Privacy Policy

Last updated: 3 August 2026

This privacy policy explains how Wise Ranker ("we", "us", "our") collects, uses, and protects your personal data when you use our website and services. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

Data controller: Wise Ranker, contactable at hello@wiseranker.co.uk

ICO Registration: Not required — we process personal data only for the purposes listed below. Please confirm with a legal professional that this exemption applies to your specific circumstances.

What data we collect

We collect the following personal data:

• Email address — provided when you make a purchase via Stripe, used to deliver your report.
• Website URL — provided after purchase, used to run your audit.
• Payment information — processed by Stripe. We do not store card details; Stripe handles all payment data under their own privacy policy.
• Analytics data — if you accept cookies, Google Analytics 4 collects anonymised usage data including pages visited, time on site, and general location (country/region). This is only collected with your explicit consent.

Why we collect it and our legal basis

• To deliver your report — we process your email address and website URL to perform the service you have purchased. Legal basis: performance of a contract.
• To process payment — Stripe processes payment on our behalf. Legal basis: performance of a contract.
• To understand how our site is used — Google Analytics helps us improve the site. Legal basis: consent. You can withdraw consent at any time by clearing your browser's local storage for this site.

Lawful bases for processing

Under UK GDPR we are required to identify a specific lawful basis for each processing activity. The table below sets out each activity and the basis on which we rely.

Data retention

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law. The schedule below sets out specific retention periods for each category of data we hold.

Third parties we share data with

• Stripe — payment processing. Data is shared only to the extent necessary to process your payment. See Stripe's privacy policy.
• Google Analytics 4 — website analytics, only if you have given consent. See Google's privacy policy.
• Cloudflare — website hosting (Cloudflare Pages) and cookieless web analytics (Cloudflare Web Analytics). Cloudflare processes IP addresses and request metadata to serve the site and produce aggregate traffic statistics. See Cloudflare's privacy policy.
• Maileroo — transactional email delivery (audit report emails, order confirmations). Maileroo processes recipient email addresses and message content only to deliver each email. See Maileroo's privacy policy.
• ElevenLabs — the pre-purchase chat assistant embedded on some pages (homepage, pricing, FAQ, about, sample report, free report, how-it-works) is powered by ElevenLabs Conversational AI. If you choose to use the chat, ElevenLabs processes the text messages you send and the assistant's replies to operate the conversation and, in aggregated form, to improve the underlying service. We do not send your name, email address, or any purchase details into the chat; the conversation is anonymous unless you type identifying information into it yourself. The chat is optional — the site works fully without opening it. See ElevenLabs' privacy policy.

We do not sell or share your personal data with any third party for their own purposes, and we do not engage in cross-context behavioural advertising. This includes the meanings of "sell" and "share" used under the California Consumer Privacy Act (as amended by the CPRA) and analogous US state privacy laws.

International data transfers

Some of the third parties listed above are based outside the United Kingdom and process personal data in the United States:

• Google LLC (Google Analytics 4) — personal data, including analytics data you consent to, is transferred to Google LLC in the United States. This transfer is safeguarded by the UK Addendum to the EU Commission Standard Contractual Clauses (as contemplated by Article 46(2)(c) UK GDPR), which Google incorporates into its Data Processing Addendum.
• Stripe, Inc. (payment processing) — payment data is processed by Stripe, Inc. in the United States. This transfer is safeguarded by the UK Addendum to the EU Commission Standard Contractual Clauses (Article 46(2)(c) UK GDPR), as set out in Stripe's Data Processing Agreement.
• Cloudflare, Inc. (hosting and web analytics) — request metadata and IP addresses are processed by Cloudflare, Inc. in the United States. This transfer is safeguarded by the UK Addendum to the EU Commission Standard Contractual Clauses (Article 46(2)(c) UK GDPR), as set out in Cloudflare's Data Processing Addendum.
• Maileroo — email delivery infrastructure operates from servers outside the United Kingdom. Recipient email addresses and message content are transferred under the UK Addendum to the EU Commission Standard Contractual Clauses (Article 46(2)(c) UK GDPR) as set out in Maileroo's terms.
• ElevenLabs, Inc. (chat assistant) — messages you type into the pre-purchase chat and the assistant's replies are processed by ElevenLabs, Inc. in the United States. This transfer is safeguarded by the UK Addendum to the EU Commission Standard Contractual Clauses (Article 46(2)(c) UK GDPR), as set out in ElevenLabs' Data Processing Addendum. No transfer occurs unless you choose to open the chat.

In each case we have conducted a transfer risk assessment (TRA) and verified that appropriate Article 46 safeguards are in place before transferring personal data outside the UK. Copies of the relevant transfer mechanisms are available on request at hello@wiseranker.co.uk.

Cookies

We use two categories of cookies:

• Strictly necessary cookies (Cloudflare) — set automatically by our hosting provider, Cloudflare, for security and bot protection (__cf_bm and related cookies). These are essential for the site to operate securely and are set at the infrastructure level before your cookie preference is applied. They do not track you for analytics or marketing purposes and are exempt from consent requirements under PECR.
• Analytics cookies (Google Analytics 4) — only set if you click "Accept cookies" on our cookie banner. These help us understand how visitors use the site. You can decline these and the site will work identically.

Our cookie consent banner exists to comply with PECR, which requires your consent before non-essential cookies are set. Your analytics cookie choice is stored in your browser's local storage. You can change your preference at any time by clearing your browser data for this site.

Children's privacy

Our service is intended for business owners and marketing professionals. It is not directed at children and we do not knowingly collect personal information from anyone under 13 (or under 16 for visitors from the United Kingdom or European Economic Area). If you believe a child has provided us with personal data, please email hello@wiseranker.co.uk and we will delete it promptly.

Your data protection rights

Under UK GDPR you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate or incomplete data.
• Right to erasure — you can ask us to delete your personal data where there is no compelling reason to continue processing it.
• Right to restrict processing — you can ask us to pause processing of your data in certain circumstances.
• Right to data portability — you can request your data in a structured, machine-readable format to transfer to another service.
• Right to object — you can object to processing based on legitimate interests or for direct marketing purposes.
• Rights related to automated decision-making and profiling — you have the right not to be subject to decisions made solely by automated processing that significantly affect you. We do not carry out such processing.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at hello@wiseranker.co.uk. We will respond within one month.

US state privacy rights

If you are a resident of California or another US state with a comprehensive privacy law (currently California, Virginia, Colorado, Connecticut, Utah, and a growing list of others), you have the following rights in relation to personal information we hold about you:

• Right to know — request confirmation that we process your personal information and details of what we hold.
• Right of access — request a copy of the personal information we hold about you.
• Right to delete — request that we delete personal information we have collected from you.
• Right to correct — request that we correct inaccurate personal information.
• Right to opt out of sale or sharing — as stated above, we do not sell or share personal information for cross-context behavioural advertising. If this ever changes, you will be given a clear opt-out mechanism.
• Right to limit use of sensitive personal information — where sensitive categories apply.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights (e.g. by charging a different price or providing a different level of service).

To exercise any of these rights, contact us at hello@wiseranker.co.uk. We will respond within 45 days as required by California law (extendable by a further 45 days where reasonably necessary, with notice).

Global Privacy Control (GPC). Where your browser sends a Global Privacy Control signal, we treat it as a valid opt-out of any sale or sharing of personal information, as required by California regulations. Because we do not currently sell or share personal information, this signal is respected by default across our processing.

Authorised agents. You may designate an authorised agent to make a request on your behalf. We will require reasonable verification of the agent's authority (a signed permission or power of attorney) and, where permitted, may verify your identity directly.

Complaints

If you believe we have handled your data incorrectly, you have the right to lodge a complaint with your data protection authority:

• UK visitors — the Information Commissioner's Office (ICO): ico.org.uk
• California residents — the California Attorney General or the California Privacy Protection Agency (CPPA): cppa.ca.gov
• Other US state residents — your state Attorney General's office

Changes to this policy

We may update this privacy policy from time to time. The date at the top of this page will reflect the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

For any privacy-related questions: hello@wiseranker.co.uk