Privacy Policy

1. Who I am

This site (nadiamohamed.me) is operated by Nadia Mohamed, an independent SEO engineer and consultant. For privacy purposes I act as the data controller for any personal data collected through this site.

Contact for any privacy-related question: hello@nadiamohamed.me.

2. What data I collect

I aim to collect the minimum personal data needed to do the thing you're asking me to do. Specifically:

2.1 — When you fill in the free-audit form

• Your name
• Your email address
• The website URL and priority page you'd like me to look at
• The optional context you provide (competitors, frustration, goals)

2.2 — When you email me directly

• Your email address and any content you choose to include in the message

2.3 — When you use the free AI tools

The AEO Article Analyzer, Keyword Clustering and AI Tool Ideas Generator require sign-up. When you create an account, I collect your email address (for sign-in and password recovery) and any URLs, keywords or niches you submit to the tools. Tool runs are saved against your account so you can return to past results.

You can delete your account and the data associated with it at any time — see Section 7 (Your rights).

2.4 — When you simply visit the site

Standard server logs (IP address, browser user-agent, requested URL, timestamp) are recorded by my hosting provider for security and operational reasons. Analytics events are recorded via Google Analytics 4 with Consent Mode v2 — see Section 4.

3. Why I collect it (legal basis)

Under GDPR, the legal bases I rely on are:

• Performance of a contract / pre-contract steps — for the free-audit form and any client engagement that follows it.
• Legitimate interests — for server logs, basic site security, and aggregate analytics that have no impact on you individually.
• Consent — for any non-essential analytics and any future marketing communication. You can withdraw consent at any time.

4. Cookies & tracking

This site uses a small number of cookies and analytics events. The cookie banner you see on first visit is where you can grant or refuse non-essential cookies; essential cookies (used for the language switcher and accessibility preferences) are not blockable because the site can't function without them.

The non-essential tracking I currently use, only if you consent:

• Google Analytics 4 with Consent Mode v2 for aggregate visitor analytics
• Google Tag Manager to manage the above

I do not run advertising pixels, retargeting, or social tracking on this site.

5. Third parties & processors

Personal data you submit may be processed on my behalf by a small number of third-party services. I have data-processing agreements in place with each of them. The current list:

• Email & calendar: Google Workspace (EU region)
• Hosting: the hosting provider stated in the imprint, with EU data centres where available
• Analytics: Google Analytics 4 (subject to your consent)
• CRM & client communication: Notion (for shared project workspaces), Slack (where the client uses it)

I do not sell personal data, and I do not share it with parties other than the processors above without your explicit consent.

6. How long I keep it

• Free-audit submissions — kept for up to 12 months after delivery of the audit, then deleted.
• Client engagement records — kept for the duration of the engagement plus the statutory retention period required by tax / accounting law in my jurisdiction.
• General email correspondence — kept indefinitely unless you ask me to delete it.
• Analytics — GA4 retention is set to 14 months at the property level.

7. Your rights

Under GDPR you have the right to:

• Access the personal data I hold about you
• Have it corrected if it's wrong
• Have it deleted (subject to legal retention obligations)
• Object to processing based on legitimate interests
• Withdraw consent at any time for processing that relies on consent
• Lodge a complaint with the data protection authority in your country

To exercise any of these rights, email hello@nadiamohamed.me. I'll respond within 30 days.

8. Contact & complaints

9. Changes to this policy

I may update this policy from time to time — typically when I add or change a processor, or when there's a regulatory update I need to reflect. The "Last updated" date at the top of this page shows when the current version went live. For material changes (new processors, new data categories), I'll surface the change in a way that's actually visible — not buried in a footer link.