Who We Are and Who Controls Your Data

PureRapid® is operated through The Rapid Group FZCO in the United Arab Emirates and The Rapid Group LLC in the United States. Client location does not determine which entity provides the services. The entity identified in the relevant proposal, order, invoice or service agreement is normally the controller for client-account and contractual data connected with that engagement.

For personal data collected centrally through purerapid.com, general enquiries, recruitment and PureRapid’s own marketing, the Rapid Group entity that determines the purpose and means of the relevant processing acts as controller. Where both entities jointly make those decisions, they may act as joint controllers and will allocate their responsibilities appropriately.

Privacy contact for both entities: legal@purerapid.com.

Scope and Applicable Laws

This policy applies to visitors, prospects, clients, suppliers, job applicants and other people whose personal data we process through our website and business activities. It applies regardless of which Rapid Group entity contracts with a client.

Depending on the person, activity and location, our processing may be governed by the UK GDPR as amended by the Data (Use and Access) Act 2025, the Data Protection Act 2018, PECR 2003 as amended, the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and other mandatory local privacy laws.

This policy provides information. It does not make consent a condition of merely viewing the website and does not override rights that cannot lawfully be excluded.

When We Act as Controller or Processor

We act as a controller when deciding why and how to process data for our own website, sales, administration, recruitment and marketing.

We may act as a processor when handling advertising audiences, CRM records, ecommerce data, leads, analytics or campaign information solely on a client’s documented instructions. The client remains controller for that processing, and the relevant service agreement or data-processing terms govern our work.

In some activities, PureRapid and a platform or client may each act as independent controllers or joint controllers. The applicable platform terms and campaign arrangements determine those roles.

Data We Collect and Where It Comes From

We may collect identification and contact details; company, role and professional information; enquiry and application answers; communications; contract, billing and transaction records; recruitment material; website, device, browser, IP, approximate-location and interaction data; advertising identifiers; campaign attribution; conversion events; and information supplied by clients or authorised platforms.

Sources include you directly, your employer or colleagues, clients, referrals, public business sources, website forms, cookies and similar technologies, advertising and analytics platforms, CRM systems, ecommerce platforms and service providers.

Please do not send special-category data, criminal-offence data or unnecessary personal information unless we expressly request it and a lawful basis applies.

Purposes and Lawful Bases

Where we rely on legitimate interests, we assess necessity, business benefit and the effect on individuals. You may request information about the relevant assessment.

Analytics, Heatmaps and Tracking Providers

Subject to your choices and applicable law, we use technologies including:

• Google Analytics 4 for aggregated website measurement and usage analysis
• Hotjar for heatmaps, interaction analysis and website-experience research
• Meta Pixel and Meta Business Tools for advertising measurement, audience creation and remarketing
• HYROS for attribution, journey analysis and conversion measurement
• Omnisend for email marketing, automation, segmentation and engagement measurement
• Google Ads and related Google tags for advertising, conversion measurement and remarketing
• Other analytics, advertising, security, testing and conversion technologies disclosed through our cookie preference centre

These technologies may process IP addresses, device and browser information, page activity, referrer information, advertising identifiers, form or conversion events and inferred interests. We do not intentionally send payment-card data or special-category data through advertising pixels.

Cookies, Consent and Your Choices

Strictly necessary storage may operate without consent where the law permits. We ask for consent before using non-essential advertising, remarketing, heatmap and similar tracking technologies where consent is required.

The Data (Use and Access) Act 2025 introduced limited UK consent exemptions for certain low-intrusion statistical and functionality technologies. Where we rely on an exemption, we provide clear information and any legally required opt-out. We do not treat these exemptions as blanket permission for behavioural advertising.

You can accept, reject or change categories through the cookie preference tool. Withdrawing consent does not affect processing that was lawful before withdrawal. Browser controls may also delete or block storage, although parts of the site may not function correctly.

Direct Marketing and Email

We may send service communications necessary to manage an enquiry or client relationship. Marketing communications are separate.

We use Omnisend and, where still operationally required, other disclosed email providers to manage subscriptions, campaigns and automation. Marketing emails include an unsubscribe facility. We may retain a minimal suppression record after opt-out so that we do not contact you again accidentally.

You may object to direct marketing at any time by using the unsubscribe link or contacting legal@purerapid.com.

Advertising, Attribution and Profiling

Meta, Google, HYROS and other advertising or attribution tools may combine interaction, device, conversion and audience information to measure campaigns, attribute outcomes, create segments or show more relevant advertising.

We may upload appropriately sourced customer or lead data to advertising platforms for matching, measurement, exclusion or Custom Audience purposes where we or the relevant client has a lawful basis. Platforms may hash identifiers before matching, but hashing does not necessarily make information anonymous.

We do not use website profiling to make solely automated decisions that produce legal or similarly significant effects about individuals. If that changes, we will provide the required information and safeguards.

Client CRM, Lead and Campaign Data

For client-controlled data, the client determines the purpose and lawful basis. PureRapid processes that data only to deliver contracted services, maintain systems, troubleshoot, report, secure accounts and follow lawful documented instructions.

Client leads remain the client’s data. If a supported CRM subscription ends, access may cease and a one-time export may be provided subject to the agreement, identity checks, platform capability and applicable law.

PureRapid’s reusable system architecture, non-client-specific funnel logic, methods and automation may remain PureRapid intellectual property. This does not transfer ownership of client personal data.

Payments and Financial Information

Payment-card information is processed by authorised payment providers and is not intentionally stored on our website servers. We may retain invoices, payment status, billing contacts, tax information and transaction references for accounting, contractual, fraud-prevention and legal purposes.

IP-derived location information may be used where reasonably necessary to determine tax treatment, currency, fraud risk or service availability.

Recruitment

We process applications, CVs, portfolios, correspondence, interview notes and assessment information to evaluate candidates, communicate about roles, verify information and comply with employment-related obligations.

Recruitment decisions involve human review. We do not make solely automated hiring decisions with legal or similarly significant effects.

Who We Share Data With

We may share data with hosting, cloud, security, backup, IT, communications, form, scheduling, CRM, email, analytics, attribution, advertising, ecommerce, payment, accounting, legal and professional-service providers; relevant clients where we process an enquiry or campaign for them; group entities; regulators, courts, law-enforcement bodies or authorities where legally required; and parties involved in a genuine business restructuring or transaction.

Providers receive only the information reasonably required for their role and are subject to applicable contractual, confidentiality and security obligations.

We do not sell personal data for money. Advertising disclosures and audience matching may be regulated as sharing, targeted advertising or a sale under some local laws, and corresponding rights apply where those laws govern.

International Transfers

PureRapid operates from the UAE and works with providers and clients internationally. Personal data may therefore be accessed or stored outside the UK, UAE or your country.

For restricted transfers governed by UK law, we rely on an applicable UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved EU Standard Contractual Clauses, or another lawful safeguard or exception. Where required, we carry out and document a transfer risk assessment.

For UAE-regulated transfers, we use a transfer mechanism permitted by the UAE PDPL and take reasonable steps to protect confidentiality, integrity and enforceable rights.

Retention Schedule

We may retain information longer where a dispute, legal hold, investigation, statutory duty or establishment, exercise or defence of legal claims requires it. We securely delete or anonymise data when retention is no longer justified.

Your Data Protection Rights

Depending on the law that applies, you may have rights to be informed; request access; correct inaccurate data; request deletion; restrict processing; object to processing, profiling or direct marketing; receive portable data; withdraw consent; and request safeguards around significant automated decisions.

Rights are not absolute and may be limited by exemptions, another person’s rights, legal duties or the basis on which we process the information.

Send requests to legal@purerapid.com. We may verify identity and authority before disclosing or changing data. For UK requests, we normally respond without undue delay and within one month, subject to lawful extensions.

Privacy Complaints

Send a privacy complaint to legal@purerapid.com. We will acknowledge and investigate it through our data-protection complaints process.

If UK data-protection law applies and you remain dissatisfied, you may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/ or telephone 0303 123 1113.

Where UAE law applies, you may also have the right to raise a complaint with the competent UAE data-protection authority when its applicable complaint procedure is available.

Security and Personal Data Breaches

We use proportionate technical and organisational measures designed to protect personal data, including access controls, account permissions, authentication, service-provider assessment, backups, updates, staff controls and incident management. No internet-connected system is completely secure.

We assess suspected personal-data breaches, contain risk, preserve relevant records and notify the competent authority and affected people where applicable law requires it.

Children

PureRapid provides business-to-business services and does not direct this website or its services to children. We do not knowingly collect personal data from anyone under 18 through ordinary business activity.

If you believe a child has provided personal data, contact us so we can assess and remove it where appropriate. We do not knowingly use children’s data for targeted advertising.

External Websites and Platforms

Our website may link to or embed third-party websites, maps, videos, social platforms and services. Their own privacy notices govern processing they independently control. A link does not make PureRapid responsible for the third party’s security or privacy practices.

Changes to This Policy

We may update this policy to reflect changes in law, technology, providers or business activity. Material changes will be highlighted where reasonably appropriate. The current version is published at purerapid.com/privacy-policy/.

Where consent is required for a new purpose, we will request it rather than relying on continued website use as consent.

Contact and Company Details

The entity named in your proposal, invoice, order or service agreement is your primary contractual privacy contact. General and UK privacy enquiries may be sent to legal@purerapid.com.