Privacy Policy

ComplaintRate.com is operated by No Sleep Studios Ltd, a company registered in England and Wales. We publish independent analysis of US bank complaint data sourced from the Consumer Financial Protection Bureau (CFPB), a US federal agency. References to “we”, “us”, or “our” in this policy refer to No Sleep Studios Ltd.

For privacy-related queries, contact us at: complaintrate.com/contact

Email addresses. If you sign up to watch an institution via the “Watch this institution” feature, we collect your email address. This is stored securely in our database and used only to send you alerts about that institution's complaint rate. We do not sell or share your email address with third parties.

Contact form submissions. If you contact us via the contact form at /contact, we collect your name, email address, and message content in order to respond to your enquiry.

Analytics data. We use analytics software to understand how visitors use our site. This may include pages visited, time on site, browser type, and approximate location (country/region level). Where analytics cookies are used, we obtain your consent first via our cookie banner.

Technical data. Our servers automatically log standard technical information including IP addresses, browser type, and pages requested. These logs are used for security and performance purposes and are not used to identify individuals.

We use the data we collect to:

• Send you email alerts about institutions you have chosen to watch (email address)
• Respond to your enquiries submitted via our contact form
• Understand how our site is used so we can improve it (analytics)
• Detect and prevent abuse, fraud, or security incidents (technical logs)

Our lawful basis for processing your email address for alerts is consent — you explicitly provide it to receive that service. Our lawful basis for analytics (where applicable) is also consent, obtained via our cookie banner. Our basis for contact form processing and security logging is legitimate interests.

Email addresses and contact form submissions are stored in Supabase, a cloud database provider with servers in the European Economic Area. We take reasonable technical measures to protect your data from unauthorised access.

We do not store payment card details. Any future payment processing will be handled by Stripe, a PCI-DSS compliant payment processor. We never see or store your card number.

We retain email addresses collected for institution alerts until you unsubscribe or request deletion. Contact form submissions are retained for up to 12 months. Technical server logs are retained for up to 90 days.

Under UK data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your personal data
• Restriction — ask us to limit how we use your data
• Portability — request your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, where we rely on consent

To exercise any of these rights, contact us via /contact. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We use cookies for site functionality and, with your consent, for analytics. For full details, see our Cookie Policy.

We use the following third-party services that may process your data:

• Supabase — database storage (EEA servers)
• Vercel — website hosting and content delivery
• Cloudflare — DNS and DDoS protection
• Resend — transactional email delivery (when alerts are sent)

Each provider operates under their own privacy policy and data processing agreements.

ComplaintRate is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

We may update this policy from time to time. The “last updated” date at the top of this page will reflect any changes. Continued use of ComplaintRate after a policy update constitutes acceptance of the revised policy.