What we collect, and what we do with it

Who this covers

This policy covers https://gmb-doneright.com and the free rank check you can request on it. GMB Done Right is the business responsible for the information described here, and we work with local businesses in the United States and Canada.

If you want anything on this page explained, or you want your information corrected or deleted, email [email protected] and a person will answer you.

What we collect when you ask for a rank check

The rank-check form asks for four things, and all four are used to run the scan and send you the result:

• Your business, picked from a list of real Google listings so the scan looks at the right one. We store the name, the area Google shows beside it, and the identifier Google uses for that listing.
• The main search term you think your customers use. The scan is run against this term.
• Your email address, so we can send you the report.
• Whether you ticked the newsletter box, which is optional and off by default.

There is no phone field and no address field on the form. We do not ask for payment details anywhere on this site.

What we collect automatically

Three things are recorded without you typing them, and each has a specific job:

• Your IP address. It limits how many times the form can be submitted from one place in a minute, which is what stops bots from burning through the scan budget. It is passed to our own application along with the request.
• The two-letter country code our host works out from your connection. It is used for the triage described in the next section. We do not store a street-level location.
• The page you submitted the form from, and a short-lived token that groups your typing in the business picker into one lookup instead of many unrelated ones.

The score we calculate about you

We should be straightforward about this, because most sites that do it do not mention it at all. When a rank-check request arrives, we score it automatically from 0 to 100 and label it hot, warm, cold or junk. The score is built from your country, whether your business matched a real Google listing, the search term you entered, and your business name.

The score decides nothing about you except the order a human reads the requests in. It does not change the report you are sent, it does not change what you are quoted, and it does not stop anyone from getting their free rank check. It exists because a large share of the requests we receive come from other marketing agencies rather than from local businesses, and sorting them is better than ignoring them.

If you want to know what you were scored and why, ask us and we will tell you.

The newsletter, if you ticked the box

The box is unticked when the page loads, and nothing happens if you leave it alone. You still get your report and one follow-up about it either way, because that is the thing you actually asked for.

If you do tick it, we store your email address, the time you ticked it, and the exact wording you agreed to, which today reads: "Email me local SEO tips now and then, after the follow-up on my report. Unsubscribe any time." We keep that wording alongside your opt-in rather than reconstructing it later, so if we ever change the sentence, your consent still points at what was on screen when you gave it.

Every email we send has an unsubscribe link. Unsubscribing stops the whole sequence, including messages that were already scheduled, not only the ones after it. We keep a record that you unsubscribed, because that record is what prevents us from mailing you again by accident.

Who else handles your information

We do not run our own servers for any of this. These companies process your information on our behalf, each for the one job listed:

• Vercel, which hosts this website and runs the form, and which provides the page-view and loading-speed measurements described below.
• Cloudflare, which sits in front of the site to serve it quickly and to filter bot traffic, including the automated check that may appear on the form.
• Google, for two separate things: delivering our email, and supplying the list of real businesses the picker searches. That lookup happens on our server rather than in your browser, so Google receives nothing about your visit from the page itself.
• DataForSEO, which supplies the ranking data the grid scan is built from. It receives the business and the search term being scanned.
• Our own application at app.gmb-doneright.com, which runs the scan, builds the report and sends it to you.

We do not sell your information. We do not share it with advertisers, we do not use it to build profiles for anyone else, and we do not pass it to other agencies.

Cookies and measurement

This site runs no advertising trackers and no cross-site tracking pixels. There is no Facebook pixel, no Google Ads tag and no advertising cookie.

We do measure which pages are visited and how quickly they load, using the analytics built into our host, which works without cookies and without following you to other sites. Cloudflare may set a cookie as part of its bot protection, which is a security function rather than a marketing one.

How long we keep it

• Rank-check requests, and the reports built from them: while you are a prospect or a client. Ask us to delete yours and we will remove it within 30 days.
• Newsletter opt-ins: until you unsubscribe. After that we keep only the fact that you unsubscribed, so that we do not email you again.
• Server and security logs held by Vercel and Cloudflare: short-lived, and kept under those companies' own retention periods rather than ours.

Your rights, and how to use them

Depending on where you live, you have the right to ask for a copy of what we hold about you, to have it corrected, to have it deleted, to withdraw a consent you gave, and to object to how we are using it. Canadian and European law both grant these in some form, and we apply them to anyone who asks rather than checking which country you are in first.

To use any of them, email [email protected]. We will not make you fill in a form or create an account. If you are in the United Kingdom, the European Economic Area or Canada and you are unhappy with how we handled your request, you can complain to your national data protection regulator.

Changes to this policy

This page was last updated on 1 November 2026. If we change how any of the above works, we will change this page and move that date. Where a change affects something you consented to, such as the newsletter wording, we treat it as a new consent rather than applying it backwards to people who agreed to something different.