GDPR & Data Processing Agreement

Data we process

We limit collection to what the service needs to function.

• Account data: name, email address, authentication identifiers, plan and usage counters
• Customer data: business names, websites, locations, audit findings and generated reports
• Technical data: request logs and error diagnostics used to keep the service reliable

Lawful basis

We process account and customer data to perform our contract with you, and technical data on the basis of our legitimate interest in operating a secure and reliable service.

Your rights

Under the GDPR you may exercise the following rights at any time.

• Access a copy of your personal data
• Correct inaccurate data
• Delete your account and associated business, audit and report records
• Restrict or object to certain processing
• Receive your data in a portable format

Sub-processors

We use infrastructure and platform providers to host the application and database, and Google APIs for optional performance and Search Console data. Sub-processors are bound by confidentiality and data protection terms.

International transfers and retention

Where data is transferred outside the EEA or UK we rely on Standard Contractual Clauses. Customer data is retained for the life of the account and deleted on request or after account closure.

Security and breach notification

We apply row-level access controls, encrypted transport, server-side credential storage and role-based administration. In the event of a personal data breach we will notify affected controllers without undue delay.

Exercising your rights

Write to hello@localrankgenius.com with the subject line “GDPR request”. We respond within 30 days.