Privacy Policy
Last updated: 13 March 2026
1. Introduction
ChallengeMyRates ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
By using our services, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
We collect information you provide directly, including:
- Email address and contact details
- Property information (postcode, address, UARN)
- Business rates bill information (if you upload documents)
- Payment information (processed securely by Stripe)
- Communications with our support team
2.2 Automatically Collected Information
We automatically collect:
- Device and browser information
- IP address and location data
- Usage data and analytics
- Cookies and similar tracking technologies
3. How We Use Your Information
We use your information to:
- Provide and improve our services
- Process business rates checks and challenges
- Communicate with you about your case
- Process payments and subscriptions
- Send service updates and marketing communications (with consent)
- Comply with legal obligations
- Detect and prevent fraud
4. Legal Basis for Processing (GDPR)
We process your personal data under:
- Contract: To provide our services and fulfill our agreement with you
- Consent: For marketing communications and non-essential cookies
- Legitimate interests: To improve our services, detect fraud, and ensure security
- Legal obligation: To comply with tax, accounting, and regulatory requirements
5. Data Sharing and Disclosure
We do not sell your personal data. We may share your information with:
- Service providers: Stripe (payments), Supabase (database), Resend (email)
- VOA and local councils: When submitting challenges or claims on your behalf
- Legal authorities: When required by law or to protect our rights
- Professional advisors: Lawyers, accountants, and consultants when necessary
6. Data Retention
We retain your personal data for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Typically:
- Active customer data: Duration of subscription plus 7 years (UK tax law)
- Marketing data: Until you withdraw consent
- Anonymized analytics: Indefinitely
7. Your Rights (GDPR)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data (subject to legal obligations)
- Restriction: Limit how we use your data
- Portability: Receive your data in a machine-readable format
- Object: Object to processing based on legitimate interests
- Withdraw consent: Opt out of marketing or cookie consent at any time
To exercise these rights, contact us at privacy@challengemyrates.co.uk
8. Security
We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure.
9. Cookies
We use essential cookies to provide our services and optional cookies for analytics and marketing. See our Cookie Policy for details.
10. International Transfers
Your data may be transferred to and processed in countries outside the UK/EEA. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
11. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice on our website.
13. Contact Us
For privacy questions or to exercise your rights:
Email: privacy@challengemyrates.co.uk
Address: ChallengeMyRates, Farthing Corner, West Tytherley, Salisbury, SP5 1NR
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk