Privacy Policy

We, Genrank Ltd. ("Genrank", "we", "us", or "our"), welcome your use of our website and web application ("Our Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our services, in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. Personal data means any information relating to an identified or identifiable natural person, including your name and email address.

1. Data Controller

The data controller responsible for your personal data is:

Genrank Ltd.
128 City Road
London EC1V 2NX
United Kingdom

Email: support@genrank.co

2. Data We Collect Automatically

When you access our services, certain connection data is automatically transmitted to our web server, including:

Your IP address
Date and time of access
The URL of the requested resource
Browser type and version (user agent)
Referring URL

This data is processed to provide and secure our website. We do not use this data to identify you personally or merge it with other data sources. The legal basis for this processing is our legitimate interest in providing a functional and secure website (Article 6(1)(f) UK GDPR).

3. Data You Provide to Us

You can browse our landing page without providing personal data. However, certain features require you to provide information.

3.1 Registration, Waitlist, and Login

To register for our web application or join our waitlist, we collect:

Email address: for authentication via magic link (provided through Supabase Auth)
Organisation name: for managing and categorising waitlist entries

Purpose: To enable registration, waitlist management, and account authentication.

Legal basis: Performance of a contract (Article 6(1)(b) UK GDPR) and our legitimate interest in providing the service (Article 6(1)(f) UK GDPR).

Retention: Account data is retained for the duration of your account. Waitlist data is retained for 30 days after you gain access or withdraw from the waitlist.

3.2 Newsletter Subscription

If you subscribe to our newsletter, we collect your name and email address to send you updates about our company, products, and services.

Purpose: Sending marketing communications.

Legal basis: Your consent (Article 6(1)(a) UK GDPR).

You can unsubscribe at any time by clicking the unsubscribe link in any newsletter or by contacting us directly.

4. Cookies and Similar Technologies

Our services use cookies and similar technologies (such as local storage, tracking pixels, and scripts) to ensure functionality, improve user experience, analyse usage, and measure the effectiveness of our marketing. Cookies are small text files stored on your device.

4.1 Categories of Cookies

Strictly Necessary Cookies: These are essential for our services to function. They include:

Session and authentication cookies for login
Security cookies from our hosting provider (Vercel)
Single sign-on (SSO) session cookies

Legal basis: Performance of a contract (Article 6(1)(b) UK GDPR) and legitimate interest (Article 6(1)(f) UK GDPR).

Functional Cookies: These remember your preferences and settings to enhance your experience.

Legal basis: Legitimate interest (Article 6(1)(f) UK GDPR) or consent where required (Article 6(1)(a) UK GDPR).

Analytics Cookies: We use analytics tools to understand how our services are used. These include:

Google Analytics (via Google Tag Manager)
Product analytics tools such as HubSpot

These tools create pseudonymised usage profiles. IP addresses are anonymised before transmission. Legal basis: Your consent (Article 6(1)(a) UK GDPR), provided via our cookie banner.

Marketing Cookies: We use marketing technologies to measure campaign effectiveness, including:

Referral and affiliate tracking
Campaign attribution tools
Marketing automation platforms

Legal basis: Your consent (Article 6(1)(a) UK GDPR).

4.2 Managing Cookies

When you first visit our website, we display a cookie banner where you can:

Accept all cookies
Reject non-essential cookies
Customise your preferences

You can change your preferences at any time via "Cookie Settings" in our website footer. You can also configure your browser to reject or delete cookies, though this may affect functionality.

4.3 Google Workspace APIs

Where we use Google Workspace APIs, our use of data received from these APIs complies with the Google User Data Policy, including the Limited Use requirements.

5. Third-Party Services

5.1 Hosting (Vercel)

Our services are hosted by Vercel Inc., 340 S Lemon Ave #3717, Walnut, CA 91789, USA. When you visit our website, Vercel processes your IP address to deliver content and protect against security threats.

Legal basis: Legitimate interest (Article 6(1)(f) UK GDPR).

Vercel is certified under the EU-US Data Privacy Framework. For more information, see Vercel's privacy policy.

5.2 Google Analytics

We use Google Analytics to analyse website usage. Your IP address is anonymised before processing. Google may transfer data to the USA under the EU-US Data Privacy Framework.

Legal basis: Your consent (Article 6(1)(a) UK GDPR).

6. International Data Transfers

Some of our service providers are located outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place:

Adequacy decisions: Transfers to countries the UK has deemed to provide adequate protection
International Data Transfer Agreement (IDTA): The UK's standard contractual clauses for international transfers
UK Extension to EU SCCs: Where applicable, we use EU Standard Contractual Clauses with the UK Addendum

For transfers to the USA, we rely on the EU-US Data Privacy Framework where the recipient is certified, or appropriate contractual safeguards.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods:

Account data: Duration of your account plus 30 days
Waitlist data: 30 days after access granted or withdrawal
Newsletter subscribers: Until you unsubscribe
Analytics data: As per our analytics providers' policies (typically 14-26 months)

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption, access controls, and regular security assessments.

9. Your Rights

Under UK data protection law, you have the following rights:

Right of access: Request a copy of your personal data
Right to rectification: Request correction of inaccurate data
Right to erasure: Request deletion of your data in certain circumstances
Right to restrict processing: Request limitation of how we use your data
Right to data portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests or for direct marketing
Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at support@genrank.co. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk.

10. Right to Object

You have the right to object to processing of your personal data at any time where we rely on legitimate interests as the legal basis. If you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

For direct marketing, you can object at any time and we will stop processing your data for this purpose immediately.

11. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

12. Children's Privacy

Our services are not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: