Your information.
Your choices.

Who we are

Luke Corrigan T/A SERO Digital is the controller responsible for the personal information described here. We are an independent digital agency based in Ireland. Contact info@serodigital.io about privacy or your information.

This notice covers our website, enquiries and requests for a Complimentary SEO Review.

What we use and why

Enquiries and requested reviews

When you contact us, we use the name and email address you provide, and any optional phone number, selected services and project message. An SEO Review request also includes the website address you ask us to review. We keep the originating page and request context needed to respond. Please avoid sending sensitive personal information we do not need.

We use this information to answer you, provide the requested review and discuss potential work. Depending on the enquiry, this involves taking steps at your request before a contract, or our legitimate interests in responding to business correspondence and managing prospective or existing client relationships. We do not treat an enquiry as consent to marketing.

Our forms send an internal notification and may send a transactional acknowledgement to the address provided. An acknowledgement confirms receipt; it is not a mailing-list subscription.

Website operation and security

Our hosting and form systems process technical information needed to deliver the website and protect it from abuse, including request details and IP addresses. Forms check origin, elapsed completion time, a honeypot field and a Cloudflare verification token. Rate limits use a short-lived hashed identifier derived from the connecting IP; acknowledgement limits use a hashed recipient identifier. Our application does not put raw addresses or submitted messages in these security-state files.

We rely on our legitimate interests in keeping the website and correspondence safe and available, while limiting the information used for that purpose. Necessary security processing is separate from optional tracking consent.

Optional measurement

With Analytics consent on our production website, Google Analytics helps us understand visits, pages used and enquiry-related actions. It processes browser/device and interaction information using its identifiers. Our custom events do not contain your name, email, phone number, message or submitted website address. We do not configure user-ID, Google Signals or advertising personalisation.

Optional analytics relies on your consent. You can refuse or withdraw it without losing access to the website or forms. No Meta Pixel or other advertising tool is currently active.

Who helps us provide the website

• BigWetFish: hosting infrastructure for the website and form endpoint.
• Google Workspace: SMTP relay, enquiry notifications and email correspondence.
• Cloudflare Turnstile: verification to help distinguish legitimate form use from automated abuse. It loads when you open a form, independently of optional tracking choices.
• Google Analytics: optional website measurement, only after Analytics consent on the production site.

Turnstile evaluates technical signals such as IP address, browser/user-agent information and the site origin. Cloudflare describes its processing for website protection and improvement of its bot-detection service in its Turnstile Privacy Addendum. Our server sends the verification token to Cloudflare for validation; it does not send your enquiry fields to Turnstile.

International processing

Google and Cloudflare operate internationally, so processing may occur outside the European Economic Area. Their published terms describe transfer mechanisms such as standard contractual clauses and, where applicable, adequacy frameworks. The applicable mechanism depends on the service, recipient and contractual arrangements; these are not a blanket guarantee about every transfer.

See Google’s transfer frameworks, the Google Cloud Data Processing Addendum, including Workspace, and Cloudflare’s privacy information. You can contact us for information about safeguards relevant to your data.

How long we keep information

• Enquiries and correspondence: as long as reasonably needed to respond, manage the prospective or client relationship, resolve issues and meet legitimate business or legal obligations. The appropriate period depends on the purpose and context.
• Form-security state: rate-limit windows last 15 minutes, with daily salt rotation. Acknowledgement claims apply per recipient and acknowledgement category for one UTC day. Expired state is replaced or pruned when later requests use it; inactive files are not deleted by a scheduled job.
• Privacy choices: 180 days, approximately six months. We ask again when that period ends or the consent version changes materially.
• Google Analytics: browser cookies are configured here for up to 180 days without automatic renewal. Google’s property-level data-retention setting is separate. Its current setting must be confirmed before analytics is launched; we do not state an unverified period for information held by Google.

Hosting logs, backups and email-provider retention are also subject to the relevant service arrangements. Contact us if you need retention information about a particular record.

Cookies & tracking

You can choose each optional category separately. We do not infer consent from scrolling or continuing to browse.

Necessary — always active

We use first-party browser storage called sero.privacy.v1 to remember your choices, consent version and decision/expiry times. It contains no name, email or visitor identifier. Essential form security continues if you reject optional tracking.

The separate sero.seo-review.suppressed-until preference remembers when you dismiss the SEO Review invitation (30 days) or successfully request a review (180 days). It contains an expiry timestamp, not analytics consent. Manual access to the review form remains available. These local-storage entries are checked on use; your browser may retain expired entries until they are replaced or cleared. Form drafts are held in page memory, not an analytics database.

Analytics — optional, off by default

When accepted on serodigital.io, Google Analytics can use first-party _ga and _ga_* cookies for visitor/session measurement. Our configured browser-cookie lifetime is up to 180 days. Google documents these cookies in its cookie guidance. No Google Analytics script or consent ping loads before acceptance, after rejection, or on our localhost/staging environments.

Advertising — optional, off by default

This category is reserved for future campaign measurement. No Meta Pixel ID is configured and no Meta script or event loads now. Any future advertising integration requires a reviewed, updated notice and your Advertising consent; Analytics consent alone will never enable it.

Changing your mind

Use Cookie settings here or in the footer. Withdrawing Analytics stops future collection for our property and clears Google Analytics cookies/storage that this website can access. It does not delete information already transmitted to Google. You can also clear site data through your browser.

Your rights

Depending on the circumstances, you can request access, correction, deletion or restriction of your information, object to processing based on legitimate interests, and request portability where it applies. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Email info@serodigital.io to exercise your rights. We may need proportionate information to confirm your identity. Rights have conditions and exceptions; we will explain these where relevant.

You also have the right to complain to Ireland’s Data Protection Commission. You can contact us first, but you do not have to.

Contact & changes

Privacy questions: info@serodigital.io. We update this notice when our processing changes and show the revision date above. Material changes to optional tracking trigger a fresh choice.