Privacy Policy

1. Data Controller Identification

The Data Controller responsible for personal data collected across searchengineandsocialmediagrowth.com is:

2. Categories of Data Collected

We process only data strictly necessary to provision and maintain your organic search and social media acceleration platform:

• Subscriber Contact Information: Name, work email address, company URL, and billing country.
• Target Search Vectors: Domain target keywords, SERP competitors, and seed content topics supplied for indexing.
• Social Media Credentials: Public social media handles and campaign performance identifiers.
• Transaction & Telemetry Records: Automated invoice reference numbers, subscription renewal stamps, and gateway token hashes (payment card data is never stored on our servers).

3. Lawful Grounds for Processing (UK GDPR Art. 6)

We collect and process your information under the following statutory legal bases:

• Contractual Performance (Art. 6(1)(b)): Delivering keyword research, ranking crawls, video hooks, and client dashboard access.
• Legitimate Interests (Art. 6(1)(f)): Monitoring network health, preventing bot abuse, and calculating aggregated ROI telemetry.
• Legal Obligation (Art. 6(1)(c)): Maintaining statutory accounting, tax, and invoicing records under UK law.

4. Search Engine & Social Media Telemetry Data

Our crawl bots analyze publicly available search engine results pages (SERPs), AI search index citations, and public social platform recommendation trends. We do not inspect, scrape, or process private non-public social messages or consumer private records.

5. Sub-processors & Information Sharing

We never sell, lease, or monetize client data. Information is shared solely with certified sub-processors required to operate our cloud architecture:

• Secure Payment Gateways: For encrypted recurring billing processing.
• Enterprise Cloud Infrastructure: ISO/IEC 27001 certified data centers hosting our webhooks and telemetry servers.
• Transactional Email Relays: Delivering onboarding credentials, invoice PDFs, and rank climb alerts.

6. International Transfers of Data

Where data is transferred outside the United Kingdom or European Economic Area, we implement UK International Data Transfer Agreements (IDTAs) and Standard Contractual Clauses (SCCs) to ensure equivalent data protection standards.

7. Data Storage, Retention & Cryptographic Security

All web traffic and database entries are safeguarded via 256-bit Transport Layer Security (TLS 1.3) and AES-256 at-rest encryption. Subscriber account data is retained for the active subscription duration plus statutory tax retention periods (6 years in the UK).

8. Your Statutory Rights Under UK GDPR

You have full statutory rights regarding your personal information, including:

• Right to Access (Subject Access Request): Request copies of all data held on your profile.
• Right to Rectification: Request correction of inaccurate company or contact records.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your records upon subscription termination.
• Right to Restrict or Object: Restrict certain processing activities or opt-out of marketing communications.

9. Cookies & Local Storage Management

We employ strictly necessary cookies and browser local storage to maintain your authenticated subscriber session, currency preferences (£ GBP, $ USD, € EUR), and discount voucher parameters. We do not deploy intrusive third-party cross-site behavioral tracking cookies.

10. Data Protection Officer Contact & Supervisory Authority

To exercise any statutory data rights, submit inquiries to our designated Data Protection Officer at privacy@searchengineandsocialmediagrowth.com. You also retain the legal right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.