Privacy Policy

Last updated: May 2026

Raff Club Limited (“RaffClub”, “we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use this website at fundraising.raffclub.com (the “Website”) — our site for UK charities, PTFAs, sports clubs, places of worship and community groups who want to run compliant fundraising raffles.

We handle your data fairly and in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

By using this Website, you agree to the practices described in this policy. If you do not agree, please do not use the Website.

Note: This policy covers the fundraising waitlist and marketing website only. If you use the main RaffClub platform (where raffles are hosted and entered), the separate platform Privacy Policy at raffclub.com applies to that service.

1. Who we are

Raff Club Limited is the data controller responsible for the personal data collected through this Website.

  • Company: Raff Club Limited, a limited liability company registered in England and Wales under company number 16045870.
  • Registered office: 2nd Floor, Maritime Place, Quayside, Chatham Maritime, Kent, England, ME4 4QZ.
  • VAT number: 490281488.

For questions about this Privacy Policy or your data, you can contact us via our contact form or by email at Enquiries@raffclub.com.

2. Information we collect

We collect information in two main ways.

2.1 Information you give us

Waitlist sign-up. When you join our founding-host waitlist, you provide:

  • Name (required)
  • Email address (required)
  • Organisation name (optional)
  • Organisation type (optional — e.g. PTFA, charity, sports club)

We use this to contact you about early access to RaffClub and to understand the kinds of groups joining the waitlist. We ask for your explicit consent (a tick box) before adding you to the list.

Contact form. When you send us a message, you provide:

  • Name
  • Email address
  • Message

You are not required to provide this information, but we need it to respond to your enquiry. By submitting the form, you consent to us using this information to reply to you and to keep a record of the enquiry for as long as necessary for that purpose.

We do not use your contact details for unrelated marketing.

2.2 Information collected automatically (cookies and analytics)

When you visit the Website, we may collect information about how you use it, such as:

  • Pages you visit and how long you spend on them
  • How you reached our site (e.g. search engine, link)
  • Your device type, browser, and approximate location (e.g. country or region)
  • Your IP address (which may be considered personal data)

This is done through cookies and similar technologies, and only when you have accepted non-essential cookies via our cookie banner (see section 3).

We use Google Analytics to understand how the Website is used and to improve it. Google Analytics may set cookies and may process data on servers outside the UK. Google’s practices are described in Google’s Privacy Policy and How Google uses data when you use our partners’ sites or apps.

We only enable Google Analytics after you have agreed to analytics cookies in our cookie banner. If you decline or ignore the banner, we do not load analytics cookies. We use Google Consent Mode, which means analytics storage is set to “denied” by default until you accept.

We use a cookie consent banner so you can choose which cookies we use.

  • Strictly necessary cookies These are needed for the Website to work and for the cookie banner itself (e.g. to remember your choices). They do not require your consent under PECR, but we still tell you about them.

  • Analytics cookies (Google Analytics) These help us see how the site is used. We only use them if you accept them in our cookie banner. If you reject or dismiss the banner without accepting, we do not set these cookies.

You can change your mind at any time using the cookie preferences available on the Website. Until you accept analytics cookies, we do not collect analytics data about you.

4. How your form data is processed

To deliver our forms securely and reliably, we use the following service providers:

  • Email delivery. Submissions from the waitlist and contact forms are transmitted through our mail processing service (operated for us by Dentech Apps Limited) so that the details reach our inbox. The data is used only to deliver your enquiry or waitlist request to us.
  • Spam protection (Google reCAPTCHA). Our forms are protected by Google reCAPTCHA v3 to prevent spam and abuse. reCAPTCHA collects hardware and software information (such as device and application data) and sends it to Google for analysis. Your use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.

These providers act on our behalf and are only permitted to use the data to provide their service to us.

5. How we use your information

We use your information to:

  • Manage the waitlist — to contact you about early access to RaffClub
  • Respond to enquiries — to reply to messages sent via our contact form
  • Improve our Website — using analytics (only when you have consented) to see which pages are useful and how people find us
  • Keep our forms secure — using reCAPTCHA to prevent spam and abuse
  • Comply with the law — where we have a legal duty to keep or use data
  • Protect our rights — for example in the event of a dispute or legal claim

We do not:

  • Sell or rent your data to third parties
  • Use your data for automated decision-making or profiling
  • Waitlist sign-up — consent (you tick a box and choose to join). You can withdraw at any time (see section 9).
  • Contact form — consent (you choose to send the form) and legitimate interests (to run our business and reply to enquiries).
  • Strictly necessary cookies and spam protection — legitimate interests (to run the site, the cookie system, and keep our forms secure).
  • Analytics (Google Analytics) — consent only. We only use these cookies if you have agreed in our cookie banner.

7. How long we keep your information

  • Waitlist — we keep your details until we have launched and contacted you about early access, or until you ask us to remove you, whichever is sooner.
  • Contact form — we keep enquiry details for as long as needed to deal with your request and any follow-up. We may keep a minimal record for longer if needed for legal or accounting reasons.
  • Analytics — Google Analytics retains data according to Google’s data retention settings. We do not keep a separate long-term copy of raw analytics data on our own systems.
  • Cookie preferences — we store your choices for a reasonable period (e.g. 12 months) so we do not ask you again every visit, unless you clear cookies or change your preferences.

8. Sharing your information

We may share your information only in these situations:

  • Service providers — for example our hosting provider, our mail processing service (Dentech Apps Limited), Google reCAPTCHA, and Google Analytics (only when you have consented). These providers are required to protect your data and use it only as we instruct.
  • Legal obligations — if we must disclose data to comply with law, court orders, or regulatory requests.
  • Protection of rights — if necessary to protect our or others’ rights, safety, or property.

We do not sell your data or share it for third-party marketing.

9. Where your information is stored

We process data within the UK and the European Economic Area (EEA) where possible. Google may process analytics and reCAPTCHA data in the USA or elsewhere. Google is signed up to frameworks intended to provide safeguards for international transfers (e.g. the EU–US Data Privacy Framework where applicable). For more detail, see Google’s Privacy Policy.

10. Your rights (UK GDPR)

You have the right to:

  • Access — ask for a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data in certain situations
  • Restrict processing — ask us to limit how we use your data in certain cases
  • Object — object to processing based on legitimate interests
  • Data portability — receive your data in a structured, machine-readable format where it applies
  • Withdraw consent — where we rely on consent (e.g. the waitlist or analytics cookies), you can withdraw it at any time

To use any of these rights, please contact us via our contact form or at Enquiries@raffclub.com. We will respond within one month.

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data: ico.org.uk.

11. Security

We take reasonable technical and organisational measures to protect your information against unauthorised access, loss, or misuse. However, no website or internet transmission can be guaranteed to be 100% secure, and you use our Website at your own risk.

Our Website may link to other sites (for example the main RaffClub platform, social media, or tools we use). We are not responsible for their privacy practices. We recommend you read their privacy policies when you leave our site.

13. Children

This Website is aimed at adults organising fundraising on behalf of groups and organisations. We do not knowingly collect personal data from children under 13. If you believe a child has given us their data, please contact us and we will delete it.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will change the “Last updated” date at the top when we do. If changes are significant, we may also notify you via a notice on the Website or by email where we hold your contact details.

15. Contact us

If you have any questions about this Privacy Policy, your data, or our use of cookies, you can contact us:

Raff Club Limited — registered in England and Wales, company number 16045870.