Privacy notice
Last updated 17 October 2026
Pre-launch draft. The operator’s legal name and registered address will be published here before RateMe.ie accepts payments from the public.
Who we are
The data controller is the operator of RateMe.ie. Contact us about privacy at support@rateme.ie.
Reviewers
| Data | Why | Lawful basis | Kept |
|---|---|---|---|
| Email address | Confirm the review, let you manage it, tell you about automated decisions and ask you to reconfirm if your review is disputed | Legitimate interests (review integrity); contract | While the review exists, then up to 12 months |
| Display name, rating, review text, experience month/type | Publishing your review | Contract (our terms) | Until you withdraw it or it’s removed |
| Keyed hash of your IP address | Preventing spam, fake and duplicate reviews | Legitimate interests | 90 days |
| Unconfirmed reviews | Waiting for email confirmation | Legitimate interests | Deleted after 14 days |
Your email is never published or shown to the business. Please don’t include sensitive personal data (for example health information) in a review.
Business account holders
| Data | Why | Lawful basis | Kept |
|---|---|---|---|
| Name, email, password (hashed) | Your account | Contract | Until you delete your account |
| Verification evidence, phone number | Checking you own or manage the business | Legitimate interests (preventing impersonation) | Up to 2 years after the decision |
| Billing records (no card numbers) | Membership, invoices, tax law | Contract; legal obligation | 6 years (Irish tax rules) |
| Audit records of sensitive actions | Security and accountability | Legitimate interests | Up to 2 years |
Business listings
Listings contain business information. Sole traders’ listings may include their name. We don’t publish home addresses unless the business chooses to; you can ask us to correct or remove inaccurate details via the listing’s “report incorrect information” link.
Processors we use
- Vercel Inc. — hosting.
- Supabase Inc. — database, hosted in the EU (Ireland).
- Stripe Payments Europe Ltd — payment processing. Card details go directly to Stripe; we never see or store them.
- Our transactional email provider — sending account and review emails.
Some processors may transfer data outside the EEA under the European Commission’s standard contractual clauses or adequacy decisions.
Cookies
We use one strictly necessary cookie to keep you signed in. See the cookie policy.
Your rights
You can ask to access, correct, erase, restrict or port your data, and object to processing based on legitimate interests. Account holders can download their data and delete their account from Account settings. Anyone can use our privacy request form. We reply within one month. You can also complain to the Data Protection Commission (dataprotection.ie).
Automated decisions
Reviews are moderated automatically, without human review. Automated rules can reject a review (for example a conflict of interest) or remove it if the reviewer doesn’t reconfirm it after a dispute. We always tell you which rule applied, and you can restore a removed review by reconfirming it, write a new review, or contact us to object to an automated decision.