Skip to content
SERPDesk

Legal

Privacy Policy

What personal data we collect through this website, why we collect it, who we share it with and the rights you have.

Last updated 15 October 2026

01Who we are

SERP Desk ("SERP Desk", "we", "us") runs serpdesk.com and is the data controller for the personal data described in this policy.

For any question about this policy or your data, email contact@serpdesk.com.

02What we collect

We collect personal data in three ways:

  • Through our contact form: your name, business name, email address and the message you write.
  • When you email us: your email address, name and anything you include in your message or attachments.
  • Automatically when you visit: technical data such as your IP address, browser type, device, the pages you request and the time of each request. Our hosting provider records this in server logs, and we use your IP address briefly to block spam submissions.

03How we use it, and our legal basis

Under UK and EU data protection law (the UK GDPR and EU GDPR), we must have a lawful basis for each use of your data:

  • To reply to your enquiry and prepare the free growth audit or proposal you ask for: our legitimate interests in responding to people who contact us, and taking steps at your request before entering into a contract.
  • To deliver and report on our services if you become a client: performance of our contract with you.
  • To keep this website secure and stop spam and abuse: our legitimate interests in protecting our site and inbox.
  • To measure how the site is used, through Google Analytics: your consent, which you can withdraw at any time.
  • To meet legal, tax and accounting obligations: legal obligation.

04Cookies and similar technologies

This website does not need any cookies to work. We use Google Analytics to count visits and understand which pages are useful, and it uses cookies to do this.

Google Analytics only sets cookies after you accept them in the cookie notice, and you can change your choice at any time from the Cookie settings link at the bottom of every page. You can also block or delete cookies in your browser settings, and opt out of Google Analytics at tools.google.com/dlpage/gaoptout.

05Who we share it with

We never sell your personal data or share it for other companies' marketing. We share it only with the service providers we need to run this site and our business, under contracts that require them to protect it:

  • Hostinger, which hosts this website and our email.
  • Google, if you have accepted analytics cookies.
  • Professional advisers such as accountants and lawyers, where needed.
  • Authorities, if we are required to by law.

06International transfers

Some of our providers process data outside the UK and European Economic Area, including in the United States. Where this happens, we rely on adequacy decisions or standard contractual clauses approved by the UK and EU authorities, so your data keeps an equivalent level of protection.

07How long we keep it

  • Enquiries that do not lead to work: deleted within 24 months of our last contact.
  • Client records and correspondence: kept for the length of our engagement and then for up to six years, as required for legal, tax and accounting purposes.
  • Server logs: kept by our hosting provider for a limited period for security, then deleted.

08How we protect it

The site is served over an encrypted (HTTPS) connection, form submissions are checked on the server, and access to enquiries is limited to the people who need it to reply to you.

09Your rights

You have the right to ask for a copy of the personal data we hold about you, and to ask us to correct, delete or restrict it. You can object to our use of it, ask us to transfer it to you or another organisation, and withdraw consent at any time where we rely on consent.

To use any of these rights, email contact@serpdesk.com. We will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk) in the UK, or your local data protection authority in the EU.

10Children

This website and our services are for businesses. They are not aimed at children, and we do not knowingly collect personal data from anyone under 16.

11Other websites

Our portfolio links to our clients' websites. Those sites have their own privacy policies, and we are not responsible for how they handle your data.

12Changes to this policy

We review this policy regularly. When we make changes, we update the date at the top of this page, and we will tell clients directly about any significant change.