Skip to main content
Clicks & Clients
Privacy
Annex · Privacy Policy

What we collect, why, and for how long.

We try to write this in language a person would read. The short version: we collect the information we need to do the work, we don’t sell it for money, and you can ask us to change or delete what we hold, or opt out of ad tracking, at any time. The Cookie Policy covers the tracking side in detail.

01

Who we are

Clicks & Clients is a growth firm operated by Clicks & Clients LLC, a United States company and the entity accountable for how your information is handled. In this policy, “we,” “us,” and “the firm” mean Clicks & Clients LLC. If ownership of the firm changes, section 07 explains what happens to your information.

02

What we collect

Information you give us directly. When you submit the contact form, book a discovery call, fill out the post-payment onboarding form on our welcome page, schedule the kickoff call, or correspond with us during an engagement, we collect what you choose to share: typically your name, business name, role, phone number where given, and any account or business detail you put in writing.

Information you give us as a careers applicant. When you apply for a role through the careers page, we collect what you submit through the application form: name, email, phone where given, country, role you’re applying to, portfolio or work-sample links, LinkedIn, and the written response in the “why this seat” field. We also record your acknowledgement of these terms and (where applicable) the contractor-engagement notice.

Information from third parties as part of running engagements. To deliver the work, we receive: payment information from Stripe (we don’t store your card; Stripe does), recordings and transcripts from Google Meet for calls held during the engagement, and access tokens you grant us for ad-platform and analytics management on your accounts.

Information routed through our internal channels. Onboarding-form and careers-application submissions are delivered into private Slack channels accessible to the team responsible for that workflow. Slack stores those messages under its own retention rules; copies of the underlying records are also retained per the schedule below.

Information collected automatically as you use this site. Standard server logs (IP address, browser type, the page you came from); analytics data about how you use the site, such as the pages you view, how you arrived, your approximate location based on your IP address, your device and browser, and actions like submitting a form or clicking to book a call; and advertising and measurement identifiers set through the technologies described in section 04. What each of these does, and how to control it, is set out in sections 04 and 05 and in our Cookie Policy.

03

Why we use it

We use information to respond to inquiries, run the engagements we’ve agreed to, send invoices and process payments, keep an accurate record of decisions and deliverables, measure and improve the performance of this site and our advertising, and meet our own legal and tax obligations.

We don’t sell your personal information for money, and we don’t use your account data, performance numbers, or call recordings to train any model outside the work of operating your engagement. Where the advertising and measurement technologies described in section 04 count as a “sale” or “sharing” of personal information under California or other state law, you can opt out; see section 08.

04

Cookies, analytics, and advertising technologies

Our Cookie Policy is the full account of the cookies and similar technologies this site uses and how to control them. In summary:

Analytics. We use Google Analytics to understand how visitors use this site. It sets first-party cookies (_ga and _ga_DNPTRFLR8S) so it can recognize a returning browser, and it records the pages you view, how you arrived, your approximate location, your device and browser, and actions such as form submissions and clicks to book a call. We also use Vercel Web Analytics (opens in a new tab) and Vercel Speed Insights, which count visits and measure page speed in aggregate without cookies and store no personally identifying information, and Google Search Console, which reports on how this site performs in search and does not set cookies on your browser.

Google signals. We have turned on Google signals in Google Analytics. For visitors who are signed in to a Google account and have ad personalization turned on, Google associates the data Google Analytics collects on this site with that account. That lets Google Analytics report, in aggregate, on how people use the site across devices and on their age range, gender, and interests, and, where our Google Analytics property is linked to Google Ads, lets audiences built from visits to this site be used for remarketing in Google Ads. To do this, Google uses the Google Analytics cookies set on this site together with its own advertising cookies, such as those on google.com and doubleclick.net. We receive aggregated reports only, never the identity of an individual Google account. Google processes this data under its own privacy policy and explains how Google uses information from sites that use its services (opens in a new tab). Section 05 explains how to turn this off.

Advertising and measurement. As we run paid advertising on platforms including Google, Meta (Facebook and Instagram), and Reddit, this site loads Google Tag Manager and the Meta Pixel, and may load Google Ads tags and the Reddit Pixel for campaigns that use them. These set cookies or device identifiers used to measure conversions, understand which ads led to a visit, and build remarketing audiences.

Where these stay off. For visitors in the European Economic Area, the United Kingdom, and Switzerland, where analytics and advertising cookies need your opt-in consent, Google’s tags run with cookies, Google signals, and advertising features switched off, and the Meta Pixel does not load. If your browser sends a Global Privacy Control signal, Google’s advertising storage, Google signals, and ad personalization are switched off for your visit and the Meta Pixel does not load; Google Analytics still measures the visit, without its advertising features. The Cookie Policy lists every tool and explains your choices.

Embedded booking tools. The booking calendar on the contact page is provided by Cal.com, and Calendly may be used elsewhere, including inside advertising lead forms. These run inside their own frames and may set cookies on their own domains under their own privacy policies, not this one.

Scripts we run on your properties. If we’ve embedded conversion pixels, tag managers, or similar scripts on your own website as part of an engagement, the cookies and identifiers those set on your site are governed by your own privacy policy, not this one.

05

Advertising, remarketing, and your controls

When we run campaigns for the firm, the platforms above may use information collected on this site to show you our ads elsewhere (remarketing) and to measure whether an ad led to a booking or inquiry. This can involve matching a hashed identifier, such as an email address you provided, to your account on that platform so a conversion can be attributed. We do not receive your platform account details in return; we receive aggregate and conversion reporting.

You can limit or turn off ad personalization directly with each platform, in addition to the site-level controls in our Cookie Policy: through Google’s My Ad Center (opens in a new tab), your Meta ad preferences, and Reddit’s advertising settings, and through industry opt-outs at the Digital Advertising Alliance, the Network Advertising Initiative (opens in a new tab), and Your Online Choices in the EU and UK.

Turning off Google Analytics and Google signals. Turning off personalized ads in My Ad Center stops Google from using your Google account for Google signals. To stop Google Analytics from collecting data in your browser on every site, install the Google Analytics Opt-out Browser Add-on (opens in a new tab). You can also block or delete the Google Analytics cookies in your browser at any time.

When your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your personal information and of targeted advertising, wherever you are, and the site applies it automatically as described in section 04.

06

Who else processes it

We rely on the following processors to operate the firm. Each handles your information under its own privacy terms; using our services means accepting that your information may be processed by the providers below for the purposes described.

  • Cal.comDiscovery-call and kickoff scheduling and booking
  • CalendlyScheduling and booking, where used, including calendars embedded inside advertising lead forms
  • Google WorkspaceEmail (Gmail), video calls (Google Meet), and working files (Drive)
  • Google Analytics & AdvertisingGoogle Analytics (with Google signals turned on), Google Ads, Google Tag Manager, and Google Search Console: site analytics, advertising measurement, tag management, and search-performance reporting
  • Meta PlatformsFacebook and Instagram advertising, the Meta Pixel, and Conversions API for conversion measurement and remarketing
  • RedditReddit advertising and the Reddit Pixel for conversion measurement
  • StripeInvoicing, subscription billing, and payment processing
  • FormspreeContact-form submissions and fix-list requests from the landing page grader
  • Google PageSpeed InsightsMobile speed tests for the landing page grader: receives the page address you enter
  • SlackInternal team coordination, onboarding and website-intake submissions (including any brand files you attach), and careers-application intake
  • ResendEmail copies of website-intake submissions to the team, where enabled
  • VercelHosting, content delivery, Web Analytics, and Speed Insights (cookieless, aggregated traffic counts and page-speed measurements)
  • CloudflareDNS and traffic routing
07

Business transfers and affiliates

If the firm is involved in a merger, acquisition, financing, reorganization, or a sale of some or all of its assets, information covered by this policy may be transferred to the successor or acquiring entity as part of that transaction, and to its affiliates operating under common ownership. Any such recipient will be bound to handle your information under terms no less protective than this policy, and we will update the operating-entity details on this page to reflect the change.

Where the firm operates alongside affiliated businesses under common ownership, access is shared only for purposes consistent with this policy (running your engagement and shared operations such as billing, accounting, and support), is limited to what a role requires, and remains subject to the same protections, retention schedule, and rights described here. A transfer or internal sharing of this kind is not a sale of your information and does not change the choices available to you under section 08.

08

Your rights

You can ask us to confirm what we hold about you, correct anything that’s wrong, port it elsewhere, or delete it. Where you’re a resident of a jurisdiction with a data-protection regime (including the United Kingdom, the European Union, California, and other US states with comprehensive privacy laws), the rights that regime grants apply in full.

For California and similar-state residents, that includes the right to know what we collect, to delete it, to correct it, and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. We honor a Global Privacy Control signal as that opt-out request automatically, for every visitor. For UK and EU residents, it includes the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority.

Requests should come through the form on our contact page. We will not discriminate against you for exercising any of these rights. Where law sets a deadline for response, we’ll meet it; otherwise we aim to respond within thirty days.

09

How long we keep it

  • Inquiries that don’t become engagements: twelve months from last contact, then deleted.
  • Active engagement records: for the duration of the engagement plus seven years afterwards, for tax, audit, and dispute-resolution purposes.
  • Onboarding-form responses: treated as part of the active engagement record once the engagement begins, and retained on the same schedule.
  • Call recordings and transcripts: duration of the engagement plus twelve months, unless you ask us to delete them earlier.
  • Advertising and analytics identifiers: Google Analytics cookies last up to 400 days in your browser. Google keeps the event data Google Analytics collects on this site, including Google signals data, for the retention period set in our Google Analytics property, and event-level data for no more than 14 months. Other identifiers are retained by the platform that set them (Meta, Reddit) under its published rules; cookie lifetimes are listed in the Cookie Policy.
  • Careers applications: twenty-four months from submission. Applications that lead to an engagement become part of that engagement’s record on the schedule above. You can ask us to delete an application earlier through the contact form.
  • Payment records: held by Stripe under their retention rules, and by us for the period our tax authorities require.
10

International data transfers

We’re based in the United States and serve clients across several countries: currently the United States, the United Kingdom, Ireland, Saudi Arabia, and the United Arab Emirates. Information you give us may be stored or processed in the United States or in any region where our processors operate.

Where we serve clients in the United Kingdom, the European Union, or other jurisdictions whose data-protection rules require it, we rely on standard contractual clauses or equivalent transfer mechanisms with our processors.

11

Children

The firm’s services aren’t directed to children. We don’t knowingly collect information from anyone under sixteen. If you believe a child has provided information to us, please tell us through the contact form and we’ll delete it.

12

Changes to this policy

We may update this policy as the firm’s practices change or as the law develops, including as we turn on the advertising technologies described above. The “last updated” date at the top of this page reflects the current version. Material changes that affect an active engagement will be communicated to that client directly.

13

How to reach us

For privacy questions, requests to access or delete information, or anything else covered by this policy, get in touch through the form on our contact page. We’ll route your request to whoever needs to act on it.

14

Free tools and the page grader

The calculators run entirely in your browser. The numbers you type are not sent to us; they live in the page address so you can share or bookmark a result, and clearing the address clears them.

The landing page grader is different: to score a page, our server fetches the address you enter (the page, its robots.txt, sitemap.xml, and llms.txt), scores it, and returns the report to your browser. We do not store the address, the page, or the report, beyond ordinary short-lived server logs and the rate-limit counter that prevents abuse. The speed read comes from Google’s PageSpeed Insights API: our server sends the address you entered to Google, which fetches and tests the page under Google’s own terms. If you ask for a fix list by email, your email address, the page address, and the score go to Formspree, our form processor, and to us, and we treat that as a contact request under the sections above.

Reference
Last updated · October 9, 2026