Privacy Policy

1. Who we are

RED DOT SEO, trading as reddotseo (SASU, SIREN 918 472 309), registered office 12 Rue Pierre Loti, 34110 Frontignan, France, is the data controller for the personal data described in this policy. For any privacy question or request, write to support@reddotseo.com.

2. What personal data we collect

We collect only what we need to answer you, quote you, or deliver a service you've bought:

• Contact-form and free-teardown submissions — name, email address, phone number (where you choose to give it), company name, website URL, and the message or goals you tell us about.
• Checkout and order data — name, email address, phone number, company name, billing address (country, street address, postcode, city), an optional EU VAT number, the packages and billing cycle you've ordered, your preferred start date, and any notes you add for your consultant.
• Cart contents — held only in your browser's local storage (rds.cart.v1), never sent to or stored on our servers until you complete checkout.
• Usage data, only if you accept the "Analytics" cookie category — pages viewed, approximate location (country/region level), device and browser type, and how you arrived at the site, collected through Google Analytics 4. See our Cookie Policy for the full detail.

We do not collect payment card data on this site: the checkout's payment step is a clearly labelled demonstration that transmits nothing (see our Terms of Service, §4). We do not run a newsletter, do not use advertising or retargeting pixels, and do not build profiles or make automated decisions about you.

3. Why we process your data, and on what legal basis

Purpose	What we use	Legal basis
Responding to your contact-form or free-teardown request	Name, email, phone, company, message	Steps taken at your request before entering into a contract (Art. 6.1.b GDPR)
Processing your order and running the engagement	Name, email, phone, billing address, order details	Performance of a contract (Art. 6.1.b GDPR)
Invoicing and accounting records	Name, company, billing address, VAT number, order value	Legal obligation — French commercial and tax law (Art. 6.1.c GDPR)
Measuring how the site is used, to improve it	Usage data via GA4	Your consent (Art. 6.1.a GDPR) — only after you accept the "Analytics" cookie category

4. Who receives your data

Your data is seen by the reddotseo team working on your enquiry or order, and by two categories of processor acting on our instructions:

• OVHcloud SAS (2 rue Kellermann, 59100 Roubaix, France) — our hosting provider, which stores the site's files and any server-side submissions.
• Google Ireland Limited — operator of Google Analytics 4, and only once you've accepted the "Analytics" cookie category.

We do not sell your data, rent it, or share it with advertising networks or data brokers.

5. Transfers outside the European Union

Google Analytics 4 may process data on infrastructure located outside the EU, including in the United States. Where that happens, Google relies on the European Commission's Standard Contractual Clauses (or an equivalent adequacy mechanism) to protect your data. No other processor we use transfers data outside the EU.

6. How long we keep your data

• Enquiries that don't turn into a client relationship — kept for up to 3 years from your last contact with us, then deleted.
• Client and order data — kept for the duration of our working relationship, then archived as French commercial and tax law requires (up to 10 years for accounting records, under Article L123-22 of the French Commercial Code).
• Analytics data (GA4) — kept for up to 14 months, Google Analytics 4's standard retention setting.
• Cart contents — stay in your browser only, until you clear them or complete checkout; we never receive or store them on our side.

7. Your rights

Under Articles 15 to 22 of the GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15).
• Rectify it if it's inaccurate or incomplete (Art. 16).
• Erasure — ask us to delete it, subject to what we're legally required to keep, such as accounting records (Art. 17).
• Restrict how we process it in certain circumstances (Art. 18).
• Portability — receive the data you gave us in a structured, machine-readable format, or have it sent directly to another controller where technically feasible (Art. 20).
• Object to processing based on legitimate interest or carried out for direct marketing (Art. 21) — note that we don't currently run direct marketing on the data we collect.
• Withdraw your consent at any time for anything based on consent, such as analytics cookies, without affecting the lawfulness of processing carried out before you withdrew it.
• Confirmation that no automated decision-making or profiling (Art. 22) is carried out on your data — none is.

8. How to exercise your rights

Email support@reddotseo.com with your request and enough detail for us to identify you. We respond within one month, as GDPR requires; if a request is complex, we may extend that by a further two months and tell you why.

9. Complaint to the CNIL

If you believe your data-protection rights haven't been respected, you can lodge a complaint with France's data protection authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Phone: +33 1 53 73 22 22 · Website: www.cnil.fr

10. Changes to this policy

We may update this policy as the site or the law changes. The "Effective" date at the top always shows the version currently in force.