Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to ibrahimseo.com (referred to as “IbrahimSEO,” “I,” “me,” or “my”), operated by independent SEO Specialist & Web Developer Muhammad Ibrahim, based in Swat, Khyber Pakhtunkhwa, Pakistan.

This policy explains how I collect, process, store, protect, and handle your personal information when you visit my website, fill out inquiry forms, request a free visibility audit, purchase an SEO package, or communicate with me.

My clients and site visitors reside globally, including in the United States, the United Kingdom, Canada, Germany and the European Union, Pakistan, and other countries. I strive to align data processing practices with international data protection laws, including the European Union and United Kingdom General Data Protection Regulations (EU/UK GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and Pakistani data protection principles.

2. Information I Collect

I collect personal data directly from you when you voluntarily provide it, as well as automatically when you browse my website.

A. Information You Voluntarily Provide

When you contact me, request an audit, or engage my services, you may provide:

• Contact Information: Your full name, business email address, and direct telephone or WhatsApp number.
• Business & Project Details: Website URL, target niche, business size, current search engine performance challenges, and chosen SEO service plans.
• Form Submissions: Information provided through contact forms on my website, powered securely by Formspree.
• Direct Communications: Message history sent via email or direct WhatsApp conversations initiated by clicking my business links.
• Client Credential Data: Access credentials or permissions granted for Google Search Console, Google Analytics, or website backends strictly necessary to perform contractually agreed SEO audits or web development work.

B. Automatically Collected Information

When you navigate ibrahimseo.com, certain technical details are automatically logged by server infrastructure and analytics tools:

• Technical Identifiers: Internet Protocol (IP) address, browser type and version, operating system, and language preferences.
• Usage & Interaction Data: Referral source (how you arrived at my site), pages visited, time spent on each page, clickstream data, scroll depth, and date/time stamps.
• Device Information: Device type (mobile, tablet, desktop) and screen resolution.

3. Legal Bases for Processing Data (GDPR & Global Standards)

I process your personal data under the following recognized legal grounds:

• Consent (Art. 6(1)(a) GDPR): When you voluntarily submit a contact form, request a free audit, or send me a WhatsApp message. You may withdraw consent at any time.
• Contractual Performance (Art. 6(1)(b) GDPR): When processing your data is required to perform a requested SEO audit, fulfill an active client project, or deliver web development work.
• Legitimate Interests (Art. 6(1)(f) GDPR): To maintain web application security, prevent spam and malicious activity, analyze site usage trends, and improve service delivery without overriding your fundamental privacy rights.
• Legal Compliance (Art. 6(1)(c) GDPR): To fulfill accounting, invoicing, tax, or legal record-keeping obligations under applicable local or international laws.

4. How I Use Your Information

I use the collected data strictly for professional business purposes, including:

• Delivering free 24-hour AI & Google visibility audits directly to your email or WhatsApp.
• Responding to business inquiries, service requests, and proposal discussions.
• Executing contractually agreed technical SEO, on-page SEO, link building, semantic writing, or web development services.
• Monitoring and auditing site performance, user experience, and technical infrastructure stability.
• Preventing unauthorized activity, spam submissions, and security vulnerabilities.
• Fulfilling tax, billing, and accounting requirements for freelance and agency engagements.

5. Cookies & Analytics Technologies

ibrahimseo.com uses essential and performance cookies to ensure basic site functionality and analyze aggregated visitor behavior.

A. Google Analytics 4 (GA4)

I use Google Analytics 4 to track anonymized website traffic, user interactions, and traffic channels. Google Analytics uses cookies to collect statistical data. IP anonymization is active by default. You can opt out of Google Analytics tracking by installing the official Google Analytics Opt-out Browser Add-on.

B. Managing Cookies

You can control or disable cookies through your individual browser settings (such as Chrome, Firefox, Safari, or Edge). Please note that disabling essential cookies may impact web page responsiveness or form functions.

6. Third-Party Service Providers

I rely on vetted, industry-standard third-party services to host my infrastructure, process contact forms, and communicate efficiently. These providers handle your data strictly under confidentiality agreements:

• Formspree (Form Processing): Used to handle web form submissions securely. Information submitted through forms is transmitted through Formspree servers. Review Formspree's Privacy Policy.
• Google LLC (Analytics, Search Console, Workspace): Used for website traffic analytics and communications. Review Google's Privacy Policy.
• WhatsApp / Meta Platforms, Inc. (Direct Messaging): Used for voluntary instant client messaging. Communications on WhatsApp are protected by end-to-end encryption. Review WhatsApp's Privacy Policy.
• Hostinger International Ltd. (Web Hosting & Server Infrastructure): Hosts my Next.js website files and server logs. Review Hostinger's Privacy Policy.

7. International Data Transfers

Because my services are provided remotely to international clients, personal data submitted to ibrahimseo.com may be processed, transferred, or stored in Pakistan, the United States, or European server locations where my third-party service providers maintain facilities.

When data is transferred across international borders, I ensure appropriate safeguards are maintained through encrypted transport protocols (TLS/SSL) and standard contractual provisions with infrastructure partners.

8. Your Privacy Rights by Jurisdiction

Depending on your region of residence, you hold specific statutory rights regarding your personal information:

A. EU & UK Residents (GDPR / UK GDPR)

• Right of Access: Request a copy of the personal data held about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data when no longer needed for legal or contractual purposes.
• Right to Restrict Processing: Request temporary restriction of data processing.
• Right to Data Portability: Request your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Lodge a Complaint: File a complaint with your local Data Protection Authority (such as the ICO in the UK or your national European regulator).

B. United States Residents (CCPA/CPRA & State Privacy Laws)

• Right to Know & Delete: Request details on collected personal information categories and request deletion.
• Non-Selling Commitment: I do NOT sell or share personal information for monetary or targeted cross-context advertising considerations.
• Right to Non-Discrimination: I will never discriminate against you for exercising your privacy rights.

C. Canadian Residents (PIPEDA)

Canadian residents have the right to access personal information, challenge its accuracy, and withdraw consent for data processing subject to legal exceptions.

9. Data Security & Retention

Retention Periods: Form inquiries and audit request data are retained for up to 24 months to maintain business communication context, after which they are deleted or anonymized unless an active client contract is formed. Contractual and billing records are kept for 5 years to fulfill legal tax requirements.

10. Children's Privacy

My services are intended exclusively for business owners, SaaS founders, professionals, and adults over the age of 18. I do not knowingly collect or solicit personal data from children under 16 years of age. If I discover that a minor has submitted personal data, I will delete it immediately.

11. Changes to This Privacy Policy

I may update this Privacy Policy periodically to reflect technological changes, service expansions, or regulatory updates. Any modifications will be published on this page with an updated “Last Updated” date at the top. I encourage you to review this policy periodically.

12. Contact Me & Exercise Your Rights

If you have any questions about this Privacy Policy, wish to exercise your legal data rights, or want your data removed, please reach out to me directly: