Privacy Policy

RankIQ is a search performance dashboard operated by COLLINGHAMCO LTD, a company registered in England and Wales at 21 Fulmar Way, Worksop, S81 8UF, United Kingdom. We are the data controller for the personal data described in this policy.

We are registered with the Information Commissioner’s Office (ICO) under registration reference CSN6229048.

For any question about this policy or your data, email collinghamcoltd@gmail.com or call 01909 492259.

This policy explains what personal data RankIQ collects, why we collect it, how long we keep it, and the rights you have. It covers the RankIQ web application at rankiq.online and the read-only Google integrations you choose to connect.

We do not collect more data than we need to provide the service. Where you connect a Google account, we request only read-only access scopes.

When you connect a Google account to RankIQ, you authorise read-only access to specific Google services so the dashboard can display your performance data:

• Google Search Console (scope: webmasters.readonly) — clicks, impressions, click-through rate, average position, queries, pages and country/device breakdowns for the properties you connect.
• Google Analytics 4 (scope: analytics.readonly) — sessions, users, new users, engagement, key events, page views and channel/source breakdowns for the GA4 properties you connect.
• Basic Google account information (your email address and profile name) so we can tell you which account is connected and which properties belong to it.

We do not request write, delete or configuration access to any Google service, and we do not access Google data for any property you have not explicitly connected inside RankIQ.

In particular, and consistent with the Limited Use requirements:

RankIQ's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google user data only to provide and improve the user-facing features of RankIQ that you can see in the product — dashboards, reports, audits and alerts built from your own Search Console and Analytics data.
• We do not sell Google user data, and we do not transfer it to third parties for advertising, marketing, profiling or data-broker purposes.
• We do not use Google user data to serve advertisements, including personalised or retargeted advertising, and we do not use it to determine creditworthiness or for lending purposes.
• We do not allow humans to read your Google user data, except where you have given us explicit permission to support you, where it is necessary for security purposes such as investigating abuse, or where required by law.
• We do not transfer Google user data to any third party except as needed to provide or improve the service (for example, storing it in our own database hosted by our infrastructure providers), to comply with applicable law, or as part of a merger or acquisition with prior notice to you.
• We do not use Google user data to develop, improve or train generalised or non-personalised artificial intelligence or machine learning models.

Google authorisation tokens are stored securely on our servers, encrypted at rest, and are never written to your browser’s local storage, cookies or client-side code. Access tokens are used only by our backend services, and only to read the data you asked us to display.

You remain in control of the connection at all times. You can revoke RankIQ’s access from your Google Account (Security → Third-party apps with account access → RankIQ → Remove access) or disconnect it inside RankIQ at any time. Once access is revoked or disconnected, we can no longer retrieve new data, and stored data can be deleted on request as described below.

All traffic between your browser and RankIQ is encrypted in transit using HTTPS.

Beyond the Google data you connect, we hold the following:

• Account data: your name, email address, hashed password (if you sign in with email) and subscription plan.
• Configuration data: the sites, domains and client records you add to RankIQ, together with tags, notes and report templates you create.
• Derived performance data: daily metrics imported from Google and stored against each site so we can build trends, comparisons and reports.
• Support and contact data: messages you send us through the contact form or by email.
• Technical data: minimal logs needed to operate and secure the service (for example error logs and request metadata).

Under UK GDPR we rely on the following lawful bases:

• Performance of a contract — creating your account, connecting your sites, importing and displaying Google metrics, generating reports and digests, and billing your subscription.
• Legitimate interests — keeping the service secure, diagnosing faults, preventing abuse, and improving the product, balanced against your rights and freedoms. You can object to this processing at any time.
• Legal obligation — retaining records we are required to keep, such as billing and tax records.
• Consent — for any optional communication you opt into. You can withdraw consent at any time without affecting the lawfulness of processing already carried out.

We do not sell your personal data and we do not share it for advertising. We share it only with service providers who help us run RankIQ, and only as far as needed:

• Cloud hosting and database providers that store the application and its data.
• Our payment provider, which processes subscription payments and holds your card details. We never see or store full card numbers.
• Our email delivery provider, used to send verification codes, password resets, weekly digests and account notices.
• Professional advisers, regulators or law enforcement where we are legally required to disclose information.

All providers act under contract and may only process data on our instructions. Where a provider processes data outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Addendum to the standard contractual clauses.

We keep data only as long as we need it:

• Account and site records: for as long as your account is open.
• Google performance data: for the history shown in your dashboards while your account is open, and deleted or anonymised within 30 days of account closure.
• OAuth tokens: until you disconnect the Google account or delete your account, after which they are destroyed.
• Billing records: for six years after the end of the relevant tax year, as required by UK law.
• Server logs: for a short rolling period, typically no more than 90 days, unless needed to investigate a security incident.

Under UK data protection law you have the right to be informed, to access a copy of your data, to correct inaccurate data, to erase it, to restrict or object to processing, and to data portability. Where processing relies on consent, you can withdraw it at any time.

To exercise any of these rights, email collinghamcoltd@gmail.com. We respond within one month and may ask you to verify your identity first. Exercising your rights is free.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to resolve the issue first.

You can delete individual sites inside RankIQ at any time, which removes the stored metrics for that site. Disconnecting a Google account stops all further access immediately.

To delete your whole account and the data attached to it, email collinghamcoltd@gmail.com from the address on the account with the subject “Delete my data”. We confirm within 30 days and delete account records, imported performance data and stored OAuth tokens, keeping only records we must retain for tax or legal purposes.

You can also request deletion of data we received from Google by revoking access in your Google account and emailing us; we will remove the associated stored data on request.

RankIQ uses strictly necessary cookies and local storage to keep you signed in, remember your interface preferences and protect against cross-site request forgery. We do not use advertising cookies or third-party tracking pixels.

You can clear cookies and local storage in your browser at any time; doing so signs you out of RankIQ.

RankIQ is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16.

We may update this policy to reflect changes in the service or the law. The “last updated” date above always shows the current version, and we will notify account holders by email of any material change.

COLLINGHAMCO LTD, 21 Fulmar Way, Worksop, S81 8UF, United Kingdom. Email collinghamcoltd@gmail.com · Telephone 01909 492259. ICO registration CSN6229048.