Who we are
Deventral Ltd, a company registered in England and Wales with company number 14461518. Registered office: Office 408, Screenworks 22 Highbury Grove, London, United Kingdom, N5 2ER. Contact email: privacy@ratemyratings.com.
Website visitors
Google Analytics counts visits and tells us which pages get read. It sets the two cookies listed below. Google Ireland Limited runs it as our processor, and the data is processed outside the UK, including in the United States.
Crisp is the live-chat widget in the corner of every page, operated on our behalf by Crisp IM SAS, a French company. It stores a session identifier on your device, in a cookie and in local storage, so that a conversation you start follows you from page to page and is still there if you come back. Crisp holds your IP address against that session. If you never open the chat and send a message, Crisp discards the session and the IP address 30 minutes after your last page view.
If you do send a message, we receive it along with whatever you choose to put in it — usually a name and an email address, so we can reply. Transcripts are kept for 24 months from your last message. If you would rather not use the chat, info@ratemyratings.com reaches the same people.
Report requests
When you submit the report-request form, we collect the four fields you provide (full name, email, location, category), the timestamp of submission, your IP address, and your browser's user-agent string. The IP address and user-agent are used solely to detect spam; they are deleted automatically after 30 days.
The four fields you provide are stored in our triage system and used to reply to your request. If you ask us to delete the row, we do, immediately.
Customers
If you commission a report, we hold your name, email, business name, postcode, the market(s) purchased, and the Stripe payment record (which we receive from Stripe and which contains no card data). We never see or store full card numbers.
Invoices are kept for six years to satisfy UK tax law. Other customer data is kept for two years from the date of last contact.
Businesses appearing in reports
Reports analyse public reviews of businesses. The data we collect — business name, address, category, public reviews — is sourced exclusively from public surfaces (Google Maps). Reviewer display names are kept as part of the review attribution; reviewer email addresses, phone numbers, and any other contact data are not collected.
If you are a business and you'd like to know what we hold about your business, or you would like us to delete it, email privacy@ratemyratings.com. We respond within 30 days.
Lawful basis
Under UK GDPR, each thing we do with personal data needs a basis.
| Processing | Lawful basis |
|---|---|
| Replying to a report request | Legitimate interest (B2B follow-up) |
| Replying to a live-chat message | Legitimate interest (B2B follow-up) |
| Measuring website traffic (Google Analytics) | Legitimate interest (understanding how the site is used) |
| Keeping a chat session available across pages | Legitimate interest (making the chat usable) |
| Processing payment for a report | Performance of a contract |
| Tax records (invoices) | Legal obligation (UK tax law) |
| Outreach email to prospective customers | Legitimate interest (B2B), with one-click unsubscribe |
| Spam-detection on form submissions | Legitimate interest (security) |
Retention
- Form submissions (the four content fields): 24 months from last contact.
- IP address and user-agent attached to a form submission: 30 days.
- Live-chat transcripts: 24 months from your last message.
- Chat session where you never sent a message: 30 minutes from your last page view.
- Cookies and local storage on your device: as set out in the table above.
- Customer records and invoices: six years (tax law).
- Review data collected for a report: indefinite — needed to answer questions about a delivered report.
- Outreach suppression list: indefinite (so we don't email you again after you've asked us not to).
Your rights
You have the right to access the personal data we hold about you, to correct it, to ask us to delete it, to object to its processing, and to receive a portable copy. To exercise any of these rights, email privacy@ratemyratings.com with the subject line "Data subject request". We respond within 30 days at no cost.
It helps if you tell us which of the things in this notice you mean — a chat conversation, a report request, a customer record, or a business that appears in a report — but we will look across all of them either way. Anything held on your own device is in your hands rather than ours: see cookies and storage.
Contact
For any privacy question, or to make a data subject request, email privacy@ratemyratings.com. That address reaches Deventral Ltd, company number 14461518, at Office 408, Screenworks 22 Highbury Grove, London, N5 2ER.
