Privacy Policy
This explains what happens to your data when you use this site or send me an enquiry. I have written it to be read, not to be skimmed past.
Who is responsible for your data
This site is run by Zain Ul Abadin, trading as ZainSEO, a sole trader based in London, United Kingdom. I am the data controller for anything you send through this site. Contact me at hello@zainseo.com.
What I collect
When you submit a form
The contact, hero and audit forms collect your name, your email address, your website address where you give one, and whatever you type into the message field. The contact form also asks for your business type. Nothing is required beyond what the form shows.
Automatically, when you visit
Analytics tools record pages viewed, approximate location at city level, device and browser type, and where you arrived from. This is aggregate traffic data. I do not use it to identify individual visitors.
Form submissions are rate limited by IP address to stop automated abuse. That record is a counter, held briefly and then discarded.
What I do not collect
- Payment details. Invoices are handled outside this website.
- Any special category data, meaning health, ethnicity, political or religious data.
- Anything from anyone I know to be under 16.
Why I collect it, and the legal basis
| What | Why | Lawful basis |
|---|---|---|
| Form details | To reply to your enquiry and, if we go ahead, to quote and deliver the work | Steps taken at your request before a contract |
| Analytics | To see which pages work and which do not | Consent, given through the cookie banner |
| Spam and rate limit data | To keep the forms usable and stop bot submissions | Legitimate interest in securing the site |
Who else sees it
I do not sell your data and I do not share it for advertising. A small number of suppliers process it so the site can function:
- Netlify, hosting and delivery of this website.
- Resend, delivery of the email your form submission becomes.
- Cloudflare Turnstile, the bot check on the forms.
- Upstash, the short-lived counter behind rate limiting.
- Google Analytics and Google Tag Manager, traffic measurement.
- My email provider, which holds the enquiry once it reaches my inbox.
Some of these process data outside the UK. Where they do, transfers are covered by the standard contractual clauses or an equivalent safeguard in their own terms.
Cookies
This site sets no marketing or advertising cookies. Analytics cookies load only if you accept them. Turnstile may set a short-lived token so it can tell a person from a bot. Declining analytics does not change how the site works.
How long it is kept
- Enquiries that go nowhere: deleted within 12 months.
- Client records: kept for six years after the last piece of work, because HMRC requires it.
- Analytics: retained on Google's default schedule, currently 14 months.
- Rate limit counters: minutes, not days.
Your rights
Under UK GDPR you can ask me for a copy of your data, ask me to correct it, ask me to delete it, object to how I am using it, or ask for it in a portable format. Email hello@zainseo.com and I will respond within one month. There is no charge and you do not need to give a reason.
If you are not happy with my answer
You can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I would rather you came to me first so I can fix it, but the route is there and you are entitled to use it.
Security
The site runs over HTTPS. Form submissions pass through a bot check, spam filtering and rate limiting before they reach me. No system is perfect, and if a breach ever affected your data I would tell you and the ICO within 72 hours of finding out.
Changes to this policy
If this changes, the date at the top changes with it. Material changes that affect existing clients get an email, not a quiet edit.
Questions
Email hello@zainseo.com or use the contact page. A real person reads it.