This Privacy Policy sets out how Swift Rank collects, uses, stores, and protects personal information obtained from clients, website visitors, and business partners. We operate in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please review this document carefully to understand our practices regarding your personal data and your statutory rights under UK data protection law.

1. Important Information and Who We Are

Swift Rank is the data controller responsible for your personal data. We are registered in England and Wales. We have appointed an internal Data Privacy Manager who oversees queries relating to this policy. If you have any questions or wish to exercise your legal rights, please contact us at [email protected].

2. The Data We Collect About You

Personal data means any information relating to an identified or identifiable natural person. We may collect, use, store, and transfer different categories of personal information grouped as follows:

Identity Data: including first name, last name, business title, and professional credentials.
Contact Data: including registered business address, billing address, email address, and telephone numbers.
Financial Data: including corporate bank details and payment card information processed by accredited merchant partners.
Transaction Data: details regarding payments to and from you, together with contracted marketing deliverables.
Technical Data: internet protocol (IP) address, browser type, operating system, and domain referral information.

3. How Is Your Personal Data Collected?

We utilise distinct collection methods to receive data from and concerning you, including:

Direct interactions: you may supply details by completing online enquiry forms or corresponding with our consultants.
Automated technologies: as you interact with our website, technical telemetry data is collected via server logs and cookies.
Third-party channels: we receive verified commercial information from credit check agencies, Companies House, and analytics providers.

4. How We Use Your Personal Data

We strictly process your personal data within established legal boundaries. Most commonly, we deploy personal information to fulfil our service contracts, maintain customer account records, process billing schedules, and improve our digital marketing campaigns in alignment with our legitimate business interests.

5. Legal Bases for Processing

Under Article 6 of the UK GDPR, we rely on the following statutory legal bases for processing personal information:

Performance of a Contract: necessary for entering into or fulfilling our client service agreements.
Legitimate Interests: necessary for our commercial operational interests, provided your fundamental rights do not override them.
Legal Obligation: necessary to comply with statutory accounting, taxation, and regulatory mandates in the United Kingdom.
Consent: where you have granted unambiguous prior consent, such as subscribing to electronic marketing newsletters.

6. Disclosures of Your Personal Data

We do not sell personal data to third parties. We may disclose personal information to trusted external partners bound by contractual data processing agreements, including cloud infrastructure hosts, payment gateways, analytics providers, and regulatory enforcement bodies when legally required to do so.

7. International Transfers

Whenever we transfer personal data outside the United Kingdom, we ensure equivalent safeguards are implemented. This includes transferring data exclusively to jurisdictions deemed adequate by the UK Secretary of State, or executing standard International Data Transfer Agreements (IDTAs) alongside robust technical assessments.

8. Data Security and Storage

We enforce comprehensive technical and organisational security controls designed to prevent accidental loss, unauthorised disclosure, alteration, or interception. Access to personal data is restricted to employees, contractors, and partners with an operational need to know, all of whom are subject to strict confidentiality duties.

9. Data Retention

We retain personal information solely for the duration required to achieve the purposes for which it was assembled, including statutory requirements for legal, tax, and reporting compliance. By default, commercial transaction records are retained for six years following the conclusion of our contractual relationship.

10. Your Legal Rights

Under UK data protection legislation, you maintain specific rights in relation to your personal records, including:

Right of Access: the right to obtain confirmation and copies of your personal data held by us.
Right to Rectification: the right to correct incomplete or inaccurate personal details.
Right to Erasure: the right to request deletion of personal information where no overriding legal basis exists.
Right to Object: the right to object to processing grounded upon legitimate interests or direct marketing.
Right to Restriction: the right to suspend the processing of personal data under specific statutory circumstances.
Right to Data Portability: the right to obtain and transfer your information to another organisation in a structured format.

11. Exercising Your Rights

You do not need to pay a fee to access your personal data or exercise any statutory rights. However, we may charge a reasonable administrative fee if your request is manifestly unfounded, repetitive, or excessive. We respond to all confirmed data subject access requests within one calendar month.

12. Cookies and Tracking Technologies

Our website deploys technical, analytical, and marketing cookies to enhance user functionality, measure visitor engagement, and support search performance. You can manage or block cookies through your individual browser preferences; however, disabling essential cookies may impact certain interactive features on our site.

13. Third-Party Links

Our site may incorporate links to third-party domains, plug-ins, and external marketing software platforms. Clicking on those connections or enabling those integrations may allow third parties to collect or share data about you. We do not control these independent services and encourage you to review their specific privacy documentation.

14. Changes to This Privacy Policy

We review and update this policy periodically to reflect evolving regulatory standards and digital agency operations. Any updates will be posted immediately on this page with an amended revision date. We recommend checking this notice regularly to stay informed regarding our data protection safeguards.

15. Contact Details and Supervisory Authority

If you have any queries regarding this Privacy Policy or our treatment of your personal information, please contact our Data Privacy Manager at [email protected].

You also have the right to lodge a complaint at any time with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. Further details and reporting guidance can be accessed directly at ico.org.uk. We would, however, appreciate the opportunity to address your concerns prior to approaching the ICO, so please reach out to us in the first instance.