Privacy policy
Last updated: 26 October 2026
In short: Raiseit helps workplaces log and fix everyday issues. We collect as little personal information as we can, we never sell it, we keep the app's data on UK servers, and staff can report anonymously. Raiseit must not be used for patient information.
Please keep your own copy. We back up data where we reasonably can, but we cannot guarantee it will never be lost, so workplaces should download their report and spreadsheet regularly, for example monthly.
1. Who we are
Raiseit (raiseit.live) is based in London, United Kingdom. You can contact us about privacy at info@raiseit.live.
We have two roles under UK data protection law (UK GDPR and the Data Protection Act 2018):
- Controller for our own website and business: people who contact us, join the trial, or hold a workplace account with us.
- Processor for the information a workplace (for example a GP practice) puts into Raiseit. The workplace is the controller of that information and decides how it is used. We only process it on their instructions, under our agreement with them.
2. What we collect
When you contact us or join the trial
- Your name, work email, business name and type of workplace.
- Anything you choose to tell us in emails.
When a workplace uses Raiseit
- Workplace account: workplace name and username, the account owner's email, and the workplace code and manager PIN, which are stored scrambled (hashed) so nobody, including us, can read them.
- Reports: what the issue is, where, the category, how urgent it is, and when it was raised. Reports can be made anonymously. A name is only stored if the person chooses to add it.
- Team list: names, roles and optional work emails of people who look after issues, added by the workplace.
- Updates and history: status changes, notes, who an issue is assigned to, learning points and actions, and the names people choose to add to them. Managers may add a name when they enter the manager PIN, or appear as "Manager".
- Sign-in information: a random sign-in token kept on the device so people stay signed in.
Technical information
- Our hosting providers keep short-term technical logs, such as IP addresses and browser type, to run the service securely and prevent abuse.
- We do not use advertising or tracking cookies, and we do not use analytics that follow you across sites.
No patient information. Raiseit is for workplace and maintenance issues only. It is not for clinical concerns, patient safety incidents or patient details, and staff are asked not to include any. If patient information is added by mistake, the workplace should delete it or ask us to.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to enquiries and setting up trials | Legitimate interests, and taking steps at your request before an agreement |
| Providing Raiseit to a workplace and supporting it (including resetting codes) | Performance of our agreement with the workplace |
| Keeping the service secure and working properly | Legitimate interests |
| Meeting legal, tax and accounting duties | Legal obligation |
| Information inside a workplace's Raiseit | Decided by the workplace as controller, usually its legitimate interests in running a safe, well-maintained workplace and its health and safety duties |
We do not sell personal information, use it for advertising, or use it to make automated decisions about people.
4. Who we share it with
We use a small number of trusted service providers to run Raiseit. They act on our instructions and are bound by data protection terms:
- Supabase: hosts the Raiseit database in the London (UK) region.
- Netlify: hosts the website and receives trial sign-up forms.
- Our email provider: for emails sent to and from info@raiseit.live.
- Google Fonts: provides the typeface on our pages. Your browser requests it from Google, which receives your IP address.
Some providers may process limited information outside the UK, for example for hosting or support. Where that happens, it is protected by approved safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or UK adequacy regulations.
We may also share information if the law requires it, or to protect the rights and safety of others.
Inside a workplace, staff see reports and updates but never the names of people who report. Only that workplace's managers can see a name, and only if the reporter chose to give one.
5. How long we keep it
- Enquiries and trial sign-ups that don't go ahead: up to 12 months, then deleted.
- Workplace data: for as long as the workplace uses Raiseit. The workplace decides how long to keep its records, for example to cover inspection look-backs. When a workplace leaves, we delete its data within 30 days. Any copies held in our backups are deleted as those backups expire.
- Sign-ins on a device last 12 hours, or, if "Remember me" is ticked, stay active while the device is used and end after 180 days without use, unless someone signs out sooner.
- Business records, such as invoices: as long as the law requires, usually 6 years.
6. How we protect it
- All connections are encrypted (HTTPS), and data is encrypted at rest by our hosting providers.
- Workplace codes and manager PINs are stored scrambled (hashed) and are never visible to anyone.
- Each workplace's data is kept separate, and the app can only reach it through checked actions after sign-in.
- Access to our systems is limited and protected with two-factor sign-in.
- We take reasonable steps to protect against data loss, including backups, but we cannot guarantee that data will never be lost. We recommend workplaces download their report and spreadsheet regularly, for example monthly, to keep their own copy.
7. Your rights
You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how it's used, and to have it given to you in a portable format. Some rights depend on the circumstances.
- For information inside your workplace's Raiseit (reports, updates, team lists), please contact your workplace first, as they control it. We will help them respond.
- For anything else, email info@raiseit.live. We will reply within one month.
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
8. Cookies and storage on your device
We do not use advertising or tracking cookies. The Raiseit app saves a small sign-in token in your browser's storage so you stay signed in. This is strictly necessary for the service to work, so we don't ask for consent. Signing out removes it.
9. Children
Raiseit is a workplace tool for adults and is not intended for children.
10. Changes to this policy
We may update this policy as Raiseit develops. We'll change the date at the top, and tell workplace account owners about any important changes.
11. Contact
Raiseit, London, United Kingdom
Email: info@raiseit.live