Legal
Privacy policy
1. Who we are
WoofRank, based in India. We are the data fiduciary under India's Digital Personal Data Protection Act 2023 and the controller under the EU and UK GDPR for the personal data described in this policy.
Contact for anything about your data: the WoofRank founders, our Grievance Officer and data contact, at woofrank26@gmail.com, hours 10:00 to 18:00 IST, Monday to Friday.
We have not appointed a representative in the European Union under Article 27 GDPR. We will do so, and update this policy, if our processing of EU residents' data stops being occasional.
2. Who this policy covers
- Visitors to woofrank.com.
- People who contact us, request a free visibility check, or book a call.
- Clients and their staff.
- Newsletter subscribers, if we start one.
- Job applicants.
- Business contacts we reach out to.
When we run campaigns, analytics or search work for a client, we process the client's customers' data on the client's instructions as a data processor. That processing is governed by our agreement with the client, not by this policy.
3. What we collect
Information you give us. Your name, work email, phone or WhatsApp number, company, role, website address, message, monthly budget range, and any files you attach. For clients: billing name, address, GSTIN or tax ID, and invoice history. We never see or store full card or bank details; our payment processors (Razorpay for INR payments and Stripe or a bank transfer for USD payments) handle payment data under their own policies.
Information collected automatically, only after you accept analytics. IP address, approximate location, device, browser and operating system, pages viewed, referrer, campaign and click identifiers (such as gclid and fbclid), analytics identifiers, and session-replay interaction data (clicks, scrolls, mouse movement). Text you type into forms is masked in session recordings.
Information from other sources. LinkedIn profiles and public company websites, for business-to-business outreach, and aggregate reporting from advertising platforms.
We do not collect sensitive personal data, and we ask you not to send it to us.
4. Why we use it, and the legal basis
| Purpose | Data | Basis (India, DPDP Act) | Basis (EU and UK GDPR) |
|---|---|---|---|
| Reply to enquiries and prepare proposals | Form data | Data you voluntarily provide for that purpose (section 7(a)) | Contract or pre-contract steps (Art 6(1)(b)) |
| Deliver and bill services | Client and billing data | Voluntary provision and consent | Contract and legal obligation (Art 6(1)(b), (c)) |
| Site analytics and session replay | Analytics identifiers, interaction data | Consent | Consent (Art 6(1)(a)) |
| Advertising, remarketing and conversion measurement, if we run ads | Cookie, pixel and click-ID data | Consent | Consent (Art 6(1)(a)) |
| Newsletter or marketing email | Email, name | Consent | Consent (Art 6(1)(a)) |
| Business-to-business outreach | Business contact data | Consent or legitimate use | Legitimate interests with an easy opt-out (Art 6(1)(f)) |
| Security, fraud prevention, tax and legal records | Logs, invoices | Legal obligation | Legitimate interests and legal obligation (Art 6(1)(f), (c)) |
We do not sell personal data. We do not use automated decision-making that produces legal or similarly significant effects.
5. Consent, and how to withdraw it
Where we rely on consent you can withdraw it at any time, as easily as you gave it: analytics consent through the Cookie settings link in the footer, email marketing through the unsubscribe link, and anything else by emailing woofrank26@gmail.com. Withdrawal does not affect processing already done. Your choice about analytics is stored in your browser with the date you made it.
6. Analytics, cookies and pixels
The site is built to use Google Analytics 4. Advertising pixels currently enabled: none. These tools run only once we have switched them on and you have accepted analytics in the banner; until both are true, nothing loads and no banner appears. Full details, including every cookie, are in the cookie policy.
Google. We use Google Analytics 4, loaded through Google Tag Manager, to understand which pages help visitors. If we run Google Ads remarketing, third-party vendors including Google show our ads on sites across the internet and use cookies or device identifiers to serve ads based on your past visits to our website. You can opt out through Google Ads Settings at adssettings.google.com, the Network Advertising Initiative opt-out at optout.networkadvertising.org, or your device settings. To learn how Google uses information from sites that use its services, see google.com/policies/privacy/partners. We do not send your name, email or phone number to Google Analytics.
Microsoft Clarity. Clarity records how you interact with pages (clicks, scrolls, mouse movement) to help us improve the site. Form fields and sensitive content are masked. Data goes to Microsoft Corporation in the United States under Microsoft's privacy statement. Clarity only runs after you accept analytics.
Meta. If we enable the Meta Pixel or Conversions API for our own ads, Meta Platforms Ireland Limited (for EEA and UK visitors) or Meta Platforms, Inc. collects data through the _fbp and _fbc cookies and similar technologies when you visit our site and uses it, together with us, for ad measurement and to show targeted ads on Meta platforms. Opt out in your Meta ad preferences at facebook.com/adpreferences, via youronlinechoices.eu in the EU or aboutads.info in the US, or by declining analytics and advertising in our banner.
7. Who we share data with
Service providers who process data for us under written contracts: website hosting and content delivery (ChatGPT Sites (OpenAI), served through Cloudflare); form handling and email delivery (Web3Forms); call scheduling (Cal.com); analytics vendors named in section 6; payment processors (Razorpay for INR payments and Stripe or a bank transfer for USD payments); email and document tools; accountants, lawyers and insurers.
Independent recipients: Google, Microsoft and Meta for their own advertising purposes, as described in their policies, only where you have accepted analytics or advertising.
Legal: regulators, courts and law enforcement when the law requires it, and a buyer of the business if it is sold, with notice to you.
8. International transfers
We are based in India and use vendors in the United States and the European Union, so data from Indian users may leave India. Indian law permits this except to countries the Central Government restricts by notification.
For visitors in the EEA and UK: India does not have an EU adequacy decision, so we transfer your data under the European Commission's Standard Contractual Clauses and the UK Addendum, with a transfer impact assessment. Our US vendors rely on their own Standard Contractual Clauses or the EU-US Data Privacy Framework. Ask woofrank26@gmail.com for a copy of the safeguards.
9. How long we keep data
| Data | Retention |
|---|---|
| Enquiries that do not become clients | 12 months from last contact, then deleted |
| Client records and contracts | Term of the engagement plus 8 years, for tax and company-law obligations |
| Invoices and payment records | 8 years |
| Newsletter data | Until you unsubscribe, plus 30 days on a suppression list |
| Google Analytics event data | 14 months |
| Clarity session recordings | 30 days |
| Security and processing logs | 12 months |
| Cookies | As listed in the cookie policy |
We delete or anonymise data once its purpose is served unless the law requires us to keep it.
10. Your rights
India (DPDP Act, sections 11 to 14). You can ask for a summary of the personal data we hold about you and how it has been processed; ask us to correct, complete, update or erase it; raise a grievance; nominate someone to exercise your rights if you die or are incapacitated; and withdraw consent. Email woofrank26@gmail.com. We acknowledge within 2 working days and resolve within 30 days; the law allows up to 90. If you are unhappy with our response you may complain to the Data Protection Board of India. Please give us accurate information and do not file false or frivolous complaints; the Act asks that of you too.
EEA and UK (GDPR, Articles 15 to 22). You can ask for access, rectification, erasure, restriction, portability and objection (including to direct marketing and to processing based on legitimate interests), withdraw consent, and not be subject to solely automated decisions. You can complain to your local supervisory authority, or to the Information Commissioner's Office in the UK. We respond within one month. We may ask you to confirm your identity first.
11. Children
Our services are for businesses. woofrank.com is not directed at anyone under 18, and we do not knowingly collect their data, track them, or target advertising at them. If you think a child has given us data, email woofrank26@gmail.com and we will delete it.
12. Security
HTTPS everywhere, least-privilege access, multi-factor authentication on every tool we use, encryption at rest by our vendors, logging with 12-month retention, vendor due diligence, and confidentiality obligations on everyone who works with us. No method is perfectly secure. If a breach affects your data we will notify you without undue delay, report to the Data Protection Board of India within 72 hours as the DPDP Rules require, and notify EEA or UK regulators within 72 hours where the GDPR requires it.
13. Marketing communications
We only send a newsletter to people who opted in, and every message has a one-click unsubscribe. Business-to-business outreach goes only to business contacts and always includes an opt-out. We do not send WhatsApp marketing without your consent.
14. Third-party links and client websites
We are not responsible for the privacy practices of other websites we link to. Websites we build for clients are governed by the client's own privacy policy.
15. Changes to this policy
We post changes here with a new effective date and version number. For material changes we email active clients and subscribers.
16. Governing law
This policy is governed by the laws of India. Nothing in it limits the statutory rights of people in the EEA or UK.
17. Contact
WoofRank, India. Grievance Officer and data contact: the WoofRank founders, woofrank26@gmail.com. Hours 10:00 to 18:00 IST, Monday to Friday.
Next step
Questions about any of this?
Email a founder. We reply within one working day and we would rather explain than hide behind a policy.