LocalCitationPro
Legal

Privacy Policy

What we collect, why we have it, who else sees it, and how to get it back or get rid of it. No dark patterns and no tracking.

Effective 25 July 2026 · LocalCitationPro

The short version: we collect what we need to build your listings and take payment, we publish your business details to directories because that is the service you bought, and we run no analytics or advertising trackers on this site at all.

1.Who controls your data

The data controller for personal data collected through localcitationpro.com is:

Legal name
BlessedTradition Unipessoal Lda
Trading as
LocalCitationPro
Company type
Sociedade Unipessoal por Quotas (Lda)
Registration no. (NIPC)
517882086
VAT number
PT517882086
Share capital
€10,000
Registered office
Rua Fialho de Almeida, 14, 2.º Esq., Escritório DT15, 1070-129 Lisboa, Portugal
Commercial registry
Conservatória do Registo Comercial de Lisboa
WhatsApp
+92 309 111 1297

This policy explains what we collect, why, and what you can do about it. It is written under the EU General Data Protection Regulation (GDPR), which applies to us as a Portuguese company.

2.What we collect

When you place an order

The business details needed to build your listings: business name, address, phone, e-mail, website, category, opening hours, description, social profiles and any images you supply. Most of this is information you publish about your business anyway — but the contact details are personal data where you are a sole trader, so we treat all of it carefully.

When you pay

Your name, billing address, e-mail and VAT number if you give one. We never receive your card number — it goes directly to Stripe. We see only the last four digits, the card brand and whether the payment succeeded.

When you contact us

Your name, e-mail, business name, website and whatever you write in the message.

When you use the free tools

The website URL or business name and location you type into the SEO report, the map rank checker or the order-form auto-fill. These are processed to produce the result you asked for.

Automatically

Standard server logs kept by our hosting provider — IP address, browser type, page requested, timestamp — used for security and to keep the site running.

3.Why we use it, and our legal basis

  • To deliver your order — including submitting your business details to third-party directories, which is the service itself. Legal basis: performance of a contract.
  • To take payment and issue invoices. Legal basis: contract, and legal obligation for the tax records.
  • To answer enquiries and provide support. Legal basis: contract, or our legitimate interest in responding to you.
  • To run the free tools you choose to use. Legal basis: your request.
  • To keep the site secure and prevent abuse. Legal basis: legitimate interests.
  • To send you occasional updates, only if you asked for them. Legal basis: consent, withdrawable at any time.

4.Publication to directories — read this one

The core of what you are buying is that your business information is published on third-party websites. Those directories become independent controllers of the data once they receive it: their own privacy policies govern what they do with it, and we cannot delete a listing from their systems on your behalf beyond making a removal request like anyone else. Please only send us information you are willing to have published.

5.Who we share it with

We do not sell your data and we do not share it for advertising. We use a small number of service providers who process data on our instructions:

  • Stripe — payment processing, invoicing and fraud prevention.
  • Web3Forms — delivers the contact and order forms to our inbox.
  • Google Workspace — our e-mail.
  • Our hosting provider — serves the site and keeps the server logs.
  • An AI provider— when you use “auto-fill from my site”, the URL and the readable text of that page are sent to an AI model to extract the business details. This is only ever triggered by you, on a URL you supply. The site assistant works the same way: general sales questions you type into the chat may be answered by an AI model. Your account and order information is never sent to one — those answers come straight from our own records.
  • The directories your package covers, as described above.

We may also disclose data where the law requires it, or to establish or defend legal claims — a payment dispute, for example.

6.International transfers

Some of those providers, and many of the directories, are outside the European Economic Area — principally in the United States. Where data leaves the EEA we rely on the European Commission’s adequacy decisions or on Standard Contractual Clauses. Our delivery team is based in Pakistan and accesses order information to carry out the work, under confidentiality obligations and appropriate safeguards.

7.How long we keep it

  • Order and billing records — 10 years, which is the retention period Portuguese tax law requires.
  • Delivery reports and submission logs — 3 years, so we can answer questions about work we did for you.
  • Contact enquiries that do not become orders — 2 years.
  • Site-assistant conversations— 90 days, then deleted automatically. We read them to improve the assistant's answers. Card numbers and password-like text are stripped before anything is stored.
  • Free-tool inputs — not stored beyond producing your result, apart from ordinary server logs.
  • Server logs — typically 30 days.

8.Cookies

This site sets no advertising cookies and no analytics cookies. There is no Google Analytics, no tag manager and no tracking pixel on it.

The only thing we store in your browser is a theme entry in local storage, remembering whether you chose light or dark mode. It contains no identifier and never leaves your device. Clearing your browser data removes it.

Stripe sets its own strictly necessary cookies on the checkout page to process the payment and prevent fraud. That happens only when you go to pay.

9.Your rights

Under the GDPR you can ask us to:

  • give you a copy of the personal data we hold about you;
  • correct anything inaccurate;
  • delete it — though we must keep billing records for the tax period above;
  • restrict or object to how we use it;
  • port it to another provider;
  • withdraw consent where consent is what we relied on.

Write to [email protected] and we will respond within one month. There is no charge.

If you are unhappy with our answer you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or to the authority in your own country.

10.Security

The site is served over HTTPS. Access to order information is limited to the people delivering the work. Credentials created for your listings are shared with you and are not retained longer than needed to complete and support the order. No system is perfectly secure, but we take this seriously and will tell you and the CNPD promptly if a breach affects your data.

11.Children

Our services are sold to businesses and are not directed at children. We do not knowingly collect data from anyone under 16.

12.Changes to this policy

We update this page when what we do changes. The effective date at the top tells you which version is current, and material changes are announced here before they take effect.

13.Contact

Any privacy question, or to exercise a right above: [email protected], or via our contact page.