Home Privacy Policy

Last updated: 14 October 2026

Privacy Policy

Raisin UK Privacy Policy - Downloadable [PDF]

Who we are
Introduction
Contact us
Our principles
Customer information about data processing in accordance with UK GDPR
Which data is processed by us and the sources of data
Who we share your personal data with
For what purpose and on what legal basis do we process the personal data?
Your data protection rights and complaints
How we use cookies and tracking technology
International transfers
Information security
Data retention
Changes to Privacy Policy and your duty to inform us of changes

1. Who we are

Raisin UK is a trading name of Raisin Platforms Limited (registered no 11075085), whose registered office is at Cobden House, 12-16 Mosley Street, Manchester, M2 3AQ. Raisin Platforms Limited is authorised and regulated by the Financial Conduct Authority (FRNs 813894 and 978619) and is the entity responsible for the registration and management of customer data on the Raisin UK Platform. Where applicable, for certain savings products, Raisin UK may also act as your trustee in accordance with the Raisin Trust Terms and Conditions. You can determine whether a deposit is held under the Raisin Trust by reviewing the product description.

Raisin UK is the entity through which Raisin UK’s platform services operate. Raisin UK is the data controller of the personal data described in this Privacy Policy. In some cases, we may process personal data on behalf of another organisation, for example when we carry out certain activities for the provider of your Transaction Account. For that processing, that organisation is the data controller and its own privacy notice explains how it processes your personal data. Raisin UK is also registered as a data controller with the Information Commissioner’s Office under reference: ZA299777.

2. Introduction

Raisin UK provides information on its website, www.raisin.com/en-gb (“our website”) and via our app about deposits and savings products of selected partner banks. In addition, our customers can access the Online Banking System of our service bank.

This Privacy Notice explains how we collect, receive and process your personal data when you visit our website/app, utilise our services (e.g. customer account or Raisin Trust) or interact with our marketing and advertising campaigns, and outlines your rights in relation to how we process your personal data.

This website/app may include links to third-party websites, plugins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website/app, we encourage you to read the privacy policy of each website that you visit. This Privacy Notice only applies to Raisin UK and does not extend to other third-party websites accessed from this website/app.

When you visit our website/app you trust us with your information. By helping you understand our privacy practices, we want to show that we are committed to keeping that trust. This Privacy Policy (together with our Raisin UK Terms & Conditions and any other documents referred to in it and, where applicable, the Raisin Trust Terms and Conditions), describes how we collect and use your personal data in accordance with the Data Protection Legislation which is defined below.

It is important that you read this Privacy Policy in conjunction with any privacy notice which we may provide on specific occasions so that you are aware of how we are collecting and processing information about you and why we are using such information.

3. Contact us

If you have any questions about this privacy policy or our privacy practices, please contact us at:

Raisin Platforms Limited

Cobden House

12-16 Mosley Street

Manchester

M2 3AQ

Email: help@raisin.com

Alternatively, for all questions in relation to data protection in connection with our products/services or the use of our website, you can also contact our Data Protection Officer at any time in the following ways:

Email: dpo-uk@raisin.com

Post:

Data Protection Officer

Raisin UK

Cobden House

12-16 Mosley Street

Manchester

M2 3AQ

Please note that if you use this e-mail address, your communication will not be exclusively accessed by our data protection officer. If you wish to exchange confidential information, please therefore first contact us directly via the e-mail address provided above.

4. Our principles

The protection of your privacy is very important to us
We treat your data responsibly and only process it for specified purposes
We are aware of the sensitivity of the data you have entrusted to us
We do not process any personal data without a legal basis
We will never pass on your data to third parties unless there is a lawful basis to do so
We use state of the art measures to prevent any misuse of your data
We follow the principle of data minimisation

5. Customer information about data processing in accordance with the UK GDPR

All personal data that you submit to us will be held in accordance with our responsibilities in compliance with the Data Protection Legislation; defined as, for the periods in which they are in force, the UK General Data Protection Regulation and all laws giving effect or purporting to give effect to the UK GDPR (such as the Data Protection Act 2018) or any equivalent legislation amending or replacing the UK GDPR.

We will collect and process the information provided by you when you do any of the following (not an exhaustive list):

complete forms on our website/app including registrations for a customer account and applications for any of our savings products or any other services;
visit our website/app including but not limited to traffic data, location data, web logs and other communication data, whether it is required for our own purposes or otherwise, as well as the resources that you access by using our website/app;
provide information to help us investigate your report of any problem with our website/app;
you request our assistance to help you navigate around our website/app;
provide information upon request so we can respond to your correspondence; and,
provide instructions for any transfer to and from your savings products or accounts, including a transfer of an ISA or other account to or from another provider.

We will also process your personal data where we obtain information from you or third parties, such as fraud prevention agencies, credit reference agencies, official authorities (including tax authorities), distribution partners, third party service providers, ISA managers, or other organisations, when you register for an account with us, transfer funds, apply for any of our savings products, or use our other services.

6. Which data is processed by us and the sources of data

Personal data includes any information about you from which you can be identified, either directly or indirectly. We collect and process personal data when you provide it to us (such as during your application), when you interact with our website/app and services, and from third-party partners and service providers. We have categorised the personal data about you, as follows:

Identity data - includes name, username, similar identifier, marital status, title, gender, date and place of birth, nationality, tax residency, UK residency status, tax identification numbers (such as your National Insurance number) and copies of identity documents and the results of identity verification and screening checks.
Contact data - includes address, postcode, email address and telephone numbers;
Financial data - includes bank account information, your annual income and information about the source of your funds or wealth;
Transaction data - includes details about payments to and from you, transaction dates, and details of other products and services that you have entered into via the website/app and, for tax-advantaged accounts such as ISAs, details of your subscriptions, the allowance you have used and transfers to or from other providers (including the information in ISA transfer forms);
Device and Technical data - includes IP address, login data, browser type and version, time zone setting and location, browser plug in types and versions, operating system and platform, device and browser identifiers, session identifiers, advertising ID, referral and campaign information and other technology used to access our website and systems;
Profile data - includes your username and password, preferences, products and feedback and survey responses;
Usage data - includes information about how you use our website/app, products and services, including page views, sessions, interactions with our website/app and, where relevant, conversion events such as starting or completing an application;
Communications data - includes emails, letters, secure messages, chat and customer service records, complaints and telephone calls where calls are recorded;
Marketing data – includes your preferences in receiving marketing from us and any third parties and your communication preferences; and
Special categories of personal data and criminal offence data– including information about your health or personal circumstances that you share with us (for example, if you tell us you need extra support), and information revealed by financial crime checks.

We also collect, use and share Aggregated data such as statistical or demographic data for any purpose. This could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. However, if we combine or connect Aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

The customer relationship begins with the initiation of a contract and includes the completion of the contract. You will need to provide us with your personal data if you want to enter into a customer relationship with Raisin UK. We also process personal data which is lawfully obtained from publicly available sources.

The principal purposes of collecting personal data from you through our website/app are to provide information or services requested by you, administer our relationship with you and so we can comply with our legal obligations. When you complete our online forms, we ask for your personal details and other selected information so that we can deal with your request as efficiently and effectively as possible. If you decide not to provide us with the personal data that we request from you then we may not be able to perform the contract we have or are trying to enter with you. In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.

If you give us personal data about someone else, for example, documents relating to a partner or family member to show the source of your funds, please tell them you are doing so and refer them to this Privacy Policy.

We will never sell, trade, or rent your personal data to others, however, we may share your personal data with selected third parties as set out in this Privacy Policy.

We may disclose your information to any member of our group, which means that we may disclose your information to our ultimate holding company and its subsidiaries.

We partner with a number of groups, suppliers and subcontractors in order to provide savings products and to manage your Raisin UK Account and we are under a duty to disclose or share your information in order to comply with any legal or regulatory obligation. In some cases, they may process personal data, for example, to provide an identity verification check.

We require all third-party service providers to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third party service providers acting as data processors to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. In some circumstances an organisation with which we share personal data may act as an independent controller for its own processing, in which case it is responsible for that processing in accordance with applicable data protection law and its own privacy policies. In particular, we use the services of TransUnion to conduct various searches and checks on our customers and your data will, during the course of our relationship with you, be shared with or obtained from TransUnion. Please refer to their privacy notice which can be found here https://www.transunion.co.uk/legal-information/bureau-privacy-notice. More information about TransUnion’s activities are available at that location.

7. Who we share your personal data with

(a) Selected employees, consultants, and professional advisors, when your data is necessary for the management of the Raisin Trust;

(b) Group companies and subsidiaries of Raisin SE;

(d) provider(s) of the Raisin Trust Bank Account;

(e) Partner Banks;

(f) other ISA managers and account providers, where you request a transfer to or from them;

(g) Payment system operators and other third parties, where necessary to carry out transfers you request;

(h) Distribution Partners;

(i) Credit reference agencies and fraud prevention agencies;

(j) Deposit administrators;

(k) Compliance service providers;

(l) Regulators and other public bodies and law enforcement agencies; ;

(m) HM Revenue & Customs (HMRC);

(n) Customer service providers;

(o) Information technology, communications and cloud computing providers;

(p) Contractors who provide a service to us or are acting as our agents, on the understanding that they will keep the personal data confidential and secure;

(q) Newsletter providers;

(r) Survey providers;

(s) Prize draw, competition providers;

(t) Advertising, marketing and media partners; and

(u) Other third parties where we are under a legal obligation to do so, for example where we are required to share information under statute or because of a Court Order.

8. For what purposes and on what legal basis do we process the personal data?

To register you as a new customer - processing is necessary to perform a contract we have entered with you and/or for taking steps to comply with a request made by an individual with a view to entering into a contract (Article 6(1)(b) of the UK GDPR) Type of data: Identity, Contact. Lawful basis: performance of a contract with you.
To process and deliver a service - we process your personal data when you provide us with pre-contractual information at the point of registering with us and when you apply for or use any of our products or services. This allows us to carry out our obligations to provide services to you under the platform contract and also so we can carry out other relevant required activities, such as opening and administering your accounts and savings products and processing transfers you request to or from other providers. If it is necessary to enable us to perform our contract with you, we may share your personal data with our business partners, suppliers, sub-contractors and with other providers where you request a transfer to or from them. Type of data: Identity, Contact, Financial, Transaction. Lawful basis: performance of a contract with you.
To manage our relationship with you - we may process personal data for the purpose of fulfilling various legal obligations such as carrying out our obligations in respect of the provision of your savings products and the provision of our online services, meeting tax reporting requirements, along with verification of your identity including anti-money laundering checks and the use of your personal data for crime and fraud prevention purposes. We also use your personal data to handle complaints and disputes, and we may record and monitor telephone calls and other communications for training and quality purposes. Where we act as your Trustee for certain savings products, we also process personal data to fulfil our responsibilities and obligations associated with our role as trustee. For further information please see the Raisin Trust Terms and Conditions. Type of data: Identity, Contact, Financial, Transaction, Marketing & Communications. Lawful basis: performance of a contract with you; necessary to comply with a legal obligation; necessary for our legitimate interests (to keep our records updated, to study how customers use our products/services, to handle complaints and maintain the quality of our services, and to enable the provider of your Transaction Account and/or the ISA manager of any ISA you hold through our platform to meet their legal and regulatory obligations).
Where you have consented to the processing of your personal data for one or more specific purposes (Article 6(1)(a) of the UK GDPR). Lawful basis: Consent
To enable you to partake in a prize draw, competition or to complete a survey or to send you postal communications where we believe that the relevant campaign or marketing activity is of legitimate interest to you - Type of data Identity, Contact, Profile, Usage, Marketing & Communications. Lawful basis: Performance of a contract with you; Necessary for our legitimate interests (to study how customers use our products/services, to develop them to grow our business); Consent. In addition, where you provide specific and informed ‘opt-in’ consent we will process your personal data for some marketing purposes so you can receive appropriate email communications from us. You may withdraw your consent at any time upon notification to us. There is no requirement upon you to communicate withdrawal of consent in any particular form, i.e. you could make the notification by email or by letter. Where you opt out of receiving marketing communications this will not apply to personal data provided to us as a result of a product or service.
To deliver relevant website/app content and advertisements to you and measure or understand the effectiveness of advertising. We may process personal data to plan, deliver, optimise and measure our advertising and marketing activities, including through cookies, pixels, tags and similar technologies. This may involve analysis of personal data to understand or infer advertising exposure, website/app interactions and audience characteristics, including at a device or household level. Types of data: Identity, Contact, Profile, Usage, Marketing, Communications, Technical. Lawful basis: Consent (where tracking cookies, pixels or other technologies are used, which you can manage or withdraw at any time via our Cookie Banner); necessary for our legitimate interests to evaluate campaign performance, define types of customers, to keep our website/app updated and relevant, to develop and build our business and to inform our marketing strategy.
To use data analytics to improve our website/app, products/services, marketing, customer relationships and experiences - we may process your personal data to ensure content from our website/app is presented in the most effective manner for you and your device, to understand how our website/app and services are used and yo develop and improve your services. Type of data: Technical, Usage. Lawful basis: Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website/app updated and relevant, to develop our business to inform our marketing strategy).
Special category and criminal offence data - We may also process special category data (for example, information about your health if you tell us you need extra support, or information revealing political opinions where you are identified as a politically exposed person) and information about criminal offences. Lawful basis: performance of a contract with you; necessary to comply with a legal obligation; necessary for our legitimate interests (to prevent fraud and financial crime and to give appropriate support to customers who need it).

We will only use your personal data for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

9. Your data protection rights and complaints

If you have a complaint about how we have processed your personal data, please contact us by email at dpo-uk@raisin.com. We will acknowledge your complaint within 30 days of receiving it and will take steps to investigate it and inform you of the complaint outcome without undue delay.

In the UK, the relevant Data Protection Supervisory Authority is the Information Commissioner’s Office (ICO). If our response does not resolve your concerns, you can complain to the ICO. You can find details about how to do this by visiting the ICO website www.ico.org.uk or by telephoning 0303 123 1113. Please note you can go directly to the ICO without making a complaint to us first, although they may direct you to attempt to resolve the matter with us as an initial step.

Right of access: You can request a copy of the personal data that we hold about you and further information about how we process your personal data. This is commonly known as a ‘Data Subject Access Request’.
Right to rectification: If your information is no longer correct you have the right to request that we rectify it. We take reasonable steps to keep your information accurate, complete and current. Please remember that it is your responsibility to tell us about any updates to your information. We may need to verify the accuracy of the new data that you provide to us. You may also edit your details at any time by logging into your Raisin UK Account or by contacting our Customer Services team.
Right to erasure: In certain circumstances, you have the right to ask us to delete your personal data, for example; if your personal data is no longer necessary for the purpose(s) it was collected for. There are legitimate reasons that we must retain some of your personal data after you have requested its deletion, including compliance with legal or regulatory obligations to which we are subject, or for the establishment, exercise or defence of legal claims. We will notify you of any decision to retain or erase your personal data.
Right to restrict processing: You can request that we restrict our processing of your personal data in specific circumstances. Where a restriction is in place, we can continue to store your information, but we will only process it with your consent, for the establishment, exercise or defence of legal claims, to protect the rights of another individual or legal entity or for important public interest reasons. We will inform you prior to the lifting of any restriction.
Right to object: You can request that we stop processing your personal data where the purpose(s) is based on a ‘legitimate interest’ and/or the ‘public interest’. We can continue to process your personal data for the establishment, exercise or defence of legal claims if there are compelling legitimate grounds which override your interests, rights or freedoms.
Right to data portability: You have the right to request that we provide your personal data to you in a portable format and also upon request to transmit your personal data to another data controller. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Right to complain: If you believe we are processing your personal data in breach of UK data protection law you have the right to complain to the ICO.
Right to withdraw your consent: Where we rely on your consent to process your personal data (such as for advertising tracking cookies), you have the right to withdraw that consent at any time. You can manage your preferences at any time via our Cookie Banner.
Rights related to automated decision making: Raisin UK does not make decisions about you based solely on automated processing which produce legal or similarly significant effects.
Right to object to direct marketing. You can object at any time to our use of your personal data for direct marketing. You can do this by clicking “unsubscribe” in any marketing email, or by contacting us.

10. How we use cookies and tracking technology

When you visit our website/app, use our services or access our website/app through certain intermediary partners (e.g. affiliates, publishers, distributors) we and our partners may use cookies and other tracking technologies (collectively, “Cookies”) to recognise you, collect statistics, customise your online experiences, provide other online content and advertising, in order to measure the effectiveness of promotions, advertising campaigns and perform analytics.

We may collect information about your computer for system administration, including where available your IP address, operating system and browser type.

You can set your browser to refuse all or some browser Cookies or to alert you when websites set or access Cookies. If you disable or refuse Cookies, please note that some parts of websites may become inaccessible or not function properly.

For more information on how we use cookies, please visit our Cookie policy page.

11. International Transfers

We may share your personal data within the Raisin Group or external third parties. This may involve transferring your data outside of the UK.

Whenever we transfer your data out of the UK, we ensure at least an equal degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data;
Where we use certain service providers, we may use specific contracts approved for use in the UK which give personal data the same protection as it has in the UK

Where this is not possible, we base the data transfer on exceptions under Art. 49 UK GDPR, in particular your specific consent or the necessity of the transfer for the fulfilment of the contract or for the implementation of pre-contractual measures.

If a transfer to a third country is planned and there is no adequacy decision or suitable guarantees, it is possible and there is a risk that authorities in the respective third country (e.g. intelligence agencies) may gain access to the transferred data in order to collect and analyse it, and that the enforceability of your data subject rights cannot be guaranteed. If your specific consent is obtained, you will also be informed of this.

12. Information security

As part of our obligation to protect your personal data we have put in place appropriate technical and organisational measures to protect your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These measures include pseudonymisation, encryption, firewalls and access controls. Our security measures are regularly reviewed and updated to comply with technological developments.

13. Data retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including the purpose of satisfying any legal, regulatory, tax, accounting or reporting requirements and dealing with any complaints or legal claims.

To decide how long we keep personal data, we consider the type of data and why we hold it, our legal and regulatory obligations and the time limits for bringing complaints and legal claims. In most cases, this means we keep your personal data for six years after the end of our relationship with you, although some data is kept for a shorter period. We may keep your personal data for longer in the event of a complaint, if we reasonably believe there is a prospect of litigation in respect of our relationship with you, or where the law or a regulator requires us to.

Where we no longer need your personal data, we will either delete or anonymise it. Where we anonymise your personal data (so that it can no longer be associated with you) for research and statistical purposes, we may use this information indefinitely without further notice to you.

14. Changes to this Privacy Policy and your duty to inform us of changes

We keep this Privacy Policy under review and may update it from time to time. We encourage you to review this Privacy Policy periodically so that you remain informed of how we use your personal data. If we make any material or significant changes to this Privacy Policy or how we handle your data, we will notify you directly (for example, by using the email address you have given us).

Your duty to inform us of changes. It is important that the personal data we hold about you is accurate and up to date. Please tell us promptly if your personal details change – for example your name, address, contact details, nationality or tax residency – and in particular if you stop being resident in the UK, as this may affect the products you can hold.

Version 4 / Last review: 14.10.2026