Free statement review

Privacy policy

Written to be read, not to be skipped. If anything here is unclear, email us and we will explain it.

Last updated: October 12, 2026

The short version

  • If you fill in the statement review form, we send your details to our payment-processing partners so they can call you.
  • We do not sell your information.
  • The calculators on this site send nothing anywhere. They run in your browser.
  • The Google Analytics tag loads on every page, but until you say yes it is told not to use analytics or advertising cookies. Saying no is one click and costs you nothing.
  • Ads only load if you say yes to advertising cookies.
  • Searches on the site are logged without your IP address, cookies or any ID.
  • You can ask us to delete everything we hold about you, at any time.

Who we are

RateCheckrr is operated by 18300275 Canada Inc., at Markham, Ontario, Canada. For anything to do with your personal information, contact hi@ratecheckrr.com.

Privacy Officer: Zee, Founder, RateCheckrr (18300275 Canada Inc.), hi@ratecheckrr.com

We are a referral service. We are not a payment processor and we never see your card numbers, your customers' card numbers, or your bank account.

What we collect

If you fill in the statement review form

Only what you type, plus a little about how you got here:

  • Your name, business name, email address and phone number
  • Your country, province or state, and city
  • Your type of business, how you take payments, your current provider, and a range for your monthly card sales
  • When you would like to be called, and anything you write in the notes box
  • Your consent: that you ticked the box, the exact wording you agreed to, and when
  • The page you submitted from, where you came from, and any campaign tags in the link you clicked
  • The country our security provider saw your request coming from

We do not ask for and do not want your card numbers, bank details, government ID numbers, or your customers' information.

If you use the contact form

The contact form asks for your name, your email address and your message. We send them by email to our inbox, hi@ratecheckrr.com, with your address set as the one we reply to, so we can answer you. The site stores nothing else from the form. Your address is never added to a marketing list. Cloudflare Turnstile runs on the form to tell people from bots, and the number of messages one visitor can send in a short time is limited.

If you just read the site

Every page loads the Google tag for Google Analytics 4. It starts in Google's "Consent Mode" with every type of consent set to "denied": analytics cookies, advertising cookies, and the use of your data for ads.

  • Before you choose, or if you say no: the Google tag still loads and tells Google that you have not consented. Google sets no analytics or advertising cookies in this state, but it may receive "cookieless pings": the page address and the actions listed below, without cookies.
  • If you accept analytics: Google Analytics 4 uses cookies and records which pages were visited and roughly where from, and the actions listed below. IP addresses are anonymised.
  • If you accept advertising: ads load on the pages that carry them, and Google may set cookies to show and measure those ads. Without this choice, no ads load.

The actions the site reports to Google, and the only details sent with each:

  • search: the words searched, with anything that looks like an email address, phone number or card number removed
  • cta_click: the page you were on when you clicked a "Free statement review" button or link
  • form_start: which form you started filling in, and the page it was on
  • generate_lead: which form was sent
  • tool_use: which calculator, or the statement decoder, you used
  • outbound_click: the name of the other website a link took you to

These never include your name, email address, phone number, business name or anything you type into a form.

If you use the search box: we keep a record of the words you searched, the date and time, how many results came back, and the page you searched from. Before it is stored, we remove anything that looks like an email address, a phone number or a card number, and we keep at most 100 characters. We do not store your IP address, use cookies, or link a search to you. We use these records to see what people look for and which searches find nothing. Each record is deleted automatically after 13 months. The records are stored with Cloudflare, our host. This happens whatever you choose in the cookie banner, because it uses no cookies and holds nothing that identifies you.

Our host, Cloudflare, keeps standard server logs for security. Cloudflare Turnstile runs on the form to tell people from bots.

What the tools collect

Nothing. The card fee calculator, the effective rate calculator and the statement decoder all run entirely in your browser. There is nothing to upload and nothing is sent to us. What you type into them is not saved anywhere: not in your browser's storage, not in a cookie, and not by us. That is deliberate: your statement has your account details on it, so the safest thing we can do is never receive it.

Why we collect it, and on what basis

WhatWhyBasis
Your form answers So a partner can review your statement and contact you Your consent, given when you ticked the box
Your consent record To prove what you agreed to, and when Legal obligation, and our legitimate interest in keeping records
Campaign tags and referrer To know which pages actually help people Your consent
Analytics cookies To improve the site Your consent
Cookieless signals sent to Google before or without consent To count visits and the actions listed above, without cookies Our legitimate interest in understanding how the site is used
Search records To see what people look for and which searches find nothing Our legitimate interest in improving the site
Security logs and Turnstile To keep the site up and block bots Our legitimate interest in security

Who we share it with

Our payment-processing partners. When you submit the form, your details go to one or more payment-processing partners, who review your statement and contact you. We choose them; you are not put into an open auction, and we do not sell your details to anybody who will pay for them.

Each partner becomes responsible for your information once they have it, under their own privacy policy. If you want to know which partners we currently work with before you submit the form, email us and ask.

We also use these service providers, who handle data on our behalf:

  • Airtable - stores the lead record
  • Brevo - sends the email that forwards your details to our partners, the confirmation email we send you, and contact form messages to our inbox
  • Cloudflare - hosts the site, runs the bot check on the forms, and stores the search records
  • Google - analytics (the Google tag loads on every page, in Consent Mode, as described above) and, on some pages, ads, which load only with your consent

We do not sell the details you give us on the statement review form or the contact form. Passing your form details to the partners you asked us to introduce you to is the service you requested, not a sale. When ads run on this site, Google and other ad vendors may use cookies for personalised ads, which some US state laws treat as "sharing". You can opt out of that, as described under "If you are in California or another US state with a privacy law" below.

We will also disclose information if the law requires it, or to protect our rights or somebody's safety.

Where your information goes

Our service providers operate in Canada, the United States and the European Union, so your information may be stored or processed outside the province, state or country you live in. While it is there, it can be accessed by the courts and authorities of that country.

Security and data breaches

If a confidentiality incident or breach involving personal information creates a risk of serious harm, we will notify the people affected and the relevant privacy authorities (the Office of the Privacy Commissioner of Canada, and Quebec's Commission d'accès à l'information where it applies), as required by law.

How long we keep it

  • Lead records: kept for 24 months after your details are sent to our payment-processing partners, then deleted.
  • Consent records: kept longer than the lead itself, because they are what proves you agreed.
  • Analytics: kept for the data retention period set in our Google Analytics 4 property.
  • Contact form messages: not stored on this site. They arrive in our email inbox, like any email.
  • Search records: deleted automatically after 13 months.
  • Security logs: kept for a short period by Cloudflare.

Your rights

Whatever province, state or country you are in, you can ask us to:

  • tell you what we hold about you
  • give you a copy of it
  • correct anything that is wrong
  • delete it
  • stop sending you anything
  • withdraw the consent you gave on the form

Email hi@ratecheckrr.com with the email address and business name you used, so we can find your record. We will not charge you and we will not treat you differently for asking.

Note that once your details have gone to a partner, you will need to ask them directly to delete their copy. Email us and we will tell you exactly who has them and how to reach them.

If you are in Quebec

Quebec's Law 25 gives you additional rights, including the right to ask for your information in a portable format, the right to know when a decision about you was made by automated means, and the right to ask for information to be de-indexed in some circumstances. Use the same address: hi@ratecheckrr.com. The person in charge of the protection of personal information is our Privacy Officer: Zee, Founder, RateCheckrr (18300275 Canada Inc.), hi@ratecheckrr.com.

If you are in California or another US state with a privacy law

You have the right to know what we collect, to have it deleted, to correct it, and to opt out of the sale or sharing of your personal information. When ads run on this site, visitors in US states that require it see Google's opt-out message for personalised ads, and can opt out there or with Google's settings listed under "Ads" below. Any of the other requests can go to the same address. You may use an authorised agent.

If you are in Canada, outside Quebec

PIPEDA applies. If you are unhappy with how we have handled your information, you can complain to the Office of the Privacy Commissioner of Canada.

Emails and calls

The consent you give on the form allows our partners to contact you by phone, text or email about your statement review. You can withdraw that at any time, either by telling the partner who contacted you or by emailing us.

After you submit the form we send you one confirmation email, so you have a record of the request and a reference number. That is a transactional message about something you asked for, not marketing. Any commercial email we send will have an unsubscribe link in it, as CASL requires.

No analytics or advertising cookies are set until you choose. The banner appears on your first visit and offers three buttons:

  • Accept all allows analytics cookies and advertising cookies.
  • Choose lets you tick only the ones you want, for example analytics only, and then save. Advertising stays off unless you tick it.
  • Reject all keeps both off. The Google tag stays in its "denied" state.

Your choice is saved in your browser, not on our servers, and applied on every page before anything is sent to Google. You can change or withdraw it at any time with the "Change cookie settings" button below, which opens the cookie banner again. Clearing your browser's site data also clears the choice, and the banner appears again.

Google's own settings

Ads

Some explainer pages may carry Google AdSense ads. Ads only load if you accept advertising cookies. When they run:

  • Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites.
  • Google's use of advertising cookies lets it and its partners serve ads to you based on your visits to this site and other sites on the internet.
  • Personalised ads are chosen using those cookies and your past visits. Non-personalised ads are chosen from the page you are reading and your general location, without a profile of your visits.
  • Visitors in the European Economic Area, the United Kingdom and Switzerland see Google's consent message before any ads are personalised. Visitors in US states that require it see Google's message for opting out of personalised ads.

Ways to opt out of personalised ads:

Children

This site is for businesses. It is not directed at children and we do not knowingly collect information from anyone under 18.

Changes to this policy

If we change it, we will update the date at the top. If a change materially affects how we use information you already gave us, we will ask you again rather than assume.

Contact

hi@ratecheckrr.com
18300275 Canada Inc.
Markham, Ontario, Canada