Privacy Policy
Privacy Policy
Last updated: September 2026
The short version: we collect what you send us through our forms and what's needed to take a payment, and we use it to reply to you and do the work you hire us for. The instant SEO check doesn't store your results. We don't currently use analytics or advertising cookies. We don't sell your personal information.
1. Who we are
This site is run by Qorviza SEO, LLC, a Delaware limited liability company ("Qorviza", "we", "us"). We're the controller of the personal data described here.
Qorviza SEO, LLC 131 Continental Dr, Suite 305 Newark, DE 19713, USA Email: sales@qorviza.com Phone: +1 (856) 418-6521
We haven't appointed a Data Protection Officer, because the law doesn't require one for a business of our size and type. Privacy questions go to sales@qorviza.com.
2. What we collect
Contact and quote forms (/contact/ and /quote/)
- name
- email address
- your website address
- phone number (optional)
- the service or package you're interested in (optional)
- budget band (optional)
- your message
- a request for us to call you, with a preferred time and time zone (optional)
- the summary from the package builder, ROI calculator or SEO check, if you choose to include it (optional)
Please don't send us sensitive information such as health details, and don't paste passwords or account logins into a form. If we need access to your accounts later, we'll ask for it through a proper route.
Email and phone. If you email or call us, we process your contact details and whatever you tell us, under the same rules as the forms.
Paying online. You can pay for the SEO audit and the analytics setup through Stripe Checkout. You enter your card details on Stripe's own page, and we never see or store your full card number. We receive your name, email address, billing country or address, what you bought, the amount, and the payment status. Section 6 explains Stripe's role.
Client work. If you hire us, we keep proposals, contracts, invoices, payment records and the messages we exchange about the work.
The instant SEO check. See section 4.
The ROI calculator and package builder. See section 5.
Technical and security data. Our server and our hosting provider record basic request data when you visit: IP address, date and time, the page requested, browser type and the result of the request. We use it to keep the site running and secure. To stop spam and abuse, our forms and the SEO check keep a keyed hash of your IP address (the plain IP can't be read back from it) together with the time of the request.
3. Why we use it and our legal basis
People in the EU, EEA and UK have a right to know the legal basis for each use. For everyone else, this table simply shows what we do and why.
| What we do | Legal basis (GDPR / UK GDPR) |
|---|---|
| Reply to your inquiry, prepare a proposal, arrange a call | Steps you asked for before a contract (Art. 6(1)(b)) |
| Do the work you hire us for, invoice it and handle support | Performance of a contract (Art. 6(1)(b)) |
| Take online payments through Stripe | Performance of a contract (Art. 6(1)(b)) |
| Keep tax and accounting records | Legal obligation (Art. 6(1)(c)) |
| Protect the site, the forms and the SEO check from spam, abuse and attacks (hashed IP logs, server logs) | Our legitimate interest in keeping the site secure and available (Art. 6(1)(f)) |
| Handle disputes, chargebacks and legal claims | Our legitimate interest in defending our rights (Art. 6(1)(f)) |
We don't send marketing emails unless you've asked for them. We don't make decisions about you based solely on automated processing. The package builder suggests a package, but that's a suggestion shown in your own browser, not a decision about you.
Do you have to give us this data? No. Without a name, email address and message, though, we can't reply to you. Without payment details, Stripe can't take a payment. Everything marked optional is optional.
4. The instant SEO check
The free check on our site looks at one public web page and shows you what it finds.
What happens when you use it:
- You enter a URL. Our server requests that one public page over http or https, the same way a browser would, and follows up to 3 redirects.
- We don't send cookies, logins or any credentials with the request, and we refuse addresses that point to private or internal networks.
- We read the page's HTML and show you the results once, in your browser. That means things like the status code, title, meta description, headings, canonical and robots tags, and page size.
What we keep: nothing from the results. We don't store the page content or the report. For abuse prevention we log a keyed hash of your IP address, the host name of the URL you checked (for example example.com) and the time. Those logs are deleted after 7 days.
Please only check URLs you own or are authorized to test. We may rate-limit or block requests that look like abuse. The Terms of Service (§4) have the full rules.
5. Tools, cookies and analytics
ROI calculator and package builder. Both run entirely in your browser. The numbers and answers you enter aren't sent to us while you use them. If you then go to the quote form, it can be pre-filled with a short summary. You can edit or delete that summary, and it only reaches us if you send the form.
Cookies. We don't currently use analytics or advertising cookies, so there's no cookie banner. We only use storage the site needs to work, such as keeping a tool summary in your browser until you reach the quote form. Our Cookie Policy lists it. If we ever add analytics or advertising tools, they'll run only with your consent, and we'll update this policy and the Cookie Policy first.
6. Stripe
Stripe processes online payments for us. For some purposes, such as fraud prevention, meeting its own legal duties and running its payment network, Stripe acts as an independent controller under its own terms. That processing is covered by Stripe's privacy policy, not by this one. Stripe protects international transfers with its own safeguards, such as Standard Contractual Clauses or the Data Privacy Framework, as described in its privacy policy.
7. Who we share data with
We share personal data only with the people and services that help us run the business:
- Our web hosting provider. It hosts the site, the forms and the SEO check, and keeps server logs. It processes data on our behalf.
- Our email provider. Form submissions reach us by email, and we reply from there. It processes data on our behalf.
- Stripe, for online payments (section 6).
- Specialists who help us deliver client work, such as freelance writers or developers, only for the project they're working on and under a duty of confidentiality.
- Our accountants, lawyers and other professional advisers, when needed.
- Public authorities, when the law requires it.
- A buyer or successor, if our business is ever sold or merged. They'd have to respect this policy.
We don't sell personal information, and we don't share it with anyone for their own marketing.
When we work on your accounts. As part of client work we may get access to your analytics, Search Console, ad accounts, CRM or email platform. Any personal data in those accounts belongs to you. We process it only on your instructions, as your processor. We can sign a data processing agreement with you on request.
8. International transfers
We're a US company, and our main systems are in the United States. If you contact us from outside the US, your data comes to us in the US so we can reply and do the work you ask for.
Qorviza SEO, LLC doesn't currently participate in the EU-U.S. Data Privacy Framework. Where we use providers that receive EU or UK data, we rely on the safeguards the GDPR and UK GDPR allow, such as the provider's certification under the Data Privacy Framework (including its UK Extension) or Standard Contractual Clauses.
9. How long we keep it
| Data | How long |
|---|---|
| Enquiries that don't turn into work (forms, email, call requests) | 24 months after our last contact |
| Client records: proposals, contracts, invoices, payment records | 7 years after the end of the tax year they relate to (US tax practice) |
| Instant SEO check results | Not stored |
| Abuse-prevention logs (hashed IP, URL host, time) | 7 days |
| Server logs kept by our hosting provider | The provider's standard period, which is short and used only for security and troubleshooting |
We may keep data longer if we need it to deal with a dispute or a legal claim, and only for as long as that lasts.
10. Your rights
Everyone. Wherever you live, you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct it;
- delete it, unless we have to keep it (for example, invoices for tax purposes).
EU, EEA and UK. You also have the right to:
- restrict how we use your data;
- receive it in a portable, machine-readable format;
- object to processing based on our legitimate interests;
- withdraw consent at any time. This doesn't affect processing that happened before you withdrew.
US state privacy laws. Based on our current size and the data we handle, we don't believe the California Consumer Privacy Act (as amended by the CPRA) applies to us yet. We still offer the access, correction and deletion rights above to everyone, and we won't treat you differently for using them. We do not sell personal information. If we ever meet CCPA/CPRA thresholds, we'll provide a way to opt out of "sharing" for cross-context behavioral advertising (for example, the Meta Pixel).
How to ask. Email sales@qorviza.com or write to us at the address in section 1. It's free. We'll reply within one month. For complex requests we may need up to two more months, and we'll tell you if so. If we can't be reasonably sure who you are, we may ask for information to confirm it.
Complaints. If you're in the EU or EEA, you can complain to the data protection authority where you live or work, or where you think the problem happened. The list is on the European Data Protection Board website. In the UK, it's the Information Commissioner's Office, ico.org.uk. We'd appreciate the chance to sort it out with you first.
11. Security
We use HTTPS across the site, limit who can access personal data, and use reputable providers. No system is perfectly secure, so we can't promise that data will never be compromised. If a breach puts your rights at risk, we'll tell you and the authorities where the law requires it.
12. Children
This site and our services are for businesses and adults. They're not directed at children, and we don't knowingly collect data from anyone under 16. If you think a child has sent us personal data, email us and we'll delete it.
13. Links to other sites
We link to other sites, such as Stripe, Google and the sites you check with our tools. Their privacy practices are their own. Please read their policies.
14. Changes to this policy
When we change how we handle personal data, we'll update this page and the date at the top. If a change is significant and we have your email address because you're a client, we'll tell you directly.
15. Contact
Qorviza SEO, LLC · 131 Continental Dr, Suite 305, Newark, DE 19713, USA sales@qorviza.com · +1 (856) 418-6521