Privacy
Privacy Policy
Last updated: 12 October 2026
This Privacy Policy explains how personal data is handled when you visit the First Glance SEO Audit website or send an SEO service enquiry.
1. Data controller
The controller is Edvardas Čeilitka, individual activity certificate No. 1338617, at Keramikų g. 6, Panevėžys, Panevėžys City Municipality, LT-37450, Lithuania. For privacy questions or requests, email info@firstglance.eu.
2. Personal data collected
When you submit the enquiry form, the website collects the name, email address, website address, preferred service, and message that you enter. When you submit a fixed-price order, it also stores the client or company name, target market and language, optional notes, order reference, status, selected service, amount, currency and consent timestamps. The order form does not collect passwords, hosting, Search Console, banking or other sensitive access credentials.
The PHP form handler and server also receive submission time and technical request information for delivery, account security and abuse prevention. Hostinger may create ordinary technical and security logs when the website or form is accessed. Depending on its systems, those logs may include an IP address, request time, requested path, browser or device information, response status, and security events. Form fields are submitted in the POST body; the site does not place them in the URL.
When you create a customer account, we process your name, email address, verification status, chosen sign-in method and a securely hashed password. The password itself is not stored. When you sign in with Google, we receive a Google account identifier, name, email address and confirmation that Google has verified that address. If you request account deletion, we retain the request time and status.
For security, we temporarily retain hashes of one-time email-verification and password-reset tokens, abuse-prevention rate-limit records and a server-session identifier. Third-party access or refresh tokens are not stored.
3. Purposes and legal bases
- Responding to enquiries and preparing a proposal: processing is necessary to take steps at your request before entering into a contract (GDPR Article 6(1)(b)).
- Operating and securing the website and form: processing is based on the legitimate interests of maintaining a reliable service, preventing spam and misuse, and diagnosing technical failures (GDPR Article 6(1)(f)).
- Meeting legal obligations or handling legal claims: information may be retained or disclosed where required by law or necessary to establish, exercise, or defend legal claims.
The form acknowledgment confirms that you have read this policy. It is not consent to marketing. Enquiry data is not added to a marketing list, and no automated decision-making or profiling is performed.
Creating and managing an account is necessary to provide the account service you request and to take steps before entering a contract (GDPR Article 6(1)(b)). Session, rate-limit and related security records are processed under the legitimate interest of protecting accounts and the website (GDPR Article 6(1)(f)).
4. Recipients and processors
The website and PHP form are hosted by Hostinger. Hostinger and its infrastructure or email service providers may process data as service providers where needed to host the site, maintain security logs, and deliver the enquiry email to info@firstglance.eu. Access is limited to Edvardas Čeilitka and service providers that need it to operate or support the website and email service.
Personal data may also be disclosed to public authorities, courts, professional advisers, or other recipients when required by law or necessary to protect legal rights. Personal data is not sold.
If you choose Google sign-in, Google acts as a separate controller under its own privacy terms and provides only the profile data needed for sign-in. Verification and password-reset messages are sent through the configured Hostinger SMTP or email service.
Payments on this website are processed through the MakeCommerce.lt platform, operated by Maksekeskus AS Lithuania branch (Konstitucijos pr. 21A, Vilnius LT-08105, Lithuania, registration No. 307639352). Personal information required to execute and confirm the payment is therefore transferred to Maksekeskus AS. This may include the customer's name, email address, order reference, amount, currency and other information necessary for the transaction. The legal bases are contract performance (GDPR Article 6(1)(b)) and applicable accounting obligations. The payment provider retains data according to its legal duties and privacy terms.
5. Retention
If an enquiry does not become a client engagement, its contents are retained for no longer than 12 months after the last communication and are then deleted unless they are needed for a legal claim or another legal obligation. If an enquiry becomes a client engagement, relevant correspondence and business records may be kept for the longer periods required by applicable accounting, tax, contract, and limitation laws.
Technical and security logs are retained according to Hostinger’s operational and security retention settings and are removed or anonymised when no longer needed for those purposes.
Email-verification links expire after 24 hours and password-reset links after one hour. Used or expired tokens may be periodically removed. Account data is retained while the account is active. After a deletion request, the account and unnecessary data are removed following identity and legal-retention checks. Invoice, payment, contract or dispute records may be retained for the period required by law.
6. International transfers
Hosting and email providers may use infrastructure or approved service providers in countries outside the European Economic Area. Where personal data is transferred outside the EEA, the transfer must rely on an applicable European Commission adequacy decision, Standard Contractual Clauses, or another safeguard permitted by Chapter V of the GDPR. You may request information about safeguards relevant to your data by emailing info@firstglance.eu.
7. Your rights
Subject to the conditions and exceptions in the GDPR, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, or data portability. You may also object to processing based on legitimate interests. To exercise a right, email info@firstglance.eu. Identity may need to be verified before a request is completed.
You may lodge a complaint with the Lithuanian State Data Protection Inspectorate in Vilnius, Lithuania. Its official complaint information and e-service are available on the Inspectorate’s services page. You may also complain to the supervisory authority in the EU or EEA country of your habitual residence, place of work, or the alleged infringement.
8. Security
The site uses HTTPS when correctly enabled in Hostinger, same-origin form submission, server-side validation, input length limits, a honeypot field, and controlled error responses. No internet transmission or storage method is completely secure, but reasonable technical and organisational measures are used to reduce risk. Please do not include passwords, access credentials, payment information, or other sensitive personal data in the enquiry message.
The customer account uses secure server sessions, password hashing, one-time tokens, CSRF protection, rate limiting and prepared database statements. Account email verification is required before a fixed-price order can be submitted or order and report information can be accessed.
9. Cookies and analytics
This website uses Google Analytics 4 (measurement ID G-DJBQ5N55CX) only after you choose “Accept analytics.” Analytics storage is denied by default. If accepted, Google Analytics may process device, browser, interaction, approximate location and referral information to help First Glance SEO Audit understand aggregate website use and improve the service. You can decline without losing access to the website. Your choice is stored locally in your browser. The enquiry handler does not create an account or subscribe you to marketing.
Signing in creates a strictly necessary secure session cookie. It is used only for authentication state and request-forgery protection, is not used for advertising, and does not require analytics consent. Signing out destroys the session and inactive sessions expire automatically.
10. Changes to this policy
This policy may be updated when the website’s processing changes or legal requirements develop. The current version and its effective date will remain available on this page.