PRIVACY

Privacy notice

How Clickpop Marketing Ltd collects, uses and protects personal data. Last updated 5 January 2026.

This Privacy Notice explains how Clickpop Marketing Ltd ("we", "us", "our") collects, uses and protects personal data in connection with our services.

We are committed to protecting personal data and handling it transparently, fairly and lawfully in accordance with UK data protection law.

1. Who we are

Company name: Clickpop Marketing Ltd
Registered address: 4 Beverley Close, Marlow, Buckinghamshire, SL7 2RD, United Kingdom
ICO registration number: ZB593591
Contact email: hello@clickpop.co.uk

We act as a data controller for the purposes described in this notice.

2. What personal data we process

We process professional contact data relating to individuals acting in a business capacity. This may include:

  • Name
  • Job title and role
  • Company name
  • Business email address
  • LinkedIn profile URL
  • Location (e.g. city or country)
  • Employment history or tenure (where publicly available)
  • Connection or relationship indicators between professionals
  • Information you provide to us through contact forms, emails etc
  • IP address, browser type

We do not intentionally process special category data (such as health, political opinions or personal beliefs).

3. How we collect personal data

We collect personal data from the following sources:

  • Publicly available sources, including professional networking platforms such as LinkedIn
  • Third-party data providers that supply business contact information
  • Our customers, where relevant to service delivery
  • Cookies and analytics tools as part of our website

In many cases, personal data is obtained indirectly, rather than directly from the individual.

4. How we use personal data

We process personal data for the following purposes:

  • Providing B2B relationship, network and intent insights to our customers
  • Identifying organisational-level trends and signals relevant to sales and marketing activity
  • Improving and developing our services
  • Ensuring the security and integrity of our systems
  • Responding to enquiries and exercising legal rights or obligations

Our services are designed to deliver aggregated, organisation-level insights and are not intended to profile or make decisions about individuals.

5. Lawful basis for processing

We rely primarily on legitimate interests under Article 6(1)(f) UK GDPR.

Our legitimate interests include:

  • Supporting B2B sales, marketing and relationship intelligence
  • Enabling organisations to better understand professional networks and engagement in a business context

We have assessed that:

  • The data used is limited to professional information
  • Processing is proportionate and expected in a B2B context
  • Individuals' rights and freedoms are not overridden

Where required, we carry out balancing assessments and DPIAs.

6. Who we share personal data with

We may share personal data with:

  • Our customers, where relevant to the services provided
  • Trusted third-party processors (e.g. cloud hosting and collaboration providers) who process data on our instructions
  • Professional advisers (e.g. legal or accounting), where necessary

All processors are subject to appropriate contractual safeguards. We do not sell personal data.

7. International data transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

  • Adequacy regulations
  • Standard contractual clauses

8. How long we keep personal data

We retain personal data only for as long as necessary to fulfil the purposes outlined in this notice, including:

  • Active service provision
  • Legal, regulatory or contractual requirements

Retention periods are reviewed regularly.

9. How we protect personal data

We apply appropriate technical and organisational measures to protect personal data, including:

  • Access controls and least-privilege principles
  • Encryption of data at rest and in transit
  • Secure cloud infrastructure
  • Monitoring and logging

10. Your rights

Under UK data protection law, individuals have the right to:

  • Access their personal data
  • Request correction or deletion
  • Object to processing based on legitimate interests
  • Request restriction of processing
  • Lodge a complaint with the Information Commissioner's Office (ICO)

See our Data Subject Request Policy below, including how to submit a request.

11. Right to object

Where we process personal data based on legitimate interests, you have the right to object at any time. We will assess and respond in accordance with UK GDPR requirements. To exercise your rights, please contact us using the details above.

12. Changes to this notice

We may update this Privacy Notice from time to time. The latest version will always be published on our website.

Data Subject Request (DSR) Policy

Last updated: 5 January 2026

1. Purpose

This policy sets out how Clickpop Marketing Ltd handles requests from individuals to exercise their rights under UK data protection law, including the UK GDPR. We are committed to responding to all valid Data Subject Requests (DSRs) in a lawful, transparent and timely manner.

2. Scope

This policy applies to requests relating to personal data processed by Clickpop Marketing Ltd in connection with its services, including professional contact data processed in a B2B context.

3. Types of requests we handle

Individuals may exercise the following rights, where applicable:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to object (including to processing based on legitimate interests)
  • Right to data portability (where applicable)

Requests may be submitted by the data subject or an authorised representative.

4. How to submit a request

Data Subject Requests can be submitted by emailing hello@clickpop.co.uk with the subject line "Data Subject Request". Requests should include sufficient information to allow us to verify the requester's identity.

5. Identity verification

To protect personal data, we may request reasonable information to verify the identity of the individual making the request before responding. Where verification is not possible, we may decline the request in accordance with UK GDPR requirements.

6. Response times

  • We aim to respond to all valid requests within one month of receipt.
  • Where a request is complex or numerous, this period may be extended by up to two additional months, in line with UK GDPR.
  • If an extension is required, we will inform the requester and explain why.

7. How requests are handled

Requests are assessed to determine:

  • Whether the requester is entitled to exercise the right claimed
  • Whether any exemptions or limitations apply
  • Whether the request relates to personal data we control or process

Where appropriate, we will:

  • Provide access to personal data
  • Correct inaccurate data
  • Delete or restrict processing
  • Honour objections to processing based on legitimate interests

8. Limitations and exemptions

In certain circumstances, we may lawfully refuse or limit a request, including where:

  • The request is manifestly unfounded or excessive
  • We are required to retain data for legal or regulatory reasons
  • Disclosure would adversely affect the rights of others
  • Data is processed solely in an aggregated or anonymised form

Any refusal will be explained clearly to the requester.

9. Charges

Data Subject Requests are handled free of charge, unless a request is manifestly unfounded or excessive, in which case a reasonable fee may be charged as permitted by law.

10. Record keeping

We maintain internal records of Data Subject Requests received and how they were handled, in accordance with our accountability obligations.

11. Complaints

If an individual is dissatisfied with our response, they may raise a concern with us directly or lodge a complaint with the UK Information Commissioner's Office (ICO).

12. Responsibility

Responsibility for handling Data Subject Requests sits with company leadership, who ensure requests are managed in accordance with this policy and applicable law.