Summary: We collect only the information we need to provide our services. We never sell your data. We use it to respond to your enquiries, deliver services, and improve our website. You have the right to access, correct, or delete your data at any time.

1. Data Controller

In plain English: Rankure is responsible for how your data is handled.

RANKURE LLC is the data controller for personal data collected through rankure.io. Registered in Wyoming, USA. Operational address: 1550 Wilson Blvd, Arlington, VA 22209. UK representative address: Tudor Road, Hayes, London. UAE address: Burj Al Salam, Office 16/21, Sheikh Zayed Road, Dubai.

Privacy contact: privacy@rankure.io

2. Scope

In plain English: This policy covers everyone who visits our site or works with us.

This Privacy Policy applies to personal data collected from website visitors, enquiry submitters, newsletter subscribers, and clients of Rankure globally. It governs collection, use, storage, transfer, and deletion of personal data in compliance with the GDPR (EU) 2016/679, UK GDPR, California Consumer Privacy Act (CCPA), and UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL).

3. Data We Collect

In plain English: We collect only what we need - contact details you give us, and anonymous analytics.

(a) Information you provide: name, email, phone, company name, job title, service interests, budget range, and message content submitted via contact forms or enquiries.

(b) Automatically collected: IP address, browser type, pages visited, session duration, referring URL, and device type via Google Analytics 4.

(c) Service delivery data: account credentials, platform access, and business information provided by clients for the purpose of delivering agreed services.

4. Legal Bases for Processing

In plain English: We only process your data when we have a proper legal reason to do so.

(a) Contract performance - processing necessary to deliver services you have engaged us for (GDPR Art. 6(1)(b)).

(b) Legitimate interests - responding to enquiries, improving our services, and direct marketing to existing clients (GDPR Art. 6(1)(f)).

(c) Consent - newsletter subscriptions and non-essential cookies (GDPR Art. 6(1)(a)).

(d) Legal obligation - compliance with applicable law including tax, accounting, and anti-fraud requirements (GDPR Art. 6(1)(c)).

5. How We Use Your Data

In plain English: We use your data to respond to you, deliver services, and improve how we work. Nothing else.

Personal data is used to: respond to enquiries; deliver contracted services; issue invoices and manage accounts; send service-related communications; send our newsletter where you have opted in; analyse and improve website performance; prevent fraud and ensure system security; and comply with legal obligations.

We do not use personal data for automated decision-making that produces legal or similarly significant effects.

6. Data Retention

In plain English: We keep your data only as long as necessary. Client records are kept 7 years for legal compliance.

Retention periods: Enquiry data - 2 years from last contact. Client engagement data - 7 years from contract end date (legal and accounting compliance). Newsletter subscribers - until unsubscription. Website analytics - 14 months (Google Analytics default).

After retention periods expire, data is securely deleted or anonymised.

7. Sub-Processors and Data Sharing

In plain English: We use a small number of trusted third-party tools. We never sell your data.

We do not sell personal data. We share data only with the following sub-processors where necessary to deliver services: Google LLC (Analytics, Tag Manager, Ads - USA); Hostinger UAB (web hosting - Lithuania, EU-US DPF certified); email service providers for transactional communications; payment processors for invoice processing (card data is not stored by Rankure).

All sub-processors are bound by data processing agreements and applicable privacy law.

8. International Data Transfers

In plain English: Your data may be processed in the US or other countries. We ensure legal safeguards are in place.

Rankure operates from the US, UK, and UAE. Data transfers from the EEA or UK to third countries are protected by Standard Contractual Clauses (SCCs) approved by the European Commission or UK ICO respectively, adequacy decisions where applicable, or the EU-US/UK-US Data Privacy Framework for US-based sub-processors.

9. Your GDPR Rights (EEA and UK)

In plain English: You can access, correct, or delete your data at any time. Just ask.

You have the right to: access personal data held about you; rectification of inaccurate data; erasure ("right to be forgotten") where no overriding legal basis exists; restriction of processing pending dispute resolution; data portability in machine-readable format; object to processing based on legitimate interests; and withdraw consent at any time without affecting prior processing.

Requests are responded to within 30 days. Submit requests to: privacy@rankure.io

10. Your CCPA Rights (California Residents)

In plain English: California residents have the right to know what data we have, request deletion, and opt out of any sale - we do not sell data.

Under the California Consumer Privacy Act, California residents have the right to: know what personal information is collected; know whether personal information is disclosed and to whom; opt out of the sale of personal information (Rankure does not sell personal information); request deletion of personal information subject to legal exceptions; and non-discrimination for exercising CCPA rights.

Submit requests to: privacy@rankure.io or (844) 677-1981.

11. UAE PDPL Rights

In plain English: UAE-based individuals can request access, correction, or deletion of their data under UAE law.

Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, individuals in the UAE have the right to access, correct, and request deletion of personal data. Rankure's UAE representative can be contacted at: Burj Al Salam, Office 16/21, Sheikh Zayed Road, Dubai. Email: privacy@rankure.io

12. Cookies

In plain English: We use minimal cookies. Essential ones keep the site working. You can opt out of analytics.

(a) Essential cookies - required for site functionality; cannot be disabled.

(b) Analytics cookies - Google Analytics 4 for anonymous traffic analysis; can be disabled via browser settings or cookie consent tool.

(c) Marketing cookies - loaded via Google Tag Manager only where active advertising campaigns are running; controlled via consent banner.

Cookie preferences can be updated at any time via the consent tool on our website.

13. Security and Data Breach Notification

In plain English: We protect your data with industry-standard security measures and will notify you promptly if a breach occurs.

Rankure implements appropriate technical and organisational security measures including TLS encryption, access controls, and regular security reviews.

In the event of a personal data breach likely to result in risk to individual rights, Rankure will: notify the relevant supervisory authority within 72 hours of becoming aware; notify affected individuals without undue delay where the breach is likely to result in high risk to their rights and freedoms.

14. Children

In plain English: Our services are for businesses and professionals. We do not knowingly collect data from anyone under 16.

Rankure's services are directed exclusively at business entities and professional individuals aged 18 or over. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that personal data has been collected from a minor, it will be deleted immediately.

15. Policy Changes

In plain English: We will update this page when the policy changes and notify active clients of significant changes.

Rankure may update this Privacy Policy to reflect changes in practice or applicable law. The "Last updated" date reflects the current version. Active clients will be notified of material changes by email. Continued use of our services following notification constitutes acceptance.

16. Supervisory Authorities and Contact

In plain English: If you have a concern we cannot resolve, you can escalate to your local data protection regulator.

UK residents may lodge a complaint with the Information Commissioner's Office (ico.org.uk). EEA residents may contact their local data protection authority. UAE residents may contact the UAE Telecommunications and Digital Government Regulatory Authority.

Primary privacy contact: privacy@rankure.io | 1550 Wilson Blvd, Arlington, VA 22209, USA.

Questions about this policy? Contact us and we'll respond within 24 hours.