Privacy Policy

1. Who We Are

Kuraga is a Local SEO service provider based in Malta, helping small and medium-sized Maltese businesses improve their visibility on Google and local search platforms.

For the purposes of GDPR, Kuraga acts as the Data Controller for personal data collected through this website.

Contact: team@kuragalocal.com

2. Data We Collect

Information You Provide Directly

• Name — when you fill in the free audit form or contact us
• Email address — for communication and service delivery
• Phone number — if provided in the audit form
• Business name and website — to assess your current SEO performance
• Payment information — handled entirely by Stripe (we never see or store your card details)

Information Collected Automatically

• IP address — for security and fraud prevention
• Browser type and device — for site compatibility
• Pages visited and time on site — via analytics tools
• Referral source — how you found our website

3. How We Use Your Data

We use your personal data for the following purposes:

• To deliver and manage your SEO services
• To respond to your free audit requests and enquiries
• To process your subscription payments via Stripe
• To send you service updates, reports, and communications related to your account
• To improve our website and service quality
• To comply with our legal obligations under Maltese and EU law

We will never sell your personal data to third parties, and we will not use it for advertising purposes unrelated to your Kuraga account.

4. Legal Basis for Processing (GDPR)

Under GDPR Article 6, we rely on the following legal bases:

• Contract performance — to deliver the services you have subscribed to
• Legitimate interests — to improve our services and communicate with potential clients
• Consent — where you have explicitly opted in (e.g. marketing emails)
• Legal obligation — to comply with applicable laws and regulations

5. Sharing Your Data

We only share your data with trusted third parties where necessary to deliver our services:

• Stripe — payment processing (see Section 6)
• Email providers — for service communications
• Analytics tools — to understand website performance (data is anonymised where possible)

All third-party processors are contractually bound to handle your data securely and in accordance with GDPR.

We will only disclose your data to authorities if required by law.

6. Stripe & Payments

All subscription payments are processed by Stripe, Inc., a PCI DSS Level 1 certified payment processor. When you click a subscription button on our site, you are redirected to Stripe's hosted checkout page.

Stripe may process your data in the United States. Stripe participates in the EU-U.S. Data Privacy Framework and uses Standard Contractual Clauses to ensure lawful data transfers. For more, see Stripe's Privacy Policy.

Kuraga does retain your email address and subscription status to manage your account and billing history.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Active customers: for the duration of your subscription plus 2 years
• Audit enquiries (non-customers): up to 12 months
• Billing records: 7 years (required by Maltese tax law)

After these periods, your data is securely deleted or anonymised.

8. Your Rights (GDPR)

As a data subject under GDPR, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten"), subject to legal obligations
• Right to restriction — request we limit processing of your data
• Right to portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at team@kuragalocal.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC), Malta's supervisory authority: idpc.org.mt.

9. Cookies

Our website uses cookies to ensure it functions correctly and to understand how visitors use the site. The types of cookies we use:

• Essential cookies — required for the site to work (no consent needed)
• Analytics cookies — help us understand site usage (require consent)

You can control cookie preferences through your browser settings. Disabling cookies may affect the functionality of this website.

10. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:

• HTTPS encryption on all pages
• Restricted access to personal data within our team
• Use of reputable, security-audited third-party services (e.g. Stripe)

No method of internet transmission is 100% secure. If you believe your data has been compromised, please contact us immediately at team@kuragalocal.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please reach out:

• Email: team@kuragalocal.com
• Website: kuraga.com
• Location: Malta, European Union