Privacy Policy

Last updated: 2 September 2026
In short. This website sets no cookies, runs no analytics and loads nothing from third-party servers. Fonts are served from our own hosting. We only process personal data that you send us yourself, for example through the request form (which opens WhatsApp), by writing to us on WhatsApp, or by replying to our email.

Who we are

RatingLab is a certification and compliance consulting practice operated by the following companies, each acting as an independent controller for the correspondence it receives:

Audit London Certification Bureau LLP27 Old Gloucester Street, London WC1N 3AX, United Kingdom. Registered in England and Wales, number OC454064. ICO registration reference ZB925775.
LLC International Certification ProviderTaras Shevchenko St, building 4/1, premises 17, Saryarka district, Astana, Z11A3X9, Kazakhstan.
Universal Certification Platform LLC30 N Gould St, Ste R, Sheridan, WY 82801, United States.

What this website collects

Nothing beyond what any web server records to operate: our hosting provider keeps standard access logs (IP address, requested page, browser type, time) for security and troubleshooting. These logs are kept for a limited period and are not used to identify or profile visitors. The request form on the site does not send anything to our servers: it opens WhatsApp on your device with your message prefilled, and you decide whether to send it. The website has no accounts and no embedded third-party content.

Cookies and tracking

We do not use cookies, local storage, tracking pixels or analytics on this website. Because no cookies are set, no cookie consent banner is shown. If this changes, this policy will be updated and consent will be requested where required.

Business correspondence

When you contact us on WhatsApp, or when we write to you and you reply, we process the personal data contained in that correspondence: your name, business contact details, your company and the content of the messages. We use it to respond to your request, prepare proposals and, where an agreement follows, deliver our services. The legal basis is our legitimate interest in conducting business-to-business communication and, once a contract is in place, performance of that contract.

Business outreach is addressed to companies and their professional roles. You can stop any further messages at any time by replying "stop" or by writing to us on WhatsApp; we honour such requests immediately and keep your address only on a suppression list so that we do not contact you again.

Retention

Correspondence that does not lead to an engagement is deleted or anonymised within 24 months. Data relating to a signed engagement is kept for the duration of the contract and for the period required by accounting and certification-body rules, after which it is deleted.

Sharing and transfers

We do not sell or rent personal data. We share it only with service providers we need to run our business (hosting in Frankfurt, Germany; email and messaging providers) under contracts that restrict them to processing on our instructions, and with accredited certification bodies where that is part of an engagement you have asked for. Where data leaves the UK or the EEA, we rely on appropriate safeguards such as standard contractual clauses.

Your rights

Depending on where you are, you may have the right to access, correct or erase your personal data, to object to or restrict its processing, to data portability and to lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office). To exercise any of these rights, write to us on WhatsApp at +44 7452 348554 or by post to the London address above. We respond within one month.

Changes

We may update this policy as our services change. The date at the top shows the current version.