Europe
Privacy Policy
Privacy Policy
RatingBoostly: Data Protection & Privacy Notice
Website: https://ratingboostly.com/
Effective Date: September 5, 2026
UK Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, UK
US Office: 1209 North Orange Street, Wilmington, DE 19801, USA
PRIVACY COMMITMENT & COMPLIANCE STATEMENTRatingBoostly is committed to protecting the privacy and personal data of our users, clients, and end consumers. This Privacy Policy details how we collect, process, store, and safeguard personal information in full compliance with the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, EU GDPR, California Consumer Privacy Act (CCPA/CPRA), and US Federal/State privacy laws.
1. Data Controller & Data Processor Roles
Under applicable data protection legislation, RatingBoostly operates in dual capacities depending on the context of data collection:
- Data Controller: When you register for an account, request support, or browse our website, RatingBoostly acts as a Data Controller for your personal contact and billing information.
- Data Processor: When you upload end-customer contact lists or utilize automated review request workflows through our platform, you remain the Data Controller, and RatingBoostly acts solely as a Data Processor carrying out processing instructions on your behalf.
2. Information We Collect
We collect personal information through direct interactions, automated technologies, and integrated third-party platforms.
Account & Profile Information: Name, business email address, phone number, company name, physical address, account login credentials, and billing details.
Client Customer Data (Processor Role): Customer names, phone numbers, email addresses, order details, and feedback responses uploaded by Client users to trigger automated review requests.
Payment & Transaction Data: Payment card details, billing address, and transaction histories (processed securely via PCI-DSS compliant providers such as Stripe or PayPal; card numbers are not stored on our servers).
Technical & Usage Data: IP address, browser type, operating system, device identifiers, referring URLs, page views, and interactions with our web application collected via log files and cookies.
3. Lawful Basis For Processing (Uk & Eu Gdpr)
We process personal data only when a legal basis exists under Article 6 of the UK/EU GDPR:
- Purpose of Processing
- Lawful Basis under UK/EU GDPR
Account creation, service delivery, and billing management.
Contractual Necessity (Art. 6(1)(b))
Sending transaction notifications, platform updates, and security alerts.
Contractual Necessity & Legitimate Interests (Art. 6(1)(f))
Automated email/SMS review invitations sent on behalf of Clients.
Contractual Performance & Client Legitimate Interest
Ensuring regulatory compliance, fraud prevention, and tax reporting.
Legal Obligation (Art. 6(1)(c))
4. How We Use Your Information
To provide, operate, maintain, and optimize the RatingBoostly software application.
To process payment transactions and manage recurring subscription renewals.
To deliver customer support, troubleshoot technical issues, and respond to user inquiries.
To comply with legal obligations, enforce our Terms and Conditions, and prevent fraudulent review activity.
5. Data Sharing & Third-Party Sub-Processors
We do not sell, rent, or trade your personal data to third parties for marketing purposes. Data is shared strictly with authorized sub-processors necessary for platform operation:
Payment Gateways: Stripe, PayPal (PCI-DSS compliant merchant processing).
Cloud Infrastructure: Amazon Web Services (AWS), Google Cloud Platform (secure data hosting).
Communication Providers: Twilio, SendGrid (delivering SMS and email review communications).
Legal Disclosures: We may disclose information if required by court order, law enforcement, or regulatory bodies (e.g., UK CMA, US FTC).
6. International Data Transfers
Personal data collected in the UK/EEA may be transferred to and processed in the United States by RatingBoostly LLC or our sub-processors. Whenever data transfers occur outside the UK/EEA, we implement strict safeguards, including Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum (IDTA), and enterprise-grade encryption.
7. Your Privacy Rights (Uk, Eu & Us Residents)
Depending on your jurisdiction, you possess specific privacy rights:
- UK & EU Residents: Under UK/EU GDPR, you have the Right to Access, Correct, Delete (Right to be Forgotten), Restrict Processing, Data Portability, and Object to Processing.
- California & US Residents: Under CCPA/CPRA, California residents have the Right to Know what personal data is collected, Right to Delete, Right to Opt-Out of Sale/Sharing, and Right to Non-Discrimination. RatingBoostly does NOT sell personal data.
To exercise any of these rights, email [email protected]. We respond to all verified requests within statutory timeframes (30 days for UK/EU, 45 days for CCPA).
8. Data Security & Retention
We implement robust technical and organizational measures, including TLS 1.3 in-transit encryption, AES-256 at-rest encryption, role-based access control, and routine vulnerability audits. Personal data is retained only as long as necessary to fulfill service agreements, manage account history, or comply with statutory tax and legal obligations (typically 6 years for financial records under UK tax law).
9. Contact & Data Protection Officer
For questions, concerns, or data subject requests regarding this Privacy Policy:
- Website: https://ratingboostly.com/
- Data Protection Email: [email protected] | Privacy Inquiries: [email protected]
- UK DPO Office: RatingBoostly UK Ltd, 71-75 Shelton Street, London, WC2H 9JQ, UK
- US Office: RatingBoostly LLC, 1209 North Orange Street, Wilmington, DE 19801, USA
