Privacy policy

This explains what we hold about you, why, and how to get rid of it. One Click Marketing ("we") provides SEO services to businesses. We are the data controller for the information described here. If anything below is unclear, email contact@oneclick-marketing.co.uk and a person will answer.

What we collect

• Your account. Name, email address, business name, and a hashed password. You give us these when you sign up.
• Your business profile. Website address, industry, the services you want to sell, and the areas you serve. You give us these during onboarding so the work we do is aimed at the right customers.
• Site access details. Where you connect your website so we can apply changes, we store the credentials you provide, encrypted.
• Performance data about your website. Rankings, page speed, technical issues found by our crawler, and the content we publish for you.
• Billing. Handled by Stripe. We never see or store your card number. We keep a record of your plan and payment status.
• Messages. Anything you send us through your dashboard.

Google user data

If you choose to connect Google, we ask for one permission: read-only access to your Google Search Console data (webmasters.readonly). We ask for nothing else, and we cannot change anything in your Google account.

• What we read. The list of properties you own, and the clicks, impressions, click-through rate, average position and search queries for the property you select.
• Why. To show you how many people actually found and clicked through to your site, and what they searched for, in your dashboard and monthly reports. It also tells us which pages deserve work.
• Where it goes. It is stored on our servers in the United Kingdom and shown to you and to our own staff working on your account. We do not sell it, we do not share it with advertisers, and we do not use it to train any model.
• How long. Snapshots are kept while your account is open so your reports remain accurate month to month. Your access and refresh tokens are stored encrypted and are deleted the moment you disconnect.
• How to revoke. Disconnect from your dashboard, or remove our access at myaccount.google.com/permissions. Either one stops all further access immediately.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Who else sees your data

We use a small number of suppliers to run the service, and they only get what they need to do their job:

• Stripe for payments.
• Resend for the emails we send you.
• DataForSEO for ranking positions. They receive the search terms and locations we track for you, not your Google data.
• OpenRouter to help draft content and technical fixes. Drafting a page title or an article sends the relevant page content and your business profile. Your Google Search Console data is not sent.
• Our hosting provider, where the application and database run.

We do not sell your data. We will only hand it to anyone else if the law requires it.

How long we keep it

While your account is open, and for six years afterwards where we have to for tax and accounting. Ask us to delete your account and we will remove your profile, site credentials, Google tokens and messages, keeping only what the law obliges us to.

Your rights

Under UK GDPR you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it. Email contact@oneclick-marketing.co.uk and we will respond within 30 days. If you are not happy with our answer you can complain to the Information Commissioner's Office.

Security

The site runs over HTTPS. Passwords are hashed, and site credentials and Google tokens are encrypted in our database. Access to customer accounts is limited to our own staff, requires two-factor authentication, and is recorded.

Cookies

We set a session cookie to keep you signed in and a token to protect forms against cross-site request forgery. That is all. We do not run advertising or third-party tracking cookies.

Changes

If we change this policy we will update the date at the top, and tell you by email if the change affects how we use your data.