Privacy Policy

1. Who we are

Rapid Action Ltd is a company registered in England and Wales with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

We are the controller of the personal data described in this policy, which means we decide how and why it is used. This policy explains what we collect when you use rapidaction.gg, contact us or work with us, how we use it, who we share it with and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any privacy question or request, email rapidactionggltd@gmail.com or write to Rapid Action Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

2. What we collect and why

We collect only what we need. Most of it you give us directly through our forms or by email. The table explains each case, the data involved, what we use it for and the legal basis we rely on.

3. Spam protection

Our forms include simple, invisible checks to block automated spam, such as a hidden field that people do not see and the time taken to fill in the form. These checks do not identify you and are not used for anything else.

4. Analytics without cookies

We use Umami to understand how the site is used. Umami does not use cookies, does not collect personal data, does not track you across other websites and does not build a profile of you. It only gives us aggregated figures, such as how many people viewed a page and which buttons were clicked.

5. Cookies and similar technologies

Our own pages do not set advertising or tracking cookies. Some features provided by other companies may set their own cookies when you use them:

• Booking page: our scheduling provider may set cookies that are needed for booking a call to work.
• About page: the embedded Google Map is provided by Google, which may set cookies and collect usage data when the map loads. Google’s privacy policy applies to that data.

6. Who we share data with

We do not sell your personal data, and we do not share it for other companies’ marketing. We share it only with service providers that help us run our business, who process it on our instructions and under contracts that protect it:

• Vercel, which hosts the site
• Resend, which delivers our emails and manages our newsletter list
• Koalendar, which runs our call booking
• Umami Cloud, our cookie-free analytics provider
• Google, which provides the map on our About page
• our accountants, banks and professional advisers, where needed for clients

7. Other reasons we may share data

We may also disclose personal data if the law requires it, to protect our rights or the safety of others, or as part of a sale or restructuring of our business, in which case the new owner would be bound by this policy.

8. International transfers

Some of our providers store or process data outside the UK, for example in the European Economic Area or the United States. When that happens, we make sure the data is protected by an approved safeguard, such as a UK adequacy decision, the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses, or the UK Extension to the EU-US Data Privacy Framework.

9. How long we keep data

We keep personal data only as long as we need it:

• Enquiries, audit requests and call bookings: up to 24 months after our last contact, unless you become a client
• Client records, contracts and invoices: 6 years after the end of the financial year they relate to, as required for tax and accounting
• Newsletter subscriptions: until you unsubscribe, after which we keep only what we need to make sure we do not email you again
• Hosting logs: for a short period set by our hosting provider, for security
• Analytics: aggregated data that contains no personal data

10. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you and receive a copy
• ask us to correct data that is inaccurate or incomplete
• ask us to delete your data
• ask us to restrict how we use your data
• object to us using your data on the basis of legitimate interests, including for direct marketing
• receive your data in a portable format and have it sent to another organisation
• withdraw your consent at any time, where we rely on consent, without affecting what we did before

11. How to use your rights

To make a request, email rapidactionggltd@gmail.com. We may ask you to confirm your identity before we act on it. We respond within one month, and there is normally no charge.

You can unsubscribe from our newsletter at any time using the link at the bottom of every email.

12. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

13. How we protect your data

We use reputable providers, encrypted connections (HTTPS), access controls and two-factor authentication on our accounts, and we limit access to personal data to the people who need it. No system is completely secure, but we take reasonable steps to protect what you share with us, and we will tell you and the ICO about a data breach where the law requires it.

14. Automated decisions

We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.

15. Demonstrations

The interactive demos on the site, such as the MARLO demo store, run entirely in your browser. Anything you type into them, including the demo newsletter box and checkout, is not sent to us or stored.

16. Children

The site and our services are intended for businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has given us their data, please contact us and we will delete it.

17. Changes to this policy

We may update this policy from time to time, for example if we start using a new service. The date at the top of this page shows when it was last updated. If we make significant changes that affect you, we will let you know where we can.

18. Contact us

For any privacy question, email rapidactionggltd@gmail.com or write to Rapid Action Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.