Small print
Privacy policy
The short version: this website sets no cookies and runs no analytics or advertising trackers. I collect what you choose to send me, use it to reply and do the work, and delete it when it is no longer needed.
Last updated: 11 November 2026
Who is responsible for your data
Agent SEO HQ is a trading name of Flavr Web Dev Ltd, a company registered in England and Wales (company number 14994358). Our registered office is 161 Cicero Crescent, Milton Keynes, MK11 4DR. Flavr Web Dev Ltd is the data controller for the personal data described here.
For anything about your data, email support@flavrapps.com. We are a small company and have not appointed a data protection officer; your message goes to Reece Chown, the director.
This policy covers agentseohq.com and the enquiries and services that start here. "We" means Flavr Web Dev Ltd.
What we collect, why, and for how long
When you use the contact form or email us
- What: your name, email address, website address, your description of what you sell and who your customers are, and anything else you write.
- Why: to do the free check you asked for, reply to you and, if you want one, prepare a quote. We also send one automatic email to confirm that your request arrived.
- Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in answering enquiries.
- How long: the copy stored by the website is deleted automatically 12 months after you send it. The copy in our email inbox is deleted within 24 months of our last contact with you. You can ask us to delete both sooner.
If you become a client
- What: contact details, the quote and agreement, invoices, payment records, our correspondence, and any access details you give us for your website.
- Why: to carry out the work, get paid and keep the records the law requires.
- Lawful basis: performing our contract with you, and our legal obligations for tax and company records.
- How long: financial records are kept for six years after the end of the financial year they relate to. Access details for your website are deleted when the work is finished.
When you use the free checker
- What: the web address you enter, the time, a summary of the result, and a scrambled (hashed) form of your IP address. The checker fetches up to four public files from the address you enter. It does not keep the pages it reads.
- Why: to run the check, to stop the tool being abused, and to see in total how much it is used.
- Lawful basis: our legitimate interest in providing the tool safely.
- How long: 30 days.
Protecting the forms from spam and abuse
- Rate limits. When a form is submitted we store a hashed form of the IP address and, for the contact form, of the email address, with the time. This lets us limit how often one person can submit. The hashes are kept for 30 days and cannot be turned back into your IP address or email address by reading our database.
- Cloudflare Turnstile. Our forms use Turnstile, a service from Cloudflare, to tell people from automated spam. It loads only when you start using a form. Turnstile looks at signals from your browser and your IP address, and Cloudflare handles that data under its own privacy policy. We receive only a pass or fail result.
- Lawful basis: our legitimate interest in keeping the website and our email sending secure.
Server logs
- What: like almost every website, our server records each request: IP address, date and time, the page requested, the referring page if your browser sends one, and your browser's description of itself.
- Why: security, fault-finding and counting visits in total. We do not use logs to build profiles of individual visitors.
- Lawful basis: our legitimate interest in running a secure, working website.
- How long: 14 days. Addresses that attack the server can be blocked for up to a week, and the block is also applied at Cloudflare.
Cookies and tracking
This website sets no cookies of its own and uses no analytics scripts, advertising pixels or social media trackers. There is nothing to consent to, which is why you did not see a cookie banner.
Our network provider, Cloudflare, can set a strictly necessary security cookie if it needs to check that a request is not part of an attack. It is not used to track you across sites.
Who else handles your data
We do not sell personal data or share it for anyone else's marketing. We use a small number of suppliers to run the website and the service. Each one processes data on our instructions:
| Supplier | What it does for us | Where |
|---|---|---|
| Hetzner Online GmbH | Hosts the website and its database of enquiries | Germany |
| Cloudflare, Inc. | Delivers the website, protects it from attacks, provides Turnstile, and stores encrypted backups | Worldwide network; company based in the USA |
| Amazon Web Services (Amazon SES) | Sends our emails, including the confirmation you receive after using the contact form | London, UK |
| Google (Google Workspace) | Provides the mailbox where enquiries arrive | Worldwide; company based in Ireland and the USA |
| Anthropic and OpenAI | Provide the AI tools we use to help read enquiries, carry out checks and draft reports | USA |
About that last row: this is an Agent SEO service, and AI agents do a good share of the legwork. That means the details of your enquiry may be processed by those AI providers while we work on it. When we ask assistants questions to see whether your business is recommended, the questions are the kind a customer would ask and do not contain your name or email address.
Backups of the server are encrypted before they leave it and are kept for three days.
We may also disclose data if the law requires it, or to professional advisers such as accountants where they need it to do their job.
Transfers outside the UK
Some of these suppliers process data outside the United Kingdom. Where they do, we rely on the UK's adequacy regulations (which cover the European Economic Area, and US companies certified under the UK extension to the EU-US Data Privacy Framework) or on the standard contractual clauses approved for use in the UK, which are part of the suppliers' terms.
Your rights
Under UK data protection law you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct anything that is wrong;
- delete your data;
- restrict how we use it, or stop using it where we rely on legitimate interests;
- give you your data in a portable format, where that right applies.
Email support@flavrapps.com and we will reply within one month. It is free. We may need to check that you are who you say you are before acting.
We do not send marketing emails, so there is no list to unsubscribe from. We do not make decisions about you by automated means that have legal or similarly significant effects.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK regulator: ico.org.uk/make-a-complaint or 0303 123 1113.
Security
The website is served over HTTPS only. Enquiries are stored on a server that only we can sign in to, in a database that other websites on the same server cannot read. Backups are encrypted. No system is perfectly secure, but we keep what we hold to a minimum so there is less to lose.
Children
This is a service for businesses. It is not aimed at children, and we do not knowingly collect their data.
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top. For a significant change affecting an enquiry or contract already under way, we will email you.