Privacy Policy

1. Who we are

SEOSpot ("we," "us," "our") is an SEO and link building agency operated by SEOSpot. We are the data controller for personal information processed through theseospot.com and our services.

Contact for privacy matters:
Email: [email protected]
Address: Office No. 104, First Floor, Rehman Tower, Main University Road, Block 7, Gulistan-e-Johar, Karachi, Sindh, 75290, PK
Phone: +923041792003

2. What information we collect

2.1 Information you give us directly

When you fill out a form, request an audit, or contact us, you may provide:

• Name and job title
• Business email address and phone number
• Company name and website URL
• Information about your current SEO situation, goals, and budget
• Any message content you choose to send us

2.2 Information we collect automatically

When you visit our website, we automatically collect:

• IP address (truncated for analytics)
• Browser type, operating system, and device information
• Pages visited, time spent, and referring URL
• Approximate geographic location (country and region)
• Cookie identifiers (see our Cookie Policy)

2.3 Information from third parties

If you engage us as a client, you may grant us limited access to your analytics platforms (Google Search Console, Google Analytics, your CMS, etc.) so we can perform SEO work. We only access what's necessary, only for as long as necessary, and we never share or resell this data.

3. Why we use your information (legal basis)

Under GDPR and similar laws, we must have a lawful basis for processing your data. Here's what we do and why:

4. Who we share your information with

We do not sell your personal data. We share it only with service providers who help us run our business, under contracts that require them to protect your data:

• Resend — transactional email delivery (form submissions)
• Vercel — website hosting and infrastructure
• Google Analytics — anonymized website analytics (with consent)
• Meta and LinkedIn — advertising platforms (with consent)
• Accountants and legal advisors — when required for compliance

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of SEOSpot, our clients, or others.

5. International transfers

We operate from Pakistan, and our service providers operate from multiple countries including the United States and the European Union. When your data crosses borders, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Service providers certified under recognized frameworks (e.g., EU-US Data Privacy Framework)

6. How long we keep your information

• Inquiry data: 2 years from last contact, then deleted
• Client records: 7 years after engagement ends (tax and contract law requirements)
• Marketing email subscribers: until you unsubscribe, plus 30 days
• Website analytics: 14 months (Google Analytics default)
• Cookie data: as specified in our Cookie Policy

7. Your rights

Depending on where you live, you have some or all of these rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure ("right to be forgotten") — request deletion of your data
• Restriction — limit how we use your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — for any processing based on consent
• Non-discrimination — we won't treat you differently for exercising your rights (California residents)
• Opt out of sale/sharing — we don't sell your data, but you can opt out of any sharing for cross-context behavioral advertising
• Lodge a complaint — with your local data protection authority

To exercise any of these rights, email [email protected]. We respond within 30 days. We may ask you to verify your identity before processing the request.

8. Region-specific rights

European Economic Area, United Kingdom, Switzerland

You can lodge a complaint with your national data protection authority. The full list is at edpb.europa.eu.

California (CCPA/CPRA)

California residents have the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information. We do not knowingly process the data of anyone under 16 for targeted advertising. To exercise your rights, email [email protected].

Canada (PIPEDA)

You may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca if you believe your privacy rights have been violated.

Brazil (LGPD)

You have the rights enumerated in Article 18 of the LGPD. You may contact the ANPD at gov.br/anpd.

Pakistan (PECA 2016)

As a Pakistani business, we comply with the Prevention of Electronic Crimes Act 2016 and applicable data protection regulations.

9. How we protect your information

We use industry-standard security practices including HTTPS encryption, access controls, encrypted backups, and regular security reviews. No system is 100% secure, but we take reasonable steps to protect your data. If we ever experience a data breach affecting your personal information, we will notify you and the relevant authorities within 72 hours, as required by law.

10. Children's privacy

Our services are for businesses, not individuals under 16. We do not knowingly collect personal information from children. If you believe we have, contact us and we'll delete it.

11. Automated decision-making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you.

12. Changes to this policy

We may update this policy as our services evolve or as laws change. When we make material changes, we'll update the "Last updated" date at the top and, for significant changes, notify you via email or a prominent notice on the site. Your continued use of the site after changes means you accept the updated policy.

13. Jurisdictions this policy covers

This policy addresses data protection requirements in:

• European Union (GDPR)
• United Kingdom (UK GDPR)
• California, USA (CCPA/CPRA)
• Canada (PIPEDA)
• Pakistan (PECA 2016)
• Brazil (LGPD)
• Australia (Privacy Act 1988)

14. Contact us

For any privacy question, request, or complaint:
Email: [email protected]
Mail: Office No. 104, First Floor, Rehman Tower, Main University Road, Block 7, Gulistan-e-Johar, Karachi, Sindh, 75290, PK
Phone: +923041792003