GDPR Policy

1. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

• Contract performance
• Legitimate interest (e.g., improving services, preventing fraud)
• User consent (e.g., analytics & marketing cookies)
• Legal obligations

2. Categories of Personal Data

Fastrank may process:

• Store and website performance metrics
• Contact details (name, email, business info)
• Technical logs, IP addresses, device information
• Payment metadata (via Stripe)
• Support communications
• Cookie and analytics data

3. Purposes of Processing

We process personal data for the following purposes:

• Delivering audit and optimization services
• Improving service accuracy and performance
• Customer communication & support
• Billing and account management
• Analytics and performance tracking
• Security, fraud prevention, and abuse monitoring

4. International Data Transfers

Your data may be transferred to the United States and other jurisdictions. Transfers are protected through legal mechanisms including Standard Contractual Clauses (SCCs).

5. Your Data Protection Rights

Under GDPR, EU individuals have the right to:

• Access personal data
• Request rectification
• Request deletion (“right to be forgotten”)
• Restrict processing
• Object to processing based on legitimate interest
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

6. Security Measures

Fastrank applies industry-standard technical and organizational measures to secure data, including encryption, access controls, risk assessments, and routine security audits.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described above or as required by applicable laws.

8. Subprocessors

Fastrank works with GDPR-compliant subprocessors such as:

• Stripe (payments)
• DigitalOcean / cloud hosting providers
• Crisp (customer messaging)
• Analytics tools for audits and performance tracking

9. Contact Information