Legal

Privacy Policy

This policy explains what personal information Web & Rank collects when you use this website or work with us, why we collect it, who we share it with and the choices you have. We have written it to be read, not skimmed past.

Last updated 19 September 2026
Web & Rank LTD and Web & Rank LLC
The short version
01

Who we are

Web & Rank is a web development, SEO and automation agency. The business is run by Web & Rank LTD, a company registered in Scotland, United Kingdom, and Web & Rank LLC, a company registered in Wyoming, United States. In this policy, “Web & Rank”, “we”, “us” and “our” mean both companies.

For most personal information, the company you deal with is the data controller. If you are in the UK, Europe or Australia, that is usually Web & Rank LTD. If you are in the United States, it is usually Web & Rank LLC. Your proposal or invoice shows which company you are working with.

You can reach us about anything in this policy at hello@webnrank.com.

02

Information we collect

Information you give us. When you fill in our contact form we ask for your name, email address, phone number, current website, the service you need and a message about your project. We also keep what you send us by email, chat, phone or video call, and anything you share during a project, such as content, brand files, logins and access to your website, hosting or marketing accounts.

Billing information. When you pay us we keep your name, business name, billing address, what you bought and when you paid. Card and bank details are entered with our payment providers, such as PayPal, and we never see or store full card numbers.

Information collected automatically. Like most websites, our hosting records basic technical data when you visit, such as your IP address, browser type, the pages you view and the time of your visit. This is used to keep the site secure and working.

Information from other services. If you hire us through Fiverr or Upwork, we receive the details those platforms share with us, such as your username, messages and order details. If you book a call through Cal.com, we receive the name, email and notes you enter when booking.

03

How we use your information

We use your information to:

  • reply to your enquiry and prepare proposals and quotes
  • deliver the work you hire us for, including building, fixing, maintaining and optimising your website and marketing systems
  • send invoices, take payments and keep business and tax records
  • provide support and let you know about issues with work we have done
  • keep our website and your accounts secure
  • improve our services, for example by learning which pages people find useful
  • meet our legal obligations

We only send you marketing emails if you have asked for them or you are an existing client and the email is about similar services. Every marketing email has a simple way to unsubscribe.

04

Our legal reasons for using it

If you are in the UK or the European Economic Area, data protection law requires us to have a legal basis for using your information. We rely on:

  • Contract: to prepare a proposal you asked for and to deliver the work you hire us for.
  • Legitimate interests: to reply to enquiries, run and protect our business and website, and improve our services, where this does not override your rights.
  • Legal obligation: to keep financial records and respond to lawful requests.
  • Consent: for anything optional, such as marketing emails you sign up for. You can withdraw consent at any time.
05

Data on your website and in your systems

When we work on your website, online store, CRM or other systems, we may be able to see personal information about your own customers, such as orders, form entries or contact records. In that case you remain responsible for that information and we act on your instructions as a processor or service provider.

We only access what we need to do the job, we do not use it for our own purposes and we keep it confidential. If you need a data processing agreement for your records, email us and we will sign one.

06

Cookies

Cookies are small files a website stores on your device. This website currently uses only the cookies it needs to work and stay secure, such as cookies that keep the site fast and protect our forms from spam. We do not use advertising cookies or sell browsing data.

Our pages load fonts from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with Google. If we add analytics or any other non-essential cookies in future, we will update this policy and, where the law requires it, ask for your consent first.

You can block or delete cookies in your browser settings. Some parts of the site may not work properly if you block essential cookies.

07

Who we share it with

We do not sell your personal information. We share it only with people and services that help us run the business, and only as much as they need:

  • our team members and trusted contractors, who are bound by confidentiality
  • our website host and email providers, which store and deliver our data
  • Cal.com, when you book a call with us
  • payment providers such as PayPal and our bank, when you pay an invoice
  • Fiverr and Upwork, when you hire us through those platforms
  • accountants, lawyers and other professional advisers, where needed
  • police, courts or regulators, if the law requires it
  • a buyer or successor, if our business is ever sold or reorganised, under the same protections
08

International transfers

Our team works from the United States, the United Kingdom and Pakistan, and some of our service providers store data in other countries. This means your information may be accessed or stored outside the country where you live.

When we transfer personal information out of the UK or the European Economic Area, we use safeguards required by law, such as the UK International Data Transfer Agreement or the European Commission’s standard contractual clauses, or we rely on an adequacy decision.

09

How long we keep it

  • Enquiries that do not become projects are kept for up to 24 months after our last contact, then deleted.
  • Client and project records are kept for as long as we work together and for six years afterwards, so we can support your work and meet tax and accounting rules.
  • Logins and access you share for a project are removed or returned when the project ends, unless you ask us to keep them for ongoing support.
  • Technical logs are kept for a short period, normally no more than 90 days, unless we need them to investigate a security issue.
10

How we protect it

We use reasonable technical and organisational measures to protect your information, including secure connections, access controls, strong passwords and two-factor authentication on the accounts we use, and limited access on a need-to-know basis. When you share logins with us, we store them in a password manager rather than in email or documents where possible.

No system is completely secure. If we become aware of a breach that affects your personal information, we will tell you and the relevant regulator where the law requires it.

11

Your rights

Depending on where you live, you may have the right to:

  • ask for a copy of the personal information we hold about you
  • ask us to correct information that is wrong or incomplete
  • ask us to delete your information
  • object to, or ask us to limit, how we use it
  • ask us to transfer it to you or another company in a common format
  • withdraw consent where we rely on it

If you are in California or another US state with a privacy law, you can ask what personal information we have collected about you and ask us to delete or correct it. We do not sell or share personal information for cross-context behavioural advertising, and we will not treat you differently for using your rights.

If you are in Australia, you can ask to access and correct the personal information we hold about you under the Australian Privacy Principles.

To use any of these rights, email hello@webnrank.com. We may need to confirm your identity first, and we will reply within one month, or sooner where the law requires it.

12

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to a data protection regulator. In the UK this is the Information Commissioner’s Office (ico.org.uk). In Australia it is the Office of the Australian Information Commissioner (oaic.gov.au). In the European Union, you can contact the supervisory authority in your country.

13

Children

Our website and services are for businesses and adults. We do not knowingly collect personal information from anyone under 16. If you think a child has sent us their details, contact us and we will delete them.

14

Changes to this policy

We may update this policy when our services, the tools we use or the law changes. The date at the top of the page shows when it was last updated. If we make a significant change, we will make it clear on this page and, where appropriate, tell our clients directly.

Questions about your data?

Email us and a real person will reply within one business day. You can also ask for a copy of your data, or for it to be deleted, at the same address.