Privacy Policy

1. Introduction

SEOEva protects personal data under GDPR and Spanish law (LOPDGDD — Ley Orgánica 3/2018).

2. Controller

SEOEva, Carrer de Colón 58, 46004 Valencia, Spain. hola@seoeva.com. +34 96 315 42 87.

3. Data Collected

Contact forms: Name, email, phone, website URL, project details. SEO projects: Google Search Console, Google Analytics via OAuth (read-only). Payment: Processed by Stripe (PCI DSS Level 1 certified). We never see or store card numbers. Analytics: Plausible (EU-hosted, cookie-free, no personal data).

4. Legal Basis

Contract performance Art.6(1)(b) GDPR, legitimate interest Art.6(1)(f), legal obligation Art.6(1)(c), consent Art.6(1)(a) where applicable.

5. Data Sharing

Stripe Inc. (US, Standard Contractual Clauses), Plausible Analytics (EU), EU-based hosting provider. Personal data is never sold, rented, or shared for marketing purposes.

6. Data Retention

Enquiries: 3 years from last contact. Active projects: duration + 12 months. Payment records: 6 years (Spanish fiscal law — Ley General Tributaria). Marketing communications: until unsubscribe.

7. Your Rights

Under GDPR you have the right to: access (Art.15), rectification (Art.16), erasure (Art.17), restriction (Art.18), data portability (Art.20), and objection (Art.21). Exercise any right by contacting hola@seoeva.com. We respond within 30 days. Complaints: AEPD (Agencia Española de Protección de Datos), Calle Jorge Juan 6, 28001 Madrid. www.aepd.es.

8. Security Measures

TLS 1.3 encryption, 2FA on all admin accounts, encrypted storage, OAuth for third-party access (no password sharing), regular security audits. Last updated: March 2026.