At Thurnix, we are committed to protecting the privacy and personal information of our clients. This privacy policy explains how we collect, use, store, and protect your information when you use our SEO and web design services.
1. Information We Collect
1.1 Personal Information
We may collect the following information:
Contact Information: Full name, email, phone number, address
Business Information: Company name, job title, industry
Website Information: Domain, URL, technical website information
Payment Information: Billing information, payment method (we do not store credit card information)
1.2 Technical Information
Cookies and Tracking Data: IP address, browser type, operating system
Google Analytics: Data on user behavior on the website
SEO Data: Keywords, rankings, traffic data from SEO tools
1.3 Automatically Collected Information
Web server log files
Device and browser information
Access times and pages viewed
2. Purpose of Using Information
We use your information for the following purposes:
2.1 Providing Services
To perform the agreed-upon SEO and web design services
To analyze and optimize client websites
To provide technical support and consultation
2.2 Communication and Support
To send notifications about project progress
To provide monthly SEO reports
To respond to support requests
2.3 Improving Services
To analyze service effectiveness to improve quality
To research the market and SEO trends
To develop new products and services
2.4 Marketing and Communication
To send newsletters about SEO and digital marketing (with consent)
To share case studies (with client permission)
To run targeted marketing campaigns
3. How We Share Information
3.1 General Principles
Thurnix does not sell, rent, or trade clients’ personal information with third parties for commercial purposes.
3.2 Permitted Sharing Cases
We only share information in the following cases:
With explicit consent from the client
With service partners: Companies providing support services (hosting, email marketing, analytics) under strict confidentiality agreements
Upon legal request: When required by competent authorities according to legal regulations
To protect our rights: To protect the legal rights of Thurnix or to prevent fraud
3.3 Third-Party Partners and Tools
Google Analytics: To analyze website traffic
Google Search Console: To monitor SEO performance
Email marketing platforms: To send newsletters (with consent)
CRM systems: To manage customer relationships
Cloud storage: To securely store project data
4. Information Security
4.1 Security Measures
We apply advanced security measures:
SSL/TLS Encryption: All data is transmitted over an encrypted connection
Firewall and Antivirus: Protecting the system from security threats
Access Control: Only authorized personnel can access data
Regular Backups: Periodic and secure data backups
Security Monitoring: 24/7 security monitoring
4.2 Data Storage
Data is stored on secure servers in USA and AWS
Backups are performed daily and encrypted
Access logs are recorded and monitored
4.3 Employees and Security
All employees sign a confidentiality agreement
Regular training on security best practices
Principle of least privilege - only necessary access rights are granted
5. Cookies and Tracking Technologies
5.1 Types of Cookies We Use
Essential cookies: Necessary for the website to function
Analytics cookies: Google Analytics to understand user behavior
Marketing cookies: To display relevant advertisements
Preference cookies: To store personal settings
5.2 Managing Cookies
You can:
Disable cookies in your browser settings
Use the cookie consent banner to select cookie types
This policy is effective as of January 1, 2025, and is updated regularly to ensure legal compliance and the best protection of customer rights.
Frequently Asked Questions about Privacy
Common questions about Thurnix's privacy policy
No, Thurnix does not store credit card information. We use PCI DSS certified payment gateways like PayPal and Stripe to process payments securely. Your payment information is encrypted and processed directly by these providers.
Absolutely not. Thurnix has strict confidentiality agreements and never shares client data, SEO strategies, or business information with anyone, including competitors. Each project is kept confidential with strict access control.
Yes, you have the right to request data deletion (Right to be forgotten). We will completely delete your personal information and project data within 30 days of your request, except for information that must be retained by law (such as invoices, contracts).
Yes, Thurnix fully complies with GDPR for EU clients and other international data protection regulations. We have a Data Protection Officer (DPO), Standard Contractual Clauses, and a process for handling data subject rights in accordance with GDPR standards.
Thurnix has a 24/7 security monitoring system and an incident response plan. In the event of a data breach, we will notify within 72 hours as required by GDPR and within 24 hours to affected clients, along with specific remedial measures.
Yes, you can opt-out of Google Analytics by: (1) Installing the Google Analytics Opt-out Browser Add-on, (2) Disabling cookies in the cookie consent banner, (3) Using the Do Not Track setting in your browser. We respect your privacy choices.
We only share necessary data to provide services: Google Analytics for website analytics, Google Ads for marketing campaigns (with consent). We do not share sensitive information like financial data or detailed personal information. All is done under data processing agreements.
Only authorized employees have access for the purpose of providing services. We use the principle of least privilege, two-factor authentication, and access logging. All employees sign an NDA and receive regular data security training.
All backups are encrypted using AES-256 encryption and stored in multiple locations with strict access control. Backups are tested periodically and have a clear retention policy. We use automated daily backups with point-in-time recovery capabilities.
Yes, you have the right to data portability. We will provide a copy of your data in a structured, machine-readable format (JSON/CSV) within 30 days of your request. This includes: personal information, SEO data, reports, and project files.