Privacy Policy

1. Introduction

MJ Web Studio LTD ("we", "our", "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website mjwebstudio.co.uk and our online tools.

We are the data controller responsible for your personal data. This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Our Contact Details

MJ Web Studio LTD
7 Bell Yard
London WC2A 2JR
United Kingdom

Email: mjwebstudioltd@gmail.com
VAT Number: GB 337390588

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Contact form submissions: Name, email address, phone number (if provided), and message content
• Business enquiries: Company name, website URL, and project requirements

3.2 Information Collected Through Google OAuth (Free Tools)

When you use our free tools such as the Google Penalty Checker, you authenticate via your Google Account. Through this process, we collect:

• Basic profile information: Your name and email address
• Google Search Console data: Read-only access to your Search Console properties and performance data
• Google Analytics data: Read-only access to your Analytics properties and traffic data

Important: We only request read-only access to your Google data. We cannot modify, delete, or publish anything on your behalf.

3.3 Technical Information

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on our website

4. How We Use Your Personal Data

We use your personal data for the following purposes:

Purpose	Lawful Basis
To respond to your enquiries and provide our SEO services	Performance of a contract / Legitimate interests
To provide our free tools (Google Penalty Checker, SEO ROI Calculator)	Consent (via Google OAuth) / Legitimate interests
To understand who uses our free tools and improve them	Legitimate interests
To maintain the security of our website and services	Legitimate interests
To comply with legal obligations	Legal obligation

5. Google OAuth and API Data

When you use our Google Penalty Checker tool, you grant us temporary access to your Google Search Console and Google Analytics data through Google's secure OAuth 2.0 authentication system.

5.1 Scope of Access

We request the following Google API scopes:

• webmasters.readonly - Read-only access to Google Search Console
• analytics.readonly - Read-only access to Google Analytics
• userinfo.email and userinfo.profile - To identify your account

5.2 What We Store

We store the following data in our database:

• Your email address and name (to identify users of our service)
• Encrypted OAuth tokens (to maintain your session)

We do not permanently store your Search Console or Analytics data. This data is retrieved in real-time when you use the tool and is not retained after your session.

5.3 Revoking Access

You can revoke our access to your Google data at any time by visiting your Google Account Permissions page and removing "Google Penalty Checker" from the list of connected apps.

6. Cookies

Our website uses a small number of essential local storage entries necessary for the website to function (such as remembering your cookie consent choice), and - only with your consent - Microsoft Clarity analytics cookies that help us understand how visitors use the site so we can improve it.

We do not use advertising cookies, retargeting cookies, or third-party tracking pixels. For full details of every cookie we use, how to give or withdraw consent, and how to manage your preferences, please see our Cookie Policy.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties.

We may share your data with:

• Google: When you authenticate via Google OAuth, Google processes your authentication. Please refer to Google's Privacy Policy.
• Hosting providers: Our database is hosted on servers located in the European Union, ensuring compliance with UK GDPR data residency requirements.
• Legal authorities: If required by law or to protect our legal rights.

8. International Data Transfers

Your personal data is stored on servers located in the European Union. We do not transfer your data outside the UK/EU unless necessary for the provision of our services (e.g., Google API calls), in which case such transfers are protected by appropriate safeguards including Standard Contractual Clauses.

9. Data Retention

We retain your personal data for the following periods:

• Contact form enquiries: 3 years from the date of submission, or until you request deletion
• Google OAuth user data: Until you revoke access or request deletion
• Session cookies: Deleted when you close your browser

After these periods, your data will be securely deleted or anonymised.

10. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us at mjwebstudioltd@gmail.com. We will respond within 30 days.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of OAuth tokens at rest
• Secure database access controls
• Regular security reviews

12. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

MJ Web Studio LTD
Email: mjwebstudioltd@gmail.com
Address: 7 Bell Yard, London WC2A 2JR, United Kingdom