Privacy notice
This notice explains what personal data this website collects, why, and what you can do about it. It is written to be read rather than to be impressive.
Last updated: 12 November 2026
Who I am
I am Naveed Ganatra, an independent SEO consultant based in Karachi, Pakistan, working with clients in the UK and elsewhere. I am the data controller for the personal data described here — it comes to me and I decide what happens to it.
You can reach me at info@naveedganatra.com or on WhatsApp at +44 7828 760322.
What I collect, and when
When you send an enquiry form
The form asks for, and I receive:
- Your name
- Your firm or company name, where the form asks for it
- Your email address
- Your phone or WhatsApp number
- Your website address
- The service or practice area you selected
- Anything you write in the message box
Alongside that, my server records which page you sent the form from, the time, and your IP address. The IP address is used only to stop automated spam — the form was receiving several hundred junk submissions a month before those checks existed.
When you arrive from an advert
If you reach a campaign landing page from an advert, the link carries parameters identifying the campaign (for example utm_campaign and, from Meta adverts, fbclid). These are stored in your browser for the duration of your visit and sent with your enquiry if you choose to submit one, so that I know which advert produced it. They describe the advert, not you.
When you accept cookies
If, and only if, you accept analytics and advertising cookies, the Meta Pixel is loaded and will record your activity on that page and share it with Meta. Nothing is loaded if you reject or ignore the banner. See the cookie policy for the detail.
Why I use it, and my lawful basis
| What for | Lawful basis |
|---|---|
| Replying to your enquiry and discussing possible work | Consent, which you give by ticking the box and sending the form. You can withdraw it at any time. |
| Keeping the form working and free of spam | Legitimate interests — being able to receive genuine enquiries at all. |
| Knowing which advert produced an enquiry | Legitimate interests — not spending money on adverts that do not work. |
| Analytics and advertising cookies | Consent, given through the cookie banner. |
I do not send marketing emails, I do not run a newsletter, and I do not sell, rent or share your details with anyone for their own marketing.
Who else sees it
- My web host and email provider — the website and the inbox the enquiry arrives in are hosted by Hostinger, which processes the data on my instructions.
- Meta Platforms — only if you accept advertising cookies, and only for activity on the page, never the contents of your enquiry.
Nobody else. There is no sales team, no CRM vendor and no lead exchange.
How long I keep it
- Enquiries that become client work: for as long as we work together, and six years afterwards, because that is how long UK tax records must be kept.
- Enquiries that do not: up to 24 months, then deleted.
- Anti-spam logs: 90 days.
Your rights
Under UK GDPR you can ask me to:
- tell you what I hold about you, and give you a copy;
- correct anything that is wrong;
- delete it;
- restrict or object to how I use it;
- send it to you or someone else in a portable format;
- withdraw your consent, which does not undo anything done before you withdrew it.
Email info@naveedganatra.com and I will deal with it within one month. If you are not satisfied, you can complain to the Information Commissioner’s Office at ico.org.uk, though I would rather you told me first so I can put it right.
Data outside the UK
I am based in Pakistan, so personal data you send me is accessed from outside the UK. Where data is transferred out of the UK it is done on the basis of the UK’s International Data Transfer Addendum or equivalent safeguards. Meta processes data in the United States under its own transfer mechanisms.
Changes
If this notice changes materially I will update the date at the top. Please check it when you send a new enquiry.