Privacy policy

Who we are

ClickMovements Ltd is a company registered in England and Wales, company number 12732439. In this policy “we”, “us” and “our” mean ClickMovements Ltd.

For the personal information described here, we are the data controller. You can reach us at [email protected].

We are registered with the Information Commissioner’s Office (ICO), registration number ZB028790.

Two different roles

It matters which role we’re in, because it changes who decides what happens to the data.

When we are the controller

For your enquiry, your booking, your account with us, our emails to you, and our own business records, we decide how the information is used. This policy covers that.

When we are the processor

When we work inside your CRM — building pipelines, migrating records, fixing automations — we handle personal data belonging to your contacts, staff and customers. There, you are the controller and we act on your instructions under a written agreement. We don’t use that data for our own purposes, and your own privacy notice governs it, not this one.

What we collect

When you get in touch or book a call

• Your name, email address, telephone number and organisation
• What you tell us about your situation, on the booking form or in conversation
• Our notes and correspondence about the enquiry

When you become a client

• Contact and billing details for you and your colleagues
• Records of the work, including meeting notes, project documents and support requests
• Invoices and payment records
• Login and access details for the systems you ask us to work in

When you use the platform

• Account details, including name, email address and telephone number
• Subscription and payment records
• Usage and log data generated by the platform

When you visit the website

• Pages visited, approximate location, browser and device information
• Information collected through cookies, as set out below

We don’t seek out special category data — health, beliefs, and so on. Please don’t send it to us unless we’ve agreed a reason for it in writing.

Why we use it

Under UK GDPR we need a lawful basis for everything we do with personal data. Ours are:

• To perform a contract — delivering the work you’ve engaged us for, running your platform account, invoicing you, and providing support.
• Legitimate interests — responding to your enquiry, keeping records of our work, improving how we deliver it, securing our systems, and recovering unpaid invoices. We’ve considered your interests and don’t think any of this is unexpected or intrusive.
• Consent — sending marketing emails where consent is required, and setting non-essential cookies. You can withdraw consent at any time.
• Legal obligation — keeping accounting and tax records.

We don’t make decisions about you by automated means alone, and we don’t use your data to train AI models.

Who we share it with

We don’t sell or rent your personal information. We share it only with service providers who help us run the business, each under a contract that limits what they can do with it:

• HighLevel (GoHighLevel / LeadConnector) — the platform behind our website, CRM, booking calendar and forms
• Google — email, calendar and document storage
• Stripe — payment processing. Card details go straight to Stripe; we never see or store them
• Xero — accounting and invoicing
• Our accountant and professional advisers

We may also disclose information where the law requires it, or to establish or defend legal claims. If the business is ever sold or merged, client records would transfer as part of it, and this policy would continue to apply.

Where your data is held

Some of the providers above are based outside the UK, mainly in the United States. Where data is transferred abroad we rely on the UK’s international data transfer agreement or addendum to the EU standard contractual clauses, together with appropriate safeguards, so your information keeps essentially the same protection it has here.

How long we keep it

• Enquiries that don’t become work — up to 2 years, then deleted
• Client records and project documentation — 6 years after the engagement ends
• Invoices and accounting records — 6 years, as UK tax law requires
• Marketing contacts — until you unsubscribe, and then a suppression record so we don’t email you again
• Platform account data — for the life of the subscription, then deleted in line with the platform terms

Your rights

Under UK data protection law you can ask us to:

• Tell you what personal data we hold about you, and give you a copy
• Correct anything that’s wrong or incomplete
• Delete it, where we have no continuing reason to keep it
• Restrict how we use it, or object to our using it
• Send it to you or another provider in a portable format
• Stop sending you marketing, at any time

Email [email protected] and we’ll respond within one month. There’s no charge.

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

Essential cookies keep the site working — page navigation, form submission, and remembering that you’re signed in. These don’t need consent.

Analytics cookies tell us which pages people read and how they arrived. We only set these if you agree. You can change your mind at any time, and you can block or delete cookies through your browser settings, though some parts of the site may then not work properly.

Security

We use encrypted connections, access controls and two-factor authentication on the systems we run, and we limit who can see client data to those who need it for the work. No system is completely secure, but if a breach ever affects your personal information and is likely to put your rights at risk, we’ll tell you and the ICO without undue delay.

Children

Our services are for businesses and organisations. We don’t knowingly collect personal information from anyone under 18. If you believe a child has given us their information, contact us and we’ll delete it.

Changes

When we change this policy we’ll update the date at the top of the page. If a change materially affects how we use your information, we’ll tell affected clients directly.

Contact

Questions about this policy, or a request about your data:

Steve Jones
ClickMovements Ltd
[email protected]