1. Who We Are
CliqForms is a SaaS platform operated by CLIQ ONLINE PTY LTD (ABN: 75 685 058 440), a company registered in Australia. We provide online form building, QR code generation, landing pages, and electronic signature tools to businesses and individuals globally.
For the purposes of this Privacy Policy:
- "Controller" — CLIQ ONLINE PTY LTD is the data controller in respect of personal data collected from visitors to our website (cliqforms.com) and registered users of our platform.
- "Processor" — Where our customers (Users) collect personal data from their own end users via forms built on the CliqForms platform, CliqForms acts as a data processor on behalf of those Users. Users are the data controllers for that data and are responsible for their own privacy obligations to their end users.
Contact details for privacy matters:
- Email: hi@cliqforms.com
- Post: CLIQ ONLINE PTY LTD, 81-83 Campbell Street, Surry Hills, NSW 2010, Australia
2. Scope of This Policy
This Privacy Policy applies to:
- Visitors to our website at cliqforms.com and any associated subdomains.
- Registered users of the CliqForms platform, including free trial and paid subscribers.
- Individuals who contact us by email, through our website, or by any other means.
This policy does not apply to the personal data that our Users collect through forms they build using our platform. Users are responsible for their own privacy policies and obligations to their end users. If you have submitted data through a form created by a CliqForms User and have a privacy question, please contact the organisation that created the form directly.
3. Personal Data We Collect
3.1 Data You Provide to Us
When you register for an account, subscribe to a plan, or contact us, we may collect:
- Name and email address — required to create and manage your account.
- Billing information — including payment card details processed securely by our payment provider Paddle. We do not store full card numbers on our servers.
- Business name and contact details — where provided during registration or account setup.
- Communications — any messages, support requests, or feedback you send to us.
3.2 Data We Collect Automatically
When you visit our website or use the platform, we automatically collect certain technical data, including:
- IP address — used to diagnose technical issues and for security monitoring.
- Browser type and version, operating system, and device information.
- Pages visited, time spent on pages, and navigation paths — collected via Google Analytics 4 (GA4). See Section 7 for details.
- Session data — including login timestamps and platform usage activity.
- Cookies and similar tracking technologies — see our Cookie Policy at cliqforms.com/cookie-policy for full details.
3.3 Form Data (Processor Role)
Where Users of the CliqForms platform collect personal data from their own end users through forms built on our platform, CliqForms stores and processes that data solely on behalf of the User, as a data processor. CliqForms does not use this data for its own purposes and does not sell or share it with third parties except as required to deliver the service.
3.4 Sensitive Personal Data
CliqForms does not intentionally collect sensitive categories of personal data (such as health information, biometric data, racial or ethnic origin, political opinions, religious beliefs, or sexual orientation) from its registered users. If you are a User who collects sensitive data through forms on our platform, you are responsible for ensuring you have the appropriate lawful basis and consent to do so.
4. Lawful Basis for Processing
We rely on the following lawful bases to process your personal data under the Australian Privacy Act 1988 and, where applicable, the EU General Data Protection Regulation (GDPR):
|
Service Provider
|
Purpose
|
Data Location
|
Privacy Policy
|
| Contract performance |
Processing necessary to create and manage your account, deliver the Services you have subscribed to, and process payments. |
- |
Arts. 6(1)(b) GDPR / APP 3 |
| Legitimate interests |
Analytics, platform security, fraud prevention, product improvement, and communicating service-related updates. |
- |
Arts. 6(1)(f) GDPR / APP 3 |
| Consent |
Sending marketing emails or newsletters. You may withdraw consent at any time. |
- |
Arts. 6(1)(a) GDPR / APP 3 |
| Legal obligation |
Retaining records as required by Australian tax and corporate law, or responding to lawful requests from authorities. |
- |
Arts. 6(1)(c) GDPR / APP 3 |
5. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
- Account management — to create, maintain, and administer your CliqForms account.
- Service delivery — to provide you with access to the platform features included in your subscription.
- Payment processing — to manage billing, invoicing, and subscription renewals via Paddle.
- Customer support — to respond to your enquiries, support requests, and feedback.
- Security and fraud prevention — to monitor for suspicious activity, protect the platform, and enforce our Terms and Conditions.
- Platform improvement — to analyse usage patterns and improve the performance, features, and user experience of the platform.
- Communications — to send you transactional emails (account confirmations, invoices, password resets) and, with your consent, marketing communications and product updates.
- Legal compliance — to comply with applicable laws, regulations, and lawful requests from regulatory authorities.
We will not use your personal data for purposes that are incompatible with those set out above without first obtaining your consent or establishing another lawful basis.
6. Third-Party Service Providers
We use trusted third-party service providers to help deliver our platform and services. These providers act as data processors on our behalf and are contractually required to protect your data and process it only on our instructions. Our current key processors are:
|
Service Provider
|
Purpose
|
Data Location
|
Privacy Policy
|
| DigitalOcean |
Cloud hosting — all platform data is stored on DigitalOcean infrastructure. |
Australia / USA |
digitalocean.com/legal/privacy-policy |
| Paddle |
Payment processing and subscription management. Paddle is the Merchant of Record for CliqForms subscriptions. |
UK / USA |
paddle.com/legal/privacy |
| Postmark |
Transactional email delivery (production environment). |
USA |
wildbit.com/privacy-policy |
| SendGrid |
Email delivery (development/testing environment only). |
USA |
sendgrid.com/policies/privacy |
| Google Analytics 4 |
Website and platform analytics. GA4 collects anonymised usage data including page views, session duration, and device type. Data is sent to Google servers in the USA. |
USA |
policies.google.com/privacy |
| Zapier |
Optional workflow automation integrations, used only when enabled by the User. |
USA |
zapier.com/privacy |
Where data is transferred to providers located outside Australia (including the USA), we take appropriate steps to ensure that such transfers are protected by appropriate safeguards, including standard contractual clauses or reliance on the provider's Privacy Shield or equivalent certification where applicable.
7. Google Analytics and Tracking
Our website and platform use Google Analytics 4 (GA4), a web analytics service provided by Google LLC. GA4 uses cookies and similar technologies to collect information about how visitors use our website, including:
- Pages visited and navigation paths.
- Time spent on pages and session duration.
- Device type, browser, and operating system.
- General geographic location (country/city level, derived from IP address).
- Referral source (how you arrived at our website).
This data is transmitted to and stored on Google's servers in the United States. Google may use this data in accordance with its own Privacy Policy. We have configured GA4 with IP anonymisation enabled, which means your full IP address is not stored by Google.
You can opt out of Google Analytics tracking at any time by:
- Using the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.
- Adjusting your cookie preferences via our cookie consent manager on the website.
- Configuring your browser to block or delete cookies.
8. Cookies
We use cookies and similar tracking technologies on our website and platform. Cookies are small text files stored on your device that help us provide functionality, remember your preferences, and analyse how our services are used.
The main categories of cookies we use are:
- Essential cookies — necessary for the platform to function, including session management and security cookies. These cannot be disabled.
- Analytics cookies — used to collect anonymised data about how visitors use our website, primarily via Google Analytics 4.
- Functional cookies — used to remember your preferences and personalise your experience.
For full details of the cookies we use, their purpose, and how to manage them, please see our Cookie Policy at cliqforms.com/cookie-policy.
Where required by applicable law, we will obtain your consent before placing non-essential cookies on your device.
9. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:
|
Service Provider
|
Purpose
|
Data Location
|
Privacy Policy
|
| Account data |
Retained for the duration of your account plus 30 days following account closure, after which it is permanently deleted. |
|
|
| Form Data (processor) |
Retained in accordance with the User's subscription and deleted upon account closure or on request. |
|
|
| Billing records |
Retained for 7 years in accordance with Australian tax and financial record-keeping obligations. |
|
|
| Support communications |
Retained for 3 years from the date of last contact. |
|
|
| Analytics data (GA4) |
Retained for 14 months within Google Analytics, after which it is automatically deleted. |
|
|
| Backup data |
Server snapshots retained for up to 30 days; database backups retained for up to 90 days. |
|
|
You may request deletion of your personal data at any time by contacting hi@cliqforms.com. We will action your request within 30 days, subject to any legal retention obligations.
10. Your Privacy Rights
You may request deletion of your personal data at any time by contacting hi@cliqforms.com. We will action your request within 30 days, subject to any legal retention obligations.
10.1 Rights Under Australian Privacy Law (all users)
- Access — the right to request a copy of the personal information we hold about you.
- Correction — the right to request that we correct inaccurate or incomplete personal information.
- Complaints — the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have breached the Australian Privacy Act 1988.
10.2 Additional Rights for EU/UK Users (GDPR)
- Erasure — the right to request deletion of your personal data ('right to be forgotten'), subject to legal retention requirements.
- Restriction — the right to request that we restrict processing of your personal data in certain circumstances.
- Complaints — the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have breached the Australian Privacy Act 1988.
- Portability — the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider.
- Objection — the right to object to processing based on legitimate interests or for direct marketing purposes.
- Automated decision-making — the right not to be subject to decisions made solely by automated processing that produce significant legal or similar effects. CliqForms does not currently use automated decision-making of this nature.
- Withdrawal of consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
- Lodge a complaint — with your local data protection authority. For EU users, a list of national authorities is available at edpb.europa.eu. For UK users, contact the Information Commissioner's Office at ico.org.uk.
To exercise any of the above rights, please contact us at hi@cliqforms.com. We will respond within 30 days (or within the timeframe required by applicable law). We may ask you to verify your identity before processing your request.
11. Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including:
- Encrypted API keys and secure authentication (OAuth 2.0 / JWT) for all platform access.
- Role-based access controls limiting who within our team can access personal data.
- Regular server snapshots and database backups stored securely via DigitalOcean.
- HTTPS encryption for all data transmitted between your browser and our servers.
- Restricted access to production systems, with changes managed through a controlled deployment process.
While we implement robust security measures, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect your account has been compromised, please contact us immediately at hi@cliqforms.com.
12. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights or interests, we will:
- Notify affected individuals and the relevant regulatory authority as required by law — within 72 hours of becoming aware of the breach where required under GDPR, and in accordance with the Australian Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988.
- Take immediate steps to contain the breach and minimise its impact.
- Document all breaches in our internal breach register, regardless of whether notification is required.
To report a suspected security vulnerability or data breach, please contact us immediately at hi@cliqforms.com.
13. International Data Transfers
CliqForms is an Australian business serving users globally. Your personal data may be transferred to and processed in countries other than Australia, including the United States, where our third-party service providers operate (see Section 6).
Where we transfer data outside Australia to countries that do not have equivalent privacy protections, we take steps to ensure your data is protected, including:
- Entering into data processing agreements with our service providers that include appropriate safeguards.
- Relying on providers that are certified under equivalent frameworks (such as the EU-US Data Privacy Framework where applicable).
- Conducting due diligence on the privacy practices of our key service providers.
14. Children's Privacy
The CliqForms platform is intended for use by businesses and adults aged 18 and over. We do not knowingly collect personal data from children under the age of 16 (or the applicable age of digital consent in the relevant jurisdiction).
If you are a CliqForms User who collects data from minors through forms built on our platform, you are solely responsible for obtaining verifiable parental or guardian consent as required by applicable law.
If we become aware that we have inadvertently collected personal data from a child, we will delete it promptly. Please contact us at hi@cliqforms.com if you believe this has occurred.
15. Marketing Communications
We may send you marketing emails and product updates where you have given us consent to do so, or where we have a legitimate interest in contacting you about our services (for example, if you are an existing customer).
You can unsubscribe from marketing communications at any time by:
- Clicking the unsubscribe link in any marketing email we send.
- Contacting us at hi@cliqforms.com and requesting removal from our mailing list.
Unsubscribing from marketing communications will not affect transactional emails related to your account (such as invoices, password resets, or service notifications).
16. Links to Third-Party Websites
Our website and platform may contain links to third-party websites, integrations, or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policy of any third-party website you visit. Links to third-party sites do not constitute endorsement or approval of their content or privacy practices.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the Effective Date at the top of this policy.
- Notify registered users by email at the address associated with their account.
- Post a notice on the CliqForms platform or website.
We encourage you to review this policy periodically. Your continued use of the platform following notice of changes constitutes your acceptance of the updated policy.
18. Contact Us and Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:
CLIQ ONLINE PTY LTD
Email: hi@cliqforms.com
Website: www.cliqforms.com
Address: 81-83 Campbell Street, Surry Hills, NSW 2010, Australia
If you are not satisfied with our response, you have the right to lodge a complaint with the relevant authority:
- Australia: Office of the Australian Information Commissioner (OAIC) — oaic.gov.au
- European Union: Your national data protection authority — edpb.europa.eu
- United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
- United States of America: Federal Trade Commission (FTC) — ftc.gov