Website Privacy Policy
1Who we are
This website is operated by Vallion Limited, a company registered in England and Wales, company number 16154557, trading as RatingEdge. Our registered office is 20 Wenlock Road, London.
For the purposes of the UK GDPR, Vallion Limited is the data controller for any personal data collected through this website.
If you have a question about this policy, or about how we handle your data, use the contact form on this website. You can also write to us at the registered office address above.
2What this policy covers
This policy covers ratingedge.co.uk - the public website you are reading now.
It does not cover the RatingEdge platform at app.ratingedge.co.uk. If you register for the platform, a separate privacy policy applies, which you are shown and asked to accept when you create an account. Section 9 explains the difference.
3We do not track you on this website
This is a plain website. It runs no analytics, no advertising pixels, no tag manager, and no third-party scripts of any kind. Nothing on this site profiles you, follows you between sites, or builds a picture of your behaviour.
We do not do this as a favour. It is how the site is built, and the site's security policy blocks scripts from running at all.
4Cookies
This website sets no cookies.
There is no cookie banner because there is nothing to consent to. If that ever changes, we will say so here and ask you properly before setting anything.
5What we do collect: server logs
Like any web server, ours records a line each time a page or file is requested. Each line contains:
- the IP address the request came from
- the date and time
- which page or file was requested
- whether the request succeeded, and how many bytes were sent
- the page you came from, if your browser sent one
- your browser's user-agent string
An IP address can be personal data, so we treat these logs as personal data.
Why we hold them. Server logs are how we keep the site running and secure - diagnosing faults, and identifying abuse such as automated attacks. Our lawful basis is legitimate interests: we have a genuine need to operate a secure website, and these logs are the minimum record that allows it.
How long. Server logs are kept for 14 days and are then deleted automatically. We do not archive them, and we do not keep a copy elsewhere.
What we do not do with them. We do not use server logs for marketing, we do not profile visitors from them, and we do not sell or share them with anyone for their own purposes.
6If you contact us
The contact form on this website is the way to reach us. We do not publish an email address, because published addresses are collected and abused within days.
What the form collects. Your name, your work email address, your organisation, and whatever you write in the message. Nothing else - there is no hidden field capturing anything about you, and the form runs no scripts.
Why we ask for a work address. The form does not accept addresses at the common free email providers. This is a deliberate filter to keep the volume of unqualified and automated enquiries down, and it is not a judgement about you. If you have a good reason for needing to use a personal address, write to us at the registered office instead.
How the message reaches us. The form posts to our own server. The message is then sent to us by email through Brevo (section 7). We do not store form submissions in a database.
How long we keep it. We hold your message and your details for as long as we need to deal with what you asked about, and for a reasonable period afterwards in case you get back in touch. If your enquiry does not lead anywhere, we delete it within twelve months.
Our lawful basis is legitimate interests - responding to someone who has contacted us. If your message is about becoming a customer, the basis is taking steps at your request before entering into a contract.
We do not add you to a mailing list because you used the form.
Stopping abuse of the form. To keep automated submissions out, the server checks how the form was submitted - including a hidden field that a person never sees and a check on how quickly it was sent. Our web server also limits how many times the form can be submitted from one address. None of this involves a third-party service, and none of it tracks you.
7Who else is involved
Two organisations process data on our behalf. Neither uses it for their own purposes.
Hetzner Online GmbH - hosting. Our servers are in Nuremberg, Germany, and the server logs described in section 5 sit on them.
Sendinblue SAS, trading as Brevo, Paris - transactional email, processed within the EU. This is how a message sent through the contact form reaches us, and it also handles email sent from the platform. It is not used for marketing.
There is no payment processor. This website takes no payments and asks for no card details.
8Where your data is
Data is held in the European Economic Area - Germany for hosting, France for email. Nothing is transferred outside the EEA.
9If you become a customer
This policy stops where the platform begins.
When you register for RatingEdge you are shown a separate privacy policy and a separate set of terms, both of which you are asked to read and accept before an account is created. Those documents cover customer data, property data, and how the platform works - which is a much larger subject than a website visit.
If you would like to see them before registering, ask through the contact form and we will send them to you.
10Your rights
Under the UK GDPR you have the right to:
- ask what personal data we hold about you, and get a copy
- have inaccurate data corrected
- ask us to delete data, in some circumstances
- ask us to restrict how we use it, in some circumstances
- object to us using it on the basis of legitimate interests
- complain to the regulator
There is no charge for any of this, and we will respond within one month.
To exercise any of these rights, use the contact form, or write to us at the registered office address at the end of this policy. Either route works, and the postal route is there so you are never dependent on the form being available.
One honest note about server logs. If you ask us what we hold about you, we can only find your entries if you can tell us the IP address you used and roughly when. We do not hold anything that links an IP address to a name, so without that we have no way to search. And logs older than 14 days are already gone.
If you are not satisfied with how we have handled a request, you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.
11Security
The site is served over HTTPS. It runs no scripts of any kind - not ours, not anyone else's - and its security policy blocks them from running. The only thing it accepts from you is the contact form, which posts to our own server and nowhere else.
Beyond the server logs in section 5 and the messages in section 6, this website stores nothing about you. The smallest way to protect data is not to collect it, and that is the approach taken here.
12Changes to this policy
If we change this policy we will update the version and date at the top. If the change is significant - if we start collecting something we do not collect today - we will say so plainly rather than quietly amending the text.
Contact
Vallion Limited, trading as RatingEdge
20 Wenlock Road, London N1 7GU
Company number 16154557
Contact us through the form on this website, or by post at the address above.