GDPR and Data Rights

Last updated: 4 June 2026

RatedBooking is operated by Asgarbyte Limited. This page explains how users, customers, providers, and provider staff can exercise data protection rights under the UK GDPR, EU GDPR, and other applicable privacy laws.

1. Controller

For RatedBooking accounts, platform security, country marketplace operation, notifications, subscriptions, admin tools, support requests, and platform communications, Asgarbyte Limited acts as the platform controller.

Independent service providers may also act as separate controllers for customer information they receive and use outside RatedBooking, such as service delivery records, invoices, or direct customer communication.

2. Your Rights

Depending on your location and applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to processing, data portability, withdrawal of consent where processing is based on consent, and information about automated decision-making where applicable.

3. How to Make a Request

Send privacy and data-rights requests to privacy@ratedbooking.com. Registered users can also contact support from the Contact page after logging in. We may ask for information needed to verify your identity before acting on a request.

4. Response Time

We aim to respond to valid data-rights requests within one month where GDPR applies. If a request is complex or multiple requests are made, the response period may be extended where allowed by law, and we will explain the reason.

5. Data We May Need to Keep

Some records may need to be kept for security, fraud prevention, audit logs, accounting, dispute handling, legal claims, provider obligations, or compliance with laws. If deletion is not possible immediately, we will explain the reason where legally appropriate.

6. International Processing

RatedBooking is designed as one shared platform with country-separated access. Data may be processed by hosting, email, payment, monitoring, analytics, and support providers. Where legally required, transfers outside the UK or EEA should rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

7. Security Measures

RatedBooking uses HTTPS deployments, authenticated access, role-based permissions, country filtering, provider ownership checks, email verification, hashed passwords, hashed refresh tokens, rate limits, audit logs, admin controls, and first-party API client access checks. No online system can be guaranteed perfectly secure, but the platform is designed with layered controls.

8. Complaints

You may have the right to complain to your local data protection authority. In the UK, this is the Information Commissioner's Office. We encourage you to contact us first so we can try to resolve the issue quickly.

9. Related Policies

Please also read the Privacy Policy, Cookie Policy, and Terms and Conditions.