How we handle your data.

Definitions

• Service.Service is the uprated.com website operated by Uprated Ltd.
• Personal Data.Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
• Usage Data.Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• Cookies.Cookies are small pieces of data stored on your device (computer or mobile device).
• Data Controller.Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed. For the purpose of this Privacy Policy, we are a Data Controller of your Personal Data.
• Data Processors (or Service Providers).Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.
• Data Subject (or User).Data Subject is any living individual who is using our Service and is the subject of Personal Data.

Information collection and use

We collect several different types of information for various purposes to provide and improve our Service to you.

Personal data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Cookies and Usage Data

Usage data

We may also collect information on how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking & cookies data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags and scripts to collect and track information and to improve and analyse our Service.

When you visit uprated.com from the UK or EEA, we use a cookie consent banner to ask whether you accept non-essential cookies (analytics and advertising). Essential cookies set to operate the Service are placed without consent as permitted by the Privacy and Electronic Communications Regulations (PECR). You can withdraw or change your consent at any time via the cookie preferences link in our footer, or by instructing your browser to refuse cookies. If you do not accept non-essential cookies, you may not be able to use some portions of our Service.

Examples of cookies we use:

• Session Cookies.We use Session Cookies to operate our Service.
• Preference Cookies.We use Preference Cookies to remember your preferences and various settings.
• Security Cookies.We use Security Cookies for security purposes.

Use of data

Uprated Ltd uses the collected data for various purposes:

• To provide and maintain our Service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our Service when you choose to do so
• To provide customer support
• To gather analysis or valuable information so that we can improve our Service
• To monitor the usage of our Service
• To detect, prevent and address technical issues
• To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information

Lawful bases for processing

Our lawful basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it. Under UK GDPR and EU GDPR, Uprated Ltd may process your Personal Data because:

• Contract.We need to process your data to enter into or perform a contract with you (for example, delivering a service you've requested).
• Consent.You have given us consent, for example to receive marketing emails or to set non-essential cookies. You can withdraw consent at any time.
• Legitimate interests.The processing is in our legitimate interests (for example, understanding how the Service is used so we can improve it) and is not overridden by your rights and freedoms.
• Legal obligation.We need to process the data to comply with the law.

Retention of data

Uprated Ltd will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, and in line with the storage limitation principle under UK GDPR. In practice:

• Enquiry data.Contact-form submissions and marketing enquiries are typically retained for up to 24 months after our last substantive contact, unless a longer period is required to deliver a service or comply with a legal obligation.
• Client records.Records relating to an engagement are retained for the duration of the engagement and for up to seven years afterwards, in line with HMRC and professional-indemnity requirements.
• Usage data.Analytics and usage data is generally retained for up to 26 months, after which it is deleted or aggregated.
• Backups.Secure backups may contain Personal Data for a short additional period before being overwritten.

International transfers

Your information, including Personal Data, may be transferred to and maintained on computers located outside your country of residence, where data-protection laws may differ.

Uprated Ltd is based in the United Kingdom and primarily processes data in the UK. The UK and the EEA are each recognised as providing an adequate level of protection by the other, meaning transfers between them do not require additional safeguards.

Where we transfer Personal Data to a country not covered by an adequacy decision (for example, where a sub-processor is based in the United States), we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses or the UK/EU Addendum, and we conduct transfer-impact assessments where required.

By submitting information to us, you consent to that transfer where consent is the relevant basis. We take all steps reasonably necessary to ensure your data is handled securely and in accordance with this Privacy Policy.

Disclosure of data

Uprated Ltd may disclose your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of Uprated Ltd
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

Security of data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Your data protection rights

Under UK GDPR and EU GDPR, you have the following rights in relation to your Personal Data. Uprated Ltd aims to take reasonable steps to allow you to exercise them. To make a request, contact us using the details in the Contact section below.

• Right of access.You can request a copy of the Personal Data we hold about you.
• Right of rectification.You can ask us to correct information that is inaccurate or incomplete.
• Right to erasure.You can ask us to delete your Personal Data in certain circumstances (the "right to be forgotten").
• Right to restrict processing.You can ask us to limit how we use your Personal Data.
• Right to object.You can object to our processing of your Personal Data where we rely on legitimate interests, and to direct marketing at any time.
• Right to data portability.You can request a copy of your Personal Data in a structured, machine-readable format.
• Right to withdraw consent.Where we rely on your consent, you can withdraw it at any time.

Complaints

If you have a concern about how we handle your Personal Data, please contact us first so we can try to resolve it.

You also have the right to lodge a complaint with a supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ICO) at ico.org.uk. In the European Economic Area it is your local data protection authority.

Service providers

We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analysing how our Service is used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We use third-party Service Providers to monitor and analyse the use of our Service. Where these are classed as non-essential, they are only enabled after you have given consent via our cookie banner.

• Google Analytics 4 (GA4).GA4 is the current Google Analytics service. It tracks and reports website traffic to help us understand how the Service is used. We use IP anonymisation and have disabled data sharing with other Google services and ads personalisation. You can opt out of GA4 by declining analytics cookies in our cookie banner, or by installing the Google Analytics opt-out browser add-on.

Behavioural remarketing

We may use remarketing services to show ads on third-party websites to people who have visited our Service. We and our third-party vendors use cookies to inform, optimise and serve ads based on past visits. Remarketing cookies are only set after you have given consent via our cookie banner.

• Google Ads.Google Ads remarketing is provided by Google LLC. You can opt out of personalised Google ads at any time via the Google Ads Settings page (adssettings.google.com), or by declining advertising cookies in our cookie banner.
• Meta Ads.We may use the Meta Pixel for remarketing on Facebook and Instagram. You can manage ad preferences in your Meta account's ad settings, or decline advertising cookies in our cookie banner.

Links to other sites

Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Children's privacy

Our Service is intended for a business audience and is not directed at children. Under the UK Data Protection Act 2018, the age at which a child can consent to information-society services is 13. We do not knowingly collect Personal Data from anyone under the age of 13 without verifiable parental consent, and more broadly do not market to anyone under 18.

If you are a parent or guardian and you believe your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from a child without the required consent, we take steps to remove it from our systems.

Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service prior to the change becoming effective, and update the "effective date" at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact us

If you have any questions about this Privacy Policy, or wish to exercise any of the rights set out above, please contact us. We aim to respond to data-protection requests within one month, in line with UK GDPR.

• By email.contact@uprated.com
• By post.Uprated Ltd, 4 Upper Hinton Road, Bournemouth, BH1 2HH, United Kingdom