Privacy Policy

Preamble

SEOlovely places great importance on the protection of personal data. This policy sets out the conditions under which HKC, as data controller, collects, uses and protects the personal data of Service users, in accordance with the General Data Protection Regulation (GDPR) and French law.

Data Controller

HKC — contact: contact@seolovely.com

Data Collected

• Account data: email, name, hashed password, preferred language.
• Project data: URLs of monitored sites, crawl results, data from Google Search Console, Google Analytics and Bing Webmaster Tools after explicit authorisation.
• Billing data: company name, address, VAT number, payment history (banking details are managed exclusively by our payment provider).
• Technical data: IP address, browser type, application logs, usage traces for security and diagnostics.

Purposes of Processing

• Provision, operation and improvement of the Service;
• management of accounts, subscriptions and billing;
• technical support and product communications;
• compliance with legal obligations and fraud prevention.

Legal Bases

Processing is based on contract performance (GTS-U), the Publisher's legitimate interest (security, Service improvement), consent (product communications, non-essential cookies) or legal obligations (accounting).

Retention Periods

• Active accounts: duration of the contractual relationship.
• Inactive accounts: automatic deletion after 36 months without login.
• Crawl data: retention period specific to the subscribed plan (6 to 24 months).
• Invoices: 10 years (accounting obligation).

Recipients and Sub-processors

Data is accessible to authorised HKC teams and strictly necessary sub-processors: hosting provider (OVH, France), payment provider, transactional email service, anti-spam (Cloudflare Turnstile). All are bound by confidentiality and GDPR compliance commitments.

Transfers Outside the EU

Data is hosted within the European Union. Any transfer to a third country is governed by the European Commission's standard contractual clauses.

Your Rights

Under Articles 15 to 22 of the GDPR, you have the right of access, rectification, erasure, restriction, portability and objection. You may exercise these rights at contact@seolovely.com by proving your identity. If you disagree, you may lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr.

Security

HKC implements appropriate technical and organisational measures: encryption of sensitive data, regular backups, access control, monitoring, internal training.