Privacy Policy

This policy explains how Noumexa (“we”, “us”) collects, uses, stores, and shares personal information when you visit noumexa.com or engage us for services. If any part of this policy is unclear, contact us at hello@noumexa.com and we’ll clarify.

1. Who we are

Noumexa is an SEO consultancy founded by Nouman Bilal and headquartered in Peshawar, Pakistan. We serve clients internationally, including in the European Union, United Kingdom, United States, Canada, Australia, and New Zealand. For the purposes of GDPR, the data controller is Nouman Bilal, contactable at hello@noumexa.com.

2. Information we collect

We collect the minimum information needed to run the site, reply to enquiries, and deliver client engagements. This falls into three categories:

• Information you give us directly — your name, email address, website URL, message content, and phone number when you submit a free audit request, contact form, or WhatsApp message.
• Information collected automatically — IP address (in truncated form for analytics), browser type, device type, pages visited, referrer, and approximate location (country/city level). This data is collected via Google Analytics 4 with IP anonymisation enabled.
• Information from third-party integrations — if you engage us for services, we may receive access to your Google Search Console, Google Analytics, Ahrefs, Semrush, or other SEO platform data under a data-processing addendum (DPA) as part of the engagement.

3. How we use your information

We use the information above for the following purposes and legal bases (GDPR):

• Responding to enquiries — audit requests, WhatsApp messages, contact form submissions. Legal basis: legitimate interest and, where you initiated contact, performance of a pre-contractual step.
• Delivering our services — technical SEO audits, content strategy, programmatic SEO builds, reporting. Legal basis: performance of a contract.
• Improving our website — anonymised analytics to understand which pages are useful and which need work. Legal basis: legitimate interest, with your consent for non-essential cookies.
• Legal compliance — tax records, invoicing, and dispute resolution. Legal basis: compliance with legal obligation.

We do not sell your personal information to third parties. We do not run programmatic advertising. We do not use your information for automated decision-making that has legal or similarly significant effects on you.

4. Cookies & analytics

We use a minimal set of cookies:

• Essential cookies — required for the site to function (e.g., session state, cookie-consent state). These are set automatically and do not require your consent.
• Analytics cookies (Google Analytics 4) — set only if you accept them via the cookie banner. GA4 is configured with IP anonymisation. Data is retained for 14 months and then automatically deleted.

You can change your cookie preferences any time by clicking the “Cookie preferences” link in our footer. Full details are in our Cookie Policy.

5. Sharing & third parties

We share your information only with the following categories of service providers, and only to the extent needed to run our business:

• Hosting — Vercel Inc. (site hosting) and Cloudflare Inc. (CDN and DDoS protection). Both are certified under EU-US Data Privacy Framework.
• Analytics — Google LLC (GA4), only where you have accepted analytics cookies.
• Email delivery — Resend Inc. (transactional email) for delivering audit-request notifications to Nouman.
• Communication — WhatsApp / Meta Platforms Inc. when you choose to contact us via WhatsApp.
• Client-engagement tooling (during an engagement only) — Google Search Console, Google Analytics, Ahrefs, Semrush, and similar SEO platforms.

We may disclose personal information if legally required (e.g., valid court order or regulator request). We will notify you of such requests unless the law prohibits it.

6. Data retention

We retain personal information only for as long as needed:

• Audit requests / enquiries — 12 months from last contact, then deleted.
• Client engagement records — 7 years for tax and legal purposes after the engagement ends.
• Analytics data — 14 months, then automatically deleted by GA4.
• Marketing emails — until you unsubscribe.

7. Your rights (GDPR / UK GDPR / CCPA)

You have the following rights regarding your personal information:

• Access — you can request a copy of the personal information we hold about you.
• Correction — you can ask us to correct inaccurate information.
• Deletion — you can ask us to delete your information (subject to legal obligations we may have to retain it).
• Restriction & objection — you can ask us to restrict how we use your information, or object to specific uses.
• Portability — you can request your information in a structured, machine-readable format.
• Withdrawal of consent — where we relied on your consent, you can withdraw it at any time.

To exercise any of these rights, email hello@noumexa.com. We’ll respond within 30 days. If you believe we’ve mishandled your information, you can complain to your local data protection authority (in the EU) or the ICO (in the UK).

8. Security

We use industry-standard security practices: TLS encryption on the site, encrypted database storage, principle of least privilege on internal tooling, and two-factor authentication on all business accounts. Despite that, no system is 100% secure. If a breach occurs that affects your information, we will notify you and any relevant authority within 72 hours as required by law.

9. Children’s privacy

Our services are for businesses and their representatives. We do not knowingly collect personal information from anyone under 16. If you believe we have collected information from a child, contact us and we’ll delete it.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the “last updated” date at the top and, if the changes are material, notify you via email or a prominent site notice. Continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact us

Questions, complaints, or data-rights requests: hello@noumexa.com
Founder / data controller: Nouman Bilal, Peshawar, Pakistan