Last updated: 23 October 2026
This privacy notice explains how Impact SEO handles personal information when you visit impactseo.co.uk, contact us, request a free SEO audit, use our free tools, or become a client.
Who is responsible for your information?
Impact SEO is the controller for the personal information described in this notice. For privacy questions or requests, email info@impactseo.co.uk.
Information we may collect
Depending on how you interact with us, we may process:
- Contact and enquiry information, such as your name, email address, phone number, website address, business details and the contents of your message.
- Client information, such as service instructions, business information, account/access details you provide for SEO work, correspondence, invoices and payment records.
- Technical information, such as IP address, browser information, requested pages, timestamps and security logs processed when the website is delivered and protected.
- Analytics information, if you consent to Google Analytics, such as pages viewed, approximate location, browser/device information, traffic source and interactions with the website.
- Free-tool inputs, such as a website address, domain or keywords that you choose to submit to a tool.
Contact and audit forms
The contact and free-audit forms are handled by a Cloudflare function, checked using Cloudflare Turnstile and then delivered to Formspree, which sends the submission to our business email address. To help assess the source and security of enquiries, we include the submitting connection's IP address, IP-derived country and estimated region where available, network provider or network number, browser information, a submission reference and timestamp with the form notification. We do not include an estimated city in the form notification because IP-based city locations can be inaccurate. We may also receive the submission page, the referring page and campaign information supplied by your browser. These browser-reported details can be missing, incomplete or inaccurate and cannot establish how someone first found the website or which Google search they used.
We use this technical submission information to recognise suspicious or abusive enquiries, troubleshoot delivery and understand how a submitted enquiry reached us. This information is collected when you send a form; it does not require you to accept Google Analytics cookies and does not create a separate record of your browsing history. We use the information you enter to respond to your enquiry or prepare the requested audit.
Free tools
Our free tools use limited information to return a result:
- Rankings Checker: the domain and keywords you enter are sent to an Impact SEO function hosted on Cloudflare. The function uses Google's Custom Search JSON API to search each keyword and compares the returned results with the domain you supplied.
- Page Speed Tool: when you run a test, the website address you enter is sent from your browser to Google PageSpeed Insights to return performance data.
Do not enter confidential or personal information into these tools unless it is necessary for the result you want.
Why we use personal information and our lawful bases
- Enquiries and audit requests: to respond to you and take steps you request before entering a contract. Our lawful basis is usually steps before a contract and, where appropriate, our legitimate interest in responding to business enquiries.
- Providing SEO services: to deliver, administer and communicate about our services. Our lawful basis is performance of a contract.
- Website operation, form security and enquiry attribution: to deliver, protect and troubleshoot the website, assess potentially abusive enquiries and identify available referral sources at the point of submission. Our lawful basis is our legitimate interest in operating a secure and reliable website and handling genuine enquiries. We limit what is collected to the form submission and do not use it for cross-site profiling.
- Business records: to maintain accounting, tax and legal records. Our lawful basis is compliance with legal obligations and, where relevant, our legitimate interest in maintaining appropriate business records.
- Analytics: where you choose to accept Google Analytics, we use consent as the lawful basis for the related non-essential storage/access and analytics processing. You can withdraw that consent at any time through Cookie settings in the footer.
- Other consent-based processing: where we specifically ask for consent for another purpose, you can withdraw that consent at any time.
Who we share information with
We do not sell personal information. We use service providers only where reasonably necessary to operate the website and business. These may include Cloudflare for website hosting, security and Turnstile, Formspree for processing website form submissions, our business email provider, Google for consent-based Google Analytics, the free tools and externally loaded fonts, and SEO or website platforms used to provide client services. We may also disclose information where required by law, to professional advisers, or where necessary to establish, exercise or defend legal rights.
International processing
Some technology providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we rely on an applicable lawful transfer mechanism or safeguards made available by the relevant provider.
How long we keep information
We keep personal information only for as long as reasonably needed. Technical information accompanying a form submission is included in Formspree records and notification emails. Our normal procedure is to review routine enquiries within six months after they are closed and remove technical details that are no longer needed, including by removing the relevant notification or record if those details cannot be separated. This is a manual review, not automatic deletion by the website. We may retain relevant submissions for longer where reasonably necessary to investigate abusive enquiries, protect people, resolve disputes or meet legal obligations, with further periodic review. Client, contractual, accounting and tax records may be retained separately for applicable legal, insurance and business purposes.
Security
We use appropriate technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse or alteration. No internet or email system can be guaranteed to be completely secure.
Your UK data-protection rights
Depending on the circumstances, you may have rights to access personal information we hold about you, correct inaccurate information, request erasure, restrict or object to processing, request data portability, or withdraw consent where consent is the lawful basis. Some rights are subject to legal conditions or exemptions.
To exercise a right, email info@impactseo.co.uk. You can also complain to the UK Information Commissioner's Office if you are unhappy with how your information has been handled.
Automated decisions
We do not use information collected through this website to make solely automated decisions about individuals that produce legal or similarly significant effects.
Cookies and similar technologies
See our Cookie Policy for information about cookies, similar technologies, the locally stored analytics-consent record and third-party services used by this website.
External websites
This website contains links to third-party websites. Those organisations control their own privacy practices, so you should read their privacy information before providing personal data.
Changes to this notice
We may update this notice when our website, services, providers or legal requirements change. The latest revision date will be shown at the top of this page.
Contact
For privacy questions or requests, email info@impactseo.co.uk or use our contact page.