Privacy policy
Last updated: 18 September 2026
offsiteseo.services (“we”, “us”, “our”) operates https://offsiteseo.services. This policy explains how we collect, use, disclose and protect personal information when you visit our website, submit a proposal request, subscribe to updates or communicate with us. We aim to comply with the EU General Data Protection Regulation (GDPR), UK GDPR, and the California Consumer Privacy Act (CCPA) as amended by CPRA where applicable.
1. Who is responsible for your data
The data controller for personal data described in this policy is offsiteseo.services. Contact: hello@offsiteseo.services.
Registered entity: [TODO: legal entity name]. Postal address: [TODO: registered office address]. Data protection contact: [TODO: DPO or privacy email].
2. Information we collect
We may collect:
- Contact and account details — name, work email, company, website URL, role and message content when you submit forms or email us.
- Commercial context — goals, budget range, audience type (in-house or agency) and timeline you provide voluntarily.
- Technical data — IP address, browser type, device identifiers, pages viewed, referral source and approximate location derived from IP.
- Cookie and analytics data — as described in our cookie policy.
We do not intentionally collect sensitive categories of data (health, biometric, etc.) through this website. Please do not submit patient or client confidential information via the public proposal form.
3. How we use information
- Respond to proposal requests and sales enquiries
- Provide, operate and improve our website and services
- Send service-related communications you expect (replies, scheduling, delivery updates)
- Send marketing emails where permitted; you may opt out at any time
- Analyse aggregated traffic to improve content and usability
- Detect fraud, abuse and security incidents
- Comply with legal obligations and enforce our terms
4. Legal bases (GDPR / UK GDPR)
Where GDPR applies, we rely on:
- Consent — e.g. non-essential cookies, optional marketing newsletters, form consent checkbox.
- Contract — steps at your request before a contract (scoping, proposals) and performance of services.
- Legitimate interests — website security, B2B outreach to business contacts who enquire, analytics in aggregated form, improving services. We balance these interests against your rights.
- Legal obligation — record-keeping, tax and regulatory requirements where applicable.
5. CCPA / CPRA notice (California residents)
We collect the categories of personal information listed above for the business purposes described. We do not sell personal information as “sell” is defined under CCPA. We do not share personal information for cross-context behavioral advertising. In the preceding twelve months we have not sold or shared personal information.
California residents may have the right to:
- Know what personal information we collect, use and disclose
- Request deletion of personal information, subject to exceptions
- Correct inaccurate personal information
- Not receive discriminatory treatment for exercising privacy rights
- Limit use of sensitive personal information (we do not collect sensitive PI via this site)
To exercise rights, email hello@offsiteseo.services with “California privacy request” in the subject. We verify requests before responding.
6. Sharing and processors
We may share data with:
- Hosting and infrastructure providers
- Form and CRM tools that process proposal submissions
- Analytics providers (where consented or under legitimate interest as configured)
- Professional advisers (legal, accounting) under confidentiality
- Authorities when required by law
Processors act on our instructions under data processing agreements where required. A list of key sub-processors is available on request.
7. International transfers
We may process data in the United States, United Kingdom, European Economic Area and other countries where providers operate. When transferring personal data from the EEA or UK to countries without an adequacy decision, we use appropriate safeguards such as Standard Contractual Clauses and supplementary measures where needed.
8. Retention
Proposal and client-related records are kept as long as needed for sales, contract performance, legal claims and accounting—typically up to seven years unless a shorter period applies by law. Analytics logs rotate on a shorter schedule. Marketing suppression lists are retained to honour opt-outs.
9. Security
We use administrative, technical and organizational measures appropriate to the data we hold. No online transmission is completely secure; please use business contact details you are comfortable sharing.
10. Your rights (GDPR / UK GDPR)
Depending on location, you may have rights to access, rectify, erase, restrict, object, data portability and withdraw consent. You may lodge a complaint with your local supervisory authority. EU/EEA users may contact their national data protection authority; UK users may contact the ICO.
To exercise rights, contact hello@offsiteseo.services. We respond within one month where GDPR applies, subject to extensions for complex requests.
11. Children
Our services are directed at business professionals. We do not knowingly collect data from children under 16.
12. Changes
We may update this policy. Material changes will be posted on this page with a revised date.
13. Contact
Questions about this policy: hello@offsiteseo.services.