Back to home

    Privacy Policy

    1. Introduction

    At FixLovableSEO we respect your privacy. This privacy policy explains how we collect, use and protect your personal data when you use our services, in compliance with the General Data Protection Regulation (GDPR).

    1.1 Data Controller Identity

    Legal entity: Pico Yellow BV

    Trading name: FixLovableSEO

    Address: Verlengde Poolseweg 16, 4818 CL Breda, Netherlands

    Chamber of Commerce number: 82931933

    Email: info@fixlovableseo.com

    2. What data do we collect?

    We collect the following categories of personal data:

    • Contact details: Name and email address (via contact form and order)
    • Website data: URL of your Lovable site and technical information
    • Lovable credentials: Access credentials to your Lovable project (stored encrypted)
    • Payment data: Transaction data and order history (via secure external processors)
    • Technical data: IP address, browser type, device information
    • Analytics data: Anonymous website usage statistics

    3. How do we use your data?

    We use your data for the following purposes, with the corresponding legal grounds (GDPR Art. 6):

    Delivery of SEO services

    Legal basis: Performance of contract (Art. 6(1)(b) GDPR)

    Contact about your project

    Legal basis: Performance of contract (Art. 6(1)(b) GDPR)

    Processing of payments

    Legal basis: Performance of contract (Art. 6(1)(b) GDPR)

    Financial administration

    Legal basis: Legal obligation (Art. 6(1)(c) GDPR)

    Improvement of our website and services

    Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

    Marketing communications (if you have given consent)

    Legal basis: Consent (Art. 6(1)(a) GDPR)

    4. Retention periods

    We do not keep your personal data longer than necessary for the purposes for which it was collected:

    • Order and invoice data: 7 years (tax retention obligation)
    • Contact form data: 2 years after last contact
    • Lovable project access: Until project delivery, then deleted
    • Analytics data: 26 months (anonymized)
    • Marketing consent: Until withdrawal of consent

    5. Data storage and security

    We store your data securely with modern encryption and security measures. Your Lovable project credentials are stored encrypted and only used for the execution of the agreed services.

    Hosting:

    Our services are hosted within the European Union, except for specific third parties that operate globally (see section 7).

    Transfer outside the EU:

    Some services (such as payment processing via Stripe) may process data in the United States. These parties provide appropriate safeguards through Standard Contractual Clauses or other approved mechanisms under GDPR.

    6. Your rights

    Under GDPR you have the following rights regarding your personal data:

    • Right of access: You can request what personal data we process about you
    • Right to rectification: You can request correction of inaccurate data
    • Right to erasure: You can request deletion of your data ("right to be forgotten")
    • Right to restriction: You can request restriction of processing
    • Right to data portability: You can request your data in a structured format
    • Right to object: You can object to processing of your data
    • Right to withdraw consent: If processing is based on consent

    How can you exercise your rights?

    Send an email to info@fixlovableseo.com with a clear description of your request. We will respond within 1 month.

    Right to lodge a complaint with supervisory authority:

    If you disagree with how we process your data, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

    7. Third parties and processors

    We never share your data with third parties for marketing purposes. We do use trusted external processors for specific services:

    Stripe (payment processing)

    For processing payments. Privacy policy: stripe.com/privacy

    Lovable Cloud / Supabase (hosting and database)

    For hosting our application and data storage. Privacy policy: supabase.com/privacy

    Resend (email sending)

    For sending order confirmations and communications. Privacy policy: resend.com/legal/privacy-policy

    All these parties are contractually obliged to only use your data for the purposes for which we have engaged them and to take appropriate security measures.

    8. Cookies and similar technologies

    Our website uses cookies. Below you will find information about which cookies we use and for what purpose:

    Functional cookies (necessary)

    These cookies are essential for the website to function, such as maintaining your session and preferences. Retention period: session or 1 year.

    Analytics cookies

    We use anonymized analytics to measure and improve website usage. Retention period: maximum 26 months.

    Managing cookies:

    You can disable cookies through your browser settings. Please note that disabling functional cookies may affect the website's functionality.

    9. Automated decision-making

    We do not use automated decision-making or profiling that would have significant consequences for you.

    10. Changes to this privacy policy

    We may update this privacy policy from time to time. The most current version can always be found on this page. Important changes will be communicated via email to our customers.

    11. Contact

    For questions about this privacy policy or about the processing of your personal data, you can contact us:

    Email: info@fixlovableseo.com

    Address: Verlengde Poolseweg 16, 4818 CL Breda, Netherlands

    Last updated: November 14, 2025