Privacy Policy

Who we are

Optirank Studio FZ-LLC ("OptiRank Studio", "we", "us") is a technical SEO studio registered at CWEP8872, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. We are the controller of the personal data described in this policy.

What we collect

We collect very little, and only where you give it to us directly:

• Enquiry details. The name, work email, company, website URL and message you submit through our contact form or send us by email.
• Call and correspondence records. Notes we take during calls and the contents of email threads, so we can pick up a conversation where it left off.
• Server logs. Our hosting provider records standard request data — IP address, user agent, requested URL, timestamp — as part of serving the site. We do not use this for profiling.
• Transaction records. When you pay an invoice via Stripe, we receive the amount, currency, timestamp, payment status and a truncated card description — never your full card details. See Payment information.

We do not ask for, and would prefer not to receive, any special category data, full payment card details by email, or credentials of any kind.

Why we hold it

• To reply to you. If you ask us a question, we need your contact details to answer it.
• To deliver work you have engaged us for. Contracts, scoping and reporting.
• To process payment and keep accounting records. Invoices, transaction records and the records we are legally required to keep.

We do not sell personal data, share it for advertising purposes, or add enquirers to a marketing list without being asked to.

Payment information

Invoices are processed through Stripe, Inc., a PCI-DSS Level 1 certified payment processor. When you pay an invoice, your card details are entered directly into Stripe's hosted checkout and sent straight to Stripe — they never pass through our servers, and we do not see, store or have access to your full card number, expiry date or security code at any point.

Stripe shares limited transaction data back with us so we can reconcile payment against an invoice: the amount, currency, timestamp, payment status, and a truncated card description (for example, card brand and the last four digits). We keep this transaction record for as long as our accounting obligations require.

Stripe acts as an independent controller of the data it processes to run the payment itself, including fraud prevention. Its own privacy policy, available at stripe.com/privacy, governs that processing.

Cookies and tracking

This website sets no cookies of its own, runs no analytics, and embeds no advertising or social tracking pixels. Nothing on these pages attempts to identify you across sites.

Web fonts are loaded from Google Fonts, which means your browser makes a request to Google's servers to fetch them. That request includes your IP address and is subject to Google's own privacy terms.

Third parties

We use a small number of service providers to operate the studio:

• Formspree — receives and forwards whatever you submit through our contact form (name, email, company, website URL and message) by email, so we can reply. It is also the first line of spam filtering on that form.
• Stripe, Inc. — payment processing (see Payment information above).
• Google Fonts — web font delivery (see Cookies and tracking above).

Each processes data only as needed to provide its service, and none is used for advertising.

Client data

Where we work on a client's site we are typically granted read access to tools such as Search Console and analytics, and sometimes to server logs or a code repository. That access is used solely to deliver the agreed engagement. We do not export or retain client data beyond what is needed for the work and its reporting, and access is relinquished at the end of an engagement on request.

We do not publish client names, metrics or findings without explicit written permission.

How long we keep it

• Enquiries that do not become engagements: deleted within twelve months.
• Client records: kept for the duration of the engagement and for as long afterwards as accounting and legal obligations require.
• Server logs: retained on the standard schedule of our hosting provider.
• Transaction records: kept for as long as tax and accounting law requires. Full card details are never in our possession and are retained by Stripe under its own schedule.

Your rights

Depending on where you are located, you may have the right to request access to the personal data we hold about you, ask us to correct or delete it, object to or restrict how we use it, and receive a copy in a portable format. If you are in the UK or the EU, you also have the right to complain to your local supervisory authority.

To exercise any of these, write to us using the details below. We will respond within thirty days.

Security

Access to enquiry and client data is limited to the people who need it to do the work. Credentials are stored in a password manager, access to client systems is granted at the lowest level that will do the job, and we ask clients never to send passwords by email.

Changes to this policy

If this policy changes materially — in particular if we add analytics, a form backend or a booking tool — we will update this page and change the date at the top of it.

Contact

Questions about this policy, or a request relating to your data, can go to hello@optirank.studio or +971 50 892 9578.

Optirank Studio FZ-LLC
CWEP8872, Compass Building, Al Shohada Road,
Al Hamra Industrial Zone-FZ,
Ras Al Khaimah, United Arab Emirates