Privacy Policy

01. Overview & Data Controller

Welcome to Hedayet SEO Consultant (https://hedayetseoconsultant.com). This Privacy Policy transparently explains how we collect, process, safeguard, and respect your personal information when you browse our website, request a technical SEO audit, engage our advisory services, enroll in SEO mentorship, or submit a business inquiry.

We are dedicated to safeguarding client confidentiality, complying with global data protection standards (including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable international privacy frameworks), and maintaining the highest ethical standards in digital search consulting.

02. Information We Collect

We only collect information that is strictly necessary to evaluate your search engine performance, communicate project milestones, fulfill technical consultancy agreements, and maintain site security.

A. Information You Voluntarily Provide

• Contact & Identification Data: Full Name, Business Email Address, Phone Number, WhatsApp Contact Handle, and Company/Organization Name.
• Website & Search Data: Your website URL, target market locations, main organic competitors, current traffic estimates, and primary organic growth goals submitted via our audit request and contact forms.
• Client Project Assets (Under Contract): Delegated access to Google Search Console (GSC), Google Analytics (GA4), XML sitemaps, Screaming Frog crawl logs, or CMS configurations necessary to conduct Technical SEO, AEO, GEO, and E-commerce audits.
• Communications Data: Inquiries, consultation notes, email correspondence, feedback, and testimonial reviews submitted to our team.

B. Automatically Collected Technical Data

• Browser & Device Metadata: Internet Protocol (IP) address (anonymized where feasible), browser type and version, device category, screen resolution, and operating system.
• Usage & Interaction Data: Pages visited, time spent on individual articles, navigation flow, referring website URLs, and interaction timestamps.
• Theme State: UI preference (e.g., permanent dark-mode setting stored locally on your device via standard browser localStorage).

03. Legal Grounds for Data Processing

Under the European Union GDPR (Article 6) and comparable international privacy statutes, we process personal information under the following recognized legal bases:

• Consent (Art. 6(1)(a) GDPR): When you voluntarily submit an inquiry form, opt in to communications, or accept website cookies. You retain the right to withdraw consent at any time.
• Contractual Performance (Art. 6(1)(b) GDPR): Processing required to prepare formal SEO audit proposals, deliver commissioned search consultancy, or facilitate SEO mentorship programs.
• Legitimate Interests (Art. 6(1)(f) GDPR): Necessary for our legitimate business interests, including preventing spam, ensuring server firewall security, optimizing site performance, and analyzing aggregate audience interest.
• Legal Obligation (Art. 6(1)(c) GDPR): Compliance with relevant commercial, taxation, accounting, and anti-fraud regulations.

04. How We Use Your Information

Your data is utilized exclusively for legitimate business and search advisory purposes, including:

• Conducting thorough Technical SEO, AI Search (AEO/GEO), International SEO, and E-commerce growth audits.
• Responding directly to inquiries submitted through our contact forms or direct email channels.
• Preparing customized project roadmaps, keyword gap analyses, and organic ranking strategies.
• Providing enrollment materials and educational updates for Hedayet SEO Training participants.
• Monitoring website security, preventing malicious automated bot attacks, and optimizing page load speeds.

05. Client Confidentiality & Non-Disclosure (NDA)

Client analytics credentials, Google Search Console permissions, and internal audit files are safeguarded by strict access controls and are never disclosed to third parties or competing entities.

06. Cookies & Tracking Technologies

Cookies are small text files stored on your browser to enhance website navigation, analyze traffic patterns, and deliver a smooth user experience.

• Strictly Necessary Cookies: Required for fundamental website functions, security validation, and session integrity.
• Analytical / Performance Cookies: Used by Google Analytics 4 (GA4) with IP anonymization to gather non-personally identifiable metrics on page popularity and reading patterns.
• Functional Storage (LocalStorage): We use browser localStorage solely to preserve your visual theme preference (Dark Mode) and dynamic instant search state.
• Third-Party Media Embeds: When viewing our YouTube video podcast section, YouTube (Google LLC) may set tracking or session cookies according to Google's privacy policies.

You can adjust your browser settings at any time to block, alert, or delete cookies. Note that disabling essential cookies may impact certain interactive site features.

07. Third-Party Service Providers

To deliver a fast, reliable, and secure experience, we collaborate with reputable enterprise service providers who process data strictly under our instruction:

• Google LLC: Google Analytics 4 (traffic analytics), Google Search Console (verification), and YouTube (video embeds).
• Hosting & Infrastructure: LiteSpeed web servers and secure cPanel cloud infrastructure equipped with SSL/TLS encryption.
• Direct Communication: Enterprise email infrastructure and WhatsApp Business for client messaging.

We do not authorize any third-party provider to utilize your personal information for their own independent marketing or commercial purposes.

08. Data Security & Storage

We maintain comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and our website is protected via modern HTTPS encryption protocols.
• Server-Level Security: Active firewall rules, brute-force mitigation, secure file permissions, and routine vulnerability scanning.
• Minimalist Principle: We only store data that is necessary, and access is restricted exclusively to authorized personnel.

09. Data Retention Period

We retain personal information only for as long as is necessary to fulfill the purposes outlined in this policy, unless a longer retention period is mandated by law:

• Inquiry & Audit Requests: Retained for up to 24 months to facilitate follow-up consulting discussions and historical context.
• Active Consulting Clients: Retained for the duration of the engagement plus required statutory tax and accounting retention limits.
• Web Server Logs: Standard server logs are automatically cycled and purged within 30 to 90 days.

10. Your Privacy Rights (GDPR & CCPA)

Regardless of your geographic location, we respect your rights regarding your personal information:

• Right of Access: You may request confirmation of whether we hold personal data about you and obtain a copy of that data.
• Right to Rectification: You may request the correction of any incomplete, inaccurate, or outdated information.
• Right to Erasure ("Right to Be Forgotten"): You may request the permanent deletion of your personal data from our systems.
• Right to Restrict or Object to Processing: You may object to the processing of your data based on legitimate interests or request restricted processing.
• Right to Data Portability: You may request a machine-readable copy of the personal data you provided to us.
• Right to Withdraw Consent: Where processing is based on consent, you may revoke your consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us directly at info@hedayetseoconsultant.com. We will respond promptly within thirty (30) days without unnecessary delay or charge.

11. Children's Privacy

Our website and professional SEO consulting services are strictly designed for business professionals, digital marketers, entrepreneurs, and adults over the age of 18. We do not knowingly solicit or collect personal information from children under the age of 16. If we become aware that a minor has submitted personal information, we will immediately take steps to delete that data.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our consulting services, technical advancements, or regulatory requirements. Any modifications will be posted directly to this page with an updated "Last Updated" timestamp at the top of the document. We recommend reviewing this page periodically.

13. How to Contact Us

If you have any questions, feedback, or requests regarding this Privacy Policy or your personal information, please reach out to us through any of the following channels: