Privacy policy
Last updated 24 October 2026
This policy explains what personal information Ramplight collects, why, and what you can do about it. Ramplight is operated by Ronan Grobler, trading as Ramplight, in South Africa ("we", "us"). We follow the Protection of Personal Information Act (POPIA) and, for people in the UK and EU, the GDPR.
What we collect
| Information | Why | Legal basis |
|---|---|---|
| Your name, work email and agency name, when you request a scan, subscribe or contact us | To deliver scans and reports, run your account and answer you | Contract, or steps before a contract |
| Store URLs you add, and scan results of those stores' public pages | To provide the service | Contract |
| Billing details | Payments are handled by Polar (our reseller and merchant of record). We see your name, email and subscription status, never your full card number | Contract |
| Business contact details published on agency websites (name, role, work email) | To send a small number of relevant emails to agencies about Ramplight | Legitimate interest. Every email says where we found your details and lets you opt out in one click |
| Basic technical logs (IP address, browser, pages visited) | Security and fixing problems | Legitimate interest |
We do not sell personal information, and we do not use advertising trackers.
Who processes it for us
- Polar – checkout, billing and tax
- Cloudflare – website hosting and security
- Supabase – our database
- Google Workspace – email
- Anthropic – AI models that analyse scan results, write fix suggestions and help answer support emails. Our support assistant is an AI and will say so.
Some of these providers store data outside South Africa, including in the US and EU. We only use providers bound by data-protection terms that give your information adequate protection.
How long we keep it
Account and scan data: while your subscription is active and for 12 months after it ends. Billing records: as long as tax law requires (currently five years in South Africa). Outreach contacts who don't respond: deleted within 6 months. Opt-out requests: kept permanently in a suppression list, so we never contact you again.
Your rights
You can ask us to show, correct or delete your personal information, object to its use, or stop all emails from us. Email privacy@ramplight.io and we will respond within 30 days. You can also complain to South Africa's Information Regulator (inforegulator.org.za) or your local data-protection authority.
Information officer
Ronan Grobler, privacy@ramplight.io.
Changes
If we change this policy in a way that matters, we will email active customers before it takes effect.