Privacy Policy

Last updated: 11 February 2026

Rated M Ltd (“Rated M”, “we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal data we collect via ratedm.co.uk, why we collect it, how we use it, how long we keep it, and the rights you have under UK law.

We handle personal data in line with the UK GDPR and the Data Protection Act 2018.

1) Who we are (Data Controller)

Company name: Rated M Ltd
Mailing address: 320 City Road, London, England, EC1V 2NZ
Privacy contact email: ukgdpr@ratedm.co.uk

Rated M Ltd is the data controller for personal data collected through our website.

2) What personal data we collect

2.1 Data you provide to us (Contact Form)

When you contact us via the website contact form, we collect the information you submit. This usually includes:

  • Your name

  • Your email address

  • The details of your enquiry (whatever you choose to write)

2.2 Data collected automatically (Website Analytics)

Our website is hosted on Squarespace. Squarespace collects standard analytics about how visitors use the site, such as:

  • Country/region level location (general, not precise)

  • Device type (e.g. desktop/mobile)

  • Pages viewed, and time spent on pages

  • General website interaction/performance data

3) How we use your data

3.1 Responding to your enquiry

We use contact form information to:

  • Reply to your message

  • Discuss potential representation or services

  • Keep internal records of relevant business enquiries (where appropriate)

We do not use contact form submissions for marketing.

3.2 Improving the website

We use Squarespace analytics to:

  • Understand how people use the site

  • Improve navigation, content, and overall website experience

  • Keep the website relevant and usable

4) Lawful basis for processing (UK GDPR)

We process personal data under these lawful bases:

4.1 Legitimate interests

  • Responding to enquiries and running our business efficiently

  • Maintaining internal records of enquiries (where relevant)

  • Understanding website usage and improving the website

4.2 Contract (pre-contract steps)

If your enquiry is about working with us, we may process your information to take steps you request before entering a contract.

5) How long we keep your data (Retention)

5.1 Contact form enquiries

We keep enquiry information only as long as necessary to deal with your request and for reasonable business record-keeping. Once it’s no longer needed, we securely delete it.

5.2 Analytics data

Analytics data is collected via Squarespace. Retention is controlled by Squarespace and our account settings. We don’t use analytics to try to identify you.

6) Who we share your data with

6.1 Squarespace (Website hosting + forms + analytics)

Our website is hosted on Squarespace. This means Squarespace processes:

  • Contact form submissions (so they can be delivered to us)

  • Website analytics information (so we can see how the site is used)

We don’t sell your personal data, and we don’t share contact form data with third parties for marketing.

6.2 Legal and safety reasons

We may share data if we’re legally required to, or if it’s necessary to protect our rights, users, or systems.

7) International data transfers

Squarespace is a third-party provider and may process or store data outside the UK. Where personal data is transferred internationally, appropriate safeguards are used (for example, contractual protections approved under UK data protection law).

8) Cookies

Squarespace uses cookies and similar technologies for website functionality and analytics.

  • You can control cookies through your browser settings.

  • If we ever add non-essential tracking beyond basic site operation, we should implement clear cookie controls so you can choose (this policy would also need updating).

9) Keeping your data secure

We take reasonable steps to protect your personal data and limit access to those who need it for legitimate business reasons. No website can guarantee absolute security, but we do not treat security casually.

10) Your rights (UK GDPR)

You have rights over your personal data, including:

  • Access: request a copy of the personal data we hold about you

  • Rectification: ask us to correct inaccurate or incomplete data

  • Erasure: ask us to delete your data (where the law allows)

  • Restriction: ask us to limit how we use your data (in certain cases)

  • Objection: object to processing based on legitimate interests (in certain cases)

To exercise any right, email ukgdpr@ratedm.co.uk.

11) Complaints

If you’re unhappy with how we handle your data, contact us first at ukgdpr@ratedm.co.uk and we’ll address it.

You also have the right to complain to the UK regulator:
Information Commissioner’s Office (ICO).

12) Third-party links (Instagram & LinkedIn)

Our website includes links to third-party sites (e.g., Instagram and LinkedIn). If you click those links, you leave our website. Their privacy practices are governed by their own policies — we don’t control what they collect.

13) Children

Our website is not intended for children, and we do not knowingly collect personal data from children.

14) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be posted on the website with the updated date.