Privacy Policy

This Privacy Policy applies to the website seowithahmad.com and all services offered by Ahmad Raza (operating as "SEO with Ahmad"), including SEO consulting, web development, GHL automation, penetration testing, and related freelance services.

By using this website or engaging our services, you agree to the collection and use of information as described in this policy. If you disagree with any part of this policy, please do not use the website or our services.

The data controller responsible for your personal data is:

Information you provide directly

• Name and email address when you fill out a contact form or book a consultation
• Company name, website URL, and project details you share when enquiring about services
• Payment information processed through third-party platforms (Fiverr, Upwork, Stripe) — we do not store card details
• Messages, files, and project briefs shared during client engagements

Information collected automatically

• IP address, browser type, operating system, and referring URLs via server logs
• Pages visited, time spent on the site, and click behaviour via Google Analytics
• Device type and screen resolution for optimising site performance
• Cookies and similar tracking technologies (see Section 7)

Information from third-party platforms

• Profile information and messages when you contact us through Fiverr, Upwork, LinkedIn, or similar platforms
• These platforms have their own privacy policies which govern how they handle your data

We use the information we collect only for the following purposes:

• To respond to enquiries and provide the services you have requested
• To communicate about your project — status updates, questions, and deliverables
• To send invoices and process payments through third-party processors
• To improve the website and understand how visitors use it (analytics)
• To comply with legal obligations, including record-keeping requirements
• To protect against fraud, spam, and abuse of our services

We process your personal data under the following legal bases:

• Contract performance — processing is necessary to deliver the services you have engaged us for
• Legitimate interests — improving our website, preventing fraud, and maintaining business records
• Consent — where you have explicitly agreed (e.g. subscribing to updates). You may withdraw consent at any time
• Legal obligation — where we are required to process data by applicable law

We only share your data where strictly necessary:

Service providers we work with

• Google Analytics — anonymous website usage statistics (Google LLC, USA)
• Google Workspace — email and file storage for project communication
• Calendly — booking free consultation calls
• Stripe / PayPal / Wise — payment processing (we see payment confirmation, not full card data)
• Fiverr / Upwork — if you contact or hire us through these platforms, their terms apply
• Cloudflare — CDN and security protection for this website

Other circumstances

• We may disclose data to comply with a court order, legal obligation, or government request
• We may share aggregated, anonymised statistics that cannot identify you

All third-party processors are required to handle your data securely and only for the stated purpose.

This website uses cookies — small text files stored on your device — to improve functionality and understand usage.

Cookies we use

• Strictly necessary cookies — required for the website to function (session handling, security). These cannot be disabled
• Analytics cookies — Google Analytics tracks page views, session duration, and general behaviour in anonymised form. You can opt out via Google's opt-out tool
• Preference cookies — store your theme preference (light/dark mode) locally in your browser

You can control cookies through your browser settings. Disabling cookies may affect website functionality. We do not use advertising or tracking cookies.

We retain your personal data only for as long as necessary:

• Contact enquiries — up to 2 years from last contact, then permanently deleted
• Active client project data — for the duration of the project plus 3 years for business record-keeping
• Financial records — up to 7 years to comply with tax and accounting obligations
• Analytics data — 14 months (Google Analytics default retention)
• Email correspondence — up to 5 years from project completion

When data is no longer required, it is securely deleted or anonymised.

Depending on your location, you may have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data ("right to be forgotten"), subject to legal obligations
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing the request.

We take security seriously — it is one of our core services. We implement appropriate technical and organisational measures to protect your data:

• HTTPS encryption on all pages via SSL/TLS certificate
• Cloudflare protection against DDoS attacks and malicious traffic
• Access to client data restricted to Ahmad Raza only — no third-party subcontractors have access without your knowledge
• Strong password policies and two-factor authentication on all service accounts
• Regular security audits of website infrastructure

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at [email protected].

Our services are directed at businesses and adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that a minor has submitted personal data to us, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of the website after changes are posted constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy, want to exercise your rights, or have a concern about how we handle your data, please get in touch:

We are committed to resolving any concerns you have about our handling of your data.