Privacy Policy
Last Updated: December 8, 2024. Effective immediately.
1. Introduction
Mediardx Limited ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website mediardx.com or use our SEO services.
We comply with the UK GDPR, EU GDPR, CCPA, and other applicable data protection laws. If you have questions, contact us at privacy@mediardx.com.
2. Information We Collect
A. Personal Data You Provide:
- Contact Forms: Name, email, phone, company name, website URL.
- Service Requests: Business goals, budget, current marketing challenges.
- Payment Information: Billing address, payment method (processed via Stripe—we do not store card details).
B. Automatically Collected Data:
- Analytics: IP address, browser type, device type, pages visited, time spent, referral source (via Google Analytics 4).
- Cookies: Session cookies, preference cookies, analytics cookies. See Section 7 for details.
- Log Files: Server logs for security and performance monitoring.
C. Third-Party Data:
- SEO Tools: If you authorize us to access your Google Search Console, Google Analytics, or other SEO platforms, we collect performance data solely for service delivery.
3. How We Use Your Information
We use collected data for the following purposes:
- Service Delivery: SEO audits, strategy development, reporting, campaign management.
- Communication: Responding to inquiries, sending project updates, invoicing.
- Improvement: Analyzing site performance to enhance user experience.
- Marketing: Sending educational newsletters (you can opt-out anytime).
- Legal Compliance: Meeting regulatory obligations, fraud prevention.
Legal Basis (GDPR): Consent, Contractual Necessity, Legitimate Interests, Legal Obligation.
4. Data Sharing & Disclosure
We do not sell your data. We share data only in these scenarios:
- Service Providers: Hosting (AWS), analytics (Google Analytics), payments (Stripe), CRM (HubSpot).
- Legal Requirements: If required by law, court order, or government request.
- Business Transfers: In the event of a merger, sale, or acquisition, your data may be transferred (you will be notified).
5. Data Retention
- Active Clients: Data retained for the duration of the contract + 7 years (UK tax law).
- Inquiries: Contact form data deleted after 2 years of inactivity.
- Analytics: Anonymized data retained indefinitely for performance analysis.
You can request deletion at any time (subject to legal exceptions). Email privacy@mediardx.com.
6. Your Rights (GDPR/CCPA)
You have the right to:
- Access: Request a copy of your data.
- Rectification: Correct inaccurate data.
- Erasure ("Right to be Forgotten"): Delete your data (with exceptions for legal/contractual obligations).
- Data Portability: Receive your data in a machine-readable format.
- Object: Opt-out of marketing emails or data processing based on legitimate interests.
- Restrict Processing: Limit how we use your data.
To exercise these rights, email privacy@mediardx.com. We will respond within 30 days.
7. Cookies & Tracking
We use cookies to improve your experience:
- Essential Cookies: Required for site functionality (cannot be disabled).
- Analytics Cookies: Google Analytics 4 (anonymized IP tracking).
- Marketing Cookies: Retargeting pixels (Google Ads, LinkedIn).
Manage cookie preferences via your browser settings or our cookie banner.
8. Data Security
We implement industry-standard security measures:
- SSL/TLS encryption for data transmission.
- Encrypted databases (AES-256).
- Access controls (role-based permissions).
- Regular security audits and penetration testing.
Note: No method is 100% secure. In the event of a breach, we will notify affected users within 72 hours (GDPR requirement).
9. Third-Party Links
Our site may link to external websites (e.g., client case studies, blog references). We are not responsible for their privacy practices. Review their policies before sharing data.
10. Children's Privacy
Our services are not directed to individuals under 16. We do not knowingly collect data from children. If you believe we have inadvertently collected such data, contact us immediately for deletion.
11. International Data Transfers
We store data in the UK and EU. If data is transferred outside the EEA (e.g., to AWS US servers), we use Standard Contractual Clauses (SCCs) approved by the European Commission.
12. Policy Updates
We may update this policy to reflect legal changes or service improvements. Material changes will be announced via email or a site banner. Continued use of our services after changes constitutes acceptance.
13. Contact Us
For privacy questions, data requests, or complaints:
Email: privacy@mediardx.com
Address: Mediardx Limited, 123 SEO Lane, London, UK, SW1A 1AA
Data Protection Officer: dpo@mediardx.com
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).