Last updated: 20 October 2026
This Privacy Policy explains how Organic Rank Studio (“we”, “us”) collects and uses personal data when you visit organicrankstudio.com or contact us. We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where it applies, the EU General Data Protection Regulation (EU GDPR).
1. Who we are
Organic Rank Studio is the controller of the personal data described in this policy. You can contact us about privacy at any time at [email protected].
2. What data we collect
- Enquiry data — your name, email address, website address and the content of your message when you use our contact form or email us.
- Client data — contact and billing details, and information you share with us while we provide our services.
- Technical data — IP address, browser type and pages requested, recorded in standard server logs for security and to keep the site running.
We do not use advertising or analytics cookies on this website, and we do not sell personal data.
3. Why we use your data and our legal basis
- To reply to your enquiry and prepare a proposal — steps prior to entering a contract and your consent.
- To deliver services and invoice clients — performance of a contract and legal obligation.
- To protect the website against abuse and fraud — our legitimate interests.
4. Who we share data with
We share personal data only with service providers that help us operate, such as our web hosting, email and accounting providers, under contracts that require them to protect it. We may disclose data where required by law.
5. International transfers
Where data is transferred outside the UK or the European Economic Area, we rely on adequacy decisions or standard contractual clauses to keep it protected.
6. How long we keep data
Enquiries that do not lead to a contract are deleted within 12 months. Client records are kept for six years after the end of our engagement to meet accounting and legal requirements. Server logs are kept for no longer than 90 days.
7. Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability and to withdraw consent at any time. To exercise these rights, email [email protected]. We respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk) in the UK, or to the data protection authority in your EU country of residence.
8. Security
This website is served over an encrypted connection (HTTPS). Access to personal data is limited to people who need it to do their work.
9. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.