Who We Are
The data controller for this website is:
Companies House registration number: 12847391
ICO Data Protection registration number: ZB441872
Registered in England and Wales
Contact: contact@localseoserviceslondon.com
Website: localseoserviceslondon.com
As the data controller, we determine why and how your personal data is processed. This policy applies to all personal data we collect through our website, by email, by telephone, and through the delivery of our services.
Our Data Protection Lead is Marcus Webb, Founder and Lead Consultant. All data protection enquiries should be directed to him using the contact details in Section 14 of this policy.
Personal Data We Collect
We collect only the personal data that is necessary for the purpose for which it is collected. The following table sets out the categories of personal data we may hold about you.
| Category | Data Types | Source |
|---|---|---|
| Identity Data | First name, last name, job title | Provided by you via contact form, email, or telephone |
| Contact Data | Email address, telephone number, business address | Provided by you via contact form, email, or telephone |
| Business Data | Business name, website URL, London borough, industry type | Provided by you via contact form or during onboarding |
| Technical Data | IP address, browser type, device type, operating system, referring URL, pages visited, time on site | Automatically collected via cookies and analytics tools |
| Usage Data | Information about how you use our website and which pages you visit | Automatically collected via Google Analytics |
| Communications Data | Content of emails, enquiries, and messages sent to us | Provided by you directly |
| Contract Data | Campaign briefs, deliverables, reporting data, account access credentials (encrypted) | Generated during service delivery |
We do not collect any special category personal data (data relating to race, ethnicity, political opinions, religious beliefs, health, sexual orientation, or biometric data) in the ordinary course of our business.
We do not collect payment card details directly. Any payments are processed by third-party payment processors operating under their own privacy policies and PCI DSS compliance obligations.
How We Collect Your Personal Data
We collect personal data through the following means:
- Contact and enquiry forms on our website — when you submit a free SEO audit request or general enquiry, you provide your name, business name, email address, website URL, borough, and industry.
- Email correspondence — when you contact us directly by email, we receive and store any personal data included in that communication.
- Telephone calls — when you call us, we may take notes including your name, business details, and the nature of your enquiry.
- Service delivery — during onboarding and campaign delivery, we collect business data, website access credentials, and performance data necessary to deliver the services you have engaged us for.
- Automated technologies — our website uses cookies and Google Analytics to automatically collect Technical Data and Usage Data when you visit. Please see Section 9 for full details.
How We Use Your Personal Data
We use your personal data only for the specific purposes set out below. We will never use your data for purposes incompatible with those purposes without first notifying you.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Responding to enquiries and providing a free SEO audit | Identity, Contact, Business Data | Legitimate interests / Pre-contract |
| Delivering local SEO services under a client contract | Identity, Contact, Business, Contract Data | Contract performance |
| Sending monthly campaign reports and performance updates | Identity, Contact, Contract Data | Contract performance |
| Communicating about campaign strategy, changes, or issues | Identity, Contact Data | Contract performance / Legitimate interests |
| Invoicing and financial record-keeping | Identity, Contact, Business Data | Legal obligation (HMRC requirements) |
| Improving our website through analytics | Technical, Usage Data | Legitimate interests / Consent (where cookies required) |
| Complying with legal obligations | As required | Legal obligation |
Our Lawful Basis for Processing
Under UK GDPR, we must have a lawful basis for processing personal data. We rely on the following lawful bases:
- Contract performance — processing necessary to perform a contract with you, or to take pre-contractual steps at your request. This covers all data processing required to deliver our local SEO services.
- Legitimate interests — processing necessary for our legitimate business interests, provided these are not overridden by your rights and interests. This includes responding to enquiries, improving our website, and maintaining business records. We have assessed that our legitimate interests are not overridden by the interests of data subjects in these cases.
- Legal obligation — processing necessary to comply with a legal obligation, such as retaining financial records as required by HMRC.
- Consent — where required by law (for example, certain types of cookies), we obtain your explicit consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
How Long We Retain Your Data
We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Our retention periods are:
| Data Category | Retention Period | Reason |
|---|---|---|
| Enquiry and pre-contract data | 12 months from last contact | Legitimate interests — potential future engagement |
| Client contract and campaign data | 7 years from contract end | Legal obligation — HMRC requirements for financial records |
| Financial and invoice records | 7 years | Legal obligation — Companies Act 2006 and HMRC |
| Email correspondence (clients) | Duration of contract + 3 years | Legitimate interests — dispute resolution |
| Website analytics (Google Analytics) | 14 months (default GA4 setting) | Legitimate interests — website improvement |
| Marketing opt-in data | Until withdrawal of consent | Consent |
At the end of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is not possible, data is stored in a way that prevents identification of the individual.
Your Rights Under UK GDPR
You have the following rights regarding your personal data. You can exercise any of these rights by contacting us using the details in Section 14. We will respond within one calendar month.
To exercise any of your rights, please contact us at contact@localseoserviceslondon.com. We will verify your identity before processing any request and will respond within one calendar month. In complex cases, we may extend this by a further two months, in which case we will notify you within the first month.
We will not charge a fee for responding to your rights request unless the request is clearly unfounded, excessive, or repetitive.
Cookies
Our website uses cookies — small text files placed on your device — to improve your browsing experience and to understand how the website is used. We use the following categories of cookies:
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Essential for the website to function. These include session cookies that allow you to navigate the site and use its features. These cannot be disabled. | No — necessary for operation |
| Analytics | Google Analytics 4 (GA4) is used to collect anonymised data about how visitors use our website. This helps us improve the content and user experience. GA4 data is anonymised before being sent to Google. | Yes — via cookie consent banner |
| Functional | These remember your preferences (such as language settings) to provide a more personalised experience. Currently minimal functional cookies are in use on this site. | Yes — via cookie consent banner |
You can manage or refuse cookies through your browser settings. Most browsers allow you to refuse all cookies or to indicate when a cookie is being sent. Refusing non-essential cookies will not prevent you from using our website, but some features may not function as intended.
For more information about managing cookies, visit allaboutcookies.org.
Security of Your Personal Data
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.
Our security measures include:
- This website is served over HTTPS — all data transmitted between your browser and our server is encrypted using TLS.
- Access to personal data is restricted to named team members on a need-to-know basis. All team members are UK-based and subject to confidentiality obligations.
- We use strong, unique passwords and multi-factor authentication for all systems that store or process personal data.
- Client account credentials (such as Google Analytics or Search Console access) are stored in encrypted password management systems and never shared via unencrypted email.
- We do not store payment card details — all payments are handled by PCI DSS-compliant third-party processors.
While we take all reasonable steps to protect your data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but commit to responding promptly to any security incident.
Children's Personal Data
Our services are directed exclusively at business owners, marketing professionals, and commercial organisations. We do not knowingly collect personal data from individuals under the age of 18.
If you believe that we have inadvertently collected personal data from a child under 18, please contact us immediately at contact@localseoserviceslondon.com and we will delete that data as soon as reasonably practicable.
Third-Party Links
Our website contains links to third-party websites, including directories, partner sites, and industry resources referenced in our content (such as Yell.com, 192.com, Booking.com, and others referenced in our service pages).
These third-party websites are not operated by us and have their own privacy policies. We are not responsible for the content, privacy practices, or data collection of any third-party website. We recommend that you review the privacy policy of any third-party website you visit.
The inclusion of a link to a third-party website does not constitute an endorsement of that website or its contents.
Changes to This Privacy Policy
We review and update this Privacy Policy periodically to reflect changes in our business practices, legal requirements, or regulatory guidance. The current version will always be available at localseoserviceslondon.com/privacy-policy/.
Material changes to this policy — particularly changes that affect how we use your personal data — will be communicated to existing clients by email prior to the change taking effect. The date at the top of this policy indicates when it was last updated.
Previous versions of this policy are available on request by contacting us at contact@localseoserviceslondon.com.
The current version of this policy was last updated on 1 April 2026.
Contact Us & How to Complain
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how we handle your personal data, please contact our Data Protection Lead:
If you are not satisfied with our response to a data protection concern, or if you believe we are processing your personal data in a way that does not comply with UK data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Our ICO registration number is ZB441872. You can verify our registration at ico.org.uk/ESDWebPages/Search.
We would, however, appreciate the opportunity to address your concerns before you approach the ICO, and encourage you to contact us in the first instance.