ONCLIKS Privacy Policy

Legal & Data Protection

Your data, handled with care.

ONCLIKS builds software products and services for businesses. This policy explains what personal information we collect across everything we make, why we collect it, and the rights you have over it.

Applies to: all ONCLIKS products & services Governing law: United Kingdom (UK GDPR)
One policy, all our products. ONCLIKS builds a range of software products. This policy applies to all of them, as well as to our website. Because our products differ, not every part of this policy applies to every product — where something depends on the specific product you use, we say so. For some products ONCLIKS decides how data is used (we are the “controller”); for others we process data on behalf of a business client that uses our software (we are the “processor”), and that business decides how the data is used.

Who we are

ONCLIKS (“ONCLIKS”, “we”, “us”, “our”) is an independent software company. We design and build software products and services for businesses, which may include tools for taking orders, managing customers, processing payments, and automating everyday operational work.

ONCLIKS is a brand operated by SAMIES LIMITED, a company registered in Scotland under company number SC784437, with its registered office at 32 Stanley Street, Glasgow, G41 1JB, United Kingdom.

For any question about this policy or your personal data, contact us at privacy@oncliks.com.

Who this policy covers

This policy applies to everyone whose personal data we handle, including:

  • Business clients — owners and staff of the businesses that sign up to use an ONCLIKS product. For this data, ONCLIKS is generally the data controller.
  • End users and customers — people who interact with, or place requests or orders through, a product that a business runs using ONCLIKS software. For this data, the business is usually the controller and ONCLIKS acts as its data processor, handling the data under the business’s instructions.
  • Website visitors — anyone who visits oncliks.com. For this data, ONCLIKS is the controller.

Information we collect

What we collect depends on the product or service you use. It may include:

From business clients

  • Account details — name, business name, email address, phone number, and login credentials.
  • Business information — trading address, the content you add to a product (such as menus, catalogues, or records), and the settings you configure.
  • Integration data — where a product connects to a third-party account you own (for example a messaging or payment account), the identifiers and access tokens needed to operate that connection on your behalf.
  • Payment and payout details — information needed to set up billing or payouts, handled by our payment provider (see section 7).
  • Support communications — messages you send us and records of our correspondence.

From end users and customers

  • Contact details — such as a name and phone number or email, where a product requires them.
  • Content you provide — the information, requests, or orders you submit through a product. Depending on the product, this may include text messages, voice recordings, or images (for example a photo you send).
  • Transaction information — records of orders, requests, or purchases, and their status.
  • Delivery or location information — where relevant to the service, such as a delivery address.

Collected automatically

  • Usage and log data — actions taken, timestamps, and error logs.
  • Device and technical data — IP address, browser type, and device information.
  • Cookies — small files used to keep you signed in and to operate our sites and products (see section 14).

How we use information

We use personal data to:

  • Provide, operate, and maintain our products and services.
  • Carry out the tasks a product is designed to do — such as receiving, interpreting, and routing requests or orders.
  • Process payments and confirm transaction status, where a product involves payment.
  • Create and manage accounts and provide customer support.
  • Keep our products secure, prevent fraud and abuse, and diagnose technical problems.
  • Improve and develop new features and products.
  • Meet our legal, accounting, and regulatory obligations.

AI & automated processing

Some ONCLIKS products use automated and AI-based processing to do their job — for example, converting a voice recording into text, reading text from an image, translating between languages, or interpreting a request against a set of options.

Where a product does this, the relevant content (such as text, audio, or an image) may be sent to trusted AI service providers that perform the processing on our behalf and under contract. We send only what is needed for that task.

Where a product uses automated interpretation to act on a request, we design it so a person can review and confirm the outcome before anything final happens — automated processing does not, by itself, produce a final decision without the opportunity for human review.

Third-party platforms

Some of our products work on top of third-party platforms — for example, a messaging platform such as WhatsApp (provided by Meta Platforms, Inc.). Where a product uses such a platform, your data also passes through that platform and is processed under its own terms and privacy policy.

Where a business connects its own third-party account (such as a messaging or social account) to an ONCLIKS product, the business remains the owner of that account, and ONCLIKS accesses it only to provide the agreed service on the business’s behalf. We encourage you to review the privacy policy of any third-party platform you use alongside our products.

Payments

Where a product involves payment, payments are processed by Stripe, a certified PCI Service Provider Level 1. Your card or wallet details (including Apple Pay and Google Pay) are collected and processed directly by Stripe.

ONCLIKS does not receive, see, or store full card numbers. We receive only confirmation of payment and limited, non-sensitive transaction data needed to operate the service. Stripe’s handling of your data is governed by Stripe’s own privacy policy.

How we share data

We do not sell personal data. We share it only with the parties needed to run our products, each bound by appropriate contractual safeguards. Depending on the product, these may include:

  • The relevant business — where you interact with a business through our software, your data is shared with that business so it can serve you.
  • Payment processing — Stripe, to take and reconcile payments.
  • Platform and messaging providers — such as Meta Platforms, where a product operates on their platform.
  • AI processing providers — providers that transcribe, read, translate, or interpret content (for example Groq and OpenAI).
  • Hardware and printing providers — where a product prints or outputs to a connected device.
  • Hosting and infrastructure — providers that store product data on secure servers.
  • Professional advisers and authorities — where required by law, or to establish, exercise, or defend legal claims.

International transfers

Some of our service providers are based outside the United Kingdom, including in the United States. Where personal data is transferred abroad, we ensure an appropriate safeguard is in place — such as an adequacy decision, the UK International Data Transfer Agreement, or Standard Contractual Clauses — so your data receives an equivalent level of protection.

Data retention

We keep personal data only as long as necessary for the purposes it was collected for:

  • Account data is retained while an account is active and for a reasonable period afterwards.
  • Transaction records may be retained to meet accounting and tax obligations (in the UK, typically six years).
  • Content such as voice recordings and images is retained only as long as needed to carry out and confirm the task, then deleted or minimised in line with the relevant product’s settings.

When data is no longer needed, we securely delete or anonymise it.

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and separation of client accounts. Payment data is handled by Stripe within its PCI-compliant environment. No system can be guaranteed completely secure, but we work to protect your information and to respond promptly to any incident.

Your rights

Under UK GDPR you have the following rights over your personal data:

Access

Request a copy of the personal data we hold about you.

Rectification

Ask us to correct data that is inaccurate or incomplete.

Erasure

Ask us to delete your data where there is no reason to keep it.

Restriction

Ask us to limit how we use your data in certain cases.

Portability

Receive your data in a portable, machine-readable format.

Object

Object to processing based on our legitimate interests.

Where ONCLIKS acts as a processor for a business, we will refer your request to that business or assist them in responding. To exercise any right, email privacy@oncliks.com.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk. We would appreciate the chance to address your concerns first.

Cookies

Our website and products use cookies that are strictly necessary to keep you signed in and to operate securely, and may use limited analytics cookies to understand how our products are used. You can control non-essential cookies through your browser settings or any cookie controls we provide. Blocking essential cookies may stop parts of our products from working.

Children

ONCLIKS products are business services and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time to reflect changes in our products or the law. When we do, we will revise the “last updated” date at the top of this page, and, where changes are significant, take reasonable steps to notify you.

Contact us

For any question about this policy, your data, or to exercise your rights, contact: