Who is responsible for your information
CoreLane SEO is a trading name of CoreLane Digital Ltd. We are the controller responsible for the personal information collected through this website. You can contact us at [email protected].
What the enquiry form collects
The mini-audit form asks for your website address and email address. Your name and description of what you need help with are optional. The website address and email address are required so that we can assess the request and reply; without them, we cannot provide the mini-audit.
Cloudflare Turnstile also processes technical information about your browser and interaction with the security check to help us prevent automated abuse. It is used for security, not advertising.
Why we use the information
We use enquiry details to respond to your request, carry out the requested mini-audit and, if relevant, discuss services with you. We rely on the steps you ask us to take before any contract and our legitimate interests in handling genuine business enquiries. We use Turnstile under our legitimate interest in keeping the form secure.
We do not sell enquiry information or use it for advertising. We do not make decisions about you with legal or similarly significant effects based solely on automated processing.
Who receives it
We use the following service providers to run the website and handle requests:
- Hetzner, which hosts the website and server in Germany. See Hetzner’s privacy information.
- Google Cloud Firestore, which stores enquiry records in the London region. See Firebase privacy information.
- Cloudflare Turnstile, which checks that form submissions are genuine. See the Turnstile documentation.
- Brevo, which sends the enquiry notification to our internal inbox. See Brevo’s GDPR information.
How long we keep it
Enquiry records in Firestore are kept for 90 days after submission and then deleted. We aim to delete related notification emails from our working inbox within the same period. Provider security, delivery and backup logs may be kept for longer under the provider’s own retention rules.
Analytics and cookies
This website uses Google Analytics 4 only if you choose “Allow
analytics” in the consent notice. If you decline, Google Analytics is
not loaded and its analytics cookies are not set. If you accept, Google
Analytics uses analytics cookies such as _ga and
_ga_* to measure visits and page use. The consent choice is stored
locally so we can remember it. These first-party cookies have a default expiry
of two years, subject to browser limits. Google Signals and advertising personalisation
are disabled, and we do not send names, email addresses or enquiry details
to Google Analytics.
You can change your analytics choice at any time: .
International processing
Our primary hosting and storage locations are Germany and the United Kingdom. Some service providers may process limited information in other countries through their support systems or subprocessors. Where UK data-protection law requires safeguards for a transfer, we rely on an adequacy regulation or appropriate contractual safeguards such as the UK International Data Transfer Addendum or IDTA.
Your rights
Depending on the circumstances, you can ask us to access, correct, delete or restrict use of your information. You may also object to processing, ask for a portable copy where that right applies, and withdraw consent for analytics at any time. Email [email protected]. We normally respond within one month, although the law allows an extension for complex or multiple requests.
You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.
Last updated
15 August 2026.