Last updated: 26 August 2026
EddyRank (“EddyRank”, “we”, “us” or “our”) provides SEO, AEO and local search services to general contractors and construction businesses. This policy explains what personal information we collect through eddyrank.com and in the course of providing our services, why we collect it, who we share it with, and the rights you have over it.
EddyRank is a business established in Israel and is the controller of the personal information described in this policy. You can reach us at any time at contact@eddyrank.com.
1. Information we collect
Information you give us
- Booking and enquiry details. When you book a call through our Calendly scheduling page or email us, we receive your name, email address, and anything else you choose to tell us, such as your company name, website address, phone number, service area and the questions you want to discuss.
- Client account information. If you become a client, we collect the information needed to deliver the work. This typically includes business contact details, billing details, your website and business address, service areas and target locations.
- Access credentials. To perform SEO work we are usually granted access to systems you control, such as your website CMS, Google Business Profile, Google Analytics, Google Search Console and hosting account. We treat these credentials as confidential and use them only to perform the agreed services.
- Marketing preferences. If you subscribe to updates from us, we record your email address and the fact that you opted in.
Information we collect automatically
When you visit eddyrank.com we collect standard technical information through Google Analytics 4 (measurement ID G-5ZXEZKBTQ8). This includes your IP address (which Google truncates before storage), device and browser type, operating system, referring website, the pages you view, how long you spend on them, and approximate location derived from your IP address at city level. This information is collected through cookies and similar technologies.
Our web host also keeps standard server logs, including IP addresses and request details, for security and troubleshooting.
Information we do not collect
We do not collect payment card details. One-time payments are processed by PayPal on PayPal’s own systems, and we receive only confirmation of payment and the associated transaction details. We do not knowingly collect sensitive personal information as defined by Israeli or European law, and we ask that you do not send it to us.
2. Cookies and analytics
We use the following categories of cookies and similar technologies:
- Analytics cookies. Google Analytics 4, to understand how visitors find and use the site so we can improve it.
- Third-party embedded services. Our scheduling pages are provided by Calendly, and payment pages by PayPal. When you interact with these, those providers may set their own cookies under their own privacy policies.
- Functional and security cookies. Set by WordPress and our security plugin to keep the site working and protect it from abuse.
You can block or delete cookies through your browser settings. You can opt out of Google Analytics specifically by installing the Google Analytics Opt-out Browser Add-on. Blocking cookies may affect how parts of the site function.
3. Why we use your information and our legal bases
Where the EU or UK General Data Protection Regulation applies to our processing, we rely on the following legal bases:
- To respond to your enquiry and schedule calls. Legal basis: steps taken at your request before entering a contract, and our legitimate interest in responding to people who contact us.
- To provide and administer our services. Legal basis: performance of our contract with you.
- To invoice and take payment, and to keep accounting records. Legal basis: performance of our contract and compliance with our legal obligations.
- To measure and improve our website and marketing. Legal basis: your consent where required, and otherwise our legitimate interest in understanding and improving our own marketing.
- To send marketing emails. Legal basis: your consent, which you can withdraw at any time using the unsubscribe link in any message.
- To protect our website, enforce our terms and establish or defend legal claims. Legal basis: our legitimate interests and compliance with legal obligations.
Under the Israeli Privacy Protection Law, 5741-1981, as amended, we process your information on the basis of the consent you give when you submit it to us and as necessary to provide the services you have asked for.
4. Who we share your information with
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it only with service providers who process it on our behalf, under contract, and only as far as they need it to do their job:
- Google (Analytics and Search Console), for website measurement.
- Calendly, for scheduling calls.
- PayPal, for processing payments.
- Hostinger, for website hosting and email delivery.
- Professional advisers, such as accountants or lawyers, where we need their advice.
We may also disclose information where we are required to do so by law, by a court, or by a competent authority, or where disclosure is necessary to protect our rights or the safety of others.
5. International transfers
We are based in Israel. The European Commission has recognised Israel as providing an adequate level of protection for personal data, most recently reaffirmed in January 2024, which means personal data can be transferred from the European Economic Area to Israel without additional safeguards.
Some of our service providers are located in the United States or elsewhere. Where we transfer personal information from the EEA or the UK to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or on the provider’s certification under the EU-US Data Privacy Framework. You can ask us for details of the safeguards that apply to a specific transfer.
6. How long we keep it
- Enquiries that do not become clients: up to 24 months from our last contact, so we can pick up the conversation if you come back to us.
- Client records: for the duration of the engagement and for 7 years afterwards, to meet tax and accounting requirements.
- Access credentials: removed or revoked at the end of the engagement. We ask clients to revoke our access on their side as well.
- Marketing contacts: until you unsubscribe, and then only a record of your opt-out so we do not contact you again.
- Analytics data: retained by Google according to the retention period we set on the property, currently 14 months.
7. Your rights
If you are in the European Economic Area or the United Kingdom, you have the right to access your personal data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing (including objecting to direct marketing at any time), to receive your data in a portable format, and to withdraw consent at any time without affecting processing carried out before withdrawal.
If you are in Israel, the Privacy Protection Law gives you the right to review information held about you, to request that it be corrected or deleted, and to object to its use for direct marketing.
If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion or correction, and to be free from discrimination for exercising those rights. We do not sell or share your personal information as those terms are defined by the California Consumer Privacy Act, so no opt-out is required.
To exercise any of these rights, email contact@eddyrank.com. We will respond within 30 days, and we may need to verify your identity before acting on your request. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.
If you believe we have handled your information improperly, we would like the chance to put it right, so please contact us first. You also have the right to complain to a supervisory authority: the Israeli Privacy Protection Authority, the UK Information Commissioner’s Office, or the data protection authority in your EU country of residence.
8. Security
We protect your information with access controls, encrypted connections (HTTPS across the site), a web application firewall, and password management practices for the client credentials we hold. We limit access to client systems to what the work requires. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we will notify you and the relevant authority of a security incident where the law requires it.
9. Children
Our services are aimed at businesses and are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.
10. Changes to this policy
We may update this policy as our services or the law change. We will update the date at the top of this page, and where the changes are significant we will tell affected clients directly.
11. Contact us
Questions about this policy or about how we handle your information can be sent to contact@eddyrank.com.