Privacy Policy

At SearchBoost Digital, we are committed to protecting your privacy and handling your personal information with transparency, integrity, and in full compliance with applicable data protection laws. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your personal data.

1. Introduction and Scope

This Privacy Policy applies to all personal information collected by SearchBoost Digital through our website, email communications, service delivery, client portals, analytics platforms, and any other interactions with our company. By using our services or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy.

SearchBoost Digital operates as a data controller for personal information collected directly from clients and website visitors. When we process personal data on behalf of clients as part of our SEO and digital marketing services, we act as a data processor and follow the instructions and data processing agreements established with each client.

This policy is designed to comply with major data protection regulations including:

• General Data Protection Regulation (GDPR) — European Union
• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
• Virginia Consumer Data Protection Act (VCDPA)
• Other applicable state, federal, and international privacy laws

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us when you:

• Submit contact forms or inquiries: Name, email address, phone number, company name, website URL, and message content
• Enter into service agreements: Business contact information, billing addresses, tax identification numbers, payment information, and authorized representative details
• Communicate with us: Email correspondence, phone conversations, video conference recordings (with notice), and support tickets
• Create client portal accounts: Login credentials, profile information, and communication preferences
• Participate in surveys or feedback: Opinions, ratings, and qualitative feedback about our services

2.2 Information Collected Automatically

When you visit our website or interact with our digital properties, we automatically collect certain technical information:

• Device information: IP address, browser type and version, device type, operating system, screen resolution
• Usage data: Pages visited, time spent on pages, click patterns, scroll depth, referring URLs, exit pages
• Location data: Approximate geographic location based on IP address (city, region, country)
• Cookies and tracking technologies: Session IDs, analytics identifiers, preference settings (see Section 8 for details)

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources including:

• Analytics platforms: Google Analytics, Google Search Console, and similar tools provide aggregated and anonymized website performance data
• CRM and business tools: Customer relationship management systems, project management platforms, and communication tools
• Public sources: Publicly available business information, professional networking profiles, and industry directories
• Client-provided access: When clients grant us access to their analytics accounts, advertising platforms, or website backends for service delivery

2.4 Sensitive Personal Information

SearchBoost Digital does not intentionally collect or process sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or financial account numbers. If you inadvertently provide such information, please contact us immediately for deletion.

3. How We Use Your Information

3.1 Service Delivery and Performance

We use your personal information to deliver the SEO and digital marketing services you have contracted:

• Conducting SEO audits, keyword research, and competitive analysis
• Implementing technical optimizations and on-page improvements
• Creating and publishing SEO-optimized content
• Building backlinks and executing digital PR campaigns
• Managing Google Business Profile and local SEO initiatives
• Monitoring search rankings, traffic, and performance metrics
• Providing reports, analytics dashboards, and strategic recommendations

3.2 Communication and Client Support

We use your contact information to:

• Respond to inquiries, questions, and support requests
• Provide project updates, status reports, and performance insights
• Schedule meetings, calls, and strategy sessions
• Send important service notifications and account updates
• Deliver invoices, billing statements, and payment confirmations

3.3 Business Operations

We process personal information for legitimate business purposes including:

• Processing payments and managing billing
• Maintaining client records and service histories
• Analyzing business performance and service effectiveness
• Conducting internal audits and quality assurance
• Training staff and improving service delivery methodologies
• Managing vendor relationships and subcontractor arrangements

3.4 Marketing and Business Development

With your consent or where permitted by law, we may use your information for marketing purposes:

• Sending newsletters, industry insights, and educational content
• Promoting new services, features, or special offers
• Creating anonymized case studies and success stories (with client approval)
• Conducting market research and customer satisfaction surveys

You can opt out of marketing communications at any time using the unsubscribe link in emails or by contacting us directly.

3.5 Legal Compliance and Protection

We may process personal information when necessary to:

• Comply with legal obligations, court orders, or regulatory requirements
• Enforce our Terms of Service and other agreements
• Protect our rights, property, and safety, or those of our clients and partners
• Detect, prevent, and address fraud, security issues, or technical problems
• Respond to lawful requests from public authorities

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data based on the following legal grounds:

Processing Purpose	Legal Basis
Service delivery and contract performance	Contractual necessity
Responding to inquiries and support requests	Legitimate business interests
Marketing communications	Consent (opt-in) or legitimate interests (existing clients)
Analytics and website improvement	Legitimate interests
Legal compliance and protection	Legal obligation or legitimate interests
Payment processing	Contractual necessity

5. How We Share Your Information

5.1 Service Providers and Subprocessors

We may share personal information with trusted third-party service providers who assist us in delivering our services:

• Cloud hosting providers: For website hosting, data storage, and infrastructure
• Analytics platforms: Google Analytics, SEO tools, and performance monitoring services
• Communication tools: Email service providers, CRM systems, and project management platforms
• Payment processors: Secure payment gateways for billing and invoicing
• Content creation partners: Freelance writers, designers, and specialized contractors (under confidentiality agreements)

All service providers are contractually obligated to protect your data, use it only for specified purposes, and comply with applicable data protection laws.

5.2 Legal and Regulatory Disclosure

We may disclose personal information when required by law or in response to:

• Valid legal process such as subpoenas, court orders, or search warrants
• Requests from law enforcement or government agencies
• Emergency situations involving threats to safety or security
• Protection of our legal rights or property

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, personal information may be transferred to the acquiring entity or successor organization. We will notify affected users of any such transfer and provide information about choices regarding their data.

5.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. This includes industry benchmarks, market trends, and statistical insights derived from our work across multiple clients.

5.5 With Your Consent

We may share personal information for purposes not described in this policy with your explicit consent, such as featuring your business in a case study or testimonial.

6. Data Retention

SearchBoost Digital retains personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

6.1 Retention Periods

• Active client data: Retained for the duration of the service relationship and for a reasonable period thereafter to address questions or disputes
• Financial records: Retained for 7 years in compliance with tax and accounting regulations
• Marketing contacts: Retained until you unsubscribe or request deletion
• Website analytics: Typically retained for 26 months (default Google Analytics setting) or as configured
• Contractual documents: Retained for the duration of the contract plus applicable statute of limitations period

6.2 Deletion and Anonymization

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule and applicable legal requirements. Backups containing personal data are retained for disaster recovery purposes and are securely deleted according to backup rotation policies.

7. Data Security

SearchBoost Digital implements comprehensive technical, administrative, and physical security measures to protect personal information from unauthorized access, disclosure, alteration, and destruction.

7.1 Technical Safeguards

• Encryption: SSL/TLS encryption for data in transit; AES-256 encryption for sensitive data at rest
• Access controls: Role-based permissions, multi-factor authentication, and least-privilege access principles
• Network security: Firewalls, intrusion detection systems, and regular security monitoring
• Secure development: Code reviews, vulnerability scanning, and secure coding practices
• Regular updates: Timely security patches and software updates across all systems

7.2 Administrative Safeguards

• Employee training on data protection and privacy best practices
• Confidentiality agreements with all staff and contractors
• Regular security audits and risk assessments
• Incident response plan for data breaches
• Vendor security assessments and due diligence

7.3 Physical Safeguards

• Secure facilities with controlled access for physical infrastructure
• Secure disposal of physical documents containing personal information
• Encrypted devices and secure remote work protocols

7.4 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, SearchBoost Digital will notify affected individuals and relevant authorities in accordance with applicable laws, typically within 72 hours of discovering the breach. Notifications will include information about the nature of the breach, data affected, and steps being taken to address the incident.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, analyze traffic, and improve user experience.

8.2 Types of Cookies We Use

• Essential cookies: Necessary for basic website functionality, security, and session management. These cannot be disabled.
• Analytics cookies: Help us understand how visitors use our website through tools like Google Analytics. These collect anonymized data about page views, traffic sources, and user behavior.
• Preference cookies: Remember your settings such as language preference or region selection.
• Marketing cookies: Track your browsing activity to deliver relevant advertisements and measure campaign effectiveness (used only with consent).

8.3 Third-Party Cookies

Our website may contain cookies from third-party services:

• Google Analytics — website analytics and performance tracking
• Google Tag Manager — tag and script management
• Social media plugins — if you interact with embedded social media content

8.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

• View and delete existing cookies
• Block all cookies or specific types of cookies
• Receive notifications when cookies are set

Please note that blocking essential cookies may impact website functionality. Instructions for cookie management can be found in your browser's help section.

8.5 Do Not Track Signals

Our website does not currently respond to Do Not Track (DNT) browser signals due to lack of industry-wide standards. We respect your privacy choices and provide cookie management options as described above.

9. Your Privacy Rights

9.1 Rights Under GDPR (EEA, UK, Switzerland)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): Request deletion of your personal data under certain circumstances
• Right to restriction of processing: Request that we limit how we use your data
• Right to data portability: Request a copy of your data in a structured, commonly used format
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Withdraw consent for processing based on consent at any time
• Right to lodge a complaint: File a complaint with your local data protection authority

9.2 Rights Under CCPA/CPRA (California Residents)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know: Request disclosure of personal information collected, used, shared, or sold in the past 12 months
• Right to delete: Request deletion of personal information we have collected
• Right to opt-out: Opt out of the "sale" or "sharing" of personal information (Note: SearchBoost Digital does not sell personal information)
• Right to correct: Request correction of inaccurate personal information
• Right to limit use of sensitive personal information: Limit our use of sensitive personal information (if applicable)
• Right to non-discrimination: Exercise privacy rights without discriminatory treatment

9.3 How to Exercise Your Rights

To exercise any of these rights, please contact us using the information in Section 14. We will respond to verified requests within the timeframes required by law (typically 30 days for GDPR, 45 days for CCPA). We may request additional information to verify your identity before processing your request.

10. International Data Transfers

SearchBoost Digital is based in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and central database are located.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Appropriate safeguards as required by GDPR Article 46

We ensure that all international transfers comply with applicable data protection laws and that your personal information receives an adequate level of protection.

11. Children's Privacy

SearchBoost Digital's services are designed for businesses and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take immediate steps to delete such information from our systems.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately using the contact details in Section 14.

12. Third-Party Websites and Services

Our website may contain links to third-party websites, services, or resources that are not operated by SearchBoost Digital. This Privacy Policy does not apply to third-party websites or services.

We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. Clicking on third-party links or enabling third-party connections is at your own risk.

13. Changes to This Privacy Policy

SearchBoost Digital reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other operational needs. We will notify you of material changes by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date
• Sending email notification to active clients for significant changes
• Providing prominent notice on our website homepage for substantial revisions

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after changes to this Privacy Policy constitutes acceptance of the updated terms.

14. Contact Information for Privacy Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: