Privacy policy
What we collect, why we collect it, who we share it with and how you can ask us to change or delete it. Effective 24 March 2024. Last updated 1 October 2026.
1. Who we are#
This website, smartecomseo.com, is operated by ZF Ventures LLC, a Delaware limited liability company trading as SmartEcomSEO ("SmartEcomSEO", "we", "us"). We are the controller of the personal data described in this policy. Contact: hello@smartecomseo.com.
2. What we collect#
Information you give us. When you use our contact, audit or partner forms, or email us, we collect your name, email address, company name, store URL and anything you choose to write in the message. If you message us on WeChat, we receive the details visible on your WeChat profile.
Information from our free tools. When you use tools such as the Shopify SEO fit score or llms.txt generator, we process the store URL you enter and the answers you give. To score a store, we may look up publicly available data about it, such as its public product catalog and third-party authority metrics like Ahrefs Domain Rating.
Information collected automatically. Like most websites, we collect technical data such as IP address, browser type, device, pages visited and referring site, through server logs and Google Analytics. See section 6 on cookies.
Client data. When you become a client, we receive access to your Shopify admin (through a staff account) and Google Search Console, and may see order, product and customer data inside those tools. We process that data only to deliver our services, as your processor, under our terms of service.
Payment data. Payments are handled by Stripe. We do not see or store your full card number. Stripe's own privacy policy applies to the data it processes.
3. How we use it#
- To reply to enquiries and deliver free audits and tool results you request
- To provide, report on and bill for our services
- To improve our website and tools
- To send occasional updates if you have agreed to receive them (you can unsubscribe at any time)
- To comply with legal obligations and protect our rights
4. Legal bases#
Where data protection laws such as the GDPR or UK GDPR apply, we rely on: performing a contract or taking steps at your request before one; our legitimate interests in running and improving our business; your consent, where we ask for it; and legal obligations.
5. Who we share it with#
We don't sell personal data. We share it only with service providers that help us run the business, under appropriate agreements, including: Stripe (payments), Google (Google Sheets for client reporting), our website host our hosting and CDN providers, Google Analytics, our email provider, and SEO data providers such as Ahrefs and Semrush (which receive domains and keywords, not your personal details). We may also disclose data where required by law. If you ask us to introduce you to a partner listed on our partners page, we share only the details needed for that introduction, with your agreement.
6. Cookies#
We use cookies and similar technologies that are necessary for the site to work, and If analytics is enabled, Google Analytics sets cookies to measure visits. We do not use advertising cookies.. Where required, we ask for your consent before setting non-essential cookies, and you can change your choice at any time via your browser settings.
7. International transfers#
We're based in Shenzhen, China, and our service providers may process data in other countries, including the United States. Where the law requires it, we use appropriate safeguards for these transfers, such as standard contractual clauses.
8. How long we keep it#
Enquiries and audit requests: up to 24 months after our last contact. Client records and invoices: as long as the law requires for accounting and tax purposes. Access to your Shopify and Search Console accounts ends when our engagement ends, and you can revoke it at any time.
9. Your rights#
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know and to delete. To exercise any right, email hello@smartecomseo.com. You may also complain to your local data protection authority.
10. Security#
We use access controls and limited-permission staff accounts to protect data. No system is perfectly secure, and we will notify you and the relevant authorities of a breach where the law requires.
11. Children#
Our services are for businesses. We don't knowingly collect data from children under 16.
12. Changes#
We will post any changes on this page and update the date above. If a change is significant, we will tell clients by email.
Questions? Email hello@smartecomseo.com or use our contact page.
Legal documents: Privacy policy · Terms of service · Payments policy · Sample service contract