Privacy

Privacy.

Deventral Ltd ("Rate My Ratings", "we") is the data controller for personal data collected through this website. This notice sets out what we collect, why, how long we keep it, and the rights you have under UK GDPR.

Who we are

Deventral Ltd, a company registered in England and Wales with company number 14461518. Registered office: Office 408, Screenworks 22 Highbury Grove, London, United Kingdom, N5 2ER. Contact email: privacy@ratemyratings.com.

Website visitors

Google Analytics counts visits and tells us which pages get read. It sets the two cookies listed below. Google Ireland Limited runs it as our processor, and the data is processed outside the UK, including in the United States.

Guide, our chat assistant. Guide is an AI that answers questions on our website. If you send it a message, we keep the conversation, the page you sent it from and, if you give it, your email address, so our team can reply. Your messages are processed by our AI model provider to write Guide’s answers. We keep conversations until we delete them, and you can ask us to delete yours at any time. We store nothing about visitors who don’t send a message.

If you would rather not use Guide, info@ratemyratings.com reaches the same people.

Cookies and storage

Two things store something on your device: Google Analytics and Guide. Nothing else does. There is no advertising cookie, no other analytics cookie, no session storage and no IndexedDB entry.

Google Analytics sets no cookies until you allow it. We ask when you first arrive, and you can change your answer at any time. Guide sets no cookies, so it needs no consent setting: it only keeps a random chat ID, created when you open it.

The two-year figure is Google's own published default. Our code does not shorten or extend it.

You choose which of these to allow when you first visit, and you can change your mind whenever you like:

Turning a category off deletes what it has already stored. You can also refuse them in your browser's privacy settings for this site. Google publishes a browser add-on that turns Google Analytics off across every site you visit.

Report requests

When you submit the report-request form, we collect the four fields you provide (full name, email, location, category), the timestamp of submission, your IP address, and your browser's user-agent string. The IP address and user-agent are used solely to detect spam; they are deleted automatically after 30 days.

The four fields you provide are stored in our triage system and used to reply to your request. If you ask us to delete the row, we do, immediately.

Newsletter

When you sign up to the newsletter on the blog, we collect your email address and where the signup came from: the page and article the form was on, the site that sent you to that page, and any campaign tags in the page's address. We also keep the wording you agreed to and when you confirmed. Signing up sets no cookie.

We use these details to send you the newsletter and to see which articles bring people to it. Nothing is sent until you click the confirmation link we email you.

Resend sends the newsletter on our behalf. Resend, Inc. is a US company acting as our processor, so your email address may be processed outside the UK, including in the United States.

Every issue has a link to unsubscribe, and you can also email privacy@ratemyratings.com. When you unsubscribe, we keep your email address marked as unsubscribed, so it is never sent the newsletter again.

Customers

If you commission a report, we hold your name, email, business name, postcode, the market(s) purchased, and the Stripe payment record (which we receive from Stripe and which contains no card data). We never see or store full card numbers.

Invoices are kept for six years to satisfy UK tax law. Other customer data is kept for two years from the date of last contact.

Businesses appearing in reports

Reports analyse public reviews of businesses. The data we collect — business name, address, category, public reviews — is sourced exclusively from public surfaces (Google Maps). Reviewer display names are kept as part of the review attribution; reviewer email addresses, phone numbers, and any other contact data are not collected.

If you are a business and you'd like to know what we hold about your business, or you would like us to delete it, email privacy@ratemyratings.com. We respond within 30 days.

Lawful basis

Under UK GDPR, each thing we do with personal data needs a basis.

ProcessingLawful basis
Replying to a report requestLegitimate interest (B2B follow-up)
Sending the newsletterConsent, given when you confirm your address. You can withdraw it at any time by unsubscribing.
Answering and replying to a message sent to GuideLegitimate interest (B2B follow-up)
Measuring website traffic (Google Analytics)Legitimate interest (understanding how the site is used)
Processing payment for a reportPerformance of a contract
Tax records (invoices)Legal obligation (UK tax law)
Outreach email to prospective customersLegitimate interest (B2B), with one-click unsubscribe
Spam-detection on form submissionsLegitimate interest (security)

Retention

  • Form submissions (the four content fields): 24 months from last contact.
  • IP address and user-agent attached to a form submission: 30 days.
  • Newsletter subscription: while you are subscribed. After you unsubscribe, the email address is kept, marked as unsubscribed, so we never send you the newsletter again.
  • Guide conversations: until we delete them. You can ask us to delete yours at any time.
  • Cookies and local storage on your device: as set out in the table above.
  • Customer records and invoices: six years (tax law).
  • Review data collected for a report: indefinite — needed to answer questions about a delivered report.
  • Outreach suppression list: indefinite (so we don't email you again after you've asked us not to).

Your rights

You have the right to access the personal data we hold about you, to correct it, to ask us to delete it, to object to its processing, and to receive a portable copy. To exercise any of these rights, email privacy@ratemyratings.com with the subject line "Data subject request". We respond within 30 days at no cost.

It helps if you tell us which of the things in this notice you mean (a Guide conversation, a report request, a newsletter subscription, a customer record, or a business that appears in a report), but we will look across all of them either way. Anything held on your own device is in your hands rather than ours: see cookies and storage.

Contact

For any privacy question, or to make a data subject request, email privacy@ratemyratings.com. That address reaches Deventral Ltd, company number 14461518, at Office 408, Screenworks 22 Highbury Grove, London, N5 2ER.