Privacy Policy

SEO Cumbria Ltd ("we", "us") is the data controller for this website and for client work carried out under our name. We are based at 12 Lowther Street, Carlisle, Cumbria CA3 8DA. Email seocumbria.uk@gmail.com or message us on WhatsApp at +92 329 029 2229. Postal address: SEO Cumbria Ltd, 12 Lowther Street, Carlisle, Cumbria CA3 8DA.

• Enquiry data: your name, phone number, email address and the message you send through our audit or contact forms.
• Communication data: emails, WhatsApp messages and call notes relating to your enquiry or project.
• Client data: business details, invoicing information and website or analytics access needed to deliver the work.
• Technical data: IP address, browser type, pages visited and referring source, collected in aggregate by our analytics tooling.

• To reply to an enquiry and prepare a proposal or free audit — lawful basis: legitimate interests, and consent where you submitted a form.
• To deliver contracted SEO, web design or AI-visibility work — lawful basis: performance of a contract.
• To meet accounting, tax and record-keeping duties — lawful basis: legal obligation.
• To improve this website and understand which pages help visitors — lawful basis: consent (analytics cookies).

We do not add form submissions to a marketing list automatically. If you opt in to occasional local search updates you can withdraw at any time using the unsubscribe link or by emailing us; withdrawal takes effect immediately and does not affect service delivery.

• Hosting, email and form-delivery providers who process data on our instructions under written terms.
• Analytics and search-console providers, used in a de-identified or aggregate form wherever possible.
• Our accountant and, if legally required, HMRC, regulators or law enforcement.
• We never sell, rent or trade personal data, and we do not share client data between clients.

Some of our processors are based outside the UK. Where data leaves the UK we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with appropriate technical safeguards.

• Unsuccessful enquiries: up to 12 months from the last contact, then deleted.
• Client records: for the duration of the engagement plus 6 years, to satisfy tax and contractual record-keeping.
• Analytics data: retained in aggregate for up to 26 months.

Access is restricted to the people delivering your work. Accounts use multi-factor authentication, devices are encrypted, and shared client credentials are stored in a managed password vault rather than in email or spreadsheets.

• Access a copy of the personal data we hold about you.
• Have inaccurate data corrected, or incomplete data completed.
• Request erasure where we no longer need the data.
• Restrict or object to processing based on legitimate interests.
• Receive your data in a portable format, and withdraw consent at any time.

Contact us first and we'll aim to resolve the issue within 30 days. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) at any point.

We review this policy at least annually. Material changes are published on this page with a revised date. This version was last updated on 20 August 2026.