Privacy policy

Last updated: September 2026

1. Introduction

WELTO Limited ("we", "our", or "us") is committed to protecting and respecting your privacy. This policy explains what we do with personal information when you visit weltodigital.com or use our SEO services.

We are the data controller for that information. Our details are in section 12.

2. Information we collect

2.1 Information you give us

There are no forms on this website. You reach us in one of two ways, and each tells us something different:

• By email. We receive whatever you put in your message, which normally includes your name, email address and something about your business.
• By booking a call. Our booking calendar is provided by Calendly. When you book, Calendly collects your name, email address, the time you chose and any answers you give on the booking form, and passes them to us.

If you go on to become a client, we hold the contact and business details needed to deliver and invoice the work.

2.2 Information collected automatically

Our host, Vercel, records standard server information for every request, including IP address, the page requested, timestamp, browser type and referring page. This is how the site is delivered and kept secure.

We also use Vercel Web Analytics to count visits. It is cookieless: it sets nothing on your device, does not fingerprint you and cannot follow you to other websites. What we see is aggregated — page views, referrers, countries, device types — never an individual.

3. How we use your information

• To reply to your enquiry and arrange calls
• To provide, manage and invoice our SEO services
• To understand which pages are read, so we can write better ones
• To keep the website available and secure
• To meet our legal and accounting obligations

We do not use your information for automated decision-making or profiling, and we do not sell it.

4. Legal basis for processing

• Legitimate interests — responding to enquiries, running and securing the website, and understanding aggregate traffic. We have considered your rights and do not think this processing is intrusive.
• Contract — delivering services you have engaged us for.
• Legal obligation — keeping accounting records.
• Consent — loading the Calendly calendar, which you choose by clicking. You can withdraw consent by clearing the cookies Calendly sets.

5. Cookies and tracking technologies

This website sets no cookies of its own, and our analytics sets none either. That is deliberate, so you are not asked to make a decision about cookies before you can read anything.

One third party can set cookies, and only if you ask it to. The booking calendar on our contact and campaign pages is not loaded when the page opens — you see a placeholder with a button. Press that button and Calendly loads, which sets Calendly's own cookies. If you never press it, nothing third-party runs.

You can remove any cookies already stored through your browser settings.

6. Sharing your information

We do not sell your personal information. We share it only with the suppliers who help us operate, listed in section 9, and where the law requires it, such as a valid request from a regulator or in connection with legal proceedings. If our business is ever sold or reorganised, information may transfer to the new owner under the same protections.

7. Data security

The site is served over HTTPS and holds no database of visitor information. Enquiries live in our email system and bookings in Calendly, both protected by access controls and multi-factor authentication. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

8. Data retention

• Enquiries that do not become work: up to 24 months, then deleted.
• Client records: for the engagement and six years afterwards, to meet accounting and tax requirements.
• Server logs: retained by Vercel on a rolling short-term basis.
• Analytics: aggregate counts only, with no personal data to retain.

9. Suppliers we use

9.1 Vercel

Hosting and cookieless analytics. Vercel Inc. is based in the United States. See Vercel’s privacy policy.

9.2 Calendly

Appointment booking, loaded only when you click. Calendly LLC is based in the United States. See Calendly’s privacy notice.

9.3 Email

Our business email is provided by Google Workspace, and messages you send us are stored there.

10. International data transfers

The suppliers above are based in the United States, so your information may be transferred there. Those transfers are covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, together with the suppliers’ own safeguards, which give your information protection equivalent to UK law.

11. Your rights

Under UK GDPR you have the right to:

• Access the personal information we hold about you
• Have inaccurate information corrected
• Have your information erased
• Restrict or object to how we use it
• Receive it in a portable format
• Withdraw consent where we rely on it

Email us to exercise any of these. We respond within one month, and there is no charge.

12. Contact us

For any question about this policy, or to exercise your rights, contact:

We are not required to appoint a Data Protection Officer, so enquiries go to the address above.

13. Children’s privacy

Our services are for businesses. We do not knowingly collect information from anyone under 18. If you believe we have, tell us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date.

15. Supervisory authority

You can complain to the Information Commissioner’s Office, the UK supervisory authority for data protection. We would appreciate the chance to address your concern first.

ICO Website: https://ico.org.uk