1. Who is responsible for your data
The data controller is TicketWave HQ Ltd, which operates the “VerySEOly” service, a company registered in England and Wales, company number 17143167, registered office Radley House, Richardshaw Road, Pudsey, LS28 6LE, United Kingdom. Contact us about privacy at hello@veryseoly.com.
2. What we collect, and why
| Data | When / why | Lawful basis |
|---|---|---|
| Your name, email address, business name, industry and current website (if any), and your billing details (the name and address we invoice, and the amounts) | When you engage us, book the deep-dive, or commission a build, to provide the service, deliver it and keep accounting records. We invoice by email; we do not take card payments through this site and never hold card details. Quotes, invoices and your client record are kept in our own business system, on hardware rented from OVHcloud (OVH Limited) in Gravelines, France, with encrypted nightly backups held by Scaleway SAS in Paris. | Performance of our contract with you; legal obligation (tax/accounting) |
| Your name, email, phone number, and the messages you send (and any files you share) | When you use our contact form, audit form or lead-magnet form, ask to book a call, or contact us by email or phone, so we can reply, answer questions and run your project. Form submissions are delivered to our EU-resident inbox by Scaleway Transactional Email (Paris, EU). Enquiries sent through the contact form, the deep-dive intake form, a guide (lead-magnet) form or the Site Score's “Email me when ready” box are also recorded in our own business system, Odoo, which we run on our own server at OVHcloud in Gravelines, France, so that we can follow them up. Odoo S.A., the company that publishes the software, does not receive them. If our spam checks flag an enquiry, it is not emailed, but if it gives us a way to reply it is still recorded in our business system, marked as suspected spam. Enquiries are not stored in our database. If you use the “Email it to me” box under your Site Score results, we send you the report, copy it to our inbox, and keep your email address and the address of the website you checked, with the date, in our own database (PostgreSQL on a server we operate at Hetzner, Nuremberg, EU), so that we can follow up on your report by email. | Steps to enter into a contract; our legitimate interest in responding to enquiries |
| Your vertical self-ID (clinic, solicitor, school, accountant, or other) and the lead-magnet you requested | When you request a lead magnet (e.g. the compliance audit checklist), to send you the right PDF and tailor any follow-up to your sector. You can unsubscribe in one click. | Consent (which you can withdraw at any time) |
| Project content you give us, text, logos, photos, and any account logins you choose to share | To design and build your website | Performance of our contract with you |
| Technical data, IP address, browser/device type, pages viewed, referring page, timestamps; error events when something breaks | Standard server/CDN logs kept by our hosting provider (Vercel London), for security and to keep the site running. Our telemetry stack is: Plausible Community Edition (cookieless pageview counts, on our own server in France, running on veryseoly.com), Sentry (error monitoring, which records the visitor IP address when an error occurs; EU region, de.sentry.io), and Vercel Speed Insights / Analytics (first-party endpoints /_vercel/insights and /_vercel/speed-insights, cookieless). None of these profile you or set tracking cookies. | Our legitimate interest in a secure, working, performant website |
| Business contact details and a note of the conversation | If we contacted you (e.g. by phone) about our services because your business looked like a fit, we keep your business name, number and a short note. Tell us to stop and we will, and we will delete it. | Our legitimate interest in offering relevant services to businesses (direct marketing to businesses); you can object at any time |
| Records of our dealings, messages, receipts, invoices | To run the project and meet legal/accounting obligations | Contract; legal obligation; legitimate interests |
We do not ask for special-category data and please do not send it to us. We do not carry out automated decision-making or profiling. Data you submit through this site comes through our contact / audit / lead-magnet forms (delivered to our EU-resident inbox by Scaleway Transactional Email, Paris, EU).
2a. Remote support sessions
If you ask us to help with your website, email or bookings over a remote session, you run the RustDesk program and read us a one-time code. During the session we can see your screen and use your keyboard and mouse. You watch throughout and can end it at any moment. We do not record sessions, copy what is on your screen, or move files unless you ask.
For your business's personal data that is visible during a session, we act as your processor under our data processing agreement. For the connection itself we are the controller: our own relay server, which we run on hardware rented from OVHcloud in Gravelines, France, keeps your device's support ID, its IP address and when it connected. We delete those device records after 90 days, and the relay's connection logs after 7 days. Sessions are encrypted end to end, so the relay cannot read them. We never use a session to watch staff.
3. Cookies and tracking
As of the date above, this website does not set any tracking, advertising or marketing cookies, and does not profile you. We do run cookieless analytics: Plausible Community Edition, on our own server in France, counts pageviews on veryseoly.com without cookies or shared identifiers, and Vercel Analytics and Speed Insights run on first-party endpoints, are cookieless, and do not share data with third parties. The full per-cookie breakdown lives on the standalone Cookie Policy. If we ever add non-essential analytics or marketing cookies, we will update both policies and ask for your consent first via a banner. You can block or delete cookies in your browser settings at any time.
4. Who we share it with
We do not sell your data. We share it only with service providers who help us run the business, and only as needed. The website itself runs on UK/EU-based, GDPR-friendly infrastructure, see the full sub-processor disclosure for the live list. Headline:
- Hosting & CDN, Vercel Inc., served from the London (lhr1) region. Vercel Analytics and Speed Insights are first-party, cookieless, and run on the same origin.
- Database, PostgreSQL on a server we operate, hosted by Hetzner Online GmbH in Nuremberg, Germany (EU). It holds the email address and website address of anyone who uses the Site Score's “Email it to me” box, and the record of each proposal we send: when it is viewed (with a hashed form of the viewer's IP address, and their browser and device type) and whether it is accepted or declined, with any reason you give for declining. Enquiries are not stored in it. Its nightly backups are encrypted on that server before they are stored with Scaleway SAS in Paris (EU).
- Business records, our own business system, Odoo (the enquiries sent through this site's forms, quotes, invoices and client records), which we run on hardware rented from OVHcloud (OVH Limited) in Gravelines, France, with encrypted nightly backups held by Scaleway SAS in Paris. Odoo S.A., the company that publishes the software, does not receive your enquiries. The quotes and invoices we email you are sent through Proton Mail (Proton AG, Switzerland) from
billing@ticketwavehq.com. - Analytics, our own Plausible Community Edition server, on hardware rented from OVHcloud (OVH Limited) in Gravelines, France: cookieless pageview counts on veryseoly.com, no personal profiles, records kept 24 months. No analytics data from this site goes to Plausible Insights OÜ.
- Error monitoring, Sentry (Functional Software, Inc.), which records error events including the visitor IP address when something breaks, on the EU region (
de.sentry.io). - Email forwarding (inbound), Cloudflare Email Routing forwards
@veryseoly.commail to our inbox. - Email delivery (outbound), Scaleway TEM (Paris, EU) carries the enquiries sent through this site's forms to our inbox, and sends you your Site Score report from
@veryseoly.comwhen you ask for it. Resend (EU region) is engaged only for account and billing notices when those flows are switched on; it is not in use at 11 October 2026. - Remote support relay, our own RustDesk server on hardware rented from OVHcloud (OVH Limited), in Gravelines, France, used only for remote sessions (section 2a).
- Professional advisers (accountant, lawyer) and, if required, regulators or law enforcement.
Some upstream providers may transfer data internationally. Where transfers happen, they are protected by an appropriate safeguard, UK International Data Transfer Agreement / Addendum, UK adequacy regulations, or equivalent. The sub-processor disclosure documents this per-vendor.
5. How long we keep it
Enquiries that do not become projects: up to 12 months, then deleted, including their record in our business system. The email address and website address we keep when you use the Site Score's “Email it to me” box: up to 12 months, then deleted. Project and client records: for the life of the project and then up to 6 years afterwards, to handle queries, disputes and tax/accounting requirements. Server logs: typically a short period set by the hosting provider. Analytics records on our own analytics server: 24 months, then deleted. We then delete or anonymise the data.
6. Your rights
Under UK data protection law you have the right to: access a copy of your data; have inaccurate data corrected; have data erased (in certain cases); restrict or object to processing (including processing based on legitimate interests); data portability; and to withdraw consent where we rely on it (without affecting earlier processing). To exercise any of these, email hello@veryseoly.com, we will respond within one month.
If you are not happy with how we have handled your data you can complain to the Information Commissioner's Office (ICO), ico.org.uk, helpline 0303 123 1113, though we would appreciate the chance to put things right first.
7. Keeping data safe
We use reasonable technical and organisational measures to protect personal data, for example access controls, encryption in transit (HTTPS), and limiting who can see it. No method of transmission or storage is completely secure, but we take it seriously and review our practices.
8. Other websites
This site links to other websites (including client sites and TicketWave HQ properties). We are not responsible for their content or privacy practices, check their own policies.
9. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when. Significant changes will be highlighted on this page.
10. Contact
Any privacy questions or requests: hello@veryseoly.com.
11. Related documents
Cookie Policy · Data Processing Agreement · Sub-processors · Vulnerability Disclosure · All legal documents
12. Changelog
- v1.14, 2026-10-20, corrected two overstatements about where form data goes. Earlier versions said that form submissions were stored in our lead/client database (PostgreSQL on our server at Hetzner, Nuremberg), and that Scaleway sends enquiry acknowledgements. Neither was true: the contact form, the deep-dive intake, the guide forms and the Site Score's “Email me when ready” box have never written to that database, and this site sends no acknowledgement of an enquiry. Enquiries are emailed to our inbox through Scaleway and, since v1.13, recorded in our own business system, Odoo. What this site keeps in the database, now listed simply as our database, is the email address and website address of anyone who uses the Site Score's “Email it to me” box, for the follow-up emails, and the records of the proposals we send. The 12-month limit for enquiries that do not become projects is unchanged, and section 5 now gives those Site Score details the same 12 months. Section 2 also now says that an enquiry our spam checks flag is not emailed, but is still recorded in our business system if it gives us a way to reply.
- v1.13, 2026-10-20, enquiries sent through this site's forms (the contact form, the deep-dive intake, the guide forms and the Site Score's “Email me when ready” box) are now also recorded in our own business system, Odoo, which we run on our own server at OVHcloud in Gravelines, France, so that we can follow them up. Odoo S.A., the company that publishes the software, does not receive them. Enquiries that do not become projects are still deleted after 12 months, and that includes their record in the business system.
- v1.12, 2026-10-15, quotes, invoices and client records are kept in our own business system on OVHcloud hardware in Gravelines, backed up encrypted to Scaleway in Paris, and billing email is sent through Proton Mail.
- v1.11, 2026-10-12, removed Capsule CRM from the list of providers: we keep no CRM of our own, and enquiries and client records live in our own database (Hetzner, EU). A CRM we set up for you is opened in your name under your own contract with its provider.
- v1.10, 2026-10-12, removed Stripe: VerySEOly no longer takes card payments or subscriptions through this site, so Stripe Payments Europe no longer receives any of your data. Fees are invoiced by email and we never hold card details. Stripe is gone from the data table and from the list of providers we share data with.
- v1.9, 2026-10-12, two sentences still described the setup v1.6 and v1.7 replaced: the table row for form submissions and the paragraph on special-category data now say form data is stored on our own PostgreSQL server at Hetzner (Nuremberg) and delivered by Scaleway Transactional Email (Paris), not Neon Postgres and Resend. Nothing about how your data is handled changed; the wording caught up with it.
- v1.8, 2026-10-11, analytics for this site moved from Plausible's cloud (Plausible Insights OÜ, Germany) to our own Plausible Community Edition server on OVHcloud in Gravelines, France, with records kept for 24 months. The version line at the top now matches this changelog (it still said 1.5).
- v1.7, 2026-10-11, corrected the email provider: your audit report and enquiry acknowledgements are sent through Scaleway TEM (Paris), not Resend; Resend is engaged only when account and billing notices are switched on.
- v1.6, 2026-10-11, the lead/client database is now PostgreSQL on a server we operate at Hetzner (Nuremberg, EU), with encrypted backups at Scaleway (Paris, EU), in place of Neon Postgres (Frankfurt).
- v1.5, 2026-10-10, added remote support sessions (section 2a) and the relay that carries them (section 4).
- v1.4, 2026-10-10, billing is described as payments and recurring billing rather than subscription plans, which are no longer sold.
- v1.3, 2026-10-07, removed Cal.com, which is no longer used: calls are booked by phone or through the contact form.
- v1.2, 2026-06, disclosed the real telemetry stack (Plausible cookieless analytics on this site, Sentry error monitoring which captures the visitor IP, Vercel Speed Insights / Analytics); named Neon Postgres as the lead/client database (Frankfurt/EU) and Cal.com for scheduling in the sharing list.
- v1.1, 2026-06-03, cookie detail moved to standalone Cookie Policy; cross-links added; review cadence stamped.
- v1.0, June 2026, initial publication.