Privacy Policy

Last updated: 19 June 2026

This Privacy Policy describes how RANKAIRO LTD ("we", "us", or "our"), a company registered in England and Wales operating from Unit A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE, collects, uses, stores, and protects personal data when you visit rankairo.diy, use our services, or otherwise interact with us. We are committed to protecting your privacy and processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

RANKAIRO LTD develops business operations software, custom business applications, SME mobile solutions, and related digital services for small and medium enterprises across the United Kingdom. In delivering these services, we process personal data belonging to clients, prospective clients, website visitors, and individuals whose data is provided to us in connection with software development projects.

1. Data Controller

The data controller responsible for your personal data is RANKAIRO LTD, located at Unit A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE. For any privacy-related enquiries, please contact us at commercial@rankairo.diy or by telephone at +447443676785. We will respond to data subject requests within the timeframes required by applicable law.

2. Personal Data We Collect

We collect and process the following categories of personal data depending on your relationship with us:

2.1 Information You Provide Directly

When you submit an access request through our contact form, correspond with us by email or telephone, or engage our services, we may collect your full name, email address, telephone number, company name, job title, business address, and the content of messages you send us describing your business requirements and operational needs.

During project engagements, we may additionally collect information necessary to configure business management software, including user role definitions, organisational structure details, and operational workflow descriptions that may contain personal data about your employees or customers.

2.2 Information Collected Automatically

When you visit rankairo.diy, we automatically collect certain technical information through cookies and similar technologies, including your IP address, browser type and version, operating system, device type, referring URL, pages viewed, time and date of visits, and interaction data. For detailed information about cookies, please refer to our Cookie Policy.

2.3 Information from Third Parties

We may receive personal data from third-party service providers who assist us in delivering our services, such as hosting providers, analytics platforms, and payment processors. We may also receive information from publicly available sources such as Companies House records when verifying business client credentials.

3. Legal Bases for Processing

We process personal data only where we have a valid legal basis under the UK GDPR:

Contract performance: Processing necessary to perform a contract with you or to take steps at your request before entering into a contract, such as responding to access requests and delivering business operations software.
Legitimate interests: Processing necessary for our legitimate business interests, including improving our services, maintaining website security, and communicating with prospective clients, provided these interests are not overridden by your rights.
Legal obligation: Processing necessary to comply with legal obligations, including tax reporting, regulatory compliance, and responding to lawful requests from authorities.
Consent: Where you have given explicit consent for specific processing activities, such as receiving marketing communications or accepting non-essential cookies.

4. How We Use Personal Data

We use personal data for the following purposes:

Responding to access requests and enquiries about our business operations software and related services
Delivering custom business applications, SME mobile solutions, and small business automation apps under contract
Managing client relationships, project communications, and verified release handovers
Processing payments and maintaining financial records
Improving our website, services, and user experience through analytics
Complying with legal and regulatory obligations
Protecting the security and integrity of our systems and data
Sending service-related communications and, where permitted, marketing materials about relevant services

5. Data Sharing and Disclosure

We do not sell personal data to third parties. We may share personal data with the following categories of recipients where necessary and proportionate:

Service providers who assist us in operating our website, hosting infrastructure, email delivery, analytics, and payment processing, bound by contractual data protection obligations
Professional advisers including lawyers, accountants, and auditors where necessary for legitimate business purposes
Law enforcement, regulatory authorities, or courts when required by law or to protect our legal rights
Successors in the event of a merger, acquisition, or sale of assets, subject to equivalent data protection commitments

Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the Information Commissioner's Office or transfers to countries with adequacy decisions.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specific retention periods include:

Contact form submissions and enquiry records: three years from last interaction unless a business relationship is established
Client project records and correspondence: seven years from project completion in accordance with commercial record-keeping requirements
Financial and transaction records: seven years as required by UK tax legislation
Website analytics data: twenty-six months from collection
Marketing consent records: for the duration of consent plus three years

7. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right of access: Request a copy of personal data we hold about you
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your data in certain circumstances
Right to restrict processing: Request limitation of processing in certain circumstances
Right to data portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making: Not be subject to decisions based solely on automated processing with legal effects

To exercise any of these rights, contact us at commercial@rankairo.diy. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission, access controls, secure development practices, regular security assessments, and staff training on data protection obligations.

9. Children's Privacy

Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under eighteen years of age. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. The updated version will be posted on rankairo.diy with a revised date. We encourage you to review this policy regularly.

11. Contact Information

For questions about this Privacy Policy or our data processing practices, contact RANKAIRO LTD at commercial@rankairo.diy, +447443676785, or Unit A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE.

Users of RANKAIRO LTD services acknowledge that all software deliverables remain subject to the verification and release protocols established at project intake. Any modification to agreed scope requires formal re-authorisation through the custody verification process.

Nothing in this document shall be construed as creating a partnership, joint venture, or employment relationship between RANKAIRO LTD and any user, client, or third party unless expressly stated in a separate written agreement signed by authorised representatives.

RANKAIRO LTD reserves the right to update, amend, or supplement these provisions to reflect changes in applicable law, regulatory guidance, or operational requirements. Material changes will be communicated through appropriate channels including publication on rankairo.diy.

All intellectual property rights in materials provided by RANKAIRO LTD, including but not limited to software code, documentation, design assets, and verification methodologies, remain the property of RANKAIRO LTD unless expressly transferred in writing upon verified release.

Clients and users agree to cooperate with reasonable requests for information necessary to fulfil RANKAIRO LTD obligations under applicable data protection legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018.

Disputes arising under or in connection with these terms shall first be addressed through good-faith negotiation between the parties. If resolution cannot be achieved within thirty days, either party may pursue remedies available under English law.

RANKAIRO LTD maintains appropriate technical and organisational measures to protect personal data processed in connection with its business operations software development and related services.

Third-party service providers engaged by RANKAIRO LTD are subject to contractual obligations consistent with the data protection standards described herein and are permitted to process data only as instructed by RANKAIRO LTD.

Users are responsible for ensuring that any personal data they provide to RANKAIRO LTD has been collected and shared in compliance with applicable privacy laws and that appropriate consents have been obtained where required.

Automated decision-making and profiling are not used by RANKAIRO LTD in a manner that produces legal or similarly significant effects on individuals without explicit disclosure and appropriate safeguards.

RANKAIRO LTD maintains appropriate technical and organisational measures to protect personal data processed in connection with its business operations software development and related services.