RankScout

Flyout Menu
Log-In
Start Free

RankScout

Terms Of Service

Last updated: 15/12/2025

This Privacy Policy explains how Bristol Website Design Ltd (“we”, “us”) collects and uses personal data when you use RankScout.

1. Controller and contact

Data Controller: Bristol Website Design Ltd

Address: Firepool Centre for Digital Innovation, Trenchard Way, Taunton, TA1 1FH, United Kingdom

Contact: [email protected] (please mark email subject “Privacy Request”)

2. Personal data we collect

We collect:

Account data

  • Name
  • Email address
  • Password (stored as a cryptographic hash, not in plaintext)

Billing/subscription data

  • Stripe customer ID, subscription ID, payment identifiers
  • Plan and payment status

(We do not store full card details.)

Service usage and technical data

  • Logs relating to authentication, security, and platform usage
  • Device/browser data and IP address in server logs (as typically required to operate and secure a web service)
  • Session/security data (including CSRF/session mechanisms)

Analytics data

  • We use analytics to understand usage and improve the Platform.
  • Depending on configuration, this may include page views, referrers, device/browser information, and other usage metrics.

Customer Data you submit

  • Website URLs/domains, keywords, locations
  • Ranking Results generated by the Service

Note: Keywords/locations can contain personal data if you include names or identifiers. Please avoid submitting personal data unless necessary and lawful.

3. How we use personal data

We use personal data to:

  • Provide the Service (accounts, scanning, dashboards)
  • Process payments and manage subscriptions
  • Provide customer support
  • Maintain security and prevent misuse/fraud
  • Monitor performance and improve the Service
  • Comply with legal obligations (e.g., accounting/tax)

4. Legal bases (UK GDPR / GDPR)

We rely on:

  • Contract: to provide the Service you request
  • Legitimate interests: security, fraud prevention, service improvement
  • Legal obligation: compliance and recordkeeping
  • Consent: where required for non-essential cookies/analytics

5. Sharing (processors/sub processors)

We share personal data with providers only as needed to deliver the Service, such as:

  • Stripe (payments and subscriptions)
  • Hosting/Infrastructure:
    • Hetzner (if the Service is hosted on a Hetzner VPS), and/or
    • our internal/self-hosted infrastructure (if hosted internally)
  • Email infrastructure operated by Bristol Website Design Ltd (and underlying hosting where applicable)
  • SERP/ranking providers:
    • DataForSEO (primary)
  • Analytics tooling (for example, an Umami instance hosted by us and/or our hosting provider)
  • CDNs and asset providers (e.g., Bootstrap/CDN libraries, Google Fonts) that may receive your IP address and user-agent when your browser loads those assets

We may also disclose information where required by law or to protect rights, safety, and the integrity of the Service.

6. International transfers

Some providers may process data outside the UK/EEA (for example in the United States). Where this occurs, we use appropriate safeguards such as adequacy decisions and/or Standard Contractual Clauses (plus the UK Addendum where applicable).

7. Retention

We retain personal data for as long as necessary to:

  • provide the Service,
  • maintain security/audit trails,
  • resolve disputes,
  • comply with legal obligations.

We may retain aggregated/anonymised analytics longer. If you request deletion, we will delete or anonymise personal data unless we must retain it for legal reasons.

8. Security

We apply reasonable technical and organisational measures to protect personal data (access controls, security headers, and operational controls). No system is completely secure; please use strong passwords and keep credentials confidential.

9. Your rights

Depending on your location, you may have rights to:

  • access, rectify, delete, restrict, object, and portability,
  • withdraw consent (where processing is based on consent).

To exercise rights, email [email protected] with subject “Privacy Request”. If you are in the UK, you can lodge a complaint with the Information Commissioner’s Office (ICO).

10. Children

RankScout is not intended for children and we do not knowingly collect personal data from children.

11. Updates

We may update this policy. The “Last updated” date will change when we do.