Website Privacy Policy

1. Who we are

This website is operated by CARPEBO SINGLE MEMBER P.C. (trading as Devebo), the data controller for the purposes of the EU General Data Protection Regulation (GDPR).

Company	CARPEBO SINGLE MEMBER P.C.
Trading as	Devebo
Registration (CRN)	161870546000
Address	2nd km Xanthis – Lagous, Xanthi 67100, Greece
Privacy contact	privacy@seomerlin.com

If you have a question about your data, that email address reaches a person, not a ticket queue.

2. What we collect, and why

We’ve split this by what you actually did, because that’s how you’ll want to read it.

If you just browse the site

We use Google Analytics 4 to understand which pages people read and where they arrive from. This runs only if you accept analytics cookies in our consent banner. If you decline, no analytics data is collected about you.

Data	Why	Legal basis
Pages viewed, time on page, referrer	Working out which pages are useful and which are broken	Consent
Approximate location (country / city level)	Knowing which markets read us	Consent
Device, browser, screen size	Making sure the site isn’t broken on your setup	Consent

Google Analytics IP anonymisation is applied. We don’t use analytics data to identify individual people, and we don’t run advertising or remarketing tags on this site.

If you apply to be a beta tester

Our beta application form collects your name, email address, city and country. We ask for city and country so we can see which regions and hosting setups the plugin is being tested against — not to target you.

Data	Why	Legal basis
Name, email	Sending your beta licence key and beta-related updates	Contract / pre-contract steps
City, country	Understanding the spread of test environments	Legitimate interest
Email (marketing)	Product news and occasional offers — only if you tick the opt-in box	Consent

The marketing opt-in is a separate, unticked checkbox. You can apply for the beta without it, and unsubscribe at any time from any email we send.

If you buy the plugin

Payments and licensing run through Freemius, our checkout and licence provider. When you buy, Freemius collects and processes your billing details directly — we never see or store your full card number. Freemius acts as merchant of record and as a processor for the customer data we receive back (name, email, licence status, country for tax purposes).

If you email us

We keep the correspondence so we can follow the thread and pick it up later. Nothing more.

3. What we never do

• We don’t sell your data. Not to anyone, not ever.
• We don’t run advertising or remarketing pixels on this website.
• We don’t build profiles or make automated decisions about you.
• We don’t add you to a marketing list because you filled in a support form.

4. Who else touches your data

We use a small number of processors. Each one is here because it does a specific job, and each is bound by a data processing agreement.

Provider	What it does	Where
Hostinger	Website hosting and server logs	EU
Google (Analytics 4, Search Console)	Traffic analytics and search performance	EU / USA
Freemius	Checkout, payments, licence management	EU / USA
CookieYes	Cookie consent banner and consent records	EU

Our hosting sits in the European Union. Where a provider processes data outside the EU — Google and Freemius do, in part — those transfers rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

5. How long we keep things

Data	Kept for
Beta tester application details	12 months from the end of the beta programme
Newsletter / marketing subscription	Until you unsubscribe, then removed
Analytics data	14 months (Google Analytics 4 default retention)
Customer and licence records	As long as required by Greek tax and accounting law
Email correspondence	12 months after the conversation ends

6. Your rights

Under GDPR you can ask us to:

• Show you what we hold about you
• Correct it if it’s wrong
• Delete it — the “right to be forgotten”
• Restrict or object to how we’re using it
• Hand it over in a portable format
• Withdraw consent at any time, without affecting what was lawful before you did

Email privacy@seomerlin.com and we’ll respond within 30 days. No forms to fill in, no hoops.

If you think we’ve handled your data badly and we haven’t fixed it, you can complain to the Hellenic Data Protection Authority (dpa.gr) or to the supervisory authority in your own EU country.

7. Security

The site runs over HTTPS. Access to the admin and to form submissions is restricted to the people who need it. We keep WordPress, plugins and server software patched. No system is perfect, and we won’t pretend otherwise — but if a breach ever affects your data, we’ll tell you and the supervisory authority within 72 hours, as the law requires.

8. Children

This site and the plugin are business tools, not intended for anyone under 16. We don’t knowingly collect data from children. If you believe we have, email us and we’ll delete it.

9. Changes to this policy

If we change something meaningful — a new processor, a new purpose — we’ll update the date at the top and, where the change materially affects you, tell you directly. We won’t quietly rewrite it and hope you don’t notice.

10. Contact

Questions, requests, complaints — privacy@seomerlin.com.

CARPEBO SINGLE MEMBER P.C., 2nd km Xanthis – Lagous, Xanthi 67100, Greece. CRN 161870546000.