Privacy

Privacy.

Deventral Ltd ("Rate My Ratings", "we") is the data controller for personal data collected through this website. This notice sets out what we collect, why, how long we keep it, and the rights you have under UK GDPR.

Who we are

Deventral Ltd, a company registered in England and Wales with company number 14461518. Registered office: Office 408, Screenworks 22 Highbury Grove, London, United Kingdom, N5 2ER. Contact email: privacy@ratemyratings.com.

Website visitors

Google Analytics counts visits and tells us which pages get read. It sets the two cookies listed below. Google Ireland Limited runs it as our processor, and the data is processed outside the UK, including in the United States.

Crisp is the live-chat widget in the corner of every page, operated on our behalf by Crisp IM SAS, a French company. It stores a session identifier on your device, in a cookie and in local storage, so that a conversation you start follows you from page to page and is still there if you come back. Crisp holds your IP address against that session. If you never open the chat and send a message, Crisp discards the session and the IP address 30 minutes after your last page view.

If you do send a message, we receive it along with whatever you choose to put in it — usually a name and an email address, so we can reply. Transcripts are kept for 24 months from your last message. If you would rather not use the chat, info@ratemyratings.com reaches the same people.

Cookies and storage

Two services store something on your device: Google Analytics and Crisp. Nothing else does. There is no advertising cookie, no other analytics cookie, no session storage and no IndexedDB entry.

Neither runs until you allow it. We ask when you first arrive, and you can change your answer at any time.

The two-year and six-month figures are Google's and Crisp's own published defaults. Our code does not shorten or extend either one. Crisp's six months restarts each time you come back.

You choose which of these to allow when you first visit, and you can change your mind whenever you like:

Turning a category off deletes what it has already stored. You can also refuse them in your browser's privacy settings for this site. Google publishes a browser add-on that turns Google Analytics off across every site you visit.

Report requests

When you submit the report-request form, we collect the four fields you provide (full name, email, location, category), the timestamp of submission, your IP address, and your browser's user-agent string. The IP address and user-agent are used solely to detect spam; they are deleted automatically after 30 days.

The four fields you provide are stored in our triage system and used to reply to your request. If you ask us to delete the row, we do, immediately.

Customers

If you commission a report, we hold your name, email, business name, postcode, the market(s) purchased, and the Stripe payment record (which we receive from Stripe and which contains no card data). We never see or store full card numbers.

Invoices are kept for six years to satisfy UK tax law. Other customer data is kept for two years from the date of last contact.

Businesses appearing in reports

Reports analyse public reviews of businesses. The data we collect — business name, address, category, public reviews — is sourced exclusively from public surfaces (Google Maps). Reviewer display names are kept as part of the review attribution; reviewer email addresses, phone numbers, and any other contact data are not collected.

If you are a business and you'd like to know what we hold about your business, or you would like us to delete it, email privacy@ratemyratings.com. We respond within 30 days.

Lawful basis

Under UK GDPR, each thing we do with personal data needs a basis.

ProcessingLawful basis
Replying to a report requestLegitimate interest (B2B follow-up)
Replying to a live-chat messageLegitimate interest (B2B follow-up)
Measuring website traffic (Google Analytics)Legitimate interest (understanding how the site is used)
Keeping a chat session available across pagesLegitimate interest (making the chat usable)
Processing payment for a reportPerformance of a contract
Tax records (invoices)Legal obligation (UK tax law)
Outreach email to prospective customersLegitimate interest (B2B), with one-click unsubscribe
Spam-detection on form submissionsLegitimate interest (security)

Retention

  • Form submissions (the four content fields): 24 months from last contact.
  • IP address and user-agent attached to a form submission: 30 days.
  • Live-chat transcripts: 24 months from your last message.
  • Chat session where you never sent a message: 30 minutes from your last page view.
  • Cookies and local storage on your device: as set out in the table above.
  • Customer records and invoices: six years (tax law).
  • Review data collected for a report: indefinite — needed to answer questions about a delivered report.
  • Outreach suppression list: indefinite (so we don't email you again after you've asked us not to).

Your rights

You have the right to access the personal data we hold about you, to correct it, to ask us to delete it, to object to its processing, and to receive a portable copy. To exercise any of these rights, email privacy@ratemyratings.com with the subject line "Data subject request". We respond within 30 days at no cost.

It helps if you tell us which of the things in this notice you mean — a chat conversation, a report request, a customer record, or a business that appears in a report — but we will look across all of them either way. Anything held on your own device is in your hands rather than ours: see cookies and storage.

Contact

For any privacy question, or to make a data subject request, email privacy@ratemyratings.com. That address reaches Deventral Ltd, company number 14461518, at Office 408, Screenworks 22 Highbury Grove, London, N5 2ER.