Skip to main content
Clicks & ClientsClicks&Clients
A2 / Privacy
Annex · Privacy Policy

What we collect,why, and for how long.

We try to write this in language a person would actually read. The short version: we collect the information we need to do the work, we don’t sell it for money, and you can ask us to change or delete what we hold — or opt out of ad tracking — at any time. The Cookie Policy covers the tracking side in detail.

01

Who we are

Clicks & Clients is a growth firm operated by Clicks & Clients LLC, a United States company and the entity accountable for how your information is handled. In this policy, “we,” “us,” and “the firm” mean Clicks & Clients LLC. If ownership of the firm changes, section 07 explains what happens to your information.

02

What we collect

Information you give us directly. When you submit the contact form, book a discovery call, fill out the post-payment onboarding form on our welcome page, schedule the kickoff call, or correspond with us during an engagement, we collect what you choose to share — typically your name, business name, role, phone number where given, and any account or business detail you put in writing.

Information you give us as a careers applicant. When you apply for a role through the careers page, we collect what you submit through the application form — name, email, phone where given, country, role you’re applying to, portfolio or work-sample links, LinkedIn, and the written response in the “why this seat” field. We also record your acknowledgement of these terms and (where applicable) the contractor-engagement notice.

Information from third parties as part of running engagements. To deliver the work, we receive: payment information from Stripe (we don’t store your card; Stripe does), recordings and transcripts from Google Meet for calls held during the engagement, and access tokens you grant us for ad-platform and analytics management on your accounts.

Information routed through our internal channels. Onboarding-form and careers-application submissions are delivered into private Slack channels accessible to the team responsible for that workflow. Slack stores those messages under its own retention rules; copies of the underlying records are also retained per the schedule below.

Information collected automatically as you use this site. Standard server logs (IP address, browser type, the page you came from), aggregate analytics counts, and — as we begin running paid advertising campaigns — advertising and measurement identifiers set through the technologies described in section 04. What each of these does, and how to control it, is set out in section 04 and in our Cookie Policy.

03

Why we use it

We use information to respond to inquiries, run the engagements we’ve agreed to, send invoices and process payments, keep an accurate record of decisions and deliverables, measure and improve the performance of this site and our advertising, and meet our own legal and tax obligations.

We don’t sell your personal information for money, and we don’t use your account data, performance numbers, or call recordings to train any model outside the work of operating your engagement. Where the advertising and measurement technologies described in section 04 count as a “sale” or “sharing” of personal information under California or other state law, you can opt out — see section 08.

04

Cookies, analytics, and advertising technologies

Our Cookie Policy is the full account of the cookies and similar technologies this site uses and how to control them. In summary:

Analytics. We use Vercel Web Analytics to count page views in aggregate. It is cookieless, hashes visitor data on the fly, and stores no personally identifying information. We also use Google Search Console, which reports on how this site performs in search and does not set cookies on your browser.

Advertising and measurement. As we run paid advertising on platforms including Google, Meta (Facebook and Instagram), and Reddit, this site may load Google Tag Manager and conversion-measurement technologies such as the Meta Pixel, Google Ads tags, and the Reddit Pixel. These set cookies or device identifiers used to measure conversions, understand which ads led to a visit, and build remarketing audiences. Where the law requires prior consent for these technologies, they load only after you consent through the cookie controls presented to you; the Cookie Policy explains your choices.

Embedded booking tools. The booking calendar on the contact page is provided by Cal.com, and Calendly may be used elsewhere, including inside advertising lead forms. These run inside their own frames and may set cookies on their own domains under their own privacy policies, not this one.

Scripts we run on your properties. If we’ve embedded conversion pixels, tag managers, or similar scripts on your own website as part of an engagement, the cookies and identifiers those set on your site are governed by your own privacy policy, not this one.

05

Advertising, remarketing, and your controls

When we run campaigns for the firm, the platforms above may use information collected on this site to show you our ads elsewhere (remarketing) and to measure whether an ad led to a booking or inquiry. This can involve matching a hashed identifier — such as an email address you provided — to your account on that platform so a conversion can be attributed. We do not receive your platform account details in return; we receive aggregate and conversion reporting.

You can limit or turn off ad personalization directly with each platform, in addition to the site-level controls in our Cookie Policy: through Google Ad Settings, your Meta ad preferences, and Reddit’s advertising settings, and industry opt-outs at the Digital Advertising Alliance, the Network Advertising Initiative, and Your Online Choices in the EU and UK. Where you send a recognized Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your personal information in jurisdictions that require us to.

06

Who else processes it

We rely on the following processors to operate the firm. Each handles your information under its own privacy terms; using our services means accepting that your information may be processed by the providers below for the purposes described.

  • Cal.comDiscovery-call and kickoff scheduling and booking
  • CalendlyScheduling and booking, where used — including calendars embedded inside advertising lead forms
  • Google WorkspaceEmail (Gmail), video calls (Google Meet), and working files (Drive)
  • Google Advertising & MeasurementGoogle Ads, Google Tag Manager, and Google Search Console — advertising, tag management, and search-performance reporting
  • Meta PlatformsFacebook and Instagram advertising, the Meta Pixel, and Conversions API for conversion measurement and remarketing
  • RedditReddit advertising and the Reddit Pixel for conversion measurement
  • StripeInvoicing, subscription billing, and payment processing
  • FormspreeContact-form submissions
  • SlackInternal team coordination, onboarding-form intake, and careers-application intake
  • VercelHosting, content delivery, and Web Analytics (cookieless, aggregated traffic counts)
  • CloudflareDNS and traffic routing
07

Business transfers and affiliates

If the firm is involved in a merger, acquisition, financing, reorganization, or a sale of some or all of its assets, information covered by this policy may be transferred to the successor or acquiring entity as part of that transaction, and to its affiliates operating under common ownership. Any such recipient will be bound to handle your information under terms no less protective than this policy, and we will update the operating-entity details on this page to reflect the change.

Where the firm operates alongside affiliated businesses under common ownership, access is shared only for purposes consistent with this policy — running your engagement and shared operations such as billing, accounting, and support — is limited to what a role requires, and remains subject to the same protections, retention schedule, and rights described here. A transfer or internal sharing of this kind is not a sale of your information and does not change the choices available to you under section 08.

08

Your rights

You can ask us to confirm what we hold about you, correct anything that’s wrong, port it elsewhere, or delete it. Where you’re a resident of a jurisdiction with a data-protection regime — including the United Kingdom, the European Union, California, and other US states with comprehensive privacy laws — the rights that regime grants apply in full.

For California and similar-state residents, that includes the right to know what we collect, to delete it, to correct it, and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. We honor a valid Global Privacy Control signal as an opt-out request where the law requires. For UK and EU residents, it includes the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority.

Requests should come through the form on our contact page. We will not discriminate against you for exercising any of these rights. Where law sets a deadline for response, we’ll meet it; otherwise we aim to respond within thirty days.

09

How long we keep it

  • Inquiries that don’t become engagements: twelve months from last contact, then deleted.
  • Active engagement records: for the duration of the engagement plus seven years afterwards, for tax, audit, and dispute-resolution purposes.
  • Onboarding-form responses: treated as part of the active engagement record once the engagement begins, and retained on the same schedule.
  • Call recordings and transcripts: duration of the engagement plus twelve months, unless you ask us to delete them earlier.
  • Advertising and analytics identifiers: retained per the platform and tool that set them (Vercel, Google, Meta, Reddit), under their published retention rules; the cookie lifetimes are listed in the Cookie Policy.
  • Careers applications: twenty-four months from submission. Applications that lead to an engagement become part of that engagement’s record on the schedule above. You can ask us to delete an application earlier through the contact form.
  • Payment records: held by Stripe under their retention rules, and by us for the period our tax authorities require.
10

International data transfers

We’re based in the United States and serve clients across several countries — currently the United States, the United Kingdom, Ireland, Saudi Arabia, and the United Arab Emirates. Information you give us may be stored or processed in the United States or in any region where our processors operate.

Where we serve clients in the United Kingdom, the European Union, or other jurisdictions whose data-protection rules require it, we rely on standard contractual clauses or equivalent transfer mechanisms with our processors.

11

Children

The firm’s services aren’t directed to children. We don’t knowingly collect information from anyone under sixteen. If you believe a child has provided information to us, please tell us through the contact form and we’ll delete it.

12

Changes to this policy

We may update this policy as the firm’s practices change or as the law develops — including as we turn on the advertising technologies described above. The “last updated” date at the top of this page reflects the current version. Material changes that affect an active engagement will be communicated to that client directly.

13

How to reach us

For privacy questions, requests to access or delete information, or anything else covered by this policy, get in touch through the form on our contact page. We’ll route your request to whoever needs to act on it.

Reference
Last updated · July 9, 2026