Privacy Policy

1. Identity of Data Controller and Data Processor

Rapid Edge Designs Ltd is a private limited company incorporated in England & Wales under Company Registration Number 17486891, with its registered office located at 66 Paul Street, London, England, EC2A 4NA.

Supervisory Authority Notification: Information Commissioner's Office (ICO) Registration: pending.

2. Information We Collect

Depending on your relationship with Rapid Edge Designs Ltd, we collect and process the following categories of personal data:

• Business Client Account Details: Representative name, trading name, business registration number, business email address, UK telephone number, and registered or operating address.
• Payment & Billing Data: Bank account holder name, sort code, last two digits of bank account number, and mandate reference IDs processed securely via our FCA-regulated payment partner, GoCardless Ltd, under the Bacs Direct Debit Scheme. We never store full bank credentials on our local servers.
• Tenant Client Inquiries (As Processor): Name, email address, telephone number, and message content submitted by end-users requesting quotes or appointments through client websites.
• Server Logs (As Controller): When you visit a website we host, our content delivery network (Amazon CloudFront) records technical details of each request: your IP address, browser type, the page requested, the referring page and the time. We use these to keep the service secure, detect abuse and fix broken links. Our main logs shorten your IP address before storage (IPv4 to its first three blocks, IPv6 to its first 48 bits), so we can still block an abusive network without keeping the full address. Shortened addresses are still treated as personal data. We do not use cookies for this.

3. Lawful Bases for Processing (UK GDPR Article 6)

4. Data Retention, Ephemeral Storage & Automated Purge

We enforce strict data minimization through automated infrastructure lifecycles:

5. Sub-Processors and Data Residency

All core database instances and computing workloads reside in the United Kingdom (AWS London Region: eu-west-2). Server logs from our content delivery network are processed by AWS in the United States (us-east-1), protected by the AWS UK GDPR Addendum, which includes the ICO International Data Transfer Addendum. We engage the following vetted sub-processors:

6. Zero Tracking Cookies & PECR Compliance

Rapid Edge Designs Ltd does not deploy tracking cookies, advertising beacons, or third-party behavioral profiling pixels (such as Google Analytics or Meta Pixel). Because our site uses zero non-essential cookies, no intrusive cookie consent banner is mandated under the Privacy and Electronic Communications Regulations 2003 (PECR) / Schedule A1. For full technical details, consult our Cookie Policy.

7. Business Prospects We Contact

If we have contacted your business by telephone, letter or email, this section explains what we hold about you and why. It applies to directors, partners, sole traders and named staff of UK businesses.

• What we hold: your name and role, your business name, trading address, business telephone number and business email address, plus our measurements of your public website and notes of our contact with you. Calls are recorded only if you agree at the start of the call.
• Where it came from: public sources, namely the Companies House register, your public Google Business Profile and other public business listings, and your own website.
• Why we use it: to offer your business our website service and to show you what we measured on your current site. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)); we have assessed that this business-to-business use is proportionate.
• Who sees it: only our staff and the processors that run our systems (Amazon Web Services in London, and our email and postal providers). We never sell or rent prospect data.
• How long we keep it: details of businesses we never contact are deleted within 30 days; call recordings are deleted after 90 days; other prospect records are deleted 12 months after our last contact unless you become a client.
• Stopping contact: you can object at any time by telling us on a call, replying to any email, or emailing privacy@rapidedgedesigns.com. We then stop all contact and keep only a minimal, hashed record of your contact details so that we never contact you again.

8. Data Subject Rights & How to Contact Us

Under the Data Protection Act 2018 and UK GDPR, you have the right to request access to, rectification of, or erasure of your personal data, as well as the right to object to or restrict processing.