Legal

Privacy Policy

What personal data we collect through this website, why we collect it, how we look after it, and the rights you have over it.

Last updated: September 27, 2026

1. Who we are

This policy explains how FluxSEO Pro ("FluxSEO Pro", "we", "us") handles personal data collected through this website and when you contact us. FluxSEO Pro is a remote-first SEO agency based in Pakistan.

For the purposes of the UK GDPR and the EU GDPR, FluxSEO Pro is the data controller for the personal data described in this policy. You can contact us about anything in this policy using the details in the Contact us section at the end of this page.

2. What data we collect

We collect only the information you choose to give us and the minimum technical data needed to run the website:

  • Contact and proposal forms: your name, email address, company, phone number (if provided), website URL, the service you're interested in, and your message.
  • SEO audit and strategy requests: your name, email address, website URL and company.
  • Careers enquiries: your name, email address, area of interest, LinkedIn or portfolio link, and your message.
  • Direct communications: anything you send us by email, phone or WhatsApp, including your phone number and the content of your messages.
  • Technical data: when you visit the site, our hosting provider automatically processes standard server log information such as IP address, browser type, the pages requested and the time of the request, to deliver and secure the website.

We do not ask for, and ask you not to send, sensitive personal data (such as health, financial account or government ID information) through our forms.

3. Why we collect it and our legal bases

  • To respond to your enquiry, understand your site and goals, and prepare a proposal. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.
  • To deliver services you engage us for, including communicating with you and your team. Legal basis: performance of a contract.
  • To operate, maintain and secure the website, including preventing spam and abuse. Legal basis: our legitimate interest in running a secure website.
  • To meet legal, tax and accounting obligations. Legal basis: legal obligation.

We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you. We will not add you to marketing emails unless you ask us to or give your consent, and you can opt out at any time.

4. How we store and protect your data

Form submissions are delivered to our team's inbox by email, sent through our own business email account hosted by Hostinger. The website itself is hosted by Vercel. Both providers process data on our behalf under their own data processing terms, and data is encrypted in transit (HTTPS and TLS).

Access to enquiry data is limited to FluxSEO Pro team members who need it to respond to you or deliver our services. No method of storage or transmission is completely secure, but we take reasonable technical and organisational measures to protect your data.

Our service providers may store or process data in countries other than your own, including the United States and the European Union. Where UK or EU personal data is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the providers' Standard Contractual Clauses.

5. Who we share data with

We do not sell your personal data, and we do not share it with third parties for their own marketing or for cross-context behavioural advertising.

We share personal data only with:

  • Service providers that help us run the website and our business, such as Vercel (website hosting), Hostinger (business email, including form delivery) and Supabase (sign-in for our internal login area), acting on our instructions.
  • Messaging platforms you choose to contact us through, such as WhatsApp (operated by Meta), under their own privacy policies.
  • Professional advisers such as accountants and lawyers, where necessary.
  • Authorities or other parties where required by law, or to protect our rights, users or the public.
  • A buyer or successor if our business is reorganised, merged or sold, subject to this policy.

6. Cookies and analytics

This website does not currently use analytics, advertising or tracking cookies.

The only cookies set are strictly necessary authentication cookies, used when an authorised team member signs in to our internal login area. They are not set for ordinary visitors and are not used to track you.

If we introduce analytics or other non-essential cookies in future, we will update this policy and, where required by law (for example for UK and EU visitors), ask for your consent before setting them.

7. How long we keep your data

We keep enquiry data for up to 24 months after our last contact with you, so we can follow up on a proposal or answer later questions, unless you ask us to delete it sooner.

If you send a careers enquiry, we keep it for up to 24 months so we can contact you if a suitable role opens, unless you ask us to delete it sooner.

If you become a client, we keep project and contract records for the duration of the engagement and for as long afterwards as needed to meet legal, tax and accounting requirements. Data we no longer need is deleted or anonymised.

8. Your rights (UK and EU visitors)

If you are in the United Kingdom or the European Economic Area, you have the right to:

  • Access the personal data we hold about you and receive a copy.
  • Have inaccurate data corrected.
  • Have your data deleted (the "right to be forgotten"), where we have no overriding legal reason to keep it.
  • Restrict or object to our processing, including processing based on legitimate interests.
  • Receive your data in a portable format.
  • Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, including a request to delete your data, contact us using the details in the Contact us section below. We will respond within one month, and may need to verify your identity first. You also have the right to complain to a data protection authority: the Information Commissioner's Office (ICO) in the UK, or the supervisory authority in your EU country.

9. Your rights (California residents)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the "CCPA") gives you rights over your personal information. We honour these rights for California residents whether or not the CCPA's business thresholds apply to us.

In the past 12 months we have collected the following categories of personal information, from you directly and from your use of the website, for the purposes described in section 3:

  • Identifiers: name, email address, phone number, IP address.
  • Professional or commercial information: company name, website, service interest and enquiry details, and for careers enquiries, your area of interest and professional profile link.
  • Internet or network activity: server log data such as pages requested and browser type.

We have not sold or shared personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information. We do not knowingly sell or share the personal information of consumers under 16.

  • Right to know what personal information we have collected, used and disclosed about you.
  • Right to delete personal information we collected from you, subject to legal exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of sale or sharing. Because we do not sell or share personal information, there is nothing to opt out of, but you may still contact us.
  • Right not to be discriminated against for exercising your rights.

To make a request, contact us using the details in the Contact us section below. We will verify your request by matching the information you provide with the information we hold, and respond within 45 days. You may use an authorised agent, who will need your written permission.

10. Children

This website and our services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time, for example if we add analytics or change service providers. The "last updated" date at the top of this page shows when it last changed. Significant changes will be highlighted on this page.

12. Contact us

Questions, requests or complaints about this policy or your personal data can be sent to privacy@fluxseopro.com. We aim to respond to all privacy requests promptly and within the timeframes required by law.