Privacy Policy

01 — Introduction

This Privacy Policy explains how RAAS Impact ("Company", "we", "us") collects, uses, and protects the personal data you provide when visiting our website https://raasimpact.com, particularly when using our contact form.
We are committed to protecting your privacy and complying with the General Data Protection Regulation (EU) 2016/679 ("GDPR").

02 — Data Controller

The data controller responsible for your personal data is:

• Organisation: RAAS Impact

• Privacy contact: privacy@raasimpact.com

• Registered address: Tower Business Centre, Tower Street, Swatar, Level 3 (Suite No. 3326), Birkirkara, BKR 4013, Malta

03 — Personal Data

When you submit an inquiry via our contact form, we may collect the following personal data:

1. Email address

2. Full name

3. Message content

4. IP address and browser metadata (automatically collected)

We do not collect special category data (as defined under GDPR Article 9) through our website.

04 — Legal Basis

We process your personal data under the following legal bases:

• Legitimate Interest — to respond to your inquiry and provide relevant information.

• Consent — when you explicitly opt in to receive future communications or marketing updates.

05 — Use of Data

We use the collected data to:

• Respond to your inquiries

• Provide information you requested

• Maintain internal records

• Improve our services and user experience

We do not use this data for marketing unless you have explicitly opted in.

06 — Retention

We retain your personal data only as long as necessary to fulfil the purpose for which it was collected. Inquiry-related data is retained for a maximum of 12 months unless legal or operational needs justify a longer period.

07 — Third Parties

We do not sell your data. We may share it with trusted third-party service providers for purposes including:

• Email communication (e.g., HubSpot / Brevo / Sendinblue)

• Website hosting and analytics (e.g., Google Analytics)

• Behavioural metrics, heatmaps, and session replay (e.g., Microsoft Clarity)

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions as applicable.

08 — Your Rights

You have the following rights regarding your personal data. To exercise any of them, contact us at privacy@raasimpact.com.

• Right of Access: Request a copy of the personal data we hold about you.

• Right to Rectification: Request correction of inaccurate or incomplete personal data.

• Right to Erasure: Request deletion of your data where there is no compelling reason for continued processing.

• Right to Restrict Processing: Request that we limit how we use your personal data in certain circumstances.

• Right to Data Portability: Receive your data in a structured, machine-readable format and transfer it to another controller.

• Right to Object: Object to processing based on legitimate interests or for direct marketing at any time.

09 — Security

We take appropriate technical and organisational measures to secure your personal data against unauthorised access, alteration, disclosure, or destruction. These measures are reviewed and updated regularly in line with best practice and our GDPR obligations.

10 — Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Where changes are material, we will take reasonable steps to notify you directly.

11 — Contact

For any privacy-related questions, data subject requests, or complaints, please contact us at:

• Email: privacy@raasimpact.com

• Response time:  Within 30 days (GDPR Article 12)

• Postal address: RAAS Impact, Tower Business Centre, Tower Street, Swatar, Level 3 (Suite No. 3326), Birkirkara, BKR 4013, Malta

You also have the right to lodge a complaint with your local data protection authority. In Malta, this is the Information and Data Protection Commissioner (IDPC) — idpc.org.mt.