Privacy Policy

Last updated: 22 August 2026

Who we are

WDS SEO is the search-optimisation service operated by Wright Designs Studio, based in the United Kingdom. We are the data controller for the information described here. You can reach us at danny@wrightdesignsstudio.co.uk.

This policy covers our website and the SEO Client Hub, the private workspace we use to plan, deliver and report on SEO work for our clients.

Information we collect

Contact details you give us directly, such as your name, email address, phone number and business details, so we can respond to enquiries and deliver our service.

Website and performance data about the sites we work on, such as page content, technical audit results, keywords and ranking positions.

Google account data that you explicitly authorise, described in the next section.

Google user data we access

When you connect a Google account, the SEO Client Hub requests read-only access to the following, and only for the property or profile you select:

  • Google Search Console — search impressions, clicks, average position and query data, used to measure search visibility and identify keyword opportunities.
  • Google Analytics 4 — aggregated traffic, channel and conversion metrics, used to report on organic performance over time.
  • Google Business Profile — listing details and profile performance metrics, used to report on and improve local search visibility.

We only read data. We never post, edit or delete anything in your Google account, and we never request access to Gmail, Drive, Contacts or Calendar.

Google API Services User Data Policy

Our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained through Google APIs is:

  • used only to provide and improve the SEO reporting features you asked for;
  • never sold, rented or shared with data brokers;
  • never used for advertising, ad targeting or profile building;
  • never read by a human except where you have given explicit permission, where it is necessary for security or to comply with the law, or where the data has been aggregated and anonymised.

How we store and protect data

Access tokens and service-account credentials are encrypted at rest using AES-256-GCM and are only decrypted by our server when a scheduled or manual data sync runs. Data is held with our hosting and database providers on servers protected by access controls and transport encryption (HTTPS/TLS).

The SEO Client Hub is password-protected and accessible only to Wright Designs Studio staff. Clients receive read-only report links that show their own data and nothing else.

How long we keep it

Performance history is kept for the duration of your engagement plus up to 24 months, so year-on-year comparisons remain possible. Google credentials are deleted as soon as a connection is removed or the engagement ends. You can ask us to delete your data at any time and we will do so within 30 days, except where we must keep records to meet legal or accounting obligations.

Revoking access

You can disconnect a Google account inside the hub at any time, or revoke our access yourself at myaccount.google.com/permissions. Revoking access stops all future data collection immediately.

Sharing

We do not sell your data. We share it only with the service providers that run our hosting, database and email infrastructure, acting on our instructions, and where the law requires disclosure.

Your rights

Under UK GDPR you can request access to your data, correction, deletion, restriction of processing, or a copy in a portable format, and you can object to processing. Email danny@wrightdesignsstudio.co.uk and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

Changes

If we change this policy we will update the date at the top of this page and, for material changes, tell affected clients by email.