Privacy Policy

Last updated: 31 October 2026.

This privacy policy explains how South Lakes SEO (“we”, “us” or “I”), operated by Tim Marston as a sole trader, collects and uses personal data when you use this website or contact us.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

South Lakes SEO is a freelance digital marketing consultancy based in Kendal, Cumbria. For privacy queries, Tim Marston is the data controller.

• Business name: South Lakes SEO
• Address: 9 Green View Flats, Kendal LA9 4QS
• VAT Reg. No.: 383 7724 61
• Email: tim@southlakesseo.co.uk
• Phone: 07761 170139
• Website: https://southlakesseo.co.uk/

What data we collect

We only collect what we need to run the site, understand how it is used, and respond to you:

• Contact form submissions — typically your name, email address, phone number (if you give one), and message. Forms are handled by Fluent Forms.
• Spam and abuse protection — Google reCAPTCHA v3 may process technical signals (such as IP address and browser data) to judge how likely it is that a submission comes from a real person. See Google’s privacy policy (opens in a new tab) for how Google uses that data.
• Website analytics (Google Analytics 4) — Google Analytics loads through Google Tag Manager on every page. If you accept cookies via our cookie banner, it sets cookies and collects usage information such as pages viewed, approximate location (derived from IP address), device and browser type, referral source and interactions. Google Analytics cookies may include _ga and _ga_<container-id>, which typically last for up to two years. In GA4, IP addresses are used for location and security processing and are not stored as full IP addresses in standard Analytics reports. See our Cookie Policy for cookie details and how to opt out.
• Advertising measurement (Google Ads) — if you accept cookies via our cookie banner, Google Ads conversion tracking (loaded through Google Tag Manager) records when a visit that came from one of our Google ads leads to an enquiry, such as a form being sent or a phone or email link being clicked. Google Ads cookies may include _gcl_au and _gcl_aw, which typically last for 90 days. Google Consent Mode is used and is set to “denied” until you accept.
• Cookieless signals (Google Consent Mode) — until you accept, no analytics or advertising cookies are set. Google Consent Mode sends Google only cookieless signals (for example that a page was viewed or a form was sent), which Google uses to model visits and conversions in aggregate.
• Enhanced conversions (Google Ads) — when you send a form, and only if you have accepted advertising cookies, a scrambled (SHA-256 hashed) copy of your email address and phone number is sent to Google Ads to match the enquiry to an ad click. Your email address and phone number are not sent to Google in plain text by this process.
• Server and security logs — our host (Cloudways on DigitalOcean) and security tooling (including Imunify360) may record IP addresses, request URLs, user agents and similar technical data to keep the site secure and working.
• Email delivery — when we reply or send transactional mail, messages go via Elastic Email. That provider processes the email addresses and content needed to deliver the message.

We do not run a blog comment system, user accounts for the public, or an online shop on this site. We do not use social media tracking cookies. Advertising cookies (Google Ads conversion tracking) are only used if you accept them.

Why we use your data (lawful bases)

• Legitimate interests — answering enquiries, securing the website, keeping basic records of business correspondence, and measuring site use and ad performance through cookieless Google Consent Mode signals.
• Contract — if you become a client, we process the data needed to deliver the services you ask for (SEO, email marketing, website development, AI automation consultancy, website hosting and website maintenance).
• Legal obligation — where we must keep records for tax, accounting or other legal requirements.
• Consent — Google Analytics and Google Ads cookies are set, and enhanced conversions data is sent, only after you accept via our cookie banner (required under PECR for non-essential cookies). You can withdraw consent at any time using the “Cookie settings” link in the site footer. We also rely on consent where we specifically ask for it for optional marketing emails.

Who we share data with

We do not sell your personal data. We use trusted processors who help us run the site and communicate with you:

• Cloudways / DigitalOcean — website hosting
• Elastic Email — sending email
• Google (reCAPTCHA, Google Tag Manager, Google Analytics 4 and Google Ads) — form spam protection, website analytics and measuring our ads
• WordPress plugins we operate (including Fluent Forms, Yoast SEO and Breeze caching) — site functionality

Google may process analytics, advertising and reCAPTCHA data in the United States and other countries. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK Extension to the EU–US Data Privacy Framework (where Google is certified), the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision. See Google’s privacy policy (opens in a new tab).

How long we keep data

• Contact form messages and related emails are kept for as long as needed to deal with your enquiry and for a reasonable period afterwards (typically up to 24 months), unless a longer period is needed for an ongoing relationship or legal reason.
• Client project records are kept for the life of the engagement and for as long as required for accounting and legal purposes (often up to six years).
• Google Analytics data is retained according to the retention period set in our GA4 property (and cookie lifetimes of up to two years for _ga / _ga_<container-id> unless you clear cookies or opt out sooner).
• Google Ads conversion cookies (_gcl_au / _gcl_aw) typically last up to 90 days unless you clear cookies sooner. Conversion data in Google Ads is kept according to Google’s retention settings.
• Security and server logs are retained for a short operational period, then rotated or deleted by the host.

Your rights

Under UK data protection law you can ask us to:

• access the personal data we hold about you
• correct inaccurate data
• erase data in certain circumstances
• restrict or object to certain processing
• receive a copy of data you provided (data portability), where applicable
• withdraw consent where we rely on it (including analytics and advertising cookies, via the “Cookie settings” link in the footer)

To exercise any of these rights, email tim@southlakesseo.co.uk or write to us at the address above. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk (opens in a new tab).

Cookies

We use cookies and similar technologies, including Google Analytics and Google Ads conversion tracking where you consent. See our Cookie Policy for details, including how to change your choices and the Google Analytics opt-out browser add-on (opens in a new tab).

Children

This website is aimed at businesses and adults. We do not knowingly collect personal data from children.

Changes to this policy

We may update this page from time to time. The “Last updated” date at the top will change when we do. Please check back if you revisit the site.

Contact

Questions about this privacy policy: tim@southlakesseo.co.uk, 07761 170139, or 9 Green View Flats, Kendal LA9 4QS.