Privacy notice

The Ratewise contracting entity identified in your engagement schedule is the controller for information collected through this website and customer service. Contact support@getratewise.uk for privacy questions. ICO registration: recorded in the executed engagement schedule.

We process account and contact details, business and property information, rating-list identifiers, case correspondence, uploaded evidence, written authority records, payment and invoice references, security logs and records of automated or professional review.

We use information to provide requested screening, take steps toward or perform an engagement, protect the service, meet legal obligations and operate a documented business-rates case. Where we rely on legitimate interests, those interests are providing and securing the service without overriding your rights. Marketing requires a separate lawful basis and an opt-out.

Information is shared only with contracted hosting and object-storage providers, Resend for transactional email, Stripe for payments, OpenAI for operator-requested AI drafts, professional advisers, HMRC's Valuation Office, billing authorities or tribunals when authorised and necessary, or where law requires it. AI drafts may include the customer's first name, property facts, recent case messages and case history; they cannot be sent or filed without an operator's approval. OpenAI tracing is configured not to include sensitive run data. Where a provider processes information outside the UK, the controller uses an applicable UK transfer mechanism and supplier terms.

Unconverted enquiries are removed after 12 months. Expired authentication records are routinely removed, and superseded rating-list rows with no customer or case relationship are removed after 90 days. A disabled account with no case, invoice or other required record can be erased after identity and retention review. Case, authority, correspondence, audit and financial records are retained only for the engagement and applicable limitation, tax, fraud-prevention and professional-obligation periods, then deleted or anonymised. Encrypted backups expire under the documented backup schedule.

You may ask for access, correction, deletion, restriction, portability or objection where applicable. You may complain to the UK Information Commissioner's Office. Identity verification may be required before disclosing case data.

The instant checker is a deterministic, indicative screen. It does not autonomously file a case or make a legal or similarly significant decision about you. Optional AI produces structured communication proposals from recorded case facts when requested by an operator or when the operations queue identifies an inactive case. AI output is never sent automatically: customer communications proposed by AI require explicit human approval, while submissions and outcomes remain separate human-controlled actions. The evidence, source run and limitations remain recorded.