Privacy notice
Our services are sold to businesses and professionals.
Who is responsible
William Giovannini, Via Polesine 61, 37134 Verona VR, Italy, trading as challengemyseo, is the data controller. Contact: main@challengemyseo.com. We don't have a data protection officer, because the law doesn't require one at our size.
What we collect, and why
| What we do | What we use | Legal basis |
|---|---|---|
| Answer your enquiry | Name, email, phone if given, your message | Your request (Art. 6(1)(b)); our legitimate interest in replying (Art. 6(1)(f)) |
| Prepare and deliver your order | Company, VAT ID if given, billing country and address, URLs, brief text, access method | Contract (Art. 6(1)(b)) |
| Invoicing, tax and accounting | Billing details, order and payment status | Legal obligation (Art. 6(1)(c)) |
| Keep the site and the page check safe | IP address, server logs, rate-limit counters, spam checks | Legitimate interest (Art. 6(1)(f)) |
| Defend or bring legal claims | The records above, as needed | Legitimate interest (Art. 6(1)(f)) |
We don't use your data for marketing emails, we don't profile you, and nothing is decided about you by automated means with legal effect. We don't collect card numbers. Stripe does that on its own page.
Your brief and your order record
The brief you fill in before payment (company, VAT ID if given, billing country, URLs, your goals, how you'll give access) is stored with your order record, so we can do the job and issue the invoice. The record also holds the terms version you accepted, the time you accepted it and a hashed form of your IP address. We don't send the text of your brief to Stripe. Please don't put passwords in it.
Who else sees it
- Stripe Payments Europe Ltd (Ireland) and Stripe, Inc. process your payment. For fraud and compliance they act as independent controllers under their own notice.
- Our web hosting provider and our email provider run the site and receive your messages.
- Our accountant or tax adviser, where we need one.
- Authorities, where the law requires us to share.
Transfers outside the EU
Stripe may transfer data to the United States, using safeguards such as the EU-US Data Privacy Framework or standard contractual clauses. See Stripe's own privacy notice for how.
How long we keep it
- Enquiries that don't lead to an order: 12 months, then deleted.
- Orders and briefs: for the contract and the legal limitation period. Accounting and tax records: up to 10 years.
- Server logs: up to 30 days.
- Rate-limit counters: minutes to hours.
- Access you gave us for a job: removed or revoked at delivery.
Do you have to give us this?
Name and email are needed for us to answer you or process an order. Without them we can't.
The free page check
If you enter a URL, our server fetches that one public page for you and doesn't keep it, and neither the URL nor the result is stored. Our web server logs may keep your IP address and the address you entered for up to 30 days, for security. Rate-limit counters last minutes to hours. If you paste HTML or drop a file, it never leaves your browser. The check itself always runs in your browser.
Cookies and fonts
We use technical cookies and similar storage only. No analytics, no advertising, no third-party scripts, fonts or embeds on our own pages.
Your rights
You can ask for access, correction, deletion, restriction or a copy of your data, and you can object to how we use it. Email main@challengemyseo.com. We'll reply within one month. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
The notice under the brief form
How we use your details. We use what you enter here (company, VAT ID, billing country, URLs and goals) to prepare and deliver your order, to issue the correct invoice and to meet tax rules (GDPR Art. 6(1)(b) and (c)). Payment is taken by Stripe on its own page; we never see your card number. We keep order and invoice records for as long as Italian tax law requires.