Privacy notice

Who we are

Riselabs Ltd helps organisations understand and act on the data they already hold. We're registered in England; our registered office is C/o Realise Finance Ltd, Brightfield Business Hub, Bakewell Road, Orton Southgate, Peterborough PE2 6XU. We're registered with the Information Commissioner's Office as a data controller, registration number ZC210335. For anything in this notice, contact Jackson Howell at jackson@riselabs.co.uk.

This notice covers three situations: you visit our site or get in touch, you're a client (or work for one), or we've handled your details as part of work for a client.

If you visit our website or contact us

We keep what you send us (your name, email, message) so we can reply and, if you become a client, run the relationship. We use standard business tools to do this (email, our CRM). We don't sell your details, and we don't send marketing you haven't shown interest in; every marketing email has an unsubscribe that works immediately.

If you're a client, or work for one

We hold the business contact details, correspondence and records needed to deliver the work and keep proper accounts. Contracts and invoices are kept for six years because the law expects that; the rest goes when the relationship no longer needs it.

If we've handled your details as part of work for a client

Our work often involves cleaning and improving the records our clients already hold about their own members, customers or contacts. In that situation your relationship is with them: they decide why your data is processed, and their privacy notice applies. We work under a written contract with them and only follow their instructions, unless the law requires otherwise. We keep what we need for as long as the work or the relationship lasts, and delete it when the client no longer needs our service; for one-off work, we delete our working copies 30 days after the work ends, and the client knows that from the start. After that, we keep only what the law or our records require. If a client's records include sensitive information, such as health details, criminal records or children's data, we only work with it under separate written terms agreed with them first. If you send us a request about that data, we'll pass it to the organisation concerned within two working days.

If we've researched your details

Sometimes a client asks us to find business contacts relevant to what they do, and we compile professional details from business data providers and publicly available professional sources. When we do this, we are a controller for that research, and this section is addressed to you.

What we collect is strictly professional: your name, role, organisation and business contact details. We never search public sources for sensitive information about you, such as health details or criminal records, or add it to what we find, and we don't build profiles of your private life. Our legal basis is legitimate interests: connecting organisations with the people their work is genuinely relevant to. We pass what we find to the client who asked. We keep our own copy while we're working with that client and delete it when they no longer need our service; for one-off work, we delete it 30 days after the work ends. After that, we keep only what the law or our records require. The client is then responsible for how they use it, including any contact they make with you.

If you'd rather we never included you in this kind of research, email jackson@riselabs.co.uk and we'll remove you from our working data and tell the client we've done so.

Where your data goes

We work on our own encrypted equipment, and on servers we control (hosted by DigitalOcean) when the work includes hosted software. Some of the specialist providers we use for data enrichment and AI-assisted analysis are US companies that process data in the United States (currently Clay, Apollo and Anthropic). Transfers to them are covered by UK-approved safeguards (the UK Addendum to the EU Standard Contractual Clauses), and our AI providers are contractually barred from training their models on the data we process. If required, sensitive details are anonymised by script on our own equipment before any AI or outside system sees them; that is agreed with the client at the outset.

Your rights

You can ask us what we hold about you, ask for it to be corrected or deleted, object to our processing, or ask for a copy. Email jackson@riselabs.co.uk and you'll have an answer within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to sort it out first.

Changes

When how we work changes, this notice changes with it; the date at the top tells you when that last happened.