Privacy Policy
Last updated: 17 July 2026
The short version
We only collect what you type into our forms — your email, optionally your organisation's name, and the website address you ask us to scan. We use it to send you your report and follow up as you requested. No cookies, no ad trackers, no selling or renting your data. Ever. Want your data gone? One email and it's deleted.
1. Who we are
GrantLift is an independent Google Ad Grant service operated by Ray Renaissance Media ("we", "us"). We are the data controller for the personal data described in this policy. GrantLift is not affiliated with or endorsed by Google.
Contact for anything privacy-related: hello@grantlift.agency.
2. What we collect, and why
| Data | When | Why (legal basis) |
|---|---|---|
| Website address you submit | When you run the free readiness scan | To analyse the site and show you the report (performing the service you requested) |
| Email address, organisation name (optional), your scan score | When you unlock the full report | To email you the report and — only if you ticked the box — send you a quote (consent) |
| IP address | Automatically, on every request | Rate-limiting to prevent abuse of the free scanner, and standard hosting logs (legitimate interest). Held briefly, never used for profiling. |
That's the whole list. The scan itself analyses the website you point us at — public technical facts about a web page, not personal data about you.
3. What we don't do
- No cookies and no trackers. This site sets no cookies and loads no advertising or social-media trackers — which is why you don't see a cookie banner.
- No selling or sharing. We never sell, rent, or trade your personal data. No "partners", no "affiliates".
- No spam. Unlocking a report gets you that report and at most one follow-up. Nothing recurring unless you explicitly opt in.
4. Who processes data on our behalf
Like nearly every website, we rely on a few carefully-chosen service providers ("processors") that handle data only on our instructions:
- Vercel (hosting) — serves the website and runs the scanner; keeps short-lived technical request logs.
- FormSubmit (form delivery) — relays your unlock-form submission to our inbox.
- Google Fonts — delivers the two typefaces on this site; your browser requests the font files from Google's servers.
Some of these providers are based in the United States. Where data leaves the EEA, transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
5. How long we keep it
- Scan data: processed on the fly; not stored in a database.
- Leads (email/organisation): kept in our inbox while relevant to your enquiry, deleted on request at any time.
- Technical logs: retained briefly by our hosting provider, then automatically discarded.
6. Your rights
If you're in the EU/EEA (and in most other places too), you have the right to access, correct, export, restrict, object to the processing of, or delete your personal data — and to withdraw consent at any time. To exercise any of these, email hello@grantlift.agency; we'll act on it within 30 days. You also have the right to complain to your local data-protection authority.
7. Changes to this policy
If we add features that change what we collect (for example an email newsletter — it would be strictly opt-in), we'll update this page and the date at the top before they go live.