[ TEMPLATE: have this policy reviewed by a qualified lawyer before publishing. Replace every bracketed placeholder. ]
1. Who I am
This website is operated by Hamza Majeed, a freelance SEO consultant trading as [Business legal name], [Business address] (“I,” “me,” or “my”). I am the data controller for personal information collected through this website.
For any privacy question or request, email hello@hamzamajeed.me.
2. Information I collect
Information you give me: your name, email address, website URL, company name, platform, goals, and anything else you include when you use the contact form, request an audit, or email me.
Information collected automatically: IP address, browser and device type, pages visited, referring pages, and approximate location, collected through server logs and, with your consent where required, analytics cookies.
Client project information: when you become a client, I may access your website, analytics, Search Console, and business profiles. I use this access only to deliver the agreed services.
3. How I use your information
To respond to inquiries and audit requests, to provide and invoice services, to improve this website, to keep the site secure, and to meet legal obligations.
I do not sell your personal information. I do not use it for automated decision-making that has legal or similarly significant effects on you.
4. Legal bases (GDPR and UK GDPR)
If you are in the European Economic Area or the United Kingdom, I process your data on these bases: consent (for analytics cookies and optional marketing), contract (to provide services you request), legitimate interests (to respond to inquiries, secure the website, and improve my services), and legal obligation (for tax and accounting records).
Where I rely on consent, you can withdraw it at any time without affecting earlier processing.
5. Sharing and processors
I share data only with service providers who help me run this website and my business, such as hosting, email, form handling, analytics, scheduling, and accounting providers. They process data on my instructions under appropriate agreements.
[List processors, e.g. hosting provider, email provider, analytics provider, payment processor.]
I may disclose information if required by law or to protect my rights.
6. International transfers
I and some of my service providers may process data outside your country. Where data is transferred out of the EEA or UK, I rely on adequacy decisions or Standard Contractual Clauses (and the UK Addendum) to protect it.
For Australian residents, I take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles.
7. Retention
Inquiries that do not lead to work are deleted within [24] months. Client records are kept for as long as needed to provide services and to meet tax and legal requirements, typically [7] years. Analytics data is retained for [14] months.
8. Your rights
EEA and UK residents: you have the right to access, correct, delete, restrict, or object to processing, to data portability, and to withdraw consent. You can complain to your local supervisory authority or, in the UK, the Information Commissioner's Office.
California residents: under the CCPA/CPRA you have the right to know what personal information I collect, to request deletion and correction, to opt out of sale or sharing (I do not sell or share personal information for cross-context behavioral advertising), and to not be discriminated against for exercising your rights.
Australian residents: under the Australian Privacy Act you may request access to and correction of your personal information, and complain about a breach of the Australian Privacy Principles. If you are not satisfied with my response, you can contact the Office of the Australian Information Commissioner.
To exercise any right, email hello@hamzamajeed.me. I will respond within the time required by applicable law and may need to verify your identity.
9. Cookies
This website uses essential cookies and, with your consent where required, analytics cookies. See the Cookie Policy for details and how to manage your preferences.
10. Security
I use reasonable technical and organizational measures to protect personal information, including encrypted connections, access controls, and reputable service providers. No method of transmission or storage is completely secure.
11. Children
This website is intended for businesses and is not directed at children under 16. I do not knowingly collect personal information from children.
12. Changes to this policy
I may update this policy from time to time. The effective date at the top shows when it was last changed. Significant changes will be highlighted on this page.