Last updated: 2 October 2026
We collect what is needed to run your read and your account, we do not sell it, and you can take it with you or have it deleted whenever you want. This notice says exactly what that means.
Who is responsible
Frank Online Ltd, trading as FR^NK, company number 17481990, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are the controller for the personal data described in this notice.
Contact for anything about your data: [email protected].
Two roles, one notice
For the personal data we collect through this site, the free read, enquiries and trial or customer accounts, we are the controller and this notice applies.
For personal data inside a customer's FR^NK workspace, the customer is the controller and we are their processor. That processing is governed by our Data Processing Agreement, which forms part of the Terms of Service, not by this notice.
What we collect, why, and on what basis
|
When |
What |
Why |
Legal basis |
|
You visit the site |
Analytics data through Google Analytics 4 (pages viewed, device, approximate location, referral), only after you accept analytics cookies |
To understand how the site is used and improve it |
Consent |
|
You run a free read |
The domain you submit and your work email address |
To run the read, send you the result, and follow up once about it. No newsletter and no sequence behind it |
Legitimate interests |
|
You join an interest list |
Your email address |
To tell you once when the thing you asked about ships |
Consent |
|
You send an enquiry |
Name, email address, company, your message |
To answer you and, if you ask, to arrange a call or demo |
Legitimate interests |
|
You start a trial or open an account |
Name, work email, password (stored only as a hash), company, workspace details, activity records (IP address, user agent, timestamps) |
To provide FR^NK, keep the account secure, and support you |
Contract |
|
You pay for a plan |
Billing contact and billing address. Card details go directly to our payment processor and we never see or store them |
To take payment and issue invoices |
Contract, and legal obligation for tax records |
|
We email you about your account |
Your email address and the message |
Service messages: results, invitations, receipts, security notices |
Contract |
We do not buy personal data, we do not sell it, and we do not use it to train any model of our own.
Where it goes
Your data is stored on servers in the Netherlands. A small number of providers process some of it for us: hosting and database, transactional email, analytics and payment processing. Each is named on our Sub-processors page with what it receives and where it processes. Our AI providers receive website text, findings and keywords for analysis. They do not receive account data, and they do not use what we send them to improve their own products.
We share personal data outside that list only if the law requires it, or to protect our rights or someone's safety.
Transfers outside the UK
The Netherlands is covered by UK adequacy regulations. Some providers process in the United States. For each of those we rely on a recognised transfer mechanism: the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, or certification under the UK Extension to the EU-US Data Privacy Framework. The mechanism for each provider is stated on the Sub-processors page.
How long we keep it
|
Data |
Kept for |
|
Free read domain and email |
Two years after you ask for the read, unless you start a trial or ask us to keep in touch |
|
Interest list email |
Until we send the one message, or until you ask us to remove it |
|
Enquiries |
Two years |
|
Trial account that does not convert |
60 days after the trial ends, then deleted |
|
Customer account and workspace |
For the life of the account. On cancellation the workspace becomes read-only for 60 days so you can export, then it is deleted |
|
Administrative activity log |
365 days |
|
Billing records |
Six years, as tax law requires |
|
Analytics data |
As set in Google Analytics, currently 14 months |
Encrypted database backups are whole-database copies and expire on their own schedule, 63 days for weekly copies and 400 days for monthly copies. A deletion is fully effective when the last backup containing the data expires. We do not restore backups to recover deleted data.
Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to processing based on legitimate interests, and ask for your data in a portable format. Where we rely on consent, you can withdraw it at any time. Customers can export everything from inside FR^NK at any time, including on the way out.
To exercise any right, email [email protected]. We respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first.
Security
How we protect data, including what is not yet in place, is set out plainly on our Security page.
Children
FR^NK is a business tool. The site and the product are not directed at anyone under 18 and we do not knowingly collect their data.
Changes
If this notice changes in a way that matters, we will tell account holders by email before it takes effect. The date at the top shows the last change.