Data Privacy and Protection Policy

Effective Date: October 2024

SERP Squad is committed to protecting the privacy and data of its clients, customers, and website visitors. This Data Privacy and Protection Policy explains how we collect, use, store, and share personal information in compliance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

SERP Squad is a digital marketing agency specializing in SEO, web design, and advertising. Our registered office is located in the heart of London, United Kingdom. Our ICO reference number is—

2. What Data We Collect

We collect specific tasks-related data from you when you use our services or visit our website. The types of personal data we collect include, but are not limited to:

Contact Information: Full name, email address, phone number, and postal address.
Business Information: Company name, job title, and other business-related information.
Payment Information: Payment details for service billing and invoicing purposes (processed through secure third-party payment gateways such as, Stripe).

3. How We Use Your Data

We process your data to provide, maintain, and improve our services. Specifically, we use your data for:

Providing Services: To deliver SEO, web design, advertising, and other digital marketing services.
Communications: To respond to inquiries, provide customer support, and send you relevant updates or marketing communications (with your consent).
Billing and Payments: To process payments for our services and maintain financial records.
Legal Obligations: To comply with legal or regulatory requirements, such as responding to legal requests or auditing.
Create case studies: We will request your testimonial after service completion from which we will create case studies. These case studies will contain information about your business and the progression recorded throughout our project with you.

4. Legal Basis for Processing

We process personal data based on the following legal grounds under the UK GDPR and Data Protection Act (2018):

Performance of a Contract: Processing your data is necessary to fulfill the services we’ve agreed to provide you.
Legitimate Interests: Processing is necessary for our legitimate interests, such as improving services, responding to inquiries, or ensuring website security, provided these do not override your privacy rights.
Legal Obligations: We may process your data where it is required to comply with legal obligations.

5. How We Share Your Data

We do not sell or rent your personal data to third parties. However, we may share your data with:

Service Providers: Third-party vendors, such as website analytics tools, or payment processors, who assist us in delivering our services. These providers are contractually obligated to process your data securely and in compliance with relevant laws.
Legal Authorities: Where required, we may share your data to comply with legal or regulatory requirements, such as responding to legal requests or audits.
Business Transfers: In the event of a merger, acquisition, or business transfer, your personal data may be transferred as part of the business assets.
Content Sharing: The case studies we will create using your data will be shared with our audience on our website and on our social media. Of course, we will ask for your consent before proceeding.

6. Data Retention

We retain your data only as long as necessary for the purposes outlined in this policy, or as required by law. Once your data is no longer needed, we will securely delete or anonymize it.

Client Data: Retained for the duration of the client relationship and for up to 2 months after the termination of services, unless otherwise required by law.
Legal and Financial Records: Retained for as long as necessary to comply with legal and regulatory obligations.

7. Your Data Protection Rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the data we hold about you.
Right to Rectification: You can request that we correct any inaccuracies in your data.
Right to Erasure (“Right to be Forgotten”): You can request that we delete your data, subject to legal obligations.
Right to Restrict Processing: You can request that we restrict the processing of your data in certain situations.

To exercise any of these rights, please contact us at [serpsquad@gmail.com]. We will respond to your request as soon as possible.

8. Data Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, disclosure, or loss. These include:

Encryption: Data is encrypted both in transit and at rest.
Access Controls: Restricted access to business data to only authorized personnel.
Regular Audits: We regularly review our security practices and update them as necessary to protect data.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner’s Office (ICO) within 72 hours.

9. Changes to This Privacy Policy

We may update this Data Privacy and Protection Policy from time to time to reflect changes in our practices or legal obligations. Any changes will be posted on our website, and where appropriate, we will notify you.

10. Complaints

If you believe we have violated your data protection rights, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection supervisory authority.

For any questions about this policy or to exercise your data rights, please contact us.