Privacy Policy

This policy explains what personal data RaftWorks collects, why we collect it, how long we keep it, and how you can ask us to stop. It covers two things: data you give us through this website, and data we hold if we have emailed you.

Who we are

RaftWorks, formerly LowCodeFlow, is a product studio. We are the data controller for the data described below. Our registered company details and postal address are available on request by email while this page is being finalised.

Data you give us through this website

There are three places on this site where you can give us your details.

The build sheet planner

If you use the planner at /plan, we store your email address, the answers you select, how far through you got, and the sprint tier and score the planner works out for you. If you start and do not finish, we keep what you entered so we can follow up once.

Checklist downloads

If you download a checklist, we store your email address and which checklist you asked for.

Booking a call

Calls are booked through Calendly, which is embedded on some of our pages. Calendly collects your name, email and the time you pick, under its own privacy policy. We receive that booking.

How you found us

When you submit either form we also store the campaign tags in the page address (utm_source, utm_medium, utm_campaign, utm_content), the page you landed on, and the site that referred you. This tells us which of our campaigns is working. It is not used to build a profile of you.

What we do not collect

We do not ask for payment details on this site. Job applications are handled on an external site linked from our careers pages, so we do not collect anything for those here.

Why we are allowed to hold it

For everything you submit through the website, the basis is your consent. You typed your address into a form to get something back, and you can withdraw that at any time by emailing us.

Outbound email and LinkedIn

We sometimes contact people at businesses we believe we can help, by email or by a LinkedIn message. This is business to business contact only, sent to work addresses and professional profiles, never to personal accounts.

Where your details come from

Professional sources: LinkedIn, business contact databases such as Lemlist and Apollo, public registries such as the United States NPPES provider registry, and company websites.

What we store

Name, job title, company, work email address, LinkedIn profile address, the country you work in, and a record of what we sent you and whether you replied. This is held in our outreach tools, currently Lemlist and Smartlead, and in a suppression list of people who have asked us not to contact them.

Why we are allowed to

Our legitimate interest in telling businesses about a service that is relevant to them, balanced against your interest in not being bothered. We keep messages short and infrequent, we only write about work that matches your role, and we stop the moment you ask. In the United States we follow CAN-SPAM. In the UK and EU we rely on legitimate interest and, where it applies, the business to business rules under PECR.

How to opt out

Reply to any message with the word unsubscribe, or email connect@raftworks.co. We add you to the suppression list and do not contact you again. We action this within a few working days.

Who else touches your data

We use a small number of suppliers to run the site. They process data on our behalf and only for us.

• Supabase, the database where leads are stored, and file storage for site content.
• Resend, which sends the confirmation email to you and the alert to us.
• Calendly, which handles call bookings.
• Cloudflare, which hosts the site and provides privacy-first analytics that do not use cookies or track you across sites.

We do not sell your data, and we do not share it for anyone else's advertising.

How long we keep it

Website leads: up to 24 months after your last interaction with us, unless you become a client, in which case the client agreement applies. Outbound contacts: up to 12 months after our last message to you, then deleted. The suppression list is kept for as long as we run outreach, so that we do not contact you again by mistake.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. You can also object to us holding it at all. Email us and we will action it. If you are in the UK or EU and you are not happy with how we respond, you can complain to your data protection regulator.

Cookies

This site does not set advertising or tracking cookies. Our analytics are cookieless. Calendly may set its own cookies when you interact with the booking widget, under its own policy.

Changes to this policy

If we change this policy we will update the date at the top of this page.

Contact

Email connect@raftworks.co for anything in this policy, including deletion requests.