Privacy Policy
This policy explains how Search Revenue Lab ("we", "us", "our") handles personal data when you visit this website, register for the free training, answer the survey, apply for a strategy session, book a call or become a client.
1. Who we are
The data controller is Lucalvry LLC, which owns and operates Search Revenue Lab, 30 N Gould St Ste R, Sheridan, WY 82801-6317, United States. Privacy contact: privacy@searchrevenuelab.xyz.
2. Scope and the laws we follow
We follow the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, the Swiss Federal Act on Data Protection (FADP), the California Consumer Privacy Act as amended by the CPRA (CCPA) and similar US state laws, Canada's PIPEDA, and the Australian Privacy Act 1988 and its Privacy Principles. Where laws differ, we apply the protection that applies to you.
3. Personal data we collect
- Identifiers and contact data: first and full name, work email, website address.
- Professional data: role, company revenue range, SEO history, goals, budget and start window.
- Survey and free-text answers: what you choose to tell us.
- Engagement data: whether you started the training and how far you watched; email opens and clicks where available.
- Booking data: chosen time, time zone and details you give the booking tool.
- Client data: contract, billing and payment details, and account access you grant us.
- Automatically collected data: IP address, device and browser type, operating system, pages viewed, referring page, campaign (UTM) parameters, approximate location derived from IP, and timestamps.
We do not knowingly collect sensitive or special-category data. Please don't include it in free-text answers.
4. Where it comes from
Directly from you through our forms, booking tool and emails; automatically from your device when you use the site; and from service providers that support us (for example, the booking tool confirming your appointment).
5. Purposes and legal bases
| Purpose | Legal basis (GDPR / UK GDPR / FADP) |
|---|---|
| Giving you access to the training and sending your link | Performance of a contract |
| Reviewing applications, preparing for and holding strategy calls | Steps at your request before a contract |
| Delivering paid services, invoicing and account management | Performance of a contract |
| Optional marketing emails about our services | Your consent |
| Improving content using survey and viewing data | Legitimate interests |
| Security, spam, fraud and abuse prevention | Legitimate interests |
| Analytics and marketing cookies | Consent |
| Tax, accounting and legal compliance; defending legal claims | Legal obligation; legitimate interests |
Legitimate-interest balancing: where we rely on legitimate interests, we have weighed our interest in running, securing and improving a business-to-business service against your rights. We limit the data used, keep it secure, and you can object at any time (see section 9).
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
6. Who we share it with
We never sell your personal data or share it for cross-context behavioural advertising. We use these processors under written data processing terms:
| Provider | Role |
|---|---|
| Supabase | Database and backend hosting |
| Resend | Sending email |
| HeyCal | Scheduling strategy calls |
| Cloudflare | Hosting, security checks and spam prevention |
| Our video hosting provider | Streaming the training |
We may also disclose data to professional advisers, to a buyer or successor in a business transfer, or when required by law or to protect rights and safety.
7. International transfers
We are based in the United States, and some providers process data in other countries. For transfers from the EU, UK or Switzerland we rely on an adequacy decision (including the EU–US Data Privacy Framework and its UK and Swiss extensions, where the provider is certified), the European Commission's Standard Contractual Clauses, or the UK International Data Transfer Agreement or Addendum. You can ask us for a copy of the relevant safeguards.
8. How long we keep it
| Data | Retention |
|---|---|
| Training access link | Expires 7 days after registration |
| Registration, survey and viewing data | Up to 24 months after your last interaction |
| Application and booking data | Up to 24 months; longer if you become a client |
| Client contract and billing records | Duration of the engagement plus 7 years for tax and legal purposes |
| Security and server logs | Up to 90 days, unless needed to investigate an incident |
| Cookie consent record | Up to 12 months |
| Unsubscribe (suppression) list | Kept so we can respect your choice |
9. Your rights
Depending on where you live, you have the right to:
- access your data and get a copy
- have inaccurate data rectified
- have your data erased
- restrict how it is used
- receive it in a portable format
- object to processing based on legitimate interests, and to direct marketing at any time
- withdraw consent at any time, without affecting earlier processing
- not be subject to solely automated decisions with significant effects (we don't make any)
- complain to a data protection authority, such as an EU supervisory authority, the UK ICO, the Swiss FDPIC, the Office of the Privacy Commissioner of Canada, or the Office of the Australian Information Commissioner
10. US state privacy notice (including California)
Notice at collection: in the last 12 months we collected identifiers, professional information, internet and network activity, approximate geolocation and inferences limited to service fit. We use them for the purposes in section 5 and keep them as set out in section 8. We do not collect sensitive personal information for inferring characteristics.
No sale or sharing: we do not sell personal information or share it for cross-context behavioural advertising, and have not done so in the past 12 months. We honour Global Privacy Control (GPC) signals as a request to opt out of sale or sharing.
Residents of California and other states with similar laws can ask to know, access, correct and delete their data, and to opt out of sale, sharing and targeted advertising. We will not discriminate against you or penalise you for using these rights.
11. Making a request
Email privacy@searchrevenuelab.xyz. To protect you, we verify your identity by matching information we already hold, usually by confirming the email address on file. An authorised agent may act for you with your signed permission, and we may ask you to confirm your identity directly. We reply within one month under GDPR (extendable by two months for complex requests), 45 days under the CCPA, or the time limit set by your local law. If we refuse a request, you can appeal by replying with "Appeal" in the subject line; we will answer within the time the law allows and tell you how to contact your regulator.
12. Marketing emails
We send marketing emails only when you actively select the optional marketing checkbox. You can withdraw that consent at any time through the unsubscribe link in every marketing email. We stop marketing emails straight away when you unsubscribe. Training delivery and other essential service or transactional emails may still be sent where needed.
13. Cookies
Our Cookie Policy explains which cookies we use. Change your choice at any time with "Cookie settings" in the footer.
14. Security and data breaches
We use encryption in transit, access controls and server-side processing, and limit access to the people who need it. No system is completely secure. If a breach is likely to put your rights at risk, we will notify the relevant authority (within 72 hours where GDPR requires) and tell you without undue delay where the law requires.
15. Children
This website is for business professionals aged 18 and over. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.
16. Changes
We may update this policy and will post changes here with a new date. If a change is significant, we will tell registered users by email.
17. Contact
Lucalvry LLC (owner and operator of Search Revenue Lab), 30 N Gould St Ste R, Sheridan, WY 82801-6317, United States. Email: privacy@searchrevenuelab.xyz.