Privacy Policy

1. Who we are

Controller: David Walsh, trading as SEO Agency Nottingham, is responsible for the personal information processed through seoagencyinnottingham.co.uk and in connection with enquiries about our SEO and website-development services.

2. Information we collect

We collect information that you choose to provide when you use our enquiry form, email us or telephone us. This may include:

• your name, email address and telephone number;
• your business name, website address, services and target locations;
• the contents of your enquiry and any information you send afterwards;
• project access details or business information supplied if you become a client; and
• technical information such as IP address, browser information, timestamps, security events and server logs generated when the website or form is used.

Please do not send passwords or other sensitive login details through the public enquiry form. Secure access arrangements should be agreed separately.

3. How and why we use your information

We do not use information submitted through the enquiry form to add you to a marketing list unless we ask separately and you actively choose to receive marketing.

4. Who we may share information with

We do not sell your personal information. We may disclose only what is reasonably necessary to:

• website, hosting, form, email, security, backup and IT service providers that help us operate the website and respond to enquiries;
• Google, as our processor for Google Analytics 4, and CookieYes (free plan), which provides our cookie banner and stores a record of your consent choice;
• professional advisers such as accountants, insurers or legal advisers;
• a developer or specialist working on your project where this has been agreed and access is necessary; or
• courts, regulators, law-enforcement bodies or other parties where disclosure is required by law or needed to protect legal rights.

This website is hosted through 20i. WordPress and Fluent Forms are currently used to publish the site and receive website enquiries.

International processing

Some technology suppliers, including Google when Google Analytics is enabled, may process information outside the United Kingdom, including in the United States. Where UK data-protection law requires safeguards, we expect the relevant supplier arrangements to use an approved transfer mechanism or another lawful safeguard.

5. How long we keep information

We retain information only for as long as reasonably needed for the purpose for which it was collected:

• general enquiries that do not become client work are normally retained for up to 24 months;
• client, contract, invoice and related correspondence may normally be retained for up to six years after the relationship ends where needed for tax, accounting or legal purposes;
• website and security logs are kept for the period required for security, diagnostics and hosting operations; and
• analytics data: user-level event data in Google Analytics is retained for 14 months; aggregated reports may be kept longer.
• information may be kept longer where a legal obligation, dispute, fraud investigation or enforcement request requires it.

Information that is no longer required is deleted or anonymised where reasonably practicable.

6. Cookies, local storage and analytics

Strictly necessary technologies: The website may use technologies that are strictly necessary for administration, security, caching, form operation and to remember your cookie choice. These do not need your consent.

Analytics (only with your consent): If you click “Accept All” on our cookie banner, we use Google Analytics 4 (a web-analytics service provided by Google) to understand how the website is used so we can improve it. We do not load Google Analytics, and it does not set analytics cookies, unless you accept analytics. If you choose “Reject All”, Google Analytics is not loaded.

When enabled, Google Analytics sets the cookies _ga and _ga_ZQZKY2YWSJ, which store a randomly generated identifier, and sends Google information about your visit, such as pages viewed, how you arrived, approximate location, device, browser and operating system. We do not use Google Analytics to collect your name, email address or the contents of enquiry forms.

Google signals is switched off, we have not linked Google Analytics to any Google Ads or Search Ads 360 account, and we do not use it for advertising or remarketing.

Legal basis: your consent (UK GDPR Article 6(1)(a) and PECR). You can withdraw consent at any time without affecting processing carried out before withdrawal.

Google acts as our processor under Google’s data-processing terms, and some Google processing takes place outside the UK, including in the United States, under the transfer safeguards Google describes in its terms.

Retention: user-level event data associated with cookies in Google Analytics is set to be retained for 14 months; aggregated reports may be kept longer.

The analytics cookies expire after up to two years unless you delete them sooner.

Your choice: you can change or withdraw your cookie choice at any time using the Cookie Settings button on the website, or by clearing cookies in your browser; clearing cookies removes the analytics cookies already set on your device. Rejecting analytics does not affect your use of the website.

Cookie consent management: our cookie banner is provided by CookieYes, which stores a record of your consent choice.

You can also use Google’s opt-out add-on: https://tools.google.com/dlpage/gaoptout

7. How we protect information

We use reasonable organisational and technical measures intended to reduce unauthorised access, loss, misuse or disclosure. These may include access controls, software updates, backups and secure methods for sharing project access. No internet transmission or storage system can be guaranteed completely secure.

8. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

• ask for a copy of your personal information;
• correct inaccurate or incomplete information;
• ask us to delete information;
• restrict or object to particular processing;
• receive certain information in a portable format; and
• withdraw consent where processing depends on consent.

These rights are not absolute and exemptions may apply. We may need to verify your identity before acting on a request. We do not currently use enquiry information for solely automated decision-making that produces legal or similarly significant effects.

9. Children’s information

Our services are intended for businesses and adults. The website is not directed at children, and we do not knowingly seek personal information from children.

10. Changes to this notice

We may update this notice when our services, suppliers or legal responsibilities change. The latest version will appear on this page with a revised “last updated” date.