Legal
Privacy Policy
Introduction
This Privacy Policy explains how RAAS Impact ("Company", "we", "us") collects, uses, and protects the personal data you provide when visiting our website https://raasimpact.com, particularly when using our contact form.
We are committed to protecting your privacy and complying with the General Data Protection Regulation (EU) 2016/679 ("GDPR").
Data Controller
The data controller responsible for your personal data is:
- Organisation
- RAAS Impact
- Privacy Contact
- privacy@raasimpact.com
- Registered address
- Tower Business Centre, Tower Street, Swatar, Level 3 (Suite No. 3326), Birkirkara, BKR 4013, Malta
What Personal Data We Collect
When you submit an inquiry via our contact form, we may collect the following personal data:
- Email address
- Full name
- Message content
- IP address and browser metadata (automatically collected)
We do not collect special category data (as defined under GDPR Article 9) through our website.
Lawful Basis for Processing
We process your personal data under the following legal bases:
- Legitimate Interest — to respond to your inquiry and provide relevant information.
- Consent — when you explicitly opt in to receive future communications or marketing updates.
How We Use Your Data
We use the collected data to:
- Respond to your inquiries
- Provide information you requested
- Maintain internal records
- Improve our services and user experience
Data Retention
We retain your personal data only as long as necessary to fulfil the purpose for which it was collected. Inquiry-related data is retained for a maximum of 12 months unless legal or operational needs justify a longer period.
Data Sharing
We do not sell your data. We may share it with trusted third-party service providers for purposes including:
- Email communication (e.g., HubSpot / Brevo / Sendinblue)
- Website hosting and analytics (e.g., Google Analytics)
- Behavioural metrics, heatmaps, and session replay (e.g., Microsoft Clarity)
Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions as applicable.
Your Rights Under GDPR
You have the following rights regarding your personal data. To exercise any of them, contact us at privacy@raasimpact.com.
- Right of Access
- Request a copy of the personal data we hold about you.
- Right to Rectification
- Request correction of inaccurate or incomplete personal data.
- Right to Erasure
- Request deletion of your data where there is no compelling reason for continued processing.
- Right to Restrict Processing
- Request that we limit how we use your personal data in certain circumstances.
- Right to Data Portability
- Receive your data in a structured, machine-readable format and transfer it to another controller.
- Right to Object
- Object to processing based on legitimate interests or for direct marketing at any time.
Security
We take appropriate technical and organisational measures to secure your personal data against unauthorised access, alteration, disclosure, or destruction. These measures are reviewed and updated regularly in line with best practice and our GDPR obligations.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Where changes are material, we will take reasonable steps to notify you directly.
Contact Us
For any privacy-related questions, data subject requests, or complaints, please contact us at:
- privacy@raasimpact.com
- Response Time
- Within 30 days (GDPR Article 12)
- Postal address
- Tower Business Centre, Tower Street, Swatar, Level 3 (Suite No. 3326), Birkirkara, BKR 4013, Malta
You also have the right to lodge a complaint with your local data protection authority. In Malta, this is the Information and Data Protection Commissioner (IDPC) — idpc.org.mt.