Privacy Policy

The Data Controller is:

For the purposes of data protection legislation, I determine why and how personal information collected through this website is processed.

The information collected depends on how you interact with the website and with me.

Information you provide directly

You may provide personal information when you:

• submit a contact or consultation form
• request an SEO audit, quotation or proposal
• contact me by email, telephone or another communication channel
• subscribe to a newsletter or marketing communication
• become a client
• provide information necessary for me to deliver professional services

This may include:

• your name
• email address
• telephone number
• company or organisation name
• postal or business address
• job title
• information contained in your enquiry or message
• information about your website, business or marketing activities
• billing and invoicing information
• communication preferences
• any other information you choose to provide

Please avoid sending sensitive personal information through website forms unless it is genuinely necessary.

Information collected automatically

When you visit the website, certain technical and usage information may be collected automatically by the website or third-party services used to operate, secure and analyse it.

This may include:

• IP address
• approximate geographical location
• browser type and version
• device type
• operating system
• referring website or source
• pages visited
• time and date of visits
• time spent on pages
• links and buttons clicked
• scrolling and interaction information
• session information
• cookie and similar technology identifiers
• technical diagnostic and security information

Some analytics tools may also collect interaction information such as mouse movements, scrolling behaviour and page engagement.

I only use personal information where there is a legitimate reason to do so.

Responding to enquiries

If you contact me through the website, email, telephone or another channel, I use the information you provide to respond to your enquiry, discuss your requirements and provide requested information, quotations or proposals.

The lawful basis will normally be:

• taking steps at your request before entering into a contract, or
• my legitimate interest in responding to business enquiries

Providing professional services

Where you become a client, I may use your information to:

• provide agreed SEO, PPC, digital marketing, website or consulting services
• communicate with you about your account or projects
• manage contracts, proposals and work
• issue invoices and manage payments
• maintain appropriate business records
• provide ongoing support

The lawful basis is normally performance of a contract and, where appropriate, compliance with legal obligations.

Website operation, security and fraud prevention

Technical information may be processed to:

• operate and maintain the website
• keep it secure
• prevent abuse, spam and malicious activity
• diagnose technical problems
• manage website traffic
• improve reliability and performance

The lawful basis is normally my legitimate interest in maintaining a secure and effective website.

Website analytics and improvement

Analytics tools may be used to understand:

• how visitors find the website
• which pages are visited
• how visitors interact with pages
• which content performs well
• technical performance
• how the website can be improved

Where analytics involve non-essential cookies or similar technologies, these technologies will be used subject to your cookie choices and consent where required.

Advertising and conversion measurement

I may use advertising and measurement technologies to understand whether advertising campaigns generate visits, enquiries or other conversions.

This may include Google Ads conversion measurement and remarketing technologies.

Where these activities require non-essential cookies or similar tracking technologies, they will only be used where the necessary consent has been obtained.

Marketing communications

If you subscribe to a newsletter or otherwise ask to receive marketing communications, I may use your contact details to send relevant information about SEO, digital marketing, website services, articles or my professional services.

You can unsubscribe at any time using the unsubscribe option included in an email or by contacting me directly.

Depending on the circumstances, marketing may be based on consent or legitimate interests where permitted by law. Electronic marketing will also be handled in accordance with PECR.

Legal and regulatory obligations

I may process or retain information where necessary to:

• comply with tax, accounting or other legal obligations
• respond to lawful requests from public authorities
• establish, exercise or defend legal claims, or
• protect my rights, property, website, clients or users

This website may use cookies and similar technologies.

Cookies are small pieces of information stored on your device when you visit a website. Similar technologies can also be used to recognise devices, measure website activity or remember preferences.

The website may use the following categories.

Strictly necessary cookies

These are required for the website to operate properly, maintain security or provide a feature you have requested.

These cookies do not normally require consent.

Analytics cookies

Analytics technologies help me understand how visitors use the website so that I can improve its content, usability and performance.

These may include Google Analytics and Microsoft Clarity.

Advertising and conversion cookies

These technologies may help measure advertising performance, record conversions or build audiences for remarketing campaigns.

They may include technologies provided by Google Ads.

Functionality and third-party content

Some pages may include external functionality such as maps, embedded widgets, review feeds, fonts or other third-party content.

These services may receive technical information about your device when the content is loaded.

Your cookie choices

Where consent is legally required, non-essential cookies and similar technologies should not be activated until you have made a choice.

You can accept or reject relevant categories through the website's cookie consent controls and change your preferences later through the Cookie Settings option provided on the website.

You can also control cookies through your browser settings, although disabling some cookies may affect website functionality.

I use selected third-party providers to operate, secure, analyse and improve the website and to support my business activities.

Depending on the pages and features you use, these may include the following.

Google

Google services may include:

• Google Analytics 4
• Google Tag Manager
• Google Ads conversion measurement
• Google Ads remarketing
• Google Maps
• Google Fonts
• Google reCAPTCHA where enabled

Depending on the service and your cookie preferences, Google may receive technical information such as IP address, device information, cookie identifiers and website usage information.

Microsoft Clarity

Microsoft Clarity may be used to understand how visitors interact with pages through tools such as heatmaps and session recordings.

Information processed may include device and browser information, clicks, scrolling, page interactions, approximate location and other website usage information.

Clarity should only operate where the appropriate cookie consent has been obtained when required.

Cloudflare

Cloudflare may be used for website security, traffic management, performance optimisation, content delivery and protection against malicious traffic or automated bots.

Because Cloudflare sits between visitors and the website, it may process technical information including IP addresses, browser information and request data.

Elfsight

The website may use Elfsight to display embedded widgets or externally sourced content.

Elfsight may receive usage and device information when a widget is loaded or used.

Zoho

Zoho services may be used for customer relationship management, business administration, invoicing or related operational activities.

Information processed may include contact information, company information, communications and billing details where relevant.

OpenAI and AI-powered functionality

Certain tools or website features may use OpenAI technology or other artificial intelligence services.

Where an AI-powered feature is provided, information you deliberately submit to that feature may be transmitted to the relevant AI service in order to generate a response or perform the requested function.

Website hosting and technical providers

Personal and technical information may also be processed by companies that provide:

• website hosting
• email delivery
• database services
• backups
• security
• website maintenance
• other technical infrastructure

These providers only receive information necessary to perform the relevant service.

The website uses contact forms to allow you to send enquiries.

When you complete a form, I may collect information including your:

• name
• email address
• telephone number
• company name
• the information contained in your message

The information is used primarily to respond to your enquiry and, if appropriate, discuss potential services.

Form submissions may be stored within the website and/or sent to me by email.

Submitting an enquiry does not automatically subscribe you to marketing communications.

Where newsletter or email subscription facilities are available, your email address and any other information you provide may be used to send the communications you requested.

You can unsubscribe at any time.

I may retain limited information confirming that you have opted out so that I can ensure your preference continues to be respected.

I do not sell personal information or mailing lists to third parties.

I do not sell or rent your personal information.

I may share information where reasonably necessary with:

• hosting and website infrastructure providers
• analytics providers
• CRM and business administration providers
• email and communication providers
• accountants and professional advisers
• advertising and marketing platforms
• security and fraud-prevention providers
• technology providers supporting services I deliver
• public authorities where disclosure is required by law

Where a third party processes information on my behalf, I take reasonable steps to ensure that appropriate data protection arrangements are in place.

Some service providers used by this website or my business may process personal information outside the United Kingdom.

This can include providers operating in the European Economic Area, United States or other countries.

Where personal information is transferred outside the UK, I take reasonable steps to ensure an appropriate legal mechanism is available.

Depending on the circumstances, this may include:

• UK adequacy regulations
• recognised international data transfer frameworks
• the UK International Data Transfer Agreement
• the UK Addendum to approved EU Standard Contractual Clauses
• approved Standard Contractual Clauses, or
• another lawful transfer mechanism permitted under UK data protection legislation

You can contact me if you would like further information about safeguards used for a particular transfer.

I do not keep personal information for longer than reasonably necessary.

The appropriate retention period depends on why the information was collected and whether there are legal, accounting or contractual reasons to keep it.

As a general guide:

• Enquiries from prospective clients: normally retained for up to two years after the last meaningful contact unless there is a continuing business reason to retain them.
• Client records and correspondence: retained for the duration of the client relationship and for a reasonable period afterwards where necessary for business, contractual or legal purposes.
• Invoices, transaction and accounting records: retained for the period required under applicable tax and accounting legislation, typically up to six years.
• Marketing information: retained until you unsubscribe, withdraw consent or the information is no longer required. Limited suppression information may be kept after an opt-out to make sure your preference is respected.
• Analytics and technical information: retained in accordance with the settings and retention periods applied to the relevant analytics or technology service.
• Security logs: retained for as long as reasonably necessary to investigate security issues, prevent abuse or maintain website integrity.

Information may be retained for longer where required by law or where reasonably necessary to establish, exercise or defend legal claims.

I take appropriate technical and organisational measures designed to protect personal information against:

• unauthorised access
• loss
• misuse
• disclosure
• alteration
• destruction

Measures may include encrypted connections, access controls, secure hosting, software updates, backups, security monitoring and limiting access to information to those who genuinely need it.

No internet-based service can guarantee absolute security, but reasonable precautions are taken to reduce risks.

Depending on the circumstances and the lawful basis used for processing, UK data protection law gives you a number of rights.

These may include the right to:

• access the personal information I hold about you
• rectify inaccurate or incomplete information
• erase your personal information in certain circumstances
• restrict the way your information is processed
• object to certain processing based on legitimate interests
• object to direct marketing at any time
• receive certain information in a portable format where the right to data portability applies
• withdraw consent at any time where processing is based on consent, and
• complain to a data protection regulator

Not every right applies in every situation.

Requests can be sent to: hi@georgepapatheodorou.com

I may need to verify your identity before fulfilling a request.

Valid requests will normally be handled within one month, although data protection legislation permits additional time in certain circumstances.

Your right to object

Where processing is based on legitimate interests, you may also have the right to object based on your particular circumstances.

If you have concerns about how I have handled your personal information, please contact me first so that I can investigate the issue.

You also have the right to complain to the UK's independent data protection regulator:

Further information about your rights and how to make a complaint is available through the ICO.

If you are located outside the United Kingdom, you may also have the right to contact the relevant data protection authority in your country.

Website analytics, advertising and remarketing technologies may use automated methods to categorise website interactions or audiences.

I do not use information collected through this website to make solely automated decisions that produce legal effects or similarly significant effects about individuals.

This website is primarily intended for businesses, professionals and people interested in digital marketing services and information.

It is not designed or directed specifically at children, and I do not knowingly seek to collect personal information from children through the website.

If you believe that a child has provided personal information inappropriately, please contact me.

This website contains links to external websites and services.

I am not responsible for the privacy practices, content or security of third-party websites. You should review the privacy information provided by those organisations before submitting personal information to them.

I may update this Privacy Policy periodically to reflect:

• changes to the website
• changes to the services or technologies I use
• changes to my business activities, or
• changes in legal or regulatory requirements

The latest version will always be published on this page and the date at the top of the policy will be updated.

Where a material change requires fresh consent, I will request that consent where required.

For questions about this Privacy Policy, the personal information I hold about you, or your data protection rights, please contact: