Version 1.3 – Last updated: 2 November 2026
This Privacy Policy explains how CleverSEO Oy processes personal data when you visit cleverseo.fi, contact us, enquire about our services or apply for early access through this website.
The processing carried out by the CleverSEO for WP plugin, CleverSEO Premium for WP and the connected CleverSEO service is described in a separate product privacy notice at https://cleverseo.fi/privacy/. Information you submit to us through this website about those products, such as an enquiry or an early-access application, is covered by this website Privacy Policy.
1. Who is responsible for your data
CleverSEO Oy (business ID 3197294-5) is the controller of the personal data described in this notice.
Postal address: Vanha kelkkamäki 19 A 2, 00570 Helsinki, Finland
Privacy enquiries: seo@cleverseo.fi
2. Information you provide to us
When you contact us by email or through a website form, we process the information you provide. Depending on the form and your message, this may include:
– Your name and email address.
– Your company or organisation.
– Your current website address.
– The subject of your enquiry.
– Your message, project requirements and other information you choose to share.
– Subsequent correspondence concerning your enquiry or our business relationship.
Fields marked as required are needed to handle the relevant request. If you do not provide those details, we may be unable to respond or process your application. Other fields are optional unless the relevant form states otherwise.
Please do not include passwords, payment-card details or sensitive personal information in a general contact form or email enquiry.
Our website forms send enquiries directly to our email inbox. Form submissions are not stored in the website database.
3. Why we process your information
We process enquiry and correspondence data to understand your requirements, respond to your messages, discuss potential work, prepare proposals and manage customer communications.
For general enquiries and communications with representatives of organisations, the legal basis is our legitimate interest in responding to requests and managing business relationships. We assess this interest against the rights and interests of the people concerned.
Where you personally request steps before entering into a contract with us, or where processing is necessary to perform a contract to which you are a party, the legal basis is taking those steps or performing that contract.
For early-access applications submitted through the website, we use the information to review the application and communicate about access and next steps. The legal basis is our legitimate interest in administering applications received from interested users. Processing during participation in the product programme is described in the product privacy notice.
Where applicable, we also process information to comply with legal obligations, such as obligations concerning business records, and to establish, exercise or defend legal claims on the basis of our legitimate interest in protecting our legal rights.
4. Website operation and technical information
Operating the website involves processing technical information in server logs: IP address, requested page, time of the request, browser information and error or security events. We use this information to keep the website available, reliable and secure. The legal basis is our legitimate interest in operating and securing the website.
Server logs are rotated daily and approximately the last 14 rotations are kept; rarely updated error logs may be retained somewhat longer. Logs are also included in server backups (see section 8).
5. Cookies and Google Analytics
We use CookieYes to manage cookie preferences. Necessary cookies support functions such as remembering your privacy choices. Other cookies are used only where the required consent has been obtained.
We use Google Analytics to understand how visitors use the website and to improve its content and usability. Analytics information may include online identifiers, pages viewed, interaction events, device and browser information, referral sources and approximate location.
Analytics tracking is activated only after you choose to allow it. You can reject optional cookies and still use the website and contact us. The legal basis for analytics processing is your consent.
You can change or withdraw your choices at any time through Cookie Preferences. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
CookieYes stores your cookie preferences in your browser and records your consent choices in its cloud service to help us document and respect those choices. Under our current Basic plan, consent records are retained for up to five years in accordance with CookieYes’s documented retention policy. This is separate from the lifetime of the consent-preference cookie stored in your browser.
The current list of cookies, their purposes and expiry periods is available in Cookie Preferences.
Google Ads is not in use on this website. If advertising or advertising measurement is introduced, we will update this notice and the consent choices before enabling the relevant processing.
6. Service providers and access to information
Access to enquiry information is limited to people who need it to handle the enquiry, provide services or administer the business.
We use the following service providers:
– Hetzner Online GmbH: server infrastructure for the website, located in Helsinki, Finland. The server is managed by us.
– Hostingpalvelu.fi (Finland): email service, accessed through the Roundcube webmail interface.
– Google (Google Analytics): website analytics, used only with your consent.
– CookieYes: cookie consent management.
These providers process the data needed for their respective functions under agreements with us.
Personal data may also be disclosed where required by law or necessary for establishing, exercising or defending legal claims.
7. Where information is processed
Our website server and its backups are located in Finland. Our email service is operated in Finland.
Google Analytics and CookieYes may process personal data outside the European Economic Area. Google states that it relies on the EU–US Data Privacy Framework for transfers to participating Google entities in the United States and on European Commission-approved standard contractual clauses where applicable. CookieYes’s Data Processing Agreement provides for standard contractual clauses for transfers that require such safeguards.
Further information is available in Google’s international data transfer documentation and CookieYes’s Data Processing Agreement. You can request further information about the relevant safeguards by emailing seo@cleverseo.fi.
8. How long information is kept
We keep enquiry and customer correspondence only for as long as necessary for communication, handling the enquiry and managing the customer relationship. We review correspondence periodically and delete messages that are no longer needed. Records that must be retained under applicable law, such as accounting records, are kept for the required period.
– Google Analytics: user and event data are kept for 14 months.
– Server logs: approximately 14 daily rotations, as described in section 4.
– Cookie preferences: stored in your browser for the lifetime of the relevant cookie, shown in Cookie Preferences.
– Server backups: Hetzner creates daily server backups, retaining the seven most recent copies. We also create manual backups for maintenance and recovery purposes. Backups are stored in Finland and may contain personal data included in the website database, files and server logs. Manual backups are retained for no longer than six months.
The 30-day deletion rule described in the product privacy notice applies to the CleverSEO service, not to website enquiries or email.
9. Your data protection rights
Depending on the processing and applicable legal conditions, you have the right to:
– Obtain access to your personal data.
– Have inaccurate or incomplete data corrected.
– Request erasure of your data.
– Request restriction of processing.
– Object to processing based on legitimate interests on grounds relating to your particular situation.
– Receive data you have provided in a portable format where the legal conditions for portability are met.
– Withdraw consent at any time where processing is based on consent.
To make a request, contact seo@cleverseo.fi. We may need proportionate additional information to verify your identity. We normally respond within one month; if a lawful extension is needed, we will inform you within that period and explain why.
You may lodge a complaint with the Finnish Office of the Data Protection Ombudsman (https://tietosuoja.fi/en) or another competent supervisory authority.
10. Automated decisions
We do not use your website enquiry or application data for solely automated decisions that produce legal or similarly significant effects on you.
11. Changes and contact
We update this notice when our website processing practices change. The current version is available on this page with its last-updated date. Where required, we provide additional information about significant changes or obtain a new consent.
For questions about this notice or your personal data, email seo@cleverseo.fi.