Privacy & Cookie Policy

1. Information I collect

I may collect personal information in the following ways.

Information you provide directly

When you contact me by email or book a call, you may provide information including:

• your name;
• email address;
• company or website;
• budget;
• services you are interested in;
• information included in your message or enquiry; and
• any other information you choose to provide.

You are not required to provide more information than is reasonably necessary for your enquiry.

Information collected automatically

When you visit the Website, certain technical and usage information may be processed automatically.

Depending on your consent choices, this may include:

• pages visited;
• approximate geographic location;
• browser and device information;
• referring website or traffic source;
• interactions with pages and Website features;
• session information;
• cookie or similar identifiers; and
• technical information used for security, diagnostics, and Website operation.

The Website hosting provider may also process technical information such as IP addresses and server logs where necessary to provide and secure the Website.

2. How I use your information

I may use personal information to:

• respond to enquiries;
• schedule and manage discovery calls;
• understand your business and what services you may need;
• prepare proposals or discuss potential consulting engagements;
• communicate with you about an existing enquiry;
• operate, secure, and maintain the Website;
• understand how visitors find and use the Website;
• measure Website and organic-search performance;
• improve Website content, usability, and performance;
• diagnose technical problems; and
• comply with applicable legal obligations.

I do not sell personal information.

3. Legal bases for processing

Where the General Data Protection Regulation (GDPR) or similar data protection legislation applies, I rely on different legal bases depending on the purpose of processing.

Steps before entering into a contract

When you contact me about potential consulting services or book a discovery call, I may process the information you provide where this is necessary to respond to your request and take steps toward a possible engagement.

Legitimate interests

I may process limited personal information where necessary for legitimate business interests, including:

• operating and securing the Website;
• responding to business communications;
• preventing abuse or technical problems; and
• maintaining appropriate business records.

Where I rely on legitimate interests, I consider those interests against your privacy rights.

Consent

Where required, I rely on your consent before using non-essential cookies or analytics technologies.

You can withdraw or change your cookie consent at any time through the Website’s cookie settings.

Legal obligations

I may process or retain information where necessary to comply with applicable legal, tax, accounting, or regulatory requirements.

4. Booking a call

The Website uses Cal.com to allow visitors to book discovery calls.

When you make a booking, information such as your name, email address, website, budget, requested services, and message may be processed by Cal.com as well as by me.

Cal.com may process information according to its own privacy policy and terms.

If the booking service uses cookies or other non-essential technologies through the embedded booking interface, those technologies will be managed through the Website’s consent system where required.

5. Email communications

Business email is hosted through Spacemail and may be forwarded to and processed through Gmail.

If you contact me by email, your email address, message, attachments, and related communication information may be processed and stored through these services.

I use this information to respond to enquiries, communicate with prospective or existing clients, and maintain appropriate business correspondence.

6. Website hosting

The Website is hosted by Hetzner.

Hetzner may process technical information necessary to host and secure the Website, including server logs, IP addresses, request information, and related technical data.

This information may be used for purposes such as Website delivery, security, troubleshooting, and preventing misuse.

7. Analytics and Website measurement

I use analytics tools to understand how the Website is discovered and used and to improve its performance.

Google Analytics 4

The Website uses Google Analytics 4 (GA4).

Subject to your consent settings, Google Analytics may collect information such as:

• pages viewed;
• sessions and interactions;
• traffic sources;
• approximate location;
• browser and device information; and
• pseudonymous identifiers.

Google Analytics is configured through Google Tag Manager and is intended to operate only after the required analytics consent has been provided. GA4 event and user data retention is set to 14 months.

Microsoft Clarity

The Website uses Microsoft Clarity to better understand how visitors interact with pages.

Clarity may process information about how visitors use the Website, including clicks, scrolling, page interactions, technical information, and session activity.

This information may be used to create heatmaps, session recordings, and other behavioral analytics that help improve the Website.

Clarity is treated as an Analytics service within the Website’s cookie consent system and is intended to operate only after the required analytics consent has been provided.

Google Search Console and Bing Webmaster Tools

I use Google Search Console and Bing Webmaster Tools to understand how the Website performs in search engines.

These services may provide information such as:

• search impressions;
• clicks;
• search queries;
• search positions;
• indexing information; and
• technical search-performance data.

These tools are used for search-performance analysis and are not used as advertising trackers on the Website.

8. Cookies and similar technologies

The Website uses cookies and similar technologies for Website operation, consent management, analytics, and, where applicable, functionality provided by third-party services.

I use CookieYes to manage cookie consent and preferences.

Cookies may fall into the following categories.

Necessary cookies

These cookies are required for functions such as:

• remembering your cookie preferences;
• security;
• Website functionality; and
• other essential technical operations.

Necessary cookies do not require consent where they are strictly necessary for the requested service.

Analytics cookies

Analytics cookies help me understand how visitors find and use the Website.

These may include cookies used by:

• Google Analytics 4; and
• Microsoft Clarity.

Analytics cookies are disabled unless the appropriate consent is provided where consent is required.

Functional cookies

Functional cookies may be used by third-party Website features such as the embedded Cal.com booking service.

Where required, these cookies are managed according to the visitor’s consent choices.

Advertising cookies

The Website does not currently use advertising or retargeting technologies such as Google Ads, Meta Pixel, or LinkedIn Insight Tag.

If advertising technologies are introduced in the future, this policy and the Website’s cookie configuration will be updated accordingly.

Managing your cookie choices

When you first visit the Website, you can use the cookie consent banner to accept or reject non-essential cookie categories.

You can later change or withdraw your choices using the Website’s cookie settings.

Withdrawing consent does not affect processing that occurred lawfully before consent was withdrawn.

The cookies detected on the Website, including their purposes and durations, may also be displayed through the CookieYes cookie preferences interface.

9. Who may receive your information

Personal information may be processed by service providers that help me operate the Website and communicate with visitors.

These currently include, where applicable:

• Hetzner, for Website hosting;
• Google, for Gmail, Google Analytics, Google Tag Manager, Google Search Console, and related services;
• Microsoft, for Clarity and Bing Webmaster Tools;
• CookieYes, for cookie consent management;
• Spacemail, for business email hosting and delivery; and
• Cal.com, for scheduling discovery calls.

These providers may act as processors, independent controllers, or otherwise process data according to the nature of the service and their applicable terms.

I may also disclose information where required by law or where reasonably necessary to protect legal rights, prevent fraud, or address security issues.

10. International data transfers

Some service providers may process information outside Cyprus or the European Economic Area.

Where applicable, transfers of personal information outside the EEA are handled using safeguards recognized under applicable data protection law, such as adequacy decisions, standard contractual clauses, or other appropriate transfer mechanisms.

11. How long I keep information

I keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

For example:

• enquiry and booking information may be retained while I respond to the enquiry and for a reasonable period afterward for business and record-keeping purposes;
• correspondence may be retained where necessary for ongoing business relationships or legal records;
• technical and security logs may be retained for limited periods based on operational and security needs;
• analytics information is retained according to the settings and retention periods of the relevant analytics services; and
• information may be retained longer where required by applicable legal, tax, accounting, or regulatory obligations.

When information is no longer reasonably required, it may be deleted or anonymized.

12. Your data protection rights

Depending on applicable law, you may have the right to:

• request access to personal information held about you;
• request correction of inaccurate information;
• request deletion of your information;
• request restriction of processing;
• object to certain processing;
• request portability of information where applicable; and
• withdraw consent where processing is based on consent.

You may exercise these rights by contacting:

dpo@ethicalseo.expert

I may need to verify your identity before responding to certain requests.

You may also have the right to lodge a complaint with the relevant data protection supervisory authority, including the supervisory authority in the country where you live or work.

13. Security

I take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no website, online service, or method of electronic communication can be guaranteed to be completely secure.

14. Third-party websites

The Website may contain links to third-party websites.

I am not responsible for the privacy practices, content, or security of external websites. When you visit a third-party website, its own privacy policy and terms apply.

15. Children

The Website is intended primarily for professional and business audiences and is not directed toward children.

I do not knowingly use the Website to collect personal information from children.

16. Changes to this policy

I may update this Privacy & Cookie Policy from time to time to reflect changes to the Website, the services I use, my business practices, or applicable requirements.

The latest version will be published on this page with an updated “Last updated” date.

17. Contact information