Privacy Policy
Who we are
RatingLab is a certification and compliance consulting practice operated by the following companies, each acting as an independent controller for the correspondence it receives:
What this website collects
Nothing beyond what any web server records to operate: our hosting provider keeps standard access logs (IP address, requested page, browser type, time) for security and troubleshooting. These logs are kept for a limited period and are not used to identify or profile visitors. The request form on the site does not send anything to our servers: it opens WhatsApp on your device with your message prefilled, and you decide whether to send it. The website has no accounts and no embedded third-party content.
Cookies and tracking
We do not use cookies, local storage, tracking pixels or analytics on this website. Because no cookies are set, no cookie consent banner is shown. If this changes, this policy will be updated and consent will be requested where required.
Business correspondence
When you contact us on WhatsApp, or when we write to you and you reply, we process the personal data contained in that correspondence: your name, business contact details, your company and the content of the messages. We use it to respond to your request, prepare proposals and, where an agreement follows, deliver our services. The legal basis is our legitimate interest in conducting business-to-business communication and, once a contract is in place, performance of that contract.
Business outreach is addressed to companies and their professional roles. You can stop any further messages at any time by replying "stop" or by writing to us on WhatsApp; we honour such requests immediately and keep your address only on a suppression list so that we do not contact you again.
Retention
Correspondence that does not lead to an engagement is deleted or anonymised within 24 months. Data relating to a signed engagement is kept for the duration of the contract and for the period required by accounting and certification-body rules, after which it is deleted.
Sharing and transfers
We do not sell or rent personal data. We share it only with service providers we need to run our business (hosting in Frankfurt, Germany; email and messaging providers) under contracts that restrict them to processing on our instructions, and with accredited certification bodies where that is part of an engagement you have asked for. Where data leaves the UK or the EEA, we rely on appropriate safeguards such as standard contractual clauses.
Your rights
Depending on where you are, you may have the right to access, correct or erase your personal data, to object to or restrict its processing, to data portability and to lodge a complaint with a supervisory authority (in the UK, the Information Commissioner's Office). To exercise any of these rights, write to us on WhatsApp at +44 7452 348554 or by post to the London address above. We respond within one month.
Changes
We may update this policy as our services change. The date at the top shows the current version.