Privacy Policy

Effective date: 1 July 2026 · Last updated: July 2026

1. Who we are

RateRadar is a product of Watchtower Analytics Limited, registered in England and Wales (company number 16073370). Our registered office is 236 Kingsley Road, Hounslow, Middlesex, United Kingdom.

Watchtower Analytics Limited is the data controller for the personal data described in this policy. If you have any questions about how we handle your data, contact us at info@watchtower-analytics.com.

2. What personal data we collect and why

Hotel customers (subscribers to RateRadar)

When a hotel signs up for RateRadar we collect:

• Hotel name and address
• Contact name
• Contact email address and telephone number
• Login email address (which may be the same as the contact email)
• Billing information — handled securely by Stripe (our payment processor). We do not store card numbers or full payment details on our systems.

We use this information to provide the RateRadar service, communicate with you about your account, send you the reports and recommendations that form the core of the service, and process payments.

Newsletter subscribers

If you sign up for our market intelligence newsletter we collect your email address only. We use it solely to send you the newsletter. You can unsubscribe at any time using the link in any newsletter email.

Website visitors

We do not use website analytics tools such as Google Analytics. We do not track visitors across other websites. The only data collected when you visit our website is what your browser sends as part of any normal HTTP request, which is handled by our UK-based hosting infrastructure in the ordinary course of serving web pages and is not retained or processed by us for any other purpose.

3. Legal basis for processing

We process personal data on the following legal bases under UK GDPR:

• Contract — processing necessary to provide the RateRadar service to hotel customers, including account management, service delivery, and billing.
• Legitimate interests — sending the market intelligence newsletter to subscribers who have opted in, and maintaining records necessary to manage our business, where these interests are not overridden by your rights.
• Consent — where we ask for your consent to retain your data beyond the standard retention period to allow easy reactivation, processing is conditional on that consent and you may withdraw it at any time.
• Legal obligation — retaining financial records as required by UK law.

4. How long we keep your data

We retain personal data for as long as your account is active. After you close your account:

• Your personal data is retained for six months to allow reactivation of your account if you change your mind, then deleted.
• If you give explicit consent at the time of cancellation, we may retain your data for up to 12 months for the same purpose. You can withdraw this consent at any time by emailing us.
• Financial and transaction records may be retained for up to seven years to comply with HMRC requirements, containing only the minimum necessary personal data.

Newsletter subscriber data is retained until you unsubscribe.

5. Who we share your data with

We do not sell personal data. We share data only with:

• Stripe — our payment processor. Stripe processes billing information on our behalf under their own privacy policy and in compliance with PCI-DSS standards. See stripe.com/gb/privacy.
• Our hosting provider — our platform runs on UK-based servers. The hosting provider has access to the infrastructure but operates under contractual obligations that preclude use of your data for any other purpose.

We may disclose personal data if required to do so by law or in response to a valid request by a public authority.

6. Cookies

RateRadar uses only essential cookies. We do not use advertising, tracking, or analytics cookies.

• Session cookie (PHPSESSID) — set when you log in. Keeps you logged in during your session and is deleted when your session expires or you log out. Strictly necessary for the service to function.
• Cookie preference cookie — set when you dismiss our cookie notice. Contains no personal data.

Because we use only essential cookies, disabling cookies in your browser will prevent you from logging in to RateRadar.

7. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing based on legitimate interests. Where processing is based on consent you may withdraw it at any time.

To exercise any of these rights, contact us at info@watchtower-analytics.com. We will respond within one month.

8. Data security

We take reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), session-based authentication with configurable inactivity timeouts, and access controls. No method of transmission over the internet is completely secure and we cannot guarantee absolute security.

9. Transfers outside the UK

Your personal data is stored on UK-based servers. Our payment processor Stripe may transfer data internationally as part of their global infrastructure, governed by their own data transfer mechanisms in compliance with UK GDPR.

10. Changes to this policy

We may update this policy from time to time. We will notify active subscribers of material changes by email. The effective date at the top of this page shows when it was last updated.

11. Complaints

If you have concerns about how we handle your personal data, please contact us at info@watchtower-analytics.com in the first instance.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.