SerpInsight collects the details you type into our contact form, the emails you send us, and standard web server logs. We don’t sell or share that data with anyone except the providers who host the site and carry our email. You can ask us to show, correct or delete it at any time.
Last updated: this policy applies from the date shown at the foot of the page. It’s written in plain English on purpose — if any part of it is unclear, email hello@serpinsightlinkinsertion.in.net and we’ll explain it properly rather than pointing you at a clause.
Who this policy covers
This policy covers serpinsightlinkinsertion.in.net and the email correspondence that follows from it. SerpInsight is a small SEO services business selling link insertions (also called niche edits) and related work. We’re the data controller for the information described below, which in plain terms means we decide what’s collected and we’re the ones accountable for it.
Enquiries and data requests are handled by email. We don’t operate a walk-in office, so there’s no postal address to write to — the email address above reaches us directly and we reply to enquiries within 24 hours.
What information do we collect?
Three categories, and that’s the whole list.
| What | Where it comes from | Why we have it |
|---|---|---|
| Name, email address, website URL, budget range, message | The contact form, or an email you send us | To answer your enquiry and quote for work |
| Correspondence: emails, attachments, target URLs, host approvals | You, during an enquiry or an active engagement | To deliver and record the work |
| Server logs: IP address, browser user agent, requested URL, timestamp, referring page | Automatically, when any browser loads a page | Security, error diagnosis, keeping the site up |
We don’t ask for payment card details on this website and we don’t store them. If you become a client, invoicing is handled separately and any card or bank details go to the payment provider, not to us.
We don’t currently run any analytics or advertising scripts on this site. If that changes — and it may, because we’d like to know which pages people actually read — we’ll name the provider in this policy before switching it on, and we’ll say what it collects.
What’s our lawful basis for holding it?
Under the UK and EU GDPR we need a lawful basis for each use, so here they are, matched to the thing they justify.
- Steps prior to a contract. When you send an enquiry asking us to quote, processing your details is what makes answering possible.
- Performance of a contract. Once you’re a client, we need your target URLs, approvals and correspondence to do the work you’ve paid for.
- Legitimate interests. Server logs, spam filtering and keeping the site secure. The interest is running a working website; the impact on you is minimal and the data is short-lived.
- Legal obligation. Invoices and financial records, which tax rules require us to keep for a set period regardless of what anyone would prefer.
- Consent. Only if you ever opt in to something optional, such as a mailing list. We don’t currently run one, and we won’t add you to anything because you asked for a quote.
How do we use your information?
To reply to you, to prepare a quote, to run and record any work you order, to send invoices, and to keep the website functioning. That’s it. We don’t build profiles, we don’t score leads against third-party datasets, and we don’t enrich your email address with data bought from anyone.
We won’t send you marketing you didn’t ask for. If you enquire and don’t buy, you may get one follow-up email, and if you don’t reply to that one you won’t hear from us again.
Who do we share it with?
Nobody, in the sense most people mean. We don’t sell data, we don’t trade it, and we don’t pass it to advertising networks or data brokers.
We do rely on infrastructure providers who necessarily handle data as part of running the service: the company that hosts this website and its server logs, and the email provider that carries our correspondence. They act on our instructions as processors under written terms, not as independent users of your data. If we later add analytics, a CRM or an invoicing platform, each one gets added to this section.
The one other case is legal: if we’re required by law or a valid court order to disclose something, we will, and we’ll tell you unless we’re prohibited from doing so.
How long do we keep it?
Enquiries that don’t become work are deleted within 12 months of the last message. Client records — correspondence, target URLs, placement records — are kept for the length of the engagement plus 24 months, because the replacement guarantee runs for 12 months and disputes surface after that. Invoices and financial records are kept for the period the relevant tax authority requires, typically six years. Server logs are kept for 30 days and then rotated out.
If you ask us to delete something earlier, we will, except where a legal obligation says otherwise. In that case we’ll tell you exactly which record we’re keeping and why.
What rights do you have over your data?
You can ask for a copy of what we hold, ask us to correct anything wrong, ask us to delete it, ask us to restrict how we use it, ask for it in a portable machine-readable format, or object to processing we’ve based on legitimate interests. You can also withdraw consent at any time where consent was the basis, without that affecting anything done before you withdrew it.
Email hello@serpinsightlinkinsertion.in.net, tell us what you want, and we’ll action it within one month. There’s no charge and no form to fill in. We may ask a question to confirm you are who you say you are, which protects you rather than us. If you’re unhappy with how we’ve handled a request, you can complain to your national data protection authority — in the UK that’s the Information Commissioner’s Office.
Do we use cookies?
Only essential ones. This site sets no advertising cookies, no tracking pixels and no third-party analytics cookies at present, which is why you aren’t being shown a consent banner asking you to accept things you don’t want. A session cookie may be set for basic site function and security, and it expires when you close your browser.
If we add analytics later, anything non-essential will be behind an explicit opt-in, off by default, and described here before it goes live.
International transfers
Our hosting and email providers may process or store data outside your own country, including in the United States. Where personal data moves out of the UK or EEA, we rely on the transfer mechanisms permitted by GDPR — an adequacy decision where one exists, or the Standard Contractual Clauses where it doesn’t. You can ask us which provider handles what and we’ll tell you.
How we protect it
The site runs over HTTPS. Access to email and hosting accounts is restricted to the people who need it and protected by two-factor authentication. We keep the software behind the site patched, and we practise the least glamorous but most effective security measure available: we don’t collect data we don’t need. There’s no customer database on this website and no stored payment details anywhere in our systems.
No system is completely secure. If a breach affects your personal data and poses a risk to you, we’ll notify you and the relevant supervisory authority within the timescales GDPR sets.
Children
This is a business-to-business service and isn’t directed at children. We don’t knowingly collect information from anyone under 16. If you believe a child has sent us data, email us and we’ll delete it.
Changes to this policy
When we change this policy we’ll update the date at the top and, for anything material — a new processor, a new category of data, a new purpose — we’ll say what changed rather than quietly swapping the text. If you’re an active client at the time, you’ll get an email about it.
Contact us about your data
Email hello@serpinsightlinkinsertion.in.net. Every data question reaches a person, and we reply within 24 hours. Our terms of service and refund policy cover the commercial side of working with us, and you can reach us about anything else through the contact page.