Last updated:
1. Data controller
The controller for personal data collected on seoforge.fr is SEOFORGE, a French SAS (société par actions simplifiée), 6 Résidence des 3 Forêts, 78380 Bougival, France, SIREN 100 198 860. Contact: contact@seoforge.fr.
2. Data we collect and why
- Contact form: name, email, website URL (optional), need and message. Purpose: answering your request and preparing a quote. Legal basis: pre-contractual steps taken at your request. Your message is stored in our database and e-mailed to the team, with a copy to your address.
- Speed test tool: the URL you enter is sent to the Google PageSpeed Insights API to generate the analysis. Without a report request it is only kept in a technical cache for at most one hour, and in technical logs when an error occurs. If you ask for the report by e-mail, we store your e-mail address, the analysed URL, the tested version (mobile or desktop), the language, the page you made the request from, your choice about receiving tips by e-mail, and the scores obtained together with the sending status of the report. Purpose: sending you the report and following up. Legal basis: pre-contractual steps taken at your request; your consent for tips by e-mail, which you can withdraw at any time by writing to us.
- Free tools (GEO test, speed test, e-mail deliverability test, llms.txt generator, SERP preview): each time a test runs we record the address entered (URL or domain name) and the final address, the date, the language, the outcome (score, per-dimension scores and the codes of the points found, or the reason for the failure), its duration, and a truncated, irreversible fingerprint of your IP address used only to detect abuse and erased after 30 days. We never store the content of the pages analysed nor the DNS records read. Purpose: operating and improving the tools, understanding what visitors test and, if you request the report by e-mail, attaching that test to your request. Legal basis: our legitimate interest in operating and improving our free tools. Retention: 24 months, then automatic deletion.
- Business e-mail request: company, name, email, phone (optional), domain name and its status, number of mailboxes, preferred solution, current provider and message. Purpose: handling your request and preparing a quote. Legal basis: pre-contractual steps taken at your request. The request is stored in our database; you receive a confirmation e-mail and the team is notified.
- Follow-up of your requests: with each of the requests above we record where your visit came from (utm campaign parameters, Google Ads click id gclid, landing page, referring site), then, while handling it, internal follow-up notes, the handling date and, if the internal notification e-mail failed, the date and the technical error message. Purpose: handling your request and measuring the effectiveness of our marketing. Legal basis: our legitimate interest.
- Call booking: if you book a call, your name, email and time slot are processed by Calendly under its own privacy policy.
- Browsing data: pages viewed, browser type, IP address, through Google Tag Manager and Google Analytics. Purpose: audience measurement and site improvement. Legal basis: your consent for non-essential cookies.
- Advertising measurement: if you accepted measurement cookies, the e-mail address entered in the contact form is sent to Google in hashed (unreadable) form to match your request with the Google Ads ad that brought you to the site ("enhanced conversions"). Purpose: measuring the effectiveness of our campaigns. Legal basis: your consent, which you can withdraw at any time via "Manage cookies".
3. Recipients and processors
Your data is only accessible to the SEOForge team. It may be processed by our technical providers: Microsoft France SAS (website hosting on Microsoft Azure, servers located in France, France Central region, hence in the European Union), OVH (domain name registration), Google (PageSpeed Insights, which receives every URL submitted to the speed test tool; Tag Manager and Analytics for audience measurement) and Calendly (scheduling). Some of these providers are located outside the European Union; transfers are covered by the European Commission's standard contractual clauses or the Data Privacy Framework.
We never sell or rent your data to third parties.
4. Retention periods
- Requests received through the forms (contact, audit report, business e-mail), their follow-up data and sales exchanges: 3 years from the last contact, unless a contract is signed.
- Runs of the free tools (GEO test, speed test, e-mail deliverability test, llms.txt generator, SERP preview): 24 months; the associated IP fingerprint: 30 days.
- Contracts and invoices: 10 years (legal obligation).
- Audience measurement: cookies up to 13 months, aggregated statistics up to 25 months.
5. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and port your data, to object to its processing, and to withdraw your consent at any time. To exercise these rights, write to contact@seoforge.fr. We answer within one month. You may also lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).
6. Cookies
The site uses strictly necessary cookies (session, language preference), which do not require consent, and audience-measurement and advertising-measurement cookies (Google Analytics and Google Ads through Google Tag Manager) set only after your agreement, given through the banner shown on your first visit. Your choice is kept for 6 months. You can change it at any time via the "Manage cookies" link at the bottom of every page, or configure your browser to refuse cookies.
7. Security
The site is served over HTTPS only. We apply appropriate technical and organisational measures to protect your data against unauthorised access, alteration or disclosure.
8. Changes
This policy may be updated to reflect changes to the site or to regulations. The date at the top of the page indicates the current version.