Privacy Policy

Last updated: 27 March 2026

1. Introduction

Rank Haus ABN 86 857 194 575 (“we”, “us”, “our”) is committed to protecting the privacy of your personal information. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website rankhaus.au, use our services or interact with us in any way.

We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) and, where applicable, the General Data Protection Regulation (GDPR) for individuals located in the European Economic Area.

By using our website or engaging our services, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

We may collect the following types of personal information:

Information you provide directly:

• Name, email address, phone number and business name
• Website URL and business details provided during discovery calls or consultations
• Payment and billing information processed through our invoicing platform (Bonsai)
• Communications including emails, form submissions and meeting notes
• Login credentials for services we manage on your behalf (stored securely)

Information collected automatically:

• IP address, browser type, operating system and device information
• Pages visited, time spent on pages, referring URLs and navigation paths
• Click patterns, scroll depth and interaction data (via Microsoft Clarity)
• Session recordings and heatmap data (via Microsoft Clarity, anonymised)
• Website performance and conversion data (via Google Analytics 4)

Information from third parties: We may receive information about you from referral partners, Google Search Console, Google Analytics, SE Ranking or other SEO and advertising platforms when you engage us to manage these services on your behalf.

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide, manage and improve our SEO, Google Ads, web design and hosting services
• To communicate with you about your projects, reports and account
• To process payments and manage billing
• To analyse website performance and improve user experience
• To send you relevant updates about our services (you can opt out at any time)
• To comply with legal obligations and protect our legitimate business interests
• To generate anonymised, aggregated data for internal reporting and service improvement

We will never sell your personal information to third parties.

4. Use of Artificial Intelligence

We use artificial intelligence (AI) tools as part of our service delivery to improve efficiency, quality and outcomes. This includes:

• AI-assisted content creation, keyword research and SEO analysis
• AI-powered data analysis and reporting
• Automated workflows for audits, content planning and technical SEO tasks
• AI tools for code generation and website development

When using AI tools, we take the following precautions:

• Client data shared with AI platforms is limited to what is necessary for the specific task
• We do not upload sensitive personal information (passwords, payment details) to AI tools
• All AI-generated outputs are reviewed and validated by our team before delivery
• We use enterprise and API-tier AI services that do not use client data for model training
• AI tools are used to augment human expertise, not replace professional judgement

The AI platform we currently use is Anthropic (Claude). Anthropic has its own privacy policy governing data processing. We selected Anthropic because it offers enterprise-grade data handling and does not use input data for model training. Anthropic’s usage policy: anthropic.com/privacy

5. Analytics and Tracking

We use the following analytics and tracking tools on our website:

Google Analytics 4 (GA4)

We use Google Analytics 4 to understand how visitors interact with our website. GA4 collects data including pages visited, session duration, traffic sources, device information and conversion events. This data is processed by Google LLC. GA4 uses first-party cookies and does not collect personally identifiable information by default. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. Google’s privacy policy: policies.google.com/privacy

Microsoft Clarity

We use Microsoft Clarity to understand how visitors interact with our website through session recordings and heatmaps. Clarity captures anonymised interaction data including clicks, scrolls, mouse movements and page navigation. Clarity does not collect passwords, payment details or other sensitive form inputs. Clarity masks sensitive content by default. Microsoft’s privacy statement: privacy.microsoft.com

Google Search Console

We use Google Search Console to monitor how our website appears in Google search results, including indexation status, search queries, click-through rates and crawl errors. Search Console data is processed by Google LLC and is subject to Google’s privacy policy.

Google Tag Manager

We use Google Tag Manager to manage tracking scripts on our website. Google Tag Manager itself does not collect personal data, but it deploys tags that may collect data as described elsewhere in this policy (e.g. GA4, Clarity). Google’s privacy policy: policies.google.com/privacy

Bing Webmaster Tools

We use Bing Webmaster Tools to monitor our website’s performance in Bing search results, including indexation, crawl data and search queries. This data is processed by Microsoft Corporation and is subject to Microsoft’s privacy statement.

Cookies: GA4, Microsoft Clarity and other tracking tools listed above use cookies to distinguish users and sessions. These are first-party cookies set on our domain. You can control cookies through your browser settings. Disabling cookies may affect your experience on our website.

6. Data Sharing and Disclosure

We may share your personal information with:

• Service providers who assist us in delivering our services, including hosting providers (SiteGround), payment processors (Bonsai/Stripe), email platforms and analytics tools
• Platform providers such as Google (Ads, Analytics, Search Console), SE Ranking, Shopify and WordPress when managing your accounts on your behalf
• Professional advisors including accountants and legal counsel as required
• Legal authorities when required by law, regulation or legal process

Some of these service providers are located outside Australia (primarily in the United States and European Union). Where data is transferred internationally, we ensure appropriate safeguards are in place consistent with the Australian Privacy Principles.

7. Data Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure. Our security measures include:

• SSL/TLS encryption on all website communications
• Secure password management for client accounts
• Access controls limiting who can view client data
• Regular software updates and security monitoring on managed websites
• Enterprise-tier accounts on third-party platforms with appropriate security certifications

No method of electronic storage or transmission is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Client project data is retained for the duration of our engagement plus 12 months
• Financial records are retained for 7 years as required by Australian tax law
• Analytics data is retained according to the default retention periods of each platform (GA4: 14 months, Clarity: 13 months)
• Marketing communications data is retained until you unsubscribe

Upon request, we will delete or de-identify your personal information unless we are required by law to retain it.

9. Your Rights

Under the Australian Privacy Act and, where applicable, the GDPR, you have the following rights:

• Access: You can request a copy of the personal information we hold about you
• Correction: You can request that we correct inaccurate or incomplete information
• Deletion: You can request that we delete your personal information (subject to legal retention requirements)
• Objection: You can object to the processing of your personal information for direct marketing
• Data portability: You can request your data in a structured, machine-readable format
• Withdraw consent: Where processing is based on consent, you can withdraw that consent at any time

To exercise any of these rights, contact us at coralee@rankhaus.au. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of any website you visit.

11. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The updated policy will be posted on this page with a revised “Last updated” date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Rank Haus

Email: coralee@rankhaus.au

Website: rankhaus.au

Queensland, Australia

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.