Privacy Policy
Your privacy matters to us. This policy explains what data we collect, why we collect it, and how we keep it safe.
Introduction
Koading.com ("Koading", "we", "us", "our") is an award-winning digital marketing agency headquartered in the United States with offices in the United Kingdom and the United Arab Emirates. We are committed to protecting your personal information and your right to privacy in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the UK Data Protection Act 2018, and the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website at koading.com, interact with our blog content, use our digital marketing services, or communicate with us through any channel. It applies to all visitors, clients, prospective clients, and users of our website and services.
By accessing or using our website or services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website immediately.
Who We Are
Koading is a full-service digital marketing agency specialising in Search Engine Optimisation (SEO), Local SEO, AI SEO, Google Maps SEO, Pay-Per-Click (PPC) Management, Web Design, E-commerce SEO, Technical SEO, and Content Marketing. We serve businesses of all sizes across the USA, UK, and UAE from our offices in New York, Los Angeles, Chicago, London, Manchester, Dubai, and Abu Dhabi.
For the purposes of data protection legislation, Koading acts as the data controller for the personal information we collect through our website and marketing activities, and as a data processor when handling client data as part of our service delivery.
Data Protection Contact: [email protected]
Information We Collect
Information You Provide Directly
We collect personal information that you voluntarily provide to us when you:
- Fill in our contact forms, enquiry forms, or request-a-quote forms
- Book a free consultation or strategy call through our Calendly integration
- Subscribe to our email newsletter, blog updates, or marketing communications
- Engage with us via email, telephone, live chat, or social media
- Enter into a service agreement or contract with us
- Participate in surveys, promotions, or events we organise
- Submit a testimonial, review, or case study on our behalf
This information may include your full name, email address, phone number, job title, company name, company website URL, business address, billing information, and the content of any messages or files you submit to us.
Information Collected Automatically
When you visit our website, certain technical information is collected automatically through cookies, server logs, and similar tracking technologies. This includes:
- Device information: IP address, browser type and version, operating system, screen resolution, and device type (desktop, tablet, or mobile)
- Usage data: Pages visited, time spent on each page, referring URLs, exit pages, and click patterns
- Location data: Approximate geographic location derived from your IP address
- Search data: Search terms that led you to our website
- Session data: Session duration, bounce rate, and scroll depth on key pages
Information from Third Parties
We may receive information about you from third-party sources, including:
- Google Analytics and Google Search Console (website performance data)
- Google Ads and Meta Ads platforms (advertising campaign data)
- Social media platforms (publicly available profile information)
- Business directories and public databases (company information)
- Referral partners who have your consent to share your details with us
How We Use Your Information
We use the personal information we collect for the following purposes:
- Service delivery: To provide, manage, and improve our SEO, PPC, web design, and other digital marketing services
- Communication: To respond to your enquiries, provide consultations, send service-related updates, and deliver project reports
- Marketing: To send newsletters, promotional materials, industry insights, and blog updates where you have opted in or where we have a legitimate interest
- Analytics: To analyse website usage patterns, measure the effectiveness of our content, and improve user experience
- Personalisation: To tailor website content and recommendations based on your browsing behaviour and interests
- Legal compliance: To comply with applicable laws, regulations, court orders, and legal processes
- Security: To detect, prevent, and address fraud, abuse, security risks, and technical issues
- Business operations: To manage invoicing, billing, contract administration, and internal record-keeping
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA) and the United Kingdom, we process your personal data under the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as subscribing to our newsletter
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract
- Legitimate interests: Where processing is necessary for our legitimate business interests (e.g., direct marketing to existing clients, analytics, fraud prevention) provided these interests are not overridden by your rights
- Legal obligation: Where processing is necessary to comply with a legal obligation to which we are subject
Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and understand user behaviour. Cookies are small text files stored on your device when you visit our website.
Types of Cookies We Use
- Strictly necessary cookies: Essential for the website to function properly. These cannot be switched off and include session management and security cookies
- Performance & analytics cookies: Help us understand how visitors interact with our website by collecting information about page views, traffic sources, and user journeys. We use Google Analytics 4 (GA4) with IP anonymisation enabled
- Functional cookies: Enable enhanced functionality and personalisation, such as remembering your preferences and previously viewed pages
- Marketing & advertising cookies: Used to deliver relevant advertisements and track the effectiveness of our advertising campaigns across Google Ads, Meta (Facebook/Instagram), and LinkedIn Ads
You can manage your cookie preferences through your browser settings at any time. Most browsers allow you to block or delete cookies, though this may affect the functionality of certain parts of our website. For detailed information about specific cookies we use, please refer to our Cookie Policy.
Sharing Your Information
We do not sell, trade, rent, or otherwise disclose your personal information to third parties for their own marketing purposes. We may share your data with the following categories of trusted service providers who assist us in operating our website and delivering our services:
- Cloud hosting & infrastructure: For secure website hosting and data storage
- Analytics providers: Google Analytics 4, Google Search Console, and Microsoft Clarity for website performance analysis
- Advertising platforms: Google Ads, Meta Business Suite, and LinkedIn Campaign Manager for paid media campaigns
- CRM & email marketing: For managing client relationships and sending communications
- Scheduling tools: Calendly for appointment booking and consultation scheduling
- Form processing: Fluent Forms for contact form submissions and lead capture
- Payment processors: For secure handling of billing and invoicing transactions
- Content delivery networks (CDNs): For fast and secure delivery of website content globally
All third-party service providers are contractually bound to handle your data securely and confidentially, and are prohibited from using your personal information for any purpose other than providing services to Koading. We conduct regular reviews of our providers to ensure ongoing compliance.
Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Our standard retention periods are as follows:
- Client data: Retained for the duration of the service agreement plus 6 years for tax and legal compliance purposes
- Contact form submissions: Retained for up to 24 months unless a service agreement is entered into
- Newsletter subscribers: Retained until you unsubscribe or request deletion
- Website analytics data: Retained for up to 26 months (in line with Google Analytics defaults)
- Server logs: Retained for up to 90 days for security and debugging purposes
When personal data is no longer required, it is securely deleted, anonymised, or destroyed in accordance with our data retention procedures.
Your Rights
Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information:
- Right of access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete personal data
- Right to erasure: Request deletion of your personal data ("right to be forgotten") where there is no compelling reason for continued processing
- Right to restriction: Request restriction of processing of your personal data under certain circumstances
- Right to data portability: Request transfer of your personal data to another service provider in a structured, commonly used, and machine-readable format
- Right to object: Object to the processing of your personal data for direct marketing or where processing is based on legitimate interests
- Right to withdraw consent: Withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal
- Right to lodge a complaint: Lodge a complaint with your local data protection supervisory authority
To exercise any of these rights, please contact us at [email protected]. We will respond to all legitimate requests within 30 days. In certain cases, we may ask you to verify your identity before processing your request.
For California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect about you, the right to request deletion, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your CCPA rights, please contact [email protected].
Data Security
We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for all data transmitted between your browser and our servers
- Secure hosting infrastructure with regular security patches and updates
- Access controls limiting data access to authorised personnel only
- Regular security audits and vulnerability assessments
- Staff training on data protection and information security best practices
- Secure backup procedures and disaster recovery protocols
While we take all reasonable precautions to protect your data, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your information but are committed to maintaining the highest practicable standards.
International Data Transfers
Koading operates across three countries — the United States of America, the United Kingdom, and the United Arab Emirates. Your personal data may be transferred to, stored in, and processed in any of these countries where we have offices or where our service providers are located.
Where data is transferred outside of your jurisdiction, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Agreement (IDTA), and equivalent protections as required by local law.
Third-Party Links
Our website may contain links to third-party websites, services, or applications that are not operated by us. These include links to Google, social media platforms, scheduling tools, and industry resources. We are not responsible for the privacy practices, content, or security of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
Children's Privacy
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect, use, or disclose personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take reasonable steps to delete such information promptly. If you believe we may have collected information from a child, please contact us at [email protected].
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry standards. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website. We encourage you to review this Privacy Policy periodically.
Your continued use of our website or services after any changes to this Privacy Policy constitutes your acceptance of the updated terms.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us through any of the following channels:
- Email: [email protected]
- General enquiries: [email protected]
- Phone: +1 (786) 735-4111
- Website: koading.com/contact-us
We aim to respond to all privacy-related enquiries within one business day and to resolve any data protection concerns within 30 days.