Last updated: October 27, 2026
This policy explains how RankYield, a brand of GULMAZ INC. (“RankYield”, “we”, “us”), collects, uses, discloses and protects personal information through rankyield.com (the “site”) and when you contact us. It applies to visitors and prospective clients in the United States and Canada. Work we carry out for clients is covered by our written client agreements, including any data processing terms.
1. Information we collect
- Information you give us. When you use our contact or free-audit forms, call or email us, we collect your name, work email, company, phone number, website URL, budget range, the channels you are interested in and anything you write in your message.
- Technical information. To protect our forms against spam and abuse, our servers record a one-way hashed (non-reversible) version of your IP address, your browser’s user-agent string, the page you submitted from and the time of submission.
- Server and security logs. Our hosting provider processes standard request data (such as IP address, browser type and requested URL) to deliver the site and protect it from attacks.
We do not knowingly collect information from children under 16, and the site is not directed to them. We do not ask for sensitive information such as health, financial account or government ID numbers through the site; please do not include it in your message.
2. Cookies and analytics
The site does not currently use advertising cookies, cross-site tracking or third-party analytics. If spam protection (Cloudflare Turnstile) is active on our forms, it may set or read strictly necessary data to tell people from bots. If we add analytics or marketing cookies in the future, we will update this policy first and, where the law requires it, ask for your consent.
3. How we use information
- To respond to your enquiry, schedule calls and deliver any audit you request.
- To prepare proposals and, if you become a client, to manage the relationship.
- To protect our forms, systems and users against spam, fraud and abuse.
- To keep business records and meet legal, tax and accounting obligations.
- To improve our website and services, using aggregated or de-identified information where possible.
We use your contact details to follow up on the request you made. We will only send you marketing emails if you ask for them or if the law otherwise allows it, and every marketing email includes a way to unsubscribe, in line with Canada’s Anti-Spam Legislation (CASL) and the US CAN-SPAM Act.
4. Consent and legal basis
By submitting a form you consent to us collecting and using your information for the purposes above. You can withdraw consent at any time by contacting us, subject to legal or contractual restrictions; if you do, we may not be able to respond to your request or provide an audit.
5. How we share information
We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising.
We share information only with service providers that help us run the site and our business, under contracts that require them to protect it and use it only on our instructions:
- Cloudflare: website hosting, content delivery, security and form spam protection.
- Supabase: secure database storage for form submissions.
- Email and productivity providers: to receive, send and store business email and notifications.
We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case the information remains subject to this policy.
6. Where information is stored
Our service providers may store and process information in the United States, Canada and other countries. When information is processed outside your province, state or country, it is subject to the laws of that place, and may be accessible to its courts, law enforcement and national security authorities. We use providers that apply appropriate safeguards.
7. Retention
We keep enquiry and audit-request information for up to 24 months after our last contact with you, unless you become a client, in which case client records are kept for the length of the engagement plus up to seven years for legal, tax and accounting purposes. Security logs are kept for shorter periods. When information is no longer needed, we delete or anonymise it.
8. How we protect information
We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, restricted access on a need-to-know basis, row-level security on our database and server-only access keys. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach creates a real risk of significant harm, we will notify affected people and regulators as the law requires.
9. Your rights
Depending on where you live, you may have the right to:
- know what personal information we hold about you and how we use it, and get a copy;
- correct inaccurate or incomplete information;
- ask us to delete your information;
- withdraw consent or opt out of marketing communications;
- not be discriminated against for exercising these rights.
Canada: you have rights of access and correction under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, and you may complain to the Office of the Privacy Commissioner of Canada.
United States: residents of California and other states with consumer privacy laws may have additional rights. We do not sell or share personal information as those laws define it, and we honour Global Privacy Control signals where required.
To make a request, email [email protected] or call (866) 360-7265. We will verify your identity before acting on a request and respond within the time the law requires, usually within 30 days. You may use an authorised agent where the law allows.
10. Links to other sites
The site may link to websites we do not control. Their privacy practices are their own, so please read their policies.
11. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and change the “Last updated” date. If we make significant changes, we will take reasonable steps to let you know.
12. Contact us
Questions, requests or complaints about privacy go to our privacy officer at [email protected] or (866) 360-7265 (Mon–Fri, 9am–6pm Eastern). RankYield is a brand of GULMAZ INC.