Privacy Policy

1. Who We Are

ORM Geek ("we", "us", "our") provides online reputation management services to individuals, businesses and organisations worldwide. References to "you" mean any person who uses our website, submits an enquiry, or engages our services.

We are the data controller for personal data collected through this website and in connection with our services. Our contact details are set out at the end of this policy.

2. What Data We Collect

We collect personal data in the following circumstances:

• Enquiry and contact forms — name, email address, company or role, and the content of your message when you contact us or submit an enquiry.
• Free audit requests — name, email, and the search queries or URLs you provide for us to audit.
• Client engagements — additional personal and business information you provide when we onboard you as a client, including details about your reputation situation, relevant public records, and communications history.
• Newsletter subscriptions — email address only.
• Website analytics — anonymised usage data including pages visited, time on page, and approximate location (country level). We do not use cookies for advertising or tracking purposes.
• Communications — records of emails, calls and messages between us.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiry and assess whether we can help you.
• To deliver the reputation management services you have engaged us to provide.
• To send The ORM Brief newsletter, if you have subscribed (you may unsubscribe at any time).
• To comply with legal obligations and enforce our terms of service.
• To improve the quality and relevance of our website and services.

We do not use your data for automated decision-making, profiling, or advertising.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR and EU GDPR:

• Contract — processing necessary to perform a contract with you or to take steps at your request before entering a contract.
• Legitimate interests — responding to enquiries, improving our services, and maintaining records of client relationships, where these interests are not overridden by your rights.
• Consent — newsletter subscription and any optional processing you have explicitly agreed to.
• Legal obligation — compliance with applicable laws.

5. Who We Share Your Data With

We do not sell, rent or trade your personal data. We do not share your data with advertising networks or data brokers.

We may share data with:

• Service providers — third parties who process data on our behalf under strict contractual obligations, including email delivery, analytics, and secure document storage.
• Professional advisers — solicitors, accountants and insurers where necessary.
• Law enforcement or regulators — where we are legally required to disclose information.

All third-party processors are bound by data processing agreements and may not use your data for any purpose other than providing services to us.

6. International Transfers

Some of our service providers are based outside the UK and EEA. Where we transfer personal data internationally, we ensure appropriate safeguards are in place — including Standard Contractual Clauses approved by the relevant supervisory authority — in accordance with applicable data protection law.

7. How Long We Keep Your Data

• Enquiries that did not proceed — 12 months from last contact.
• Client records — 7 years from the end of the engagement, to comply with legal and contractual obligations.
• Newsletter subscribers — until you unsubscribe.
• Analytics data — aggregated and anonymised; not subject to retention limits.

8. Your Rights

Under UK GDPR and EU GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your data in certain circumstances.
• Restriction — ask us to limit processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at privacy@ormgeek.com. We will respond within 30 days. You also have the right to lodge a complaint with your supervisory authority (in the UK, the Information Commissioner's Office at ico.org.uk).

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data in transit is encrypted. Access to client data is restricted to authorised personnel only.

No method of transmission over the internet is completely secure. While we take every reasonable precaution, we cannot guarantee absolute security.

10. Cookies

We use a minimal number of cookies necessary for the website to function correctly. We do not use third-party advertising cookies or tracking pixels. Analytics data is collected in aggregate and anonymised form.

You can control cookie settings through your browser. Disabling cookies may affect the functionality of certain features of this website.

11. Children

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top. We encourage you to review this page periodically. Continued use of our website or services after changes constitutes acceptance of the updated policy.

13. Contact Us