Privacy Policy

1. Who We Are

CliqForms is a SaaS platform operated by CLIQ ONLINE PTY LTD (ABN: 75 685 058 440), a company registered in Australia. We provide online form building, QR code generation, landing pages, and electronic signature tools to businesses and individuals globally.
For the purposes of this Privacy Policy:

• "Controller" — CLIQ ONLINE PTY LTD is the data controller in respect of personal data collected from visitors to our website (cliqforms.com) and registered users of our platform.
• "Processor" — Where our customers (Users) collect personal data from their own end users via forms built on the CliqForms platform, CliqForms acts as a data processor on behalf of those Users. Users are the data controllers for that data and are responsible for their own privacy obligations to their end users.

Contact details for privacy matters:

• Email: hi@cliqforms.com
• Post: CLIQ ONLINE PTY LTD, 81-83 Campbell Street, Surry Hills, NSW 2010, Australia

2. Scope of This Policy

This Privacy Policy applies to:

• Visitors to our website at cliqforms.com and any associated subdomains.
• Registered users of the CliqForms platform, including free trial and paid subscribers.
• Individuals who contact us by email, through our website, or by any other means.

This policy does not apply to the personal data that our Users collect through forms they build using our platform. Users are responsible for their own privacy policies and obligations to their end users. If you have submitted data through a form created by a CliqForms User and have a privacy question, please contact the organisation that created the form directly.

3. Personal Data We Collect

3.1 Data You Provide to Us

When you register for an account, subscribe to a plan, or contact us, we may collect:

• Name and email address — required to create and manage your account.
• Billing information — including payment card details processed securely by our payment provider Paddle. We do not store full card numbers on our servers.
• Business name and contact details — where provided during registration or account setup.
• Communications — any messages, support requests, or feedback you send to us.

3.2 Data We Collect Automatically

When you visit our website or use the platform, we automatically collect certain technical data, including:

• IP address — used to diagnose technical issues and for security monitoring.
• Browser type and version, operating system, and device information.
• Pages visited, time spent on pages, and navigation paths — collected via Google Analytics 4 (GA4). See Section 7 for details.
• Session data — including login timestamps and platform usage activity.
• Cookies and similar tracking technologies — see our Cookie Policy at cliqforms.com/cookie-policy for full details.

3.3 Form Data (Processor Role)

Where Users of the CliqForms platform collect personal data from their own end users through forms built on our platform, CliqForms stores and processes that data solely on behalf of the User, as a data processor. CliqForms does not use this data for its own purposes and does not sell or share it with third parties except as required to deliver the service.

3.4 Sensitive Personal Data

CliqForms does not intentionally collect sensitive categories of personal data (such as health information, biometric data, racial or ethnic origin, political opinions, religious beliefs, or sexual orientation) from its registered users. If you are a User who collects sensitive data through forms on our platform, you are responsible for ensuring you have the appropriate lawful basis and consent to do so.

4. Lawful Basis for Processing

We rely on the following lawful bases to process your personal data under the Australian Privacy Act 1988 and, where applicable, the EU General Data Protection Regulation (GDPR):

5. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• Account management — to create, maintain, and administer your CliqForms account.
• Service delivery — to provide you with access to the platform features included in your subscription.
• Payment processing — to manage billing, invoicing, and subscription renewals via Paddle.
• Customer support — to respond to your enquiries, support requests, and feedback.
• Security and fraud prevention — to monitor for suspicious activity, protect the platform, and enforce our Terms and Conditions.
• Platform improvement — to analyse usage patterns and improve the performance, features, and user experience of the platform.
• Communications — to send you transactional emails (account confirmations, invoices, password resets) and, with your consent, marketing communications and product updates.
• Legal compliance — to comply with applicable laws, regulations, and lawful requests from regulatory authorities.

We will not use your personal data for purposes that are incompatible with those set out above without first obtaining your consent or establishing another lawful basis.

6. Third-Party Service Providers

We use trusted third-party service providers to help deliver our platform and services. These providers act as data processors on our behalf and are contractually required to protect your data and process it only on our instructions. Our current key processors are:

Where data is transferred to providers located outside Australia (including the USA), we take appropriate steps to ensure that such transfers are protected by appropriate safeguards, including standard contractual clauses or reliance on the provider's Privacy Shield or equivalent certification where applicable.

7. Google Analytics and Tracking

Our website and platform use Google Analytics 4 (GA4), a web analytics service provided by Google LLC. GA4 uses cookies and similar technologies to collect information about how visitors use our website, including:

• Pages visited and navigation paths.
• Time spent on pages and session duration.
• Device type, browser, and operating system.
• General geographic location (country/city level, derived from IP address).
• Referral source (how you arrived at our website).

This data is transmitted to and stored on Google's servers in the United States. Google may use this data in accordance with its own Privacy Policy. We have configured GA4 with IP anonymisation enabled, which means your full IP address is not stored by Google.
You can opt out of Google Analytics tracking at any time by:

• Using the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.
• Adjusting your cookie preferences via our cookie consent manager on the website.
• Configuring your browser to block or delete cookies.

8. Cookies

We use cookies and similar tracking technologies on our website and platform. Cookies are small text files stored on your device that help us provide functionality, remember your preferences, and analyse how our services are used.
The main categories of cookies we use are:

• Essential cookies — necessary for the platform to function, including session management and security cookies. These cannot be disabled.
• Analytics cookies — used to collect anonymised data about how visitors use our website, primarily via Google Analytics 4.
• Functional cookies — used to remember your preferences and personalise your experience.

For full details of the cookies we use, their purpose, and how to manage them, please see our Cookie Policy at cliqforms.com/cookie-policy.
Where required by applicable law, we will obtain your consent before placing non-essential cookies on your device.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:

You may request deletion of your personal data at any time by contacting hi@cliqforms.com. We will action your request within 30 days, subject to any legal retention obligations.

10. Your Privacy Rights

You may request deletion of your personal data at any time by contacting hi@cliqforms.com. We will action your request within 30 days, subject to any legal retention obligations.

10.1 Rights Under Australian Privacy Law (all users)

• Access — the right to request a copy of the personal information we hold about you.
• Correction — the right to request that we correct inaccurate or incomplete personal information.
• Complaints — the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have breached the Australian Privacy Act 1988.

10.2 Additional Rights for EU/UK Users (GDPR)

• Erasure — the right to request deletion of your personal data ('right to be forgotten'), subject to legal retention requirements.
• Restriction — the right to request that we restrict processing of your personal data in certain circumstances.
• Complaints — the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have breached the Australian Privacy Act 1988.

• Portability — the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider.
• Objection — the right to object to processing based on legitimate interests or for direct marketing purposes.
• Automated decision-making — the right not to be subject to decisions made solely by automated processing that produce significant legal or similar effects. CliqForms does not currently use automated decision-making of this nature.
• Withdrawal of consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Lodge a complaint — with your local data protection authority. For EU users, a list of national authorities is available at edpb.europa.eu. For UK users, contact the Information Commissioner's Office at ico.org.uk.

To exercise any of the above rights, please contact us at hi@cliqforms.com. We will respond within 30 days (or within the timeframe required by applicable law). We may ask you to verify your identity before processing your request.

11. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including:

• Encrypted API keys and secure authentication (OAuth 2.0 / JWT) for all platform access.
• Role-based access controls limiting who within our team can access personal data.
• Regular server snapshots and database backups stored securely via DigitalOcean.
• HTTPS encryption for all data transmitted between your browser and our servers.
• Restricted access to production systems, with changes managed through a controlled deployment process.

While we implement robust security measures, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect your account has been compromised, please contact us immediately at hi@cliqforms.com.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights or interests, we will:

• Notify affected individuals and the relevant regulatory authority as required by law — within 72 hours of becoming aware of the breach where required under GDPR, and in accordance with the Australian Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988.
• Take immediate steps to contain the breach and minimise its impact.
• Document all breaches in our internal breach register, regardless of whether notification is required.

To report a suspected security vulnerability or data breach, please contact us immediately at hi@cliqforms.com.

13. International Data Transfers

CliqForms is an Australian business serving users globally. Your personal data may be transferred to and processed in countries other than Australia, including the United States, where our third-party service providers operate (see Section 6).
Where we transfer data outside Australia to countries that do not have equivalent privacy protections, we take steps to ensure your data is protected, including:

• Entering into data processing agreements with our service providers that include appropriate safeguards.
• Relying on providers that are certified under equivalent frameworks (such as the EU-US Data Privacy Framework where applicable).
• Conducting due diligence on the privacy practices of our key service providers.

14. Children's Privacy

The CliqForms platform is intended for use by businesses and adults aged 18 and over. We do not knowingly collect personal data from children under the age of 16 (or the applicable age of digital consent in the relevant jurisdiction).

If you are a CliqForms User who collects data from minors through forms built on our platform, you are solely responsible for obtaining verifiable parental or guardian consent as required by applicable law.

If we become aware that we have inadvertently collected personal data from a child, we will delete it promptly. Please contact us at hi@cliqforms.com if you believe this has occurred.

15. Marketing Communications

We may send you marketing emails and product updates where you have given us consent to do so, or where we have a legitimate interest in contacting you about our services (for example, if you are an existing customer).
You can unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email we send.
• Contacting us at hi@cliqforms.com and requesting removal from our mailing list.

Unsubscribing from marketing communications will not affect transactional emails related to your account (such as invoices, password resets, or service notifications).

16. Links to Third-Party Websites

Our website and platform may contain links to third-party websites, integrations, or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policy of any third-party website you visit. Links to third-party sites do not constitute endorsement or approval of their content or privacy practices.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the Effective Date at the top of this policy.
• Notify registered users by email at the address associated with their account.
• Post a notice on the CliqForms platform or website.

We encourage you to review this policy periodically. Your continued use of the platform following notice of changes constitutes your acceptance of the updated policy.

18. Contact Us and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:

CLIQ ONLINE PTY LTD

Email: hi@cliqforms.com

Website: www.cliqforms.com

Address: 81-83 Campbell Street, Surry Hills, NSW 2010, Australia

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant authority:

• Australia: Office of the Australian Information Commissioner (OAIC) — oaic.gov.au
• European Union: Your national data protection authority — edpb.europa.eu
• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
• United States of America: Federal Trade Commission (FTC) — ftc.gov