Draft: to be reviewed before public launch.
Privacy Policy
This explains what personal data Range & Rack collects, why, and what you can do about it.
What we collect
- Sign-up and account details: name, work email, company name and the other details you enter when you ask for an account or to join one.
- Client details: the name and email of each person a supplier sends a quote to, the comments they write and the record of any acceptance (who, which version, when).
- Content you upload: vendor files and anything in them, quote lines, prices and attached documents.
- Sign-in and security data: one-time codes, session cookies needed to keep you signed in, and logs of requests (time, address, browser) that help us keep the service secure.
Why we use it
- To run the service: build and show quotes, send the emails it sends (codes, quote links, comments, acceptances) and keep a record of what happened.
- To review sign-up requests and support you.
- To keep the service and your data secure and to meet legal duties.
We don't sell your data, use it for advertising, or add tracking or analytics cookies.
Who can see it
- A supplier's team sees that supplier's quotes, files and client conversations.
- A client sees only the quotes sent to them. Clients never see the supplier's vendor names, vendor files or vendor prices.
- Our support team sees sign-up requests and what it needs to help you.
- Service providers who host the service and deliver its emails process data for us under contract.
How long we keep it
We keep account and quote data while the supplier's account is open, and acceptance records for as long as they may be needed as evidence. One-time codes expire within minutes. When an account closes, we delete or anonymise its data unless the law requires us to keep it.
Your choices
You can ask to see, correct or delete your personal data, or object to how we use it. If you are a client, you can also ask the supplier who sent you a quote. We will answer within a month.
Security
Data is encrypted in transit and at rest, access is limited to the people who need it, and sign-ins use one-time codes or multi-factor authentication.
Changes
We may update this policy. If a change matters, we will tell you by email or in the service before it takes effect.
Contact
Questions about this page? Email us