Privacy Policy

1. Scope and who we are

This Privacy Policy describes how Ranking Out ("Ranking Out", "we", "us" or "our") collects, uses and discloses information in connection with rankingout.com and any subdomain or landing page we operate, including rankingout.com/demo (together, the "Site").

Ranking Out is a marketing services provider based in Arlington, Virginia, United States. We provide local search, advertising and patient communication services to private practice physical therapy and chiropractic businesses.

This Policy applies to information we collect as a business acting on our own behalf. It does not apply to information we process on behalf of a client under a services agreement. Section 10 addresses that separately.

By using the Site you acknowledge that you have read this Policy.

2. Information you provide to us

We collect information you choose to submit, including:

• Contact and enquiry forms. Typically your name, business email address, telephone number, practice name and location, and any message you write. Some forms ask qualifying questions about your practice, such as its ownership structure and the approximate size of your patient list.
• Appointment booking. When you book a session through our scheduling tool we collect your name, email address, the time you select, your responses to any booking questions, and any note you add.
• Video sign-up. When you ask to watch one of our videos we collect the first name and email address you enter. We add that address to our marketing email list and send you a short series of emails about the video and, at the end, one invitation to book a call. Every email carries an unsubscribe link, and unsubscribing stops all marketing email from us.
• Direct correspondence. Information contained in emails, telephone calls and messages you send us, and our replies.
• Free assessments. If you request a grid audit or similar assessment, the business name and business address you supply.

3. Information collected automatically

3.1 Server logs

The Site is hosted by GitHub Pages. Its servers record standard request information, which may include your IP address, the date and time of the request, the page requested, and your browser's user agent string. We do not have access to a dashboard of these logs. GitHub processes this information under its own privacy practices.

3.2 Analytics

We use Google Analytics 4 to understand how the Site is used, including how many people visit, which pages they read, the approximate region they are in, and whether they arrived from a search engine, an advertisement or a link. Google Analytics sets cookies in your browser containing a randomly generated identifier. We have configured Google Analytics so that IP addresses are not used to build an advertising profile.

3.3 Advertising pixels

We advertise on Meta platforms and have installed the Meta Pixel on the Site. When you visit a page carrying the Pixel, information is transmitted to Meta Platforms, Inc., which may include your IP address, the page URL, referring URL, browser and device information, cookie identifiers set by Meta, and the fact that a specified event occurred, such as a page view or a completed booking.

We use this information to measure the performance of our advertising, to attribute enquiries to the advertisements that produced them, and to build audiences for future advertising. Meta processes information received through the Pixel under its own terms and privacy policy, and may use it for its own purposes. See Meta's Privacy Policy.

3.4 Session recording

We use a session replay tool that records interactions with our pages, including mouse movement, scrolling, clicks, page navigation, approximate screen size and the duration of your visit. The purpose is to identify usability problems, such as a form that fails or a section that nobody reaches.

The tool is configured to mask text entered into form fields, so keystrokes and field contents are not captured in the recording. Recordings are not used to identify individual visitors, are not combined with your contact details, and are not disclosed to third parties other than the vendor that provides the tool.

3.5 Video analytics

Videos on this Site are hosted by Wistia. When a video loads, Wistia receives your IP address and technical information about your browser, and records how much of the video is played. Where you reached the video after giving us your email address, that viewing activity can be associated with you, so that we know whether the video you asked for was watched.

3.6 Do Not Track and Global Privacy Control

The Site does not respond to browser Do Not Track signals, as no common standard for that signal has been adopted. Where required by applicable law, we treat a Global Privacy Control signal as a valid request to opt out of the sharing described in Section 8.

4. Cookies and similar technologies

Cookies are small files stored in your browser. We and our service providers use the following categories:

You can control cookies through your browser settings, including blocking or deleting them. Blocking strictly necessary cookies may prevent parts of the Site from working. Section 8 describes further controls specific to advertising.

5. How we use information

We use the information described above to:

• respond to enquiries and schedule and conduct requested calls;
• prepare free assessments that you request;
• provide, maintain, secure and improve the Site;
• measure and improve the performance of our advertising, including attributing enquiries to the advertisement that produced them;
• build and refine advertising audiences on third-party platforms;
• analyse usability, including through the session replay described in Section 3.4;
• maintain business records, and establish, exercise or defend legal claims; and
• comply with applicable law.

6. How we disclose information

We disclose information to the following categories of recipient:

• Service providers that operate the Site and our business, including our hosting provider (GitHub), analytics provider (Google), scheduling provider (Cal.com), our email marketing provider (Brevo), our video hosting provider (Wistia), our form delivery provider (FormSubmit), our session replay vendor, and our email and telephone providers. These providers are permitted to use the information only to provide services to us.
• Advertising platforms. Meta Platforms, Inc. receives the information described in Section 3.3 and may use it for its own purposes as an independent controller.
• Professional advisers, such as our accountants and lawyers, where necessary.
• Legal and safety recipients, where we believe disclosure is required by law, legal process or governmental request, or is necessary to protect our rights, property or safety or those of others.
• Successors, in connection with a merger, acquisition, financing or sale of assets, subject to this Policy continuing to apply to the transferred information.

We do not sell personal information for monetary consideration and we do not disclose personal information to data brokers.

7. Legal bases

Where applicable law requires a legal basis for processing, we rely on our legitimate interests in operating, securing, analysing and marketing our business; on your consent, where consent is required and has been given; on the performance of a contract or steps taken at your request before entering one; and on compliance with legal obligations.

8. Advertising choices and privacy rights

8.1 Advertising and "sharing"

Our use of the Meta Pixel involves disclosing information about your visit to Meta for advertising purposes. Under the California Consumer Privacy Act as amended, and under comparable laws in other states, that disclosure may be treated as "sharing" for cross-context behavioural advertising, or in some states as a "sale", even though we receive no money for it. You may opt out.

8.2 How to opt out

• Meta. Adjust your advertising preferences in your Facebook or Instagram account settings, and review the "Off-Facebook activity" or equivalent controls Meta provides.
• Analytics. Install Google's opt-out browser add-on, or use the Site-specific control described below.
• This Site. Opening this link sets a preference in your browser that switches our analytics off for this device. The preference is stored on your device only, we never receive it, and it persists until you clear your browser data.
• Your browser. Block or delete cookies, or use a private browsing window or a tracking-protection setting.
• Global Privacy Control. Where applicable law requires it, we honour a Global Privacy Control signal as an opt-out of sharing.

8.3 Rights available in certain jurisdictions

Depending on where you live, you may have the right to request access to the personal information we hold about you, correction of inaccurate information, deletion of information, a portable copy of information you provided, and to opt out of targeted advertising, the sale or sharing of personal information, and certain profiling. You also have the right not to receive discriminatory treatment for exercising these rights, and in some jurisdictions the right to appeal a decision we make on a request.

To exercise a right, contact us using the details in Section 14. We will verify your request, ordinarily by asking you to confirm information we already hold. An authorised agent may submit a request on your behalf with written authorisation.

9. Retention

We keep enquiry and booking records for as long as needed to respond and to maintain our business records, and thereafter as required for legal, tax and accounting purposes. Session recordings are retained for a limited period sufficient for usability analysis and are then deleted or overwritten by the vendor. Analytics and advertising data are retained according to the settings and default retention periods of the relevant platform.

10. Client and patient information

In the course of providing services to a client practice we may process information relating to that practice's patients. That processing is governed by our services agreement with the client and, where the client is a covered entity or business associate under the Health Insurance Portability and Accountability Act, by a business associate agreement.

In that context the client, not Ranking Out, determines the purposes of the processing. If you are a patient of a practice we work with, contact that practice about your information. We do not use patient information for our own marketing, and we do not add patient information to advertising audiences.

11. Security

We maintain administrative, technical and physical safeguards designed to protect information against unauthorised access, disclosure, alteration and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children

The Site is directed to businesses and is not intended for children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided information to us, contact us and we will delete it.

13. International transfers

We operate in the United States, and our service providers may process information in the United States and other countries. If you access the Site from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection law may differ from that of your jurisdiction.

14. Changes and contact

We may update this Policy. When we do, we will revise the date at the top of this page. Where a change materially affects how we use information already collected, we will take additional steps required by applicable law.

To ask a question about this Policy or to exercise a privacy right, contact us: