Legal
Last updated 9 Oct 2026
Privacy policy
Last updated
This notice explains what personal data London SEO Agency collects through this website and in the course of our work, why we collect it, who we share it with, how long we keep it and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It was last updated on 2026-10-09.
Who we are
London SEO Agency is a trading name of Hulk Marketing Ltd, company number 15931335, registered in England and Wales, part of the Hulk Marketing group. The company was incorporated on 2 September 2024. Our London office is at Tower 42, 25 Old Broad Street, London EC2N 1HN, where visits are by appointment. Hulk Marketing Ltd is the data controller for the personal data described in this notice.
You can contact us about anything in this notice by email at hello@londonseo-agency.co.uk, by phone on +44 7435 755127 (Mon to Fri, 09:00 to 18:00), or by post to the London office address above.
What we collect and where it comes from
We collect personal data in the following situations.
- Enquiry forms
- When you send a form on this site (the contact form, the free review request, a service page form or the careers form) we receive the details you type: your name, email address, phone number, company name, website address, the service you are asking about, the subject and your message. The form also records which page you sent it from and a label for the form used, so we know what you were looking at. A hidden anti-spam field is used to discard automated submissions; it holds no data about you.
- Email, phone and meetings
- If you email us, call the number above or meet us at Tower 42, we keep the correspondence and notes needed to deal with your enquiry.
- Client work
- If you become a client we hold the information needed to deliver the work and run the account: your contact details, your contract and invoices, and access to the accounts you grant us (for example Google Analytics, Search Console and Google Business Profile), which remain in your name throughout.
- Job applications
- If you apply for a role we receive the CV and details you choose to send. We use them only to consider your application.
- Website use
- Our hosting provider keeps standard server logs (the IP address, browser type, pages requested and the time) for security and to keep the site running. This site sets no analytics or advertising cookie unless you accept them in the cookie banner; see the Cookie Policy for what each does.
We do not buy marketing lists, we do not scrape contact details from other websites and we do not send unsolicited email to people who have not contacted us.
Why we use your data and the lawful basis
| What we do | Why | Lawful basis |
|---|---|---|
| Reply to your enquiry or free review request | To answer the question you asked and deliver the review you requested | Steps taken at your request before a contract (Article 6(1)(b)) and our legitimate interest in responding to people who contact us (Article 6(1)(f)) |
| Send up to four follow-up emails after a free review | To check the review was useful and offer a call; the sequence then stops | Your consent, given under the form (Article 6(1)(a)); each email carries an unsubscribe link, as the Privacy and Electronic Communications Regulations 2003 (PECR) require |
| Deliver and manage client work | To perform the contract, invoice you and report to you | Performance of a contract (Article 6(1)(b)) |
| Keep accounting and tax records | Because the law requires it | Legal obligation (Article 6(1)(c)) |
| Consider a job application | To decide whether to interview and hire | Steps taken at your request before a contract (Article 6(1)(b)) |
| Keep the site secure and understand how it is used | To prevent abuse of the forms and to see which pages help visitors | Legitimate interest for security logs (Article 6(1)(f)); your consent for any analytics cookie (Article 6(1)(a) and PECR regulation 6) |
We do not use your data for automated decision-making or profiling that has a legal or similarly significant effect on you.
Marketing emails and how to stop them
If you request a free review, you will receive the review itself and, with your consent, up to four further emails over about six weeks: an acknowledgement naming the reviewer, the review, one follow-up asking whether the first fix made sense, and one check-in after thirty days. Then the sequence ends. Every email has an unsubscribe link, and you can also stop them by replying or by emailing the address above. We do not send a general newsletter, text messages or marketing calls unless you have separately asked for them.
Who we share your data with
We share personal data only with the organisations that help us run the business, and only as much as each needs.
- Other companies and staff in the Hulk Marketing group, which runs the enquiry management system that receives form submissions and the specialists who work on client accounts.
- The provider that sends our email and the host that serves this website, each acting on our instructions as a processor.
- Google, where you have accepted analytics cookies, and the Google services you grant us access to as a client (these remain your accounts).
- Our accountants, insurers and legal advisers where needed, and public authorities where the law requires.
We do not sell personal data and we do not share it with other businesses for their own marketing.
Transfers outside the United Kingdom
Specialists across the Hulk Marketing group, which operates in several countries, may contribute to client work under the direction of the UK account lead. Where personal data is accessed from outside the UK we rely on the UK adequacy regulations where they apply and otherwise on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, with the group company concerned.
How long we keep your data
| Data | Kept for |
|---|---|
| Enquiries and free review requests that do not lead to work | 12 months from our last contact with you, then deleted |
| Follow-up email consent | Until you unsubscribe or the four-email sequence ends, whichever is sooner; a record that you unsubscribed is kept so we do not email you again |
| Client contracts, invoices and account records | 6 years after the end of the contract, as required for tax and limitation purposes |
| Job applications that are unsuccessful | 6 months after the decision, unless you ask us to keep your details for future roles |
| Server and security logs | 90 days |
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the personal data we hold about you (access);
- ask us to correct data that is wrong or incomplete (rectification);
- ask us to delete your data where there is no good reason to keep it (erasure);
- ask us to stop or limit how we use your data (restriction and objection), including objecting at any time to direct marketing;
- receive the data you gave us in a usable electronic format (portability);
- withdraw consent at any time where consent is the basis we rely on, without affecting what was done before.
To use any of these rights, email hello@londonseo-agency.co.uk or write to the London office. We will respond within one month, and we may ask you to confirm your identity first. There is no charge unless a request is clearly unfounded or excessive.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, by phone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would appreciate the chance to put things right first.
Security
Form submissions travel over HTTPS, are checked for spam and are stored in systems protected by access controls. Access to client accounts is granted by you to named people and removed when they leave the account or when you leave us. No system is perfectly secure, and if a breach is likely to put your rights at risk we will tell you and the ICO as the law requires.
Children
This website and our services are aimed at businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children.
Changes to this notice
We will update this notice when our practices change and show the date of the latest version at the top. The current version is dated 2026-10-09.