Privacy Policy

REdataDoctor
Effective date: [01/08/2026]
Last reviewed: [01/08/2026]

1. Who We Are

REdataDoctor provides specialist Raiser’s Edge (Blackbaud) consultancy, database management, campaign support, and training to UK independent schools. This policy explains how we collect and use personal data when you visit our website, and gives an overview of how data is handled when we’re engaged as a consultant by a school.

We are the data controller for the purposes of this policy in respect of website visitor and enquiry data. Our contact details are at the end of this policy.

2. What Data We Collect via This Website

When you submit our enquiry form, we collect:

• Full name
• School (optional)
• Email address
• Your role (optional)
• Details of how we can help you (your enquiry message)

We may also collect standard technical data automatically (such as IP address and browsing behaviour) via cookies — see our separate Cookie Policy for details.

3. How We Use Your Data

We use the information you provide to:

• Respond to your enquiry
• Understand your school’s needs and provide a quote or proposal
• Set up and manage a client relationship, where one is agreed
• Keep records for contractual and accounting purposes

Legal basis: We process this data on the basis of legitimate interest (to respond to enquiries you have chosen to send us) and, where a contract is entered into, on the basis of performance of that contract.

We do not use your enquiry data for marketing unless you separately opt in, and we never sell or share it with third parties for their own marketing purposes.

4. If You Become a Client: A Note on Database Access

If you engage us for consultancy work involving your school’s Raiser’s Edge database, the personal data held within that database (relating to your donors, alumni, parents, and prospects) is governed separately from this policy. In that context:

• Your school remains the data controller of that data.
• We act as a data processor, working strictly under a signed Data Processing Agreement (DPA) and your instructions.
• Full detail on how we handle data in that role is set out in our GDPR Policy, and the specific terms agreed in your DPA.

This website’s Privacy Policy does not extend to data we process on your school’s behalf within Raiser’s Edge — that remains subject to your school’s own privacy notice and data protection obligations to your donors, alumni, and community.

5. Who We Share Data With

We do not sell your data. We may share website enquiry data with:

• Email and website hosting providers, solely to operate our systems
• Professional advisers (e.g. accountant), where necessary
• Regulatory or legal authorities, if required by law

We do not share your enquiry data with other schools or third-party marketing services.

6. How Long We Keep Your Data

• Enquiry data: kept for as long as reasonably needed to respond to your enquiry and follow up, then deleted if no client relationship is formed (typically within 12 months).
• Client records: retained for the duration of the relationship plus a period required for legal, tax, or accounting purposes (currently up to 6 years).

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data, where applicable
• Object to or restrict certain processing
• Request data portability
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us using the details below. If you’re not satisfied with our response, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Security

We take reasonable technical and organisational steps to protect the personal data you share with us, including secure storage, restricted access, and confidentiality practices with anyone working on your enquiry or engagement.

9. Children’s Data

Our website is intended for school staff and decision-makers and is not directed at children. We do not knowingly collect personal data from children through this website.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Please check back periodically. The “last reviewed” date above reflects the most recent update.

11. Contact Us

If you have any questions about this policy or how we handle your data, contact:

info@redatadoctor.co.uk