How we collect, use and protect personal information.
Ways2Raise is designed to help young people and their parents or guardians plan fundraising safely. This notice explains how Ways2Raise handles personal information when you use ways2raise.co.uk and its account areas.
The data controller for the service described in this notice is Ways2Raise.
Data protection contact:
Ways2Raise
Riverview Cottage, Main Road
Tolpuddle, Dorchester
DT2 7EW
hi@ways2raise.co.uk
We use this as a data-protection contact address. We will publish the correct formal registration and, if required, statutory Data Protection Officer details before public account launch.
We do not ask for a young person’s surname or their private personal email address in normal account registration or onboarding. A parent or guardian may choose a separate shared fundraising contact email—such as a generic Gmail address—which the young person and parent or guardian can access together for fundraising enquiries. We do not ask for payment-card details, bank details, account passwords or fundraising-payment credentials.
A public fundraising page uses a young person’s first name only, a permanent unique page number, a Ways2Raise-approved no-face header and content a parent or guardian has reviewed and approved. It does not use a personal photo upload. A parent or guardian may choose to show the shared fundraising contact email, rather than a young person’s private address. Parents and guardians should check every submitted story and update for unnecessary personal information before publication.
We use essential cookies and browser storage to provide sign-in, Parent Lounge access, security and simple account preferences. See the Cookie Policy. We do not use visitor analytics, advertising cookies, tracking pixels or behavioural profiling in the current product code.
We will document and review the final lawful-basis assessment in the pre-launch data protection impact assessment (DPIA).
Ways2Raise is designed for young people aged 13–15 with parent or guardian involvement. A family account is registered using the parent or guardian’s email address. Routine account communication goes to that parent or guardian address. A separate shared fundraising contact email can be used for fundraising enquiries only; it is not a replacement for the parent/guardian account address.
Parent Lounge is a separate PIN-protected area. It lets a parent or guardian oversee public-page approval, optional external links, Trip Team contact sharing, account deletion and any future Alex AI controls. The young person should be told clearly what these parent controls do.
A parent or guardian may choose to link their family to a named Trip Team. Before a verified Trip Leader can see anything, the parent or guardian must make a separate, clear choice. If they agree, the named Trip Leader may see only the young person’s first name, the parent or guardian’s name and email address, and the account’s recorded income total for that one trip.
Trip Leaders cannot see addresses, bank or payment details, expenses, private webpages, chat history, account logins or other account records. A parent or guardian can withdraw this choice or unlink at any time in Parent Lounge; the family then disappears from that Trip Team’s Staff Room roster. Partner-company staff do not receive platform logins or browser access to family accounts.
We do not sell personal information. We do not receive, hold, manage, transfer or control funds raised by young people, and we do not currently process fundraising payments. We use carefully selected technical suppliers only where needed to provide the service. The current technical design includes Supabase for account authentication and database services, and Resend for necessary service emails when email delivery is configured. Alex AI, if enabled after its separate launch gate, will use OpenAI’s API for a family’s request and reply.
Before public account launch, Ways2Raise will maintain a processor register and complete the appropriate supplier contracts, sub-processor, data-location and international-transfer reviews. We will update this notice if a material supplier or use changes.
Alex is not switched on for general use unless its separate safety, provider, DPIA and parent-control release requirements are complete. When released, a parent or guardian will be able to turn it on or off in Parent Lounge. It is designed for practical fundraising and enterprise learning, has a daily limit, and is not a friend, counsellor or emergency support service.
Families should not enter a surname, full postcode, address, school, contact details, payment information or sensitive personal information into Alex. The current design provides parent visibility of the short conversation for up to 24 hours, then deletes it; only anonymous daily service totals may remain. We will link to the live provider privacy information before the tool is activated.
A parent or guardian can permanently delete the family account at any time in Parent Lounge after a clear confirmation and a recently entered Parent Lounge PIN. This is real deletion, not merely deactivation: it removes the account sign-in, family records, public-page availability, Parent Lounge settings and linked Trip Team contact sharing. A money-record download is offered first.
For a recorded completed trip, the service is designed to send a reminder at 30 days and a final reminder at 60 days where service email delivery is available. At 90 days after the recorded trip date, the identifiable family account is scheduled for permanent closure and deletion unless a later active Trip Team journey is already recorded. Parents and guardians can delete sooner at any time.
After deletion, Ways2Raise may retain only genuinely anonymous, grouped service-impact totals, such as a monthly number of closed accounts and recorded income total by organisation. These do not contain a name, email address, account identifier, trip, public page, message or other family identifier.
You can ask for access, correction, deletion, restriction, portability or to object to processing, and you can withdraw an optional consent at any time. Contact hi@ways2raise.co.uk. We will assess and respond to a valid request within the time required by UK law.
If you remain unhappy with our response, you can complain to the Information Commissioner’s Office.
We will update this notice when our processing changes or when the formal operating structure is confirmed. The date and version at the top show the current version.