Legal
Privacy policy
Last updated: 27 September 2026
This policy explains what personal data Fun In Raising collects, why, how long we keep it, and your rights. It covers our website, our toolkit shop, and the Fun In Raising platform.
1. Who we are
Fun In Raising is operated by [registered company name to be confirmed], a company registered in England and Wales with company number [company number to be confirmed]. Our registered office is [registered address to be confirmed]. We are registered with the Information Commissioner's Office under number [ICO registration number to be confirmed].
For anything about your personal data, email [email protected].
2. Two different roles
Depending on the data, we act in one of two roles under UK data protection law.
- Controller for data about visitors to our website, people who contact us, customers of the toolkit shop, and the account and billing contacts of organisations that subscribe to the platform. This policy describes how we handle that data.
- Processor for data that a customer organisation puts into the platform about its own staff, fundraisers, charity clients and supporters. The customer organisation is the controller of that data and decides how it is used. If you work for, or gave your details to, one of our customers, contact that organisation first. We process that data only on their instructions, under our Data Processing Agreement.
3. Data we collect as a controller
| Who | Data | Why | Lawful basis |
|---|---|---|---|
| People who contact us or ask for a demo | Name, work email, phone, organisation, team size, your message, IP address | To reply, arrange a demo, and follow up on your enquiry | Legitimate interests in responding to enquiries and growing our business |
| Customer account and billing contacts | Name, email, phone, role, billing details, correspondence | To provide the service, invoice, and give support | Contract |
| Toolkit shop customers | Name, email, order details | To fulfil orders and give support | Contract |
| Everyone who signs in | Sign-in email, sign-in times, IP address, browser type, security events | To keep accounts secure and investigate misuse | Legitimate interests in security; legal obligation where applicable |
| Website visitors | Server logs: IP address, pages requested, time, browser type | To run and protect the website | Legitimate interests |
We do not sell personal data. We do not use advertising or analytics cookies, and we do not build marketing profiles.
4. Marketing
If you contact us about the platform, we may email you about Fun In Raising products that relate to your enquiry. Every such email includes a way to opt out, and you can opt out at any time by emailing [email protected].
5. Who we share data with
We share personal data only with service providers who help us run the service, under written contracts that require them to protect it:
- Cloudflare, for website delivery and protection against attacks.
- [our hosting provider to be confirmed], which hosts our servers ([hosting location to be confirmed]).
- Our email provider, to send and receive email.
- When a customer turns on AI features, Anthropic, to generate coaching and practice responses. When a customer turns on mapping, Google, for maps and geocoding.
We may also disclose data where the law requires it, or to protect the rights and safety of others.
6. International transfers
Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, and on the provider's security commitments.
7. How long we keep data
- Enquiries that do not become customers: 24 months after our last contact.
- Customer account and billing records: for the contract, then 6 years for tax and legal claims.
- Sign-in security logs: 12 months.
- Website server logs: 14 days.
Data we process for customers is kept and deleted as that customer decides, and within 30 days after their subscription ends.
8. How we protect data
We describe our measures on our security page. They include encryption in transit, isolation of each customer's data at the database level, two-step verification for administrators, and an audit log.
9. Your rights
You have the right to:
- ask for a copy of your personal data;
- ask us to correct inaccurate data;
- ask us to delete data;
- object to processing based on legitimate interests, including direct marketing;
- ask us to restrict processing;
- ask for data you gave us in a portable format.
Email [email protected]. We reply within one month. If you are not happy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.
10. Changes
We update this policy when our processing changes. The date at the top shows the latest version.