Customer Privacy Policy

1Who We Are and How to Contact Us

1. Data controller. MyRatedPros Global Ltd is the "controller" responsible for your personal data. We are a company incorporated in England and Wales under company number 17343404, with registered office at Suite 3, 210 Upper Richmond Road, London, United Kingdom, SW15 6NP.
2. Contact. For any privacy matter, contact our Privacy Team at privacy@myratedpros.com, or by post at our registered office marked "Privacy Team". We have not appointed a statutory Data Protection Officer, as we are not required to.
3. Regulator. We are registered with the Information Commissioner's Office (ICO), the UK's data protection regulator, under registration number [ICO_REGISTRATION_NUMBER].

2Who This Policy Applies To

1. This policy applies to you if you use MyRatedPros as a customer — that is, if you visit our customer website, submit a Quotation Request, create a customer account, contact or communicate with service providers through us, or leave a review.
2. In this policy: "personal data" means information relating to an identified or identifiable living person; "processing" means anything we do with personal data; "UK GDPR" means the retained EU General Data Protection Regulation as it applies in the UK; and "Platform", "Quotation Request", "Service Provider" and other capitalised terms have the meanings given in our Customer Terms and Conditions.
3. Service providers have a separate privacy policy. This policy is about how we handle your data as a customer.

3The Personal Data We Collect

We collect and use the following categories of personal data about you:

We do not ask you for special category data (such as health or ethnicity). Please do not include such information in a Quotation Request or review unless it is necessary, as it may be shared with service providers to fulfil your enquiry. We do not knowingly collect data from anyone under 18 (see clause 16).

4How We Collect Your Data

1. Directly from you. When you submit a Quotation Request, create an account, communicate with us or with service providers through the Platform, leave a review, or otherwise interact with us.
2. Automatically. When you use the Platform, we automatically collect usage and technical data through our systems and through cookies or similar technologies (see clause 15).
3. From affiliated websites. Where you submit an enquiry through a website operated by one of our affiliates or partners, we receive your enquiry and its details from that website (see clause 7).
4. From service providers. A service provider you dealt with may give us information in connection with your enquiry, for example when responding to a review or a query.

5How and Why We Use Your Data — Purposes and Lawful Bases

We use your personal data only where the law allows. The lawful bases we rely on are: Contract (to provide the Platform to you and take steps at your request); Legitimate Interests (our or a third party's legitimate interests, where not overridden by your rights); Legal Obligation (to comply with the law); and Consent (where we specifically ask for it). Our main purposes are:

Where we rely on legitimate interests, we balance those interests against your rights and freedoms. You can ask us for more information about that balancing exercise using the details in clause 1.

We may also use data we hold to create aggregated or anonymised information, which does not identify you and which we may use for any lawful business purpose, including analytics and improving our services.

6Sharing Your Enquiry with Service Providers

1. To fulfil your Quotation Request, we share the information in it — including your name, contact details and project details — with one or more service providers matched to your enquiry, so they can contact you and provide quotations.
2. Independent controllers. Each service provider who receives your enquiry is an independent controller of your data in their own right. From that point, that provider is responsible for how it handles your data, under its own privacy notice. We are not responsible for a service provider's use of your data once we have shared it in line with your request.
3. If you do not want to be contacted by a particular service provider, or wish them to stop, you can tell the provider directly and, if you need help, contact us at privacy@myratedpros.com. You can also raise concerns about a provider's conduct with us.
4. We do not sell your personal data, and we do not pass your enquiry to unrelated third-party lead aggregators.

7Enquiries from Affiliated Websites

1. Some enquiries reach us through websites operated by our affiliates or partners rather than directly on the MyRatedPros customer website. Where you submit an enquiry through such an affiliated website, you are told at the point of submission that your enquiry will be passed to MyRatedPros.
2. When we receive your enquiry from an affiliated website, we process it in the same way as an enquiry submitted directly to us — including matching you with and sharing your details with relevant service providers under clause 6. This policy governs our handling of your data once we receive it.
3. The affiliated website is responsible for its own collection of your data and has its own privacy notice, which you should also read.

8Marketing and Communications

1. We may send you service-related messages (for example about your Quotation Request, matches, and important account or security information). These are necessary to provide the Platform and are not marketing.
2. We may send you marketing about our own services, offers and relevant features by email, SMS, push notification and in-app notification, where we are permitted to do so — relying on your consent where required.
3. You can opt out of marketing at any time by changing your notification settings in your account, or by following the unsubscribe or opt-out instructions in a message. Opting out of marketing does not stop service-related messages.
4. We handle electronic marketing in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR.

9Who Else We Share Your Data With

Besides matched service providers (clause 6), we share your personal data only where necessary, with the following categories of recipient, under appropriate safeguards:

We require all our service providers (processors) to keep your data secure and to use it only for the purposes we specify. We do not sell your personal data.

10International Transfers

1. We host and store personal data within the European Economic Area (in Germany). Some personal data may be transferred to, or accessed from, locations outside the UK and EEA — for example where personnel or service providers who help us operate the Platform are located in another country. Where this happens, we ensure an appropriate safeguard is in place as required by UK data protection law.
2. Those safeguards are typically the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the European Commission's Standard Contractual Clauses, or transfer to a country the UK Government has decided provides adequate protection.
3. You can ask us for more information about our transfers, or a copy of the relevant safeguard, using the details in clause 1.

11How Long We Keep Your Data

1. We keep your personal data only for as long as necessary for the purposes we collected it for, including to satisfy any legal, accounting, regulatory or reporting requirements, and to establish, exercise or defend legal claims.
2. To decide how long to keep data, we consider its nature and sensitivity, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and applicable legal requirements.
3. General approach. We keep your enquiry and account data for as long as needed to provide the Platform and deal with your enquiry, and then for a further period to handle any queries, disputes or legal claims — generally up to six years from your last interaction, reflecting the limitation period for legal claims. Some records may be kept longer where the law requires. Once a customer's enquiry has been shared with a service provider, that provider keeps its own copy under its own retention rules, which we do not control.
4. Reviews you submit may remain published on the Platform after your account closes, in attributed or anonymised form, subject to your data protection rights and this policy.
5. Aggregated or anonymised information, which does not identify you, may be kept indefinitely, as it is no longer personal data.

12How We Protect Your Data

1. We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, including access controls, encryption in transit, secure hosting and staff confidentiality obligations.
2. No system can be guaranteed completely secure, and transmission of data over the internet is not completely secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.
3. We have procedures to deal with any suspected personal data breach and will notify you and the ICO where we are legally required to do so.

13Automated Processing

1. We may use automated systems to help match your enquiry to suitable service providers and to detect fraud, spam or misuse. These support the operation of the Platform.
2. We do not make decisions that produce legal or similarly significant effects on you based solely on automated processing without human involvement.
3. If this changes and we introduce solely automated decision-making with significant effects, we will update this policy and tell you about your rights, including the right to obtain human review.

14Your Rights

Under UK data protection law, you have the following rights in relation to your personal data:

• Access — to be told whether we process your data and to receive a copy of it;
• Rectification — to have inaccurate or incomplete data corrected;
• Erasure — to have your data deleted in certain circumstances;
• Restriction — to ask us to limit our processing in certain circumstances;
• Portability — to receive certain data in a portable format, or have it sent to another controller;
• Objection — to object to processing based on legitimate interests, and to direct marketing at any time;
• Withdraw consent — where we rely on consent, to withdraw it at any time; and
• Rights regarding automated decisions — as described in clause 13.

1. To exercise any right, contact us at privacy@myratedpros.com. We will respond within the time limits set by law (usually one month). We may need to verify your identity.
2. Remember that once a service provider has received your enquiry, that provider is an independent controller; to exercise rights over the copy they hold, you may also need to contact the provider directly.
3. These rights are not absolute and may not apply in every case. If we cannot act on your request, we will explain why. Exercising your rights is free in most cases, but we may charge a reasonable fee or refuse a request that is manifestly unfounded or excessive.

15Cookies and Similar Technologies

1. We use cookies and similar technologies on our website to operate the Platform, remember your preferences, and understand usage.
2. Some cookies are strictly necessary to provide the website and do not require your consent. Non-essential cookies, such as analytics cookies (including those set by Google Analytics, Google Tag Manager and Microsoft Clarity) and any advertising cookies, are used only where you have given your consent through our cookie banner, and you can change or withdraw your choices at any time.
3. How we use these technologies, and how you can manage your choices, is explained in full in our Customer Cookie Policy.

16Children

1. The Platform is intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18.
2. If you believe a person under 18 has provided us with personal data, please contact privacy@myratedpros.com and we will take appropriate steps to delete it.

17Third-Party Services and Links

1. The Platform relies on third-party services (such as hosting, email, notifications and analytics) and may contain links to third-party websites, including service providers' own websites. This policy does not cover third-party websites or services, which have their own privacy notices.
2. We are not responsible for the privacy practices of third parties. We encourage you to read their privacy notices before providing them with your data.

18Changes to This Policy

1. We may update this policy from time to time. The current version is always available on the Platform, with the "last updated" date shown at the top.
2. Where a change is significant, we will take reasonable steps to bring it to your attention, for example by a notice on the Platform or, where appropriate, by email.

19How to Complain

1. If you have any concern about how we handle your personal data, please contact our Privacy Team first at privacy@myratedpros.com so we can try to resolve it.
2. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at any time — by visiting ico.org.uk or calling its helpline. We would appreciate the chance to address your concerns before you approach the ICO.

AAppendix A — Processing Summary Table

A quick reference summary. It supplements, and is subject to, the fuller explanation in the main policy.