Privacy policy

SEO Friendly Websites is run by East Kent SEO Ltd (company number 16321605), registered office East Kent SEO, Highstreet Road, Faversham, Kent, ME13 9EJ, United Kingdom. For the personal data described in this policy we are the controller under UK GDPR and the Data Protection Act 2018.

For anything about your personal data, email [email protected].

• Account details: your name, email address and sign-in details, handled through Clerk. If you sign in with Google, we receive the basic profile details Google shares.
• Business details: the information you give us to build your website, such as business name, address, phone number, opening hours, services, areas served, logo and photos.
• Website content: pages, text, images and settings you create or edit, your messages to the AI editor, and the site history we keep so you can undo changes.
• Imported websites: if you ask us to import or modernise an existing site, we read its public pages, text and images.
• Connected accounts: if you connect Google Search Console, Google Business Profile or another service, we store the access it grants, encrypted, and the reports we fetch with it.
• Billing details: your plan, payment status and invoices. Card details are taken by Stripe; we never see or store your full card number.
• Free SEO checks: the website address or business name you enter and the report we produce.
• Technical data: IP address, browser type, pages visited and error logs, used to keep the service secure and working.

• To provide the service (performing our contract with you): creating your account, building, editing, checking and publishing your websites, running reports, and taking payment.
• To keep things secure and running well (our legitimate interests): preventing fraud and abuse, rate limiting, fixing faults and improving features.
• To meet legal duties (legal obligation): keeping tax and accounting records and responding to lawful requests.
• To connect other services (your choice): we only reach your Google or other accounts after you connect them, and you can disconnect at any time.
• To tell you about the service: we send account, billing and service emails. We only send marketing emails if you agree, and every one has an unsubscribe link.

We do not sell your personal data, and we do not use it for advertising profiles.

When you ask the builder or editor to write or change content, the relevant business details, page content and your instructions are sent to Anthropic to generate the result. Anthropic processes this for us under contract and does not use it to train its models. Our SEO checks are automated, but they only score pages; they do not make decisions with legal or similarly significant effects about you.

We use these providers to run the service. Each processes data only on our instructions and under a written contract.

• Clerk: Sign-up, sign-in and account security
• Stripe: Payments, subscriptions and invoices
• Neon: Our main database, hosted in London
• Railway: Hosting for the platform and its background jobs
• Cloudflare: Hosting for published customer websites, file and image storage, and domain services
• Anthropic: AI that writes and edits website content when you ask it to
• Google: Business listing lookups, page speed tests, and Search Console or Business Profile data when you connect them
• DataForSEO: Keyword ranking and search data
• Formspree: Contact form handling on customer websites, when a form is switched on
• Unsplash: Stock photo search inside the editor

We may also share data with professional advisers, or where the law requires it. If the business is ever sold or restructured, data would pass to the new owner under the same protections.

Our database is in London. Some of our providers process data in the United States or elsewhere outside the UK. Where that happens we rely on UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum, so your data keeps an equivalent level of protection.

• Account and website data: for as long as your account is open.
• When you delete a site, we take it offline and delete its files and content. When you close your account, we delete your account data within 30 days.
• Billing and tax records: six years after the end of the financial year they relate to, as UK law requires.
• Backups and security logs: removed on a rolling basis, normally within 30 days.

This website only uses cookies that are strictly necessary for it to work. Clerk sets cookies that keep you signed in and protect your account. The editor also keeps a short-term copy of your chat in your browser so you do not lose it if the page reloads.

We do not use analytics, advertising or tracking cookies on this website, so we do not ask for cookie consent. If we ever add them, we will ask first and update this policy. Payments open on Stripe's own checkout page, which has its own cookie notice.

Every website built on SEO Friendly Websites belongs to the business that runs it. That business is the controller for its visitors' personal data, such as contact form messages, and each site has its own privacy policy and cookie notice. We act as its processor and handle that data only to host the site and deliver the features the business has switched on. If you visited one of those websites, contact that business first; you can also email [email protected].

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you
• have inaccurate data corrected
• have your data deleted
• restrict or object to how we use it
• receive your data in a portable format
• withdraw consent at any time, where we rely on it

Email [email protected] to use any of these rights. We will reply within one month. There is no charge in most cases.

If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. Depending on your state, you may have rights to know, access, correct and delete your personal information, and to appeal a decision we make about a request. Email [email protected] to use them. We will not treat you differently for doing so.

Data is encrypted in transit, connection tokens are encrypted at rest, and each account can only reach its own sites. Access to production systems is limited to the people who need it. No system is perfectly secure, but if a breach affects your data we will tell you and the ICO where the law requires it.

The service is for businesses and is not intended for anyone under 18. We do not knowingly collect children's data.

We will update this page when our practices change and show the new date at the top. If a change is significant we will email account holders before it takes effect. Our terms of service explain how the service itself works.