Privacy Policy

Fast Ranking Ltd is the data controller for personal data processed through this website and standard client onboarding, unless a signed contract names another controller or joint arrangement.

Postal address: Future House, 22 The Moakes, Leagrave, Luton LU3 3QB, United Kingdom.

Privacy contact: info@fastranking.co.uk (subject line: Privacy request).

Depending on how you use the site, we may process:

• Contact & identity — name, email, phone, company, job-related details you provide.
• Enquiry & booking — message content, service interest, appointment date/time, slot identifiers, and CRM follow-up references.
• Technical — IP address, user agent, timestamps, and pages requested (server logs, security, and rate limiting).
• AI chat — text you submit to the assistant to generate a reply (not used for unrelated profiling).
• Marketing — preferences where you opt in to updates (you may opt out at any time).

We use personal data only where a lawful basis applies under UK GDPR:

• Respond to enquiries & quotes — contact details and messages (legitimate interests; pre-contract steps where relevant).
• Schedule discovery calls — booking details synced to our CRM (pre-contract / legitimate interests).
• Deliver contracted services — data needed to perform our agreement with you (contract).
• Site security & abuse prevention — logs and API rate limits (legitimate interests).
• Optional marketing — emails or updates you agree to receive (consent; withdraw anytime).
• Legal & accounting — records we must keep (legal obligation).

We do not sell or rent personal data. We disclose data only to:

• Service providers (processors) under written terms — e.g. website hosting, CRM/appointments (crm.fastranking.cloud), transactional email (such as Resend), and AI/LLM providers when you use chat (to produce responses only).
• Professional advisers where necessary (e.g. lawyers, accountants) under confidentiality.
• Authorities when required by law or to establish, exercise, or defend legal claims.

Some processors may process data outside the UK. Where they do, we ensure appropriate safeguards — for example UK adequacy regulations, UK International Data Transfer Agreement / Addendum, or EU Standard Contractual Clauses as recognised in UK law — plus supplementary measures where needed.

We keep data no longer than necessary:

• Sales & enquiry records — typically up to six years from last meaningful contact for business and tax purposes, unless a shorter period applies.
• Client project data — for the contract term plus limitation periods required by law.
• Security logs — usually up to 90 days, extended if investigating an incident.
• Marketing — until you unsubscribe or we no longer have a lawful basis.

Subject to exemptions in UK GDPR, you may request: access, rectification, erasure, restriction, objection (including to direct marketing), and data portability where applicable.

To exercise rights, email info@fastranking.co.uk with enough detail for us to verify your identity and locate your data. We respond within one month (extendable by two months for complex requests, with notice).

You may complain to the Information Commissioner’s Office: ico.org.uk · helpline 0303 123 1113.

We apply appropriate technical and organisational measures (including HTTPS, access controls, and API rate limiting). No online transmission is 100% secure — please do not submit special-category data (e.g. health, ethnicity) or payment card numbers via our general contact forms.

We use strictly necessary cookies/storage for security and core functionality. We do not use non-essential analytics or advertising cookies unless we introduce them later and, where required, obtain your consent first. You can control cookies through your browser settings.

We do not make solely automated decisions that produce legal or similarly significant effects about you. The AI assistant provides general information only and does not determine eligibility for services or pricing without human review.

Our site may link to external sites (e.g. social networks, WhatsApp). Their privacy practices are governed by their own policies — review them before submitting data.

Our services target businesses and professionals. We do not knowingly collect personal data from anyone under 16. Contact us if you believe a child has provided data and we will delete it promptly where required.

We may update this policy. The effective date above will change when we do. Significant changes may be noted on the website. Continued use after updates constitutes notice of the revised policy.