Raise Ready

Privacy notice

Last updated 8 October 2026.

This notice explains how Ham Agency Ltd uses personal data collected through raisereadygroup.com, and what you can do about it. Raise Ready is part of HAM Agency. HAM's own site has its own notice at ham.agency/privacy, and the two follow the same rules.

01

Who we are

Ham Agency Ltd ("HAM", "we", "us") is the controller of the personal data described here.

  • Registered in England and Wales, company number 11265213.
  • Registered office: 510 The Chocolate Factory, 5 Clarendon Road, London N22 6XJ.
  • Contact for anything in this notice: theteam@raisereadygroup.com, or post to the registered office marked for the attention of the director.

We are a small business and are not required to appoint a data protection officer. Steph Hamill, our director, is responsible for how we handle personal data.

02

What we collect

We collect only what we need for the thing you asked for.

Where What we collect
Waitlist form Your name and email address.
The form itself Your IP address, sent to HubSpot with the form so it can filter out spam.
Booking a call Your name, email address, the time you book and any notes you add.
Newsletter box Your email address, passed to Substack only if you tick the box.
Emailing us Your correspondence with us.
Site analytics Pages viewed, where you came from, browser, device type and country, counted in aggregate.
Google Analytics, only if you say yes to it Pages viewed, how far you scrolled, links you clicked, where you came from, browser, device type and approximate location, tied to a cookie identifier.
Hosting Our hosting provider keeps technical logs, including IP addresses, for a short period to keep the site secure and working.

Please do not send us health information or other sensitive personal data through the site. Our form does not ask for it.

03

Why we use it, and our lawful basis

What we do Lawful basis
Tell you when the next Raise Ready weekend has a date Consent: you asked us to by joining the waitlist, and you can withdraw it at any time
Reply to your email, run a call you booked and prepare a proposal Taking steps at your request before a contract, and legitimate interests
Subscribe you to Steph Sense Consent: the box you ticked
Count visits with Google Analytics Consent: the Yes you gave when the site asked, which you can withdraw at any time
Keep business, tax and accounting records Legal obligation
Keep the site secure and understand which pages are useful Legitimate interests
Establish or defend legal claims Legitimate interests

We never add you to the Steph Sense newsletter unless you tick the box. The box is always unticked to start with.

Nothing on this site is scored or decided automatically. A person reads what you send.

04

Cookies and analytics

We do not use cookies for advertising. Our everyday counting tool, Vercel Web Analytics, does not use cookies and does not identify individual visitors. It counts visits in aggregate.

The law lets us count visits this way without asking first, as long as we tell you and give you a simple, free way to object. We treat your browser's Global Privacy Control setting as an objection, and the switch below stops your visits being counted on this device. The switch stores one small setting in your browser, only to remember your choice.

Your visits are counted in the totals, without cookies.

Google Analytics is separate and runs only if you click Yes when the site asks. Until then it sets nothing and sends nothing to Google. If you say yes, it sets cookies in your browser (their names start with _ga and they last up to two years) and tells Google which pages you viewed, how far you scrolled, which links you clicked, where you came from, your browser, your device type and your approximate location. We do not use it for advertising and have switched its advertising features off. It also records that a waitlist form was sent or an email link was clicked, never what you wrote. Our lawful basis is your consent. To withdraw it, use the Cookies link at the foot of any page and choose No: Google Analytics stops on this browser and its cookies are deleted. If your browser sends Global Privacy Control we treat that as a No and do not ask.

When you book a call, you use our booking provider's own pages, and its own cookie notice applies there.

If we ever add a tool that stores information on your device, or that counts visits, we will update this notice first and ask for your consent where the law requires it.

05

Who we share it with

We never sell personal data. We share it only with providers who process it on our behalf under written data processing terms, and only for the purposes in this notice.

Provider What they do for us Where the data may be processed
Vercel Inc. Hosts the site and runs our cookieless analytics USA and Vercel's global network
HubSpot, Inc. Our CRM: stores the Raise Ready waitlist and sends the email when a date is set EU or USA
Google LLC (Google Analytics) Counts visits, only if you said yes to its cookies USA and other countries where Google operates
Google (Google Workspace) Our email, calendar and documents UK, EU and USA
Google LLC (Google Calendar appointment booking) Our booking page for calls USA
Substack Inc. Sends the Steph Sense newsletter if you opted in USA

Steph Sense is published by Steph Hamill on Substack. Once you are subscribed, Substack also holds your subscription under its own privacy policy, and you can unsubscribe from any issue.

We may also share personal data with our professional advisers (such as accountants and lawyers) under a duty of confidence, and with authorities where the law requires it. If HAM is ever sold or restructured, personal data may pass to the new owner, who must use it in line with this notice.

06

Transfers outside the UK

Some of our providers process data in the USA or elsewhere outside the UK. Where they do, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, where the provider is certified under it), or on the ICO's International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. Ask us if you would like details of the safeguard for a particular provider.

07

How long we keep it

Data How long
Raise Ready waitlist Until we have told you the next weekend has a date, or until you ask us to remove you, and no longer than 24 months
Enquiries and booked calls that do not become work 24 months from your last contact with us, then deleted
Client records For the engagement and 6 years after it ends, for tax and legal reasons
Newsletter subscription Until you unsubscribe
Google Analytics Visit records tied to a cookie identifier for 2 months, the identifier itself for up to 14 months, and totals that identify no one for longer
Unsubscribe list Your email address only, kept so we do not contact you again
08

Your rights

You have the right to:

  • ask for a copy of the personal data we hold about you
  • ask us to correct it if it is wrong or incomplete
  • ask us to delete it
  • ask us to restrict how we use it
  • object to how we use it, and in particular object to direct marketing at any time, which we will always respect
  • ask for data you gave us in a portable format
  • withdraw your consent at any time, where we rely on consent.

To use any of these rights, email theteam@raisereadygroup.com. There is normally no charge. We will reply within one month. For complex requests we may extend that by up to two further months and will tell you why. We may need to confirm your identity first.

09

Complaints

If you are unhappy with how we have handled your personal data, please tell us first at theteam@raisereadygroup.com. We will acknowledge your complaint within 30 days and reply in full as quickly as we can.

You also have the right to complain to the Information Commissioner's Office, the UK regulator:

  • Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
  • Telephone 0303 123 1113
  • Online at ico.org.uk/make-a-complaint
10

Keeping it secure

Access to personal data is limited to the people at HAM who need it for the purposes above. Our systems are protected by passwords and two-factor sign-in, and our providers are bound by written security and confidentiality terms.

11

Children

This site is for businesses and the people who run them. It is not aimed at anyone under 18, and we do not knowingly collect their personal data.

12

Changes to this notice

We will update this notice when how we use personal data changes. The date at the top shows when it last changed.

Hear it from us first.

No date yet for the next weekend. One email when there is one.

Join the waitlist Ask about one to one