1. Who we are and what this policy covers
White SEO Labs (“White SEO Labs,” “we,” “us”) is a digital marketing agency serving businesses in the United States. This Privacy Policy explains what information we collect when you visit this website, submit a form, call or text us, or work with us as a client; how we use and share it; how long we keep it; and the choices and rights you have.
This policy applies to this website and to the forms, phone numbers, email addresses and booking links published on it. It does not cover the websites of our clients or of third parties we link to, which have their own privacy policies.
2. Information we collect
Information you give us through forms
When you request an audit, book a consultation, send a message or start a project inquiry, we ask for some or all of the following: your name, business name, website address, email address, phone number, city and state, industry, the services you are interested in, your approximate budget, a description of your challenges or goals, your preferred way to be contacted, and your timeline. Some fields are optional; the form indicates which.
If a multi-step form is left unfinished, the fields you have already completed may be saved so that we can follow up or so that you can resume. These partial submissions are treated the same way as complete ones under this policy.
Consent records
When you check a consent box or otherwise agree to be contacted, we record the exact consent text you saw, the time of consent, and the page it was given on. We keep this so that we can show that you agreed to be contacted and on what terms.
Information collected automatically
- A one-way hash of your IP address (we do not store the raw IP address with your submission) and your browser’s user-agent string, used for security, rate limiting and fraud prevention.
- Campaign and referral data attached to the visit: UTM parameters (source, medium, campaign, term, content), Google click identifiers, the referring website, the first page you landed on and the page the form was submitted from.
- A session identifier stored in your browser so that a partially completed form can be matched to its completion.
- Usage data gathered by analytics tools described in the Cookies and analytics section, such as pages viewed, approximate location derived from IP address, device type and interactions.
Information from calls, texts and email
If you call, text or email us, we keep the content of those communications, the number or address they came from, and notes our team makes about the conversation. Calls to tracking numbers may be recorded where permitted by law; where recording is in use, you will be told at the start of the call.
Information from clients
When you become a client, we also collect what is needed to do the work: access to your website, hosting, Google Business Profile, Search Console, analytics and advertising accounts; billing details; and information about your business, services and customers that you choose to share. Client engagements are governed by the engagement agreement in addition to this policy.
3. How we use information
- To respond to your inquiry, run the audit you requested, prepare proposals and schedule calls.
- To follow up about your inquiry by email, phone call or text message, where you have agreed to that.
- To deliver services to clients, report on results and invoice for the work.
- To understand how the website is used, measure which pages and campaigns lead to inquiries, and improve the site.
- To prevent spam, abuse and fraud, and to protect the security of the site and our systems.
- To comply with legal obligations, enforce our terms and establish or defend legal claims.
4. Lawful basis and consent
We collect and use personal information because you asked us to do something (respond to an inquiry, run an audit, provide a service), because you consented (marketing calls, texts and emails, non-essential cookies), because we have a legitimate business interest that does not override your rights (site security, measuring campaign performance, improving the site), or because the law requires it.
Where we rely on your consent, you can withdraw it at any time using the methods described in this policy. Withdrawing consent does not affect processing that happened before you withdrew it.
5. Phone calls and text messages
If you provide a phone number and agree to be contacted, we may call or text you about your inquiry, your audit results, scheduling, and related follow-up. Consent to receive calls or texts is not a condition of purchasing any service. Message frequency varies by conversation. Message and data rates may apply according to your carrier plan.
To stop text messages, reply STOP to any message. You will receive one confirmation message and no further texts unless you opt in again. Reply HELP for assistance, or contact us using the details at the end of this policy. To stop phone calls, tell the caller or contact us; we will add your number to our internal do-not-call list.
Mobile opt-in data and consent are not shared with third parties for their own marketing purposes. Phone numbers collected for text messaging are used only for the conversation you consented to and are shared only with the service providers that deliver the messages on our behalf.
8. How long we keep information
We keep inquiry and lead records, including consent records, for as long as we have an active conversation or business relationship with you and for a reasonable period afterward so that we can respond to follow-up questions, honor opt-outs and demonstrate consent. Partial form submissions that are never completed are deleted or anonymized on a shorter schedule.
Client records are kept for the duration of the engagement and for as long as needed afterward to meet tax, accounting and legal obligations. Analytics data is retained according to the settings we configure in Google Analytics. You can ask us to delete your information at any time, subject to the exceptions described under Your privacy rights.
9. Your privacy rights
Depending on where you live, you may have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) or under the privacy laws of other US states, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and others. These rights may include:
- Right to know and access: to confirm whether we process your personal information and to receive a copy of it.
- Right to correct: to have inaccurate personal information corrected.
- Right to delete: to have your personal information deleted, subject to legal exceptions such as completing a transaction, security, or compliance with law.
- Right to data portability: to receive your information in a portable, readily usable format.
- Right to opt out: of the sale or sharing of personal information, of targeted advertising, and of certain profiling. We do not sell personal information or share it for cross-context behavioral advertising.
- Right to limit use of sensitive personal information: we do not collect sensitive personal information through this website.
- Right to non-discrimination: we will not deny services, charge different prices or provide a different level of service because you exercised your rights.
To exercise any of these rights, contact us using the details at the end of this policy and tell us which right you are exercising. We will need to verify your identity, usually by matching the details of your request to the information we hold, and we may ask for additional information where necessary. You may use an authorized agent to make a request on your behalf; we may ask for proof of the agent’s authority and may verify your identity directly. We respond to verifiable requests within 45 days, extendable once by a further 45 days where reasonably necessary, and we will tell you if an extension is needed. If we decline a request, we will explain why and how to appeal.
California residents: we have not sold or shared personal information in the preceding twelve months and do not knowingly collect personal information from consumers under sixteen. The categories of personal information we collect, the purposes and the recipients are described in the sections above.
10. Children
This website and our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 13 (or under 16 where state law sets a higher threshold). If you believe a child has provided us with personal information, contact us and we will delete it.
11. Security
We use administrative, technical and physical safeguards appropriate to the sensitivity of the information we hold: encrypted connections (HTTPS), access controls and row-level database security, rate limiting on forms, hashed rather than raw IP addresses, and limited access for team members who need it to do their work. No system is perfectly secure, and we cannot guarantee that unauthorized access will never occur. If a breach affecting your personal information happens, we will notify you and the relevant authorities as required by law.
12. Third-party links and embedded content
This website links to and may embed content from third parties, including Google Maps, scheduling tools and social networks. Those services may collect information about you when you interact with the embedded content, under their own privacy policies. We encourage you to read them.
13. Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last revised. If we make a material change in how we use personal information already collected, we will notify you by email where we have an address for you, or by a notice on this website, before the change takes effect.
14. Contact
Questions, requests or complaints about this policy or about your personal information can be sent to dm@whiteseolabs.com. If you are not satisfied with our response, you may have the right to complain to your state attorney general or the California Privacy Protection Agency.