data we hold. No internet transmission is completely secure, but we work to minimise risk — and as set out in Section 2, we’re working to bring more of that infrastructure under our own, UK-based control over time.

9. Links to other sites

This site links to the Raiser platform (app.raiser.uk) and to third-party sites. Once you leave raiser.uk, this privacy policy does not apply. We encourage you to read the privacy notices of any sites you visit.

10. Changes to this policy

We may update this policy from time to time — particularly as our hosting and infrastructure changes (see Section 2). We’ll update the “last updated” date at the top when we do, and material changes will be announced on this page.

11. Contact us

For privacy-related queries or to exercise your rights:

Email: hello@raiser.uk
Post: Raiser Ltd, Piccadilly Business Centre, Blackett Street, Manchester, M12 6AE, UK

We aim to respond to all privacy enquiries within 5 working days, and to complete any formal rights request within one calendar month.