Privacy policy

1. Who we are

Rankbeta is a digital marketing agency based in Mumbai, Maharashtra, India. Rankbeta is a trading name of Digi Messiah ("Rankbeta", "we", "us", "our"). This policy explains how we collect, use, share and protect personal data when you visit rankbeta.com, contact us, book a call, or become a client.

We handle personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and its rules. Where we work with clients or visitors in other countries, we also aim to respect the privacy laws that apply to them, such as the GDPR in the EU and UK.

2. What we collect

Information you give us

• Contact details: your name, email address, phone number, company name and website when you fill in our contact form, email us, or book a call.
• Business information: details you share about your business, marketing goals, ad budgets and challenges.
• Billing details: company name, billing address and tax identifiers (such as GSTIN) needed to invoice you.
• Communications: the content of emails, messages and call notes between us.

Information collected automatically

• Usage data: pages visited, time on site, referring page, device type, browser and approximate location based on IP address.
• Cookies and similar technologies: see section 6.

Information from others

• Lead details submitted through advertising lead forms (for example, Meta lead ads) when you respond to one of our ads.
• Booking details from our scheduling provider when you book a call.

3. How we use it

We use personal data only for clear, specified purposes:

• To reply to your enquiries and hold the calls you book.
• To prepare proposals, audits and quotes you ask for.
• To deliver our services, manage our client relationship, and send invoices.
• To send you service updates and, where you have agreed, occasional marketing emails. You can opt out at any time.
• To measure and improve our website and our own advertising.
• To meet legal, tax and accounting obligations, and to protect our legal rights.

Where the law requires consent, we rely on your consent, which you can withdraw at any time by emailing us. Withdrawing consent does not affect processing that happened before you withdrew it. For other purposes we rely on legitimate uses permitted by law, such as information you have voluntarily provided for a specific purpose, or compliance with legal obligations.

4. Client account data

When you hire us, you may give us access to your advertising accounts, analytics, Merchant Center, website or CRM. These systems may contain personal data about your own customers (for example, conversion data or lead form submissions).

• For that data, you are the data fiduciary (or data controller) and we act as your data processor. We process it only to deliver the services you engaged us for and according to your instructions.
• We do not sell your customer data or use it for any other client.
• When the engagement ends, we remove our own access on request and return or delete any copies we hold, unless the law requires us to keep them.
• You are responsible for having a lawful basis and appropriate notices for the data you collect from your customers, including data you use in audience lists and conversion tracking.

5. Who we share it with

We do not sell personal data. We share it only with:

• Service providers who help us run the business, such as email and file hosting, scheduling (for example, TidyCal), website hosting, analytics and accounting tools. They may use the data only to provide their service to us.
• Advertising platforms such as Google, Meta and TikTok, when running campaigns for you or for our own marketing. Their use of data is governed by their own privacy policies.
• Professional advisers such as lawyers, accountants and auditors, under a duty of confidentiality.
• Authorities when required by law, court order or to protect rights, safety or property.
• A successor business if Rankbeta is involved in a merger, acquisition or sale of assets, subject to this policy.

6. Cookies and tracking

Our website may use cookies and similar technologies for:

• Essential functions that make the site work.
• Analytics (for example, Google Analytics) to understand how visitors use the site.
• Advertising (for example, the Google tag and Meta Pixel) to measure our ads and show relevant ads to people who have visited our site.

You can block or delete cookies in your browser settings. You can also manage ad personalisation in your Google ad settings and Meta ad preferences. Blocking some cookies may affect how the site works.

7. International transfers

We are based in India and work with clients around the world. Some of our service providers store data outside India, including in the United States and the European Union. When data moves across borders, we use reputable providers with appropriate safeguards and only transfer data to countries not restricted by the Government of India.

8. How long we keep it

• Enquiries that do not become projects: up to 24 months after our last contact, unless you ask us to delete them sooner.
• Client records and contracts: for the length of the engagement and up to 8 years afterwards to meet tax and accounting requirements.
• Website analytics data: according to the retention settings of the analytics tool, typically up to 14 months.

When data is no longer needed, we delete or anonymise it.

9. Security

We use reasonable security practices, including access controls, two-factor authentication on key accounts, least-privilege access to client platforms, and encrypted connections. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.

10. Your rights

Subject to applicable law, you have the right to:

• Get a summary of the personal data we hold about you and how we use it.
• Correct, complete or update inaccurate data.
• Have your data erased when it is no longer needed or you withdraw consent.
• Withdraw consent at any time.
• Nominate another person to exercise your rights in case of death or incapacity.
• Raise a grievance with us, and if it is not resolved, complain to the Data Protection Board of India.

If you are in the EU or UK, you may also have the rights to object to processing, restrict processing, and data portability, and to complain to your local data protection authority.

To use any of these rights, email [email protected]. We may need to verify your identity before acting on your request.

11. Children

Our website and services are meant for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The effective date at the top shows when it was last changed. If the changes are significant, we will highlight them on this page or tell clients directly.

13. Contact and grievances

For questions about this policy or to raise a grievance, contact:

We aim to acknowledge grievances within 48 hours and resolve them within 30 days.