Privacy Policy | SEO Blackpool

Who we are

SEO Blackpool (blackpoolseo.co.uk) is a trading name of [Registered company name], [Registered in England and Wales], company number [Company number]. Our address is 88 Stafford Rd, Wallington SM6 9AY, United Kingdom.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, [Registered company name] is the controller of the personal data described in this policy. This means we decide how and why your personal data is used. Our registration number with the Information Commissioner's Office (ICO) is [ICO registration number].

If you have any questions about this policy or how we handle your data, you can email us at hello@telsamedia.com or call +44 20 8686 4577.

The personal data we collect

Information you give us

When you use our contact form, request a free SEO audit or send us an enquiry through the website, we collect the details you choose to provide:

your name
your email address
your phone number
your business name
your website URL
the service you are interested in
your message, and anything else you include in it

If you email or phone us directly, we collect the information you share in that communication. Please do not include sensitive information, such as details about your health, in your message. We do not need it to respond to an enquiry.

Information collected when you submit a form

When you submit a form, our server also processes:

your IP address, which is converted into a hashed (scrambled) value and used to limit repeated submissions and protect our forms from abuse
the page of the website your enquiry was sent from, so we know which service or page it relates to, and any campaign tags in that page's web address (for example, which advert or search campaign brought you to us)
the date and time your enquiry was received

Each submission is emailed to our team inboxes, added to our customer relationship management (CRM) system, Telagus, so we can manage our reply and any work that follows, and a copy is stored in a log on our server for record-keeping and spam prevention.

Spam protection

Our forms use a hidden "honeypot" field and a timing check, which run on our own server, to filter out automated spam. They are also protected by Google reCAPTCHA v3, a service provided by Google that checks whether a form is being used by a person or an automated program.

reCAPTCHA is not loaded when you visit a page. It loads only once you start filling in one of our forms. Google then collects information about your use of the page, such as your IP address, browser and device details, how you interact with the page and cookies Google has already set on your device, and gives our server a score that we use to decide whether to accept the submission. We use reCAPTCHA because we have a legitimate interest in protecting our forms from spam and abuse. Google's use of this information is covered by the Google Privacy Policy and Terms of Service.

Cookies and tracking

This website does not set cookies by default and does not use analytics, advertising or tracking cookies. Our fonts and scripts are hosted on our own server, so visiting the site does not send requests to Google Fonts or other content delivery networks. If you start filling in one of our forms, Google reCAPTCHA is loaded and may set or read cookies, as described above. A display preference may be stored in your browser's local storage for convenience. Our Cookie Policy explains this in more detail.

Information we do not collect

We do not ask for or intend to collect special category data, such as information about health, religion or ethnicity. Our services are aimed at businesses, and we do not knowingly collect personal data from children.

How we use your personal data

We use the personal data described above to:

reply to your enquiry and answer your questions
carry out a free SEO audit you have requested and share the findings with you
prepare a proposal or quotation if you ask for one
keep a record of the enquiries we receive and our correspondence with you
protect our website and forms from spam, abuse and fraud
meet our legal, tax and accounting obligations if you become a client

We do not make decisions about you based solely on automated processing. If we would like to send you marketing communications, we will only do so where the law allows, and you can opt out at any time.

Our lawful bases for using your data

Under the UK GDPR we must have a lawful basis for each use of your personal data. We rely on the following:

Legitimate interests (Article 6(1)(f)): to respond to enquiries and audit requests, keep records of our correspondence and protect our website from spam and abuse. You have contacted us and would reasonably expect us to use your details to reply, and we have balanced our interests against your rights and freedoms.
Taking steps before entering into a contract (Article 6(1)(b)): where you ask us for a proposal, a quotation or to discuss working together, we use your data to take those steps at your request, and to perform our agreement if you become a client.
Legal obligation (Article 6(1)(c)): where we must keep certain records, for example for tax and accounting purposes, or respond to a lawful request from an authority.
Consent (Article 6(1)(a)): where we ask for your consent, for example for optional analytics cookies if we introduce them in future. You can withdraw your consent at any time.

How long we keep your data

We keep enquiry details, including the copy stored in our server log, for [Data retention period] after our last contact with you. After that, we delete them or anonymise them securely, unless you have become a client or we need to keep them for longer to deal with a dispute or meet a legal requirement.

Hashed IP addresses used for rate limiting are kept for [Rate limiting retention period].

If you become a client, we keep records relating to our work together for [Client records retention period] after our engagement ends, so that we can meet our legal, tax and accounting obligations.

Who we share your data with

We do not sell, rent or trade your personal data. We only share it with organisations that help us run our business, and only as much as they need:

Email provider: form submissions are sent by email to our team inboxes, which are provided by [Email provider].
Hosting provider: our website, forms and server logs are hosted by [Hosting provider].
Google: when you use one of our forms, Google reCAPTCHA receives the information described under "Spam protection" so it can check the form is being used by a person.
Professional advisers: such as accountants, lawyers or insurers, where this is reasonably necessary.
Authorities: where we are required to by law, for example to comply with a court order or a request from a regulator or law enforcement agency.

Service providers that process personal data on our behalf may only use it to provide their services to us and must keep it secure.

If our business, or part of it, is sold or restructured, personal data may be transferred to the new owner, who would be required to use it in line with this policy.

International transfers

[International transfers: state whether your email provider, hosting provider and Google (reCAPTCHA) store or process personal data outside the UK and, if so, in which countries.]

Where personal data is transferred outside the UK, we make sure it is protected by an appropriate safeguard, such as UK adequacy regulations for the destination country, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Contact us if you would like more information about the safeguards in place.

How we keep your data secure

We use appropriate technical and organisational measures to protect personal data. These include an encrypted (HTTPS) connection for this website, hashing IP addresses used for rate limiting, and limiting access to enquiry records to the people who need it.

No method of sending or storing data over the internet is completely secure, so we cannot promise absolute security. If a personal data breach occurs that is likely to put your rights at risk, we will notify you and the ICO where the law requires us to.

Your rights

Under UK data protection law you have the following rights, subject to certain conditions and exemptions:

Right of access: to ask for a copy of the personal data we hold about you.
Right to rectification: to ask us to correct data that is inaccurate or complete data that is incomplete.
Right to erasure: to ask us to delete your personal data in certain circumstances.
Right to restriction of processing: to ask us to limit how we use your data in certain circumstances.
Right to object: to object to processing based on our legitimate interests, and to object at any time to the use of your data for direct marketing.
Right to data portability: to receive data you have given us in a structured, commonly used, machine-readable format, or ask us to send it to another organisation, where the processing is based on your consent or a contract and is carried out by automated means.
Right to withdraw consent: where we rely on your consent, you can withdraw it at any time. This does not affect any processing carried out before you withdrew it.

To use any of these rights, contact us using the details at the end of this policy. You do not usually need to pay a fee. We may need to confirm your identity before we act on a request. We will respond within one month, although this can be extended by up to two further months for complex or numerous requests, in which case we will let you know.

Complaints

If you are unhappy with how we have used your personal data, please contact us first so that we can try to put things right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can find out how to do this on the ICO website: https://ico.org.uk/.

Links to other websites

Our website may link to other websites. We are not responsible for how those websites handle personal data, so please read their privacy policies before sharing your details with them.

Changes to this policy

We may update this policy from time to time, for example if we change how our forms work, use new service providers or introduce analytics. The "last updated" date on this page shows when it was last changed. If we make significant changes, we will make that clear on this page.

Contact us

If you have any questions about this policy, or would like to exercise any of your rights, please contact us:

Email: hello@telsamedia.com
Phone: +44 20 8686 4577
Post: [Registered company name], 88 Stafford Rd, Wallington SM6 9AY, United Kingdom

You can also reach us through our contact page.