Get in touch

Privacy Policy

1. Introduction

This Privacy Policy explains how James Baker, trading as James Baker SEO (“I”, “me”, “my”), collects, uses, and protects personal data obtained through jamesbakerseo.co.uk (the “Website”). I am committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using the Website or submitting your details via a contact form, you acknowledge this policy.

2. Data I collect

2.1 Information you provide directly

When you use the contact form or get-in-touch functionality on the Website, I collect:

  • Your name
  • Your email address
  • Your phone number (if provided)
  • Your business name (if provided)
  • The content of your message

2.2 Data collected automatically

When you visit the Website, certain data may be collected automatically through cookies and analytics tools (see the Cookie Policy for details):

  • IP address (anonymised where possible)
  • Browser type and version
  • Pages visited and time spent
  • Referring website or search query
  • Device and operating system type

3. How I use your data

I use the personal data I collect for the following purposes:

  • To respond to enquiries submitted via the contact form
  • To provide SEO consultancy services where a contract is agreed
  • To send service-related communications (invoices, project updates, reports)
  • To improve the Website using aggregated, anonymised analytics
  • To comply with legal obligations

I do not use your data for automated decision-making or profiling.

4. Legal basis for processing

Under UK GDPR, I rely on the following lawful bases:

  • Legitimate interests — to respond to enquiries and communicate with prospective clients (Article 6(1)(f))
  • Contract performance — where you engage my services (Article 6(1)(b))
  • Legal obligation — where I am required to retain records for tax or regulatory purposes (Article 6(1)(c))
  • Consent — for any optional marketing communications, where separately obtained

5. Data sharing

I do not sell, rent, or trade personal data. I may share data with:

  • Google LLC — Google Analytics for website performance measurement (see Cookie Policy)
  • My email service provider — for delivering responses to enquiries
  • Accountancy software — where your contact details form part of an invoice or contract record
  • Legal or regulatory authorities — where required by law

Any third parties I share data with are required to process it in accordance with UK GDPR.

6. Data retention

I retain personal data only for as long as necessary:

  • Enquiry data where no contract is formed: up to 12 months
  • Client project data: 6 years (in line with HMRC requirements)
  • Analytics data: as configured in Google Analytics (default 26 months)

After retention periods expire, data is securely deleted.

7. Your rights

Under UK GDPR, you have the right to:

  • Access — request a copy of the personal data I hold about you
  • Rectification — ask me to correct inaccurate or incomplete data
  • Erasure — request deletion of your data (“right to be forgotten”)
  • Restriction — ask me to limit processing in certain circumstances
  • Portability — receive your data in a structured, machine-readable format
  • Object — object to processing based on legitimate interests
  • Withdraw consent — where processing is consent-based, you may withdraw at any time

To exercise any of these rights, please contact me at: [email protected]. I will respond within one calendar month.

8. Complaints

If you have concerns about how I handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

  • Website: ico.org.uk
  • Helpline: 0303 123 1113
  • Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

9. Security

I take appropriate technical and organisational measures to protect personal data against accidental loss, destruction, or unauthorised access. The Website uses HTTPS encryption. However, no data transmission over the internet is entirely secure.

10. International transfers

Where I use services (such as Google Analytics) that may transfer data outside the UK, I ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions as applicable under UK GDPR.

11. Links to other websites

The Website may contain links to third-party websites. I am not responsible for the privacy practices of those sites. I recommend reviewing their privacy policies independently.

12. Changes to this policy

This policy may be updated from time to time. The current version will always be available at jamesbakerseo.co.uk/privacy-policy. The “last updated” date at the top of this page indicates when it was last revised.

13. Contact

For any questions about this Privacy Policy or to exercise your data rights, please contact:

James Baker, James Baker SEO

Email: [email protected]

Website: jamesbakerseo.co.uk