Legal
Privacy notice
Effective 28 September 2026
Who controls your information
Nichirin Tech Ltd is the controller for information collected through this website and customer service, with a service address at 61 Bridge Street, Kington, United Kingdom, HR5 3DJ. Contact support@getratewise.uk for privacy questions. ICO registration: recorded in the executed engagement schedule.
What we collect
We process account and contact details, business and property information, rating-list identifiers, case correspondence, uploaded evidence, written authority records, payment and invoice references, security logs and records of automated or professional review.
Why and on what basis
We use information to provide requested screening, take steps toward or perform an engagement, protect the service, meet legal obligations and operate a documented business-rates case. Where we rely on legitimate interests, those interests are providing and securing the service without overriding your rights. Marketing requires a separate lawful basis and an opt-out.
Business contacts
If we contact you about working with us, for example as a rating surveyor or partner firm, we use the business contact details your firm publishes, on the basis of our legitimate interest in finding professional partners. We keep a record of what we sent and any reply, and nothing else about you. Reply to any of our emails to stop further contact, and we will delete your details on request.
Sharing and international processing
Information is shared only with contracted hosting and object-storage providers, Resend for transactional email, Stripe for payments, OpenAI for operator-requested AI drafts, professional advisers, HMRC's Valuation Office, billing authorities or tribunals when authorised and necessary, or where law requires it. AI drafts may include the customer's first name, property facts, recent case messages and case history; they cannot be sent or filed without an operator's approval. OpenAI tracing is configured not to include sensitive run data. Where a provider processes information outside the UK, the controller uses an applicable UK transfer mechanism and supplier terms.
The current provider register is available at https://getratewise.uk/subprocessors.
Retention
Unconverted enquiries are removed after 12 months. Expired authentication records are routinely removed, and superseded rating-list rows with no customer or case relationship are removed after 90 days. A disabled account with no case, invoice or other required record can be erased after identity and retention review. Case, authority, correspondence, audit and financial records are retained only for the engagement and applicable limitation, tax, fraud-prevention and professional-obligation periods, then deleted or anonymised. Encrypted backups expire under the documented backup schedule.
Your rights
You may ask for access, correction, deletion, restriction, portability or objection where applicable. You may complain to the UK Information Commissioner's Office. Identity verification may be required before disclosing case data.
Automated analysis
The instant checker is a deterministic, indicative screen. It does not autonomously file a case or make a legal or similarly significant decision about you. Optional AI produces structured communication proposals from recorded case facts when requested by an operator or when the operations queue identifies an inactive case. AI output is never sent automatically: customer communications proposed by AI require explicit human approval, while submissions and outcomes remain separate human-controlled actions. The evidence, source run and limitations remain recorded.
See also the website terms and complaints procedure.