Legal

GDPR Compliance

Last updated: May 15, 2026

Free SEO, operated by Interest Bud Solutions, complies with the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the UK GDPR. This page summarises how we meet those obligations.

1. Roles

For data you submit through Free SEO about your business, you are the data controller and we act as your data processor. For your own account data, we are the controller.

2. Lawful bases

  • Contract, to deliver the Free SEO service you signed up for.
  • Legitimate interest, for service security, fraud prevention and product improvement.
  • Consent, for analytics cookies and marketing emails.
  • Legal obligation, for tax, accounting and law-enforcement requests.

3. Your rights

  • Access, request a copy of your personal data.
  • Rectification, correct inaccurate data.
  • Erasure, request deletion ("right to be forgotten").
  • Restriction, limit how we process your data.
  • Portability, receive your data in a structured, machine-readable format.
  • Objection, object to processing based on legitimate interest.
  • Withdraw consent, at any time, where processing is based on consent.

To exercise any right, email support@interestbudsolutions.com. We respond within 30 days at no cost.

4. Data Processing Addendum (DPA)

Customers on any Pro plan can request a signed Data Processing Addendum incorporating EU Standard Contractual Clauses. Email us to obtain one.

5. International transfers

Where personal data is transferred outside the EEA / UK (e.g. to our India office or US-based sub-processors), we use Standard Contractual Clauses and additional technical safeguards (encryption, pseudonymisation).

6. Sub-processors

The current list is published in our Privacy Policy. We notify customers in advance of changes and offer a right to object.

7. Breach notification

We will notify the relevant supervisory authority and affected customers within 72 hours of becoming aware of a personal data breach, as required by Article 33 GDPR.

8. Supervisory authority

If you have unresolved concerns you may lodge a complaint with your local data protection authority. EU residents can find their authority at edpb.europa.eu.