Privacy Policy

Raised ("we", "our", "us") is committed to protecting your privacy and personal information in accordance with the New Zealand Privacy Act 2020 and other applicable laws. This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

Information We Collect

The type of personal information collected depends on how you use the Platform:

For Organisations and Wholesalers (Account Holders):

• Name and contact details (email, phone number)
• Organisation information (business name, type, address)
• Banking and payout information
• Account credentials and authentication information
• Storefront and product information you create

For Customers (Purchasers):

• Name and contact details (email, phone number)
• Delivery address
• Order details and purchase history
• Payment information (processed by Stripe - we never see credit card details)
• Marketing preferences

Note: Customer information collected through Organisation storefronts is primarily controlled by the Organisation, not Raised. See "Data Controller Relationships" below.

For All Users:

• Website usage data (IP address, browser type, pages visited)
• Device information and cookies
• Communications with us (support requests, feedback)

For more information about how we use cookies, please see our Cookie Policy.

Data Controller Relationships

Understanding who controls your data:

• Raised as Platform Provider: For Organisations and Wholesalers who create accounts, Raised is the data controller for your account information. For Customers, Raised acts primarily as a data processor on behalf of the Organisation running the storefront where you made a purchase.
• Organisations as Primary Controllers: When you make a purchase through an Organisation's storefront, that Organisation is the primary data controller for your personal information. They determine how your data is used, stored, and shared (within the bounds of our Terms of Service).
• Wholesalers as Data Recipients: When an Organisation uses a Wholesaler to fulfill orders, the Wholesaler receives customer data as a data recipient/processor and may also be a joint controller for certain purposes (e.g., direct marketing).

What this means for you: If you are a Customer and have privacy concerns or requests about your data (access, correction, deletion), you should contact the Organisation that operates the storefront where you made your purchase. Raised can assist in facilitating these requests but may need to direct you to the Organisation as the primary data controller.

How We Use Your Information

Raised uses personal information for the following purposes:

• Providing and maintaining the Platform infrastructure
• Processing payments through our payment provider (Stripe)
• Managing Organisation and Wholesaler accounts
• Facilitating transactions between Customers and Organisations
• Providing customer and technical support
• Sending important Platform updates and notifications
• Improving our services and developing new features
• Detecting and preventing fraud and suspicious activity
• Complying with legal obligations
• Marketing our Platform through promotional emails, newsletters, direct mail, and other marketing communications (consent granted through our Terms of Service)

Information Sharing and Disclosure

Raised shares personal information as follows:

Customer Information Shared with Organisations:

When you make a purchase through an Organisation's storefront, we share your personal information (name, email, phone, address, order details) with that Organisation. The Organisation may use this information for:

• Order fulfillment and delivery
• Customer service and support
• Record-keeping and financial reporting
• Future fundraising communications
• Direct marketing (subject to your consent and anti-spam laws)

Customer Information Shared with Wholesalers:

When an Organisation uses a Wholesaler to fulfill your order, we share your personal information with the Wholesaler. The Wholesaler may use this information for:

• Order processing and delivery
• Inventory and logistics management
• Customer support related to products
• Direct marketing of their products (subject to your consent)

Other Information Sharing:

• Payment Processors: We use Stripe to process payments. Your payment information is transmitted directly to Stripe and is never accessible to Raised, Organisations, or Wholesalers. Raised operates its own KYC, AML, and sanctions screening processes using Didit.me for identity verification and dedicated AML screening tools. For more information, see our AML / KYC and Sanctions Compliance page.
• Service Providers: We share information with third-party service providers who assist in operating our Platform (hosting, analytics, email delivery, customer support tools).
• Legal Requirements: We may disclose information to legal and regulatory authorities when required by law, to protect our rights, or to investigate fraud or security issues.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred to the acquiring entity.

We do not sell your personal information to third parties.

Facebook and Instagram Lead Ads

Wholesalers can connect their Facebook Page to Raised so that enquiries from their Facebook and Instagram lead ads arrive in Raised. Raised also runs lead ads from its own Page. This section explains what we receive from Meta Platforms and what we do with it.

When a Wholesaler connects a Facebook Page, we receive:

• The name and ID of the Pages you choose to share with Raised
• Access tokens that let Raised subscribe to new leads on that Page and read them
• The list of permissions you granted
• The names and IDs of the lead forms on that Page
• The names and IDs of the ad pixels (datasets) in your ad accounts, so you can choose one to receive results

Raised does not post to your Page, read your Page messages, create, change or pause your ads, or read your ad spend.

When someone fills in a lead form, we receive:

• Their answers to the form, such as name, email, phone number, organisation name, region and any custom questions
• The names and IDs of the form, ad, ad set and campaign, the platform (Facebook or Instagram) and the time of submission

How we use it:

• To show the lead to the Wholesaler whose ad it came from, in their Raised dashboard
• To email the person about starting the fundraiser they asked about, on behalf of that Wholesaler, with a small number of follow-up reminders. Every email has an unsubscribe link.
• To recognise when the person goes on to request or run a fundraiser, so the Wholesaler can see which ads produced real fundraisers
• To report those results back to Meta through the Conversions API, to Raised's own dataset and to the dataset the Wholesaler chose. Email addresses and phone numbers are hashed before they are sent.

We do not sell lead information, share it with anyone other than the Wholesaler whose ad produced it, or use it to advertise anything else.

Who controls the data:

For leads from a Wholesaler's own Page, the Wholesaler is the data controller and Raised processes the leads on their behalf. For leads from Raised's own Page, Raised is the data controller.

Retention and deletion:

• When a Wholesaler disconnects their Page, Raised deletes the stored access tokens straight away and stops receiving new leads from it.
• Leads already received are kept as part of the Wholesaler's records while their account is open, and are deleted on request.
• To remove Raised's access or ask us to delete data we received from Facebook, follow the steps on our Facebook data deletion page.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, modification, or disclosure. This includes:

• Encryption of data in transit and at rest
• Secure access controls
• Regular security assessments
• Staff training on data protection

Your Privacy Rights

Under the Privacy Act 2020, you have the right to:

• Access your personal information
• Request correction of your personal information
• Be informed about how your information is being used
• Know whether we hold personal information about you
• Request deletion of your personal information in certain circumstances
• Object to certain uses of your personal information
• Complain to the Privacy Commissioner if you believe your privacy has been breached

Overseas Data Transfers

We may transfer your personal information to overseas recipients, including service providers located outside New Zealand. We ensure that any such transfers comply with the Privacy Act 2020 and that appropriate safeguards are in place.

Data Retention

Personal information is retained as follows:

• Platform Data: Account information for Organisations and Wholesalers is retained for the duration of your account and for a reasonable period after account closure to comply with legal obligations (e.g., tax, accounting, dispute resolution).
• Customer Order Data: Customer information collected through Organisation storefronts is retained indefinitely in the Platform for operational purposes, unless deletion is requested by the Customer and agreed to by the Organisation. Organisations may also retain this data separately and have their own retention policies.
• Wholesaler Data: Wholesalers may retain customer order information they receive indefinitely for their own business purposes (subject to their own policies and applicable laws).
• Legal Requirements: We may be required to retain certain information for longer periods to comply with New Zealand tax laws, accounting requirements, or other legal obligations.

If you wish to request deletion of your data, please contact the relevant party as described in "Your Privacy Rights" above.

Organisation and Wholesaler Responsibilities

Organisations and Wholesalers using the Platform have their own data protection responsibilities:

Organisations must:

• Act as data controllers for customer information collected through their storefronts
• Comply with the Privacy Act 2020 and other applicable privacy laws
• Provide customers with appropriate privacy notices
• Obtain necessary consents for data collection and use
• Implement appropriate security measures for customer data
• Respond to customer privacy rights requests (access, correction, deletion)
• Only use customer data for legitimate purposes (order fulfillment, customer service, consented marketing)

Wholesalers must:

• Handle customer data received through the Platform in accordance with the Privacy Act 2020
• Use customer data only for order fulfillment and consented marketing purposes
• Implement appropriate security measures to protect customer data
• Respond to customer privacy rights requests regarding data they hold
• Not misuse or sell customer data to third parties

Raised monitors for suspicious activity and may suspend accounts that violate these privacy obligations, but Organisations and Wholesalers remain independently responsible for their own compliance with privacy laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and, where appropriate, sending you a notification.

reCAPTCHA

This site is protected by reCAPTCHA and the GooglePrivacy PolicyandTerms of Serviceapply.