Privacy Policy

Rank Engine is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Website and Services.

1. Definitions

• “Company”, “we”, “our” means Rank Engine Ltd.
• “Website” means rankengine.com.
• “Platform” means the Rank Engine online dashboard and related web interfaces available to registered users.
• “Services” means the SEO, link-building, content and related services we provide via the Platform.
• “Account” means a registered user account on the Platform.
• “Personal Data” means any information relating to an identified or identifiable natural person.
• “Usage Data” means information collected automatically when you visit or use the Website/Platform (for example, IP address, device identifiers, pages viewed, and time on page).
• “Cookies” means small files placed on your device that store settings and Usage Data.
• “Controller” means the entity that determines the purposes and means of processing Personal Data (Rank Engine Ltd. is the Controller for processing described herein).

2. Who We Are

Rank Engine Ltd. is the Controller of your Personal Data processed under this Privacy Policy. If you have questions or wish to exercise your rights, see Contact below.

3. What We Collect

3.1 Information you provide to us

• Account details: e-mail address, username, password, and billing address when you create an Account.
• Order and project data: URLs, anchor text, content guidelines, approval decisions, messages, and other materials you submit.
• Support correspondence: e-mails and related metadata when you contact support.
• Marketing preferences: your opt-in/opt-out choices for marketing communications and push notifications.

3.2 Information we collect automatically

• Usage Data: IP address, device identifiers, browser type/version, pages visited, date/time, time spent on pages, and diagnostic data.
• Cookies and similar technologies: we use essential, functional, performance, and marketing Cookies. See Cookies.
• Server logs: requests made to our Services, including IP address and user agent, for security and operational purposes.

3.3 Payment information

Payments are processed by our payment processor(s) (currently PayPal). Card details are submitted directly to the processor and are not stored on our servers. The processor may act as an independent controller for certain processing. Please review their privacy notices for more information.

4. How We Use Your Information (Purposes & Lawful Bases)

We process Personal Data fairly, lawfully, and in accordance with applicable laws (including the UK GDPR/EU GDPR and the CCPA/CPRA, as applicable). Our purposes and lawful bases include:

• Provide and operate the Services (create and manage Accounts, deliver orders, approvals, reporting). Lawful basis: performance of a contract and legitimate interests.
• Customer support (respond to queries, resolve issues). Lawful basis: performance of a contract and legitimate interests.
• Security and fraud prevention (detect, prevent, and investigate abuse or fraud; protect our systems). Lawful basis: legitimate interests and legal obligations.
• Service improvement and analytics (diagnostics, performance, and product development). Lawful basis: legitimate interests; for non-essential Cookies, consent.
• Marketing communications (news and offers where you have opted in). Lawful basis: consent; you may withdraw consent at any time.
• Legal compliance (tax, accounting, regulatory requests). Lawful basis: legal obligations.

5. Sharing Your Information

We may share Personal Data with:

• Service providers/Processors (e.g., hosting, analytics, support tools) under contracts that require appropriate safeguards and confidentiality.
• Payment processors (currently PayPal) to process transactions. They may process your data as independent controllers for some activities.
• Publishers/third-party platforms solely as necessary to deliver ordered Services (for example, to place agreed content/links).
• Professional advisers (legal, accounting) and authorities where required by law.
• Corporate transactions in connection with a merger, acquisition, or asset transfer. You will be notified of any material change affecting your Personal Data.

California (CCPA/CPRA): We do not sell Personal Information for money. If we engage in cross-context behavioural advertising, we will provide a means to opt out (“Do Not Sell or Share My Personal Information”) and honour Global Privacy Control signals where legally required.

6. International Transfers

Where we transfer Personal Data outside the European Economic Area or the United Kingdom (for example, to service providers), we implement appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Agreement/Addendum, together with supplementary measures where necessary.

7. Retention

We retain Personal Data only for as long as necessary for the purposes set out in this Policy, including to meet legal, accounting, or reporting requirements. Typical periods are:

• Account data: for the life of the Account and then for the longer of six (6) years or any period required by applicable tax and accounting laws.
• Order/project data: for the life of the Account and up to six (6) years thereafter.
• Support correspondence: up to 24 months after resolution; where you delete your Account, we delete or anonymise support threads within 90 days unless needed for legal claims or compliance.
• Usage logs: typically 12 months, unless required longer for security, fraud prevention, or legal reasons.
• Marketing data: until you opt out, or after 24 months of inactivity, whichever is sooner.

8. Your Rights

8.1 EU/UK GDPR rights

• Access to your Personal Data and to obtain a copy.
• Rectification of inaccurate or incomplete data.
• Erasure (“right to be forgotten”) in certain circumstances.
• Restriction of processing in certain circumstances.
• Portability of data you provided to us, in a structured, commonly used, machine-readable format.
• Objection to processing based on legitimate interests and to direct marketing at any time.
• Withdraw consent where processing is based on consent.
• Complaint to a supervisory authority. In Malta, this is the Office of the Information and Data Protection Commissioner (IDPC).

We may request information to verify your identity before responding.

8.2 California (CCPA/CPRA) rights

• Right to know the categories and specific pieces of Personal Information we have collected about you.
• Right to delete Personal Information, subject to legal exemptions.
• Right to correct inaccurate Personal Information.
• Right to opt out of the sale or sharing of Personal Information for cross-context behavioural advertising (if applicable).
• Right to non-discrimination for exercising your privacy rights.

9. Cookies

We use the following categories of Cookies:

• Essential: required for the Website/Platform to function (e.g., security, session management).
• Functional: remember preferences and improve usability.
• Performance/Analytics: help us understand usage to improve Services.
• Marketing: measure and deliver advertising and retargeting (used only with your consent where required).

On your first visit, we will present a Cookie banner so you can accept or manage non-essential Cookies. You can change your choices at any time clearing your cookies for this website, and revisiting to be presented with the Cookie banner. Blocking certain Cookies may impact functionality.

10. Security

We implement appropriate technical and organisational measures to protect Personal Data, including encryption in transit (TLS), access controls and least-privilege permissions, audit logging, and staff confidentiality obligations. No method of transmission or storage is completely secure; if we become aware of a personal data breach, we will notify affected users and/or regulators as required by law.

11. Children’s Privacy

Our Services are not directed to children under 16, and we do not knowingly collect Personal Data from children under 16. If you believe a child has provided Personal Data to us, please contact us so we can delete it.

12. Automated Decision-Making

We do not engage in automated decision-making that produces legal or similarly significant effects concerning you. Where we use analytics or personalisation, it does not have such effects.

13. Third-Party Links

The Website and Platform may contain links to third-party websites. Their privacy practices are not governed by this Policy. We encourage you to review their privacy policies.

14. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date will be revised accordingly. Changes take effect when posted on this page. Please review this Policy periodically.

15. Governing Law

This Privacy Policy is governed by the laws of Malta, without regard to conflict-of-law principles.

16. Contact

To ask questions, exercise your rights, or raise concerns, contact us at support@rankengine.com. If you are in the EU/UK, you also have the right to lodge a complaint with your local data protection authority. In Malta, this is the Office of the Information and Data Protection Commissioner (IDPC).