Privacy Policy

Privacy Policy

Last updated: [18/05/2026]

1. Who we are

RampantROI Ltd is a limited company registered in England and Wales (company number [insert]) with registered office. We are the data controller for personal data processed via this website and through our services. You can contact us at privacy@rampantroi.co.uk or by post at the address above.

2. What data we collect

When you visit our website, complete a form, or contact us, we may collect: your name, business name, job title, email address, phone number, postal address, IP address, browser and device information, pages you visit on our site, communication content, and your marketing preferences.

3. How we collect data

We collect data when you fill in a contact or enquiry form, book a call via our calendar booking tool, subscribe to communications, send us an email or message, or browse our website (via cookies and analytics).

4. Why we use your data and our lawful basis

We use your personal data to:

Respond to enquiries (lawful basis: legitimate interests)
Deliver services to clients who engage us (lawful basis: contract)
Send marketing communications about our services (lawful basis: your consent — you can withdraw at any time)
Analyse and improve our website performance (lawful basis: legitimate interests)
Comply with legal, tax, and regulatory obligations (lawful basis: legal obligation)
Prevent fraud and secure our systems (lawful basis: legitimate interests)

5. Who we share data with

We share personal data only with third parties who help us deliver our services. These include:

Google (Workspace email, Calendar, Analytics)
Meta Platforms (Facebook and Instagram advertising)
Stripe (payment processing)
HubSpot or GoHighLevel (CRM and marketing automation)
Our accountants, professional advisers, and HMRC (for legal compliance)

All third parties are required to protect your data and process it only for purposes we specify.

6. International data transfers

Some of our service providers (notably Google, Meta, and Stripe) are based outside the UK. Where data is transferred internationally, we rely on the UK's adequacy regulations, Standard Contractual Clauses, or other safeguards approved by the UK Information Commissioner's Office.

7. How long we keep your data

We retain personal data only as long as necessary for the purposes set out above. As a general guide:

Enquiry data (non-clients): 24 months from last contact
Client data: duration of contract plus 7 years (for legal and tax purposes)
Marketing data: until you withdraw consent or 24 months of inactivity
Website analytics: 26 months

8. Your rights under UK GDPR

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict our processing of your data
Request a copy of your data in a portable format
Withdraw consent for marketing communications at any time

To exercise any of these rights, email privacy@rampantroi.co.uk. We will respond within one month.

9. Cookies

Our website uses cookies for essential functionality and analytics. You can manage cookie preferences via the cookie banner when you first visit, or change preferences at any time via your browser settings.

10. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, accidental loss, or destruction.

11. Complaints

If you have concerns about how we handle your personal data, please contact us first at privacy@rampantroi.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

12. Changes to this policy

We may update this policy from time to time. The current version is always published on this page, with the "last updated" date shown above.