SEO contract template: the six clauses that protect the client

Most SEO contract templates on the first page of Google are written for the agency. This one is written for the person paying. It is an agreement a business owner can put in front of any SEO provider, ours included, with the six clauses that decide whether the arrangement can be checked, owned and left.

It pairs with the proposal template and with our SEO services.

Download the SEO contract template (Word, opens in Google Docs)

Everything in square brackets is yours to replace. It is free and it is not gated. It is also a starting point from an SEO company and it says so on its first page: have a lawyer in your own country read it before anyone signs, because contract law, consumer law and data law differ from place to place and a template cannot know where you are.

Why the usual template is the wrong way round

A contract is read most carefully when something has gone wrong, and what goes wrong in SEO is nearly always one of four things. The work cannot be seen, because the scope says "ongoing optimization". The accounts sit in the agency's name, so the business cannot leave without losing its Business Profile, its analytics history or its own pages. The report is a ranking export nobody can check. Or the shortcut that earned a quick result earns a manual action six months later, and the contract never said the shortcut was out of bounds. An agency-side template protects the agency from the client in each of those cases. This one protects the client, and an honest provider loses nothing by signing it.

The six clauses that do the protecting

The work, month by month

Clause 2 is a table: what is delivered each month, in plain words, and where the client can see it. Two service pages written for named searches, the profile kept correct, the fix list worked through, one report by the fifth business day. "SEO services" can be met by activity; a table can be checked against the site on the last day of the month. It also says what is not included, so the first invoice for something extra is not the first anyone hears of it.

Accounts, content and ownership

Clause 6, and the one most often missing. Every account used for the work is created in the client's name and stays the client's property, every page and image belongs to the client on payment for that month, and nothing is hosted where the client cannot take it away. A business whose profile sits in a former agency's account has no clause to point to; with this one, changing provider is a handover with a date on it.

Reporting from accounts you own

Clause 5 fixes the order of the monthly report: inquiries traced to search first, then calls from the profile, clicks and impressions from Search Console, pages indexed, what was done and what is next. Every figure comes from an account the client owns, so it can be checked without the provider in the room. Rankings may appear as context and are never the first line, because a ranking cannot be invoiced and an inquiry can.

How the work is done

Clause 7 writes down what a good provider does anyway: no party guarantees a position in search results, no links are bought, nothing is cloaked or written for the crawler, and any change to the site's structure or URLs is announced in writing first with a record of redirects kept. The point of writing it down is that a shortcut becomes a breach rather than a judgement call, and the client may end the agreement the day it happens.

Leaving

Clause 9 keeps the minimum term short and the notice short, and makes the handover a deliverable: within fourteen days of the end, at no charge, every login, a list of every account touched, every page and file, the redirect record and the last report. A contract that can be left is the one that keeps a provider attentive, and a provider who intends to do the work is happy to sign it.

Law, liability and the lawyer

Clause 11 is a set of bracketed prompts: which country's law, how a dispute is raised before anyone goes to court, and what liability is limited to. Those are the lines a lawyer where you are must set, and the signature block has a line for who read it and when. Leaving the brackets in place is the honest version of a template; filling them with another country's clauses is how a template does harm.

What Google says about hiring an SEO, clause by clause

Google's own guide for business owners, Do you need an SEO? (Google Search Central, last updated Jun 5, 2026, read Nov 1, 2026), is the nearest thing to an official brief for this agreement. Four of its lines land on a clause.

• "No one can guarantee a #1 ranking on Google." Clause 7 says no party guarantees a position and makes inquiries traced to search the measure.
• "Ultimately, you are responsible for the actions of any companies you hire". That is why clause 7 names the tactics Google's spam policies forbid and rules out the rest by reference, and why clause 9 lets the client end the agreement immediately if clause 7 is broken.
• "Will you share with me all the changes you make to my site, and provide detailed information about your recommendations and the reasoning behind them?" Clause 5 (a monthly record of what was done and what changed) and clause 7 (written notice before any change to structure, URLs, navigation or hosting) turn most of that question into a duty. Ask for the reasoning in the report if you want it in writing too.
• For an audit, the guide says to "only grant read access to Search Console (at this stage, don't grant them write access)." Clause 4 does not fix the level of access, and the client can revoke it at any time, so access can start read-only and be raised when the work starts.

The spam policies clause 7 points to are on Google's Spam policies for Google web search page (read Nov 1, 2026). Three of them match the tactics clause 7 names. Link spam is "creating links to or from a site primarily for the purpose of manipulating search rankings", and the page lists "Buying or selling links for ranking purposes" as an example. Cloaking is "presenting different content to users and search engines with the intent to manipulate search rankings and mislead users". Scaled content abuse is "when many pages are generated for the primary purpose of manipulating search rankings and not helping users".

The Business Profile: the business owns it, the provider manages it

Clause 6 puts every account in the client's name. For the Google Business Profile that has an exact meaning. Google's help page on Business Profile owners and managers (read Nov 1, 2026) says a profile "can have multiple owners but only one primary owner", and that managers "have mostly the same access to the profile as owners. The only exception is they can't add or remove users or remove the profile."

So the business stays primary owner and the provider is added as a manager. A manager can do the work on the profile and cannot remove the business from it. A manager can still edit the name, category and website, so remove the provider as a manager on the day the agreement ends, as part of the handover in clause 9. If a former provider holds primary ownership, it has to be transferred to the business, and Google notes that "A profile must have at least one other owner or manager to transfer primary owner access to." Each person needs their own Google Account for this; nobody has to share a password.

Personal data: what clause 10 leaves to your lawyer

Clause 10 says personal data from the work (inquiries, customer names, call records) is processed only for the work and only on the client's instruction. In the UK and the EU that is only a summary. When a provider processes personal data on a business's behalf, Article 28 of the GDPR and the same article of the UK GDPR (read Nov 1, 2026) require the processing to be "governed by a contract or other legal act", which "shall be in writing, including in electronic form". The article lists what it sets out, including:

• the type of personal data and the purpose of the processing;
• processing "only on documented instructions from the controller";
• confidentiality for everyone who handles the data, and security measures;
• using another processor only with the client's written authorisation and on the same terms;
• helping the client answer people's requests about their data and meet its security and breach duties;
• deleting or returning the data when the service ends, and making information available for audits.

Clause 7 names subcontractors before they start, which is less than the written authorisation the article asks for. If your provider will see personal data, ask your lawyer to add these terms to clause 10 or to attach the provider's data processing agreement. Outside the UK and the EU, the lawyer reads clause 10 against your own country's data law, and against the GDPR too if you serve people in the UK or EU.

Our reading of the first page of results

This section is our own analysis. We read the first page of US Google results for "seo contract template" on Nov 1, 2026. Most of the templates and guides on it are written for the provider: a reseller services agreement, a checklist that opens with the agency's strengths. Their descriptions list deliverables, timeframe, pricing and cancelation, and in one case scope, fees, intellectual property, confidentiality and termination. None of the descriptions mentions who owns the accounts, or what happens to the Business Profile when the agreement ends.

Google's own guide stops at the same place. It covers what to ask before hiring and what to be wary of, and says nothing about notice, handover or leaving. That gap is what clauses 6 and 9 are for.

What it never says

There is no line in it promising a position for a search, because nobody can promise one, and a provider who will sign such a promise is telling you something. There is no fee of ours in it; the payment table is blank and the guidance says only what a fee line has to state. And there is no clause that keeps the client for a year, because a client who is getting inquiries stays without one.

Before it is signed

• Read clause 2 against the proposal you were sent. If the proposal promised something the table does not list, one of them is wrong.
• Check that every account in clause 4 already exists in your name before access is granted. Creating them yourself takes an hour.
• Put the first review date in the calendar on the day of signing.
• Have a lawyer in your country read clauses 10 and 11 and set the liability line. The template says so on its first page.
• Keep the signed copy where the person who pays the invoices can find it.

If you are the provider

Agencies use this template too, and it works from that side because nothing in it depends on who does the work. It pairs with the proposal template, whose section three becomes clause 2 here and whose section seven becomes clauses 6 and 9. If the work is delivered by a partner under your brand, clause 7 binds the subcontractor by name, which is the arrangement the white label SEO page describes. A client who has read the SEO audit checklist will ask for clause 5 whether or not you offer it.