Privacy Policy

1. Data Controller

SEO Marketing Toolkit, Via Gatti 9, 91100 Trapani TP, Italy. Email: info@seomarketingtoolkit.com. Phone: +39 375 657 7364. P.IVA: IT-XXXXXXXXXXX. Registered in the Registro delle Imprese di Trapani.

2. Applicable Legislation

This Privacy Policy complies with: General Data Protection Regulation (GDPR, Regulation (EU) 2016/679); Codice in materia di protezione dei dati personali (D.lgs. 196/2003, as amended by D.lgs. 101/2018); Provvedimenti del Garante per la protezione dei dati personali; D.lgs. 70/2003 (E-Commerce Directive); and Codice del Consumo (D.lgs. 206/2005). Supervisory authority: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it.

3. Data Collected

Contact: Name, email, phone, company, billing address. SEO Project Data: Website URLs, analytics access, search data, competitive intelligence. Treated as strictly confidential under NDA. Payment: Stripe (PCI DSS L1). Last 4 digits, brand, amount only. Analytics: Plausible (cookieless, EU). No personal data collected.

4. Purposes and Legal Basis

Service delivery (Art. 6(1)(b) GDPR): SEO audits, optimization, reporting, invoicing. Legal obligations (Art. 6(1)(c)): Italian tax law (D.P.R. 633/1972). Legitimate interest (Art. 6(1)(f)): Service improvement, security. Consent (Art. 6(1)(a)): Marketing communications.

5. SEO Data Confidentiality

All SEO project data — analytics access, keyword research, competitor intelligence, ranking data — is: (a) restricted to assigned team members under NDA; (b) encrypted (AES-256) on EU servers; (c) never shared with other clients or third parties; (d) never used for competitive purposes; (e) deleted within 30 days of engagement end upon request; (f) platform credentials stored in encrypted vaults and revoked on termination.

6. Your Rights (GDPR)

Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17), Restriction (Art. 18), Portability (Art. 20), Object (Art. 21), Withdraw consent (Art. 7(3)), Lodge complaint with Garante. Contact: info@seomarketingtoolkit.com. Response: 30 days.

7. Retention

Client data: engagement + 10 years (Art. 2946 Codice Civile). Invoices: 10 years (Art. 2220 Codice Civile). SEO reports: deleted 30 days post-engagement. Communications: 3 years.

8. Security

TLS 1.3, AES-256, MFA, role-based access, EU backups, NDA for all staff, 72h breach notification (Art. 33 GDPR).

9. Transfers

EU/EEA primary. Stripe (USA): EU-US Data Privacy Framework. SCCs where applicable.

10. Contact

info@seomarketingtoolkit.com. Via Gatti 9, 91100 Trapani. Garante: www.garanteprivacy.it.

Last updated: March 2026.