This Addendum forms part of the Terms of Service between ClickTech Solutions Ltd ("Processor", "we") and the account holder ("Controller", "you") and applies to personal data of quiz visitors ("Lead Data") that we process on your behalf. Terms such as controller, processor, personal data and processing have the meanings given in the UK GDPR.
1. Roles and scope
You are the controller of Lead Data. We process it only to provide the Service as described in the Terms and on your documented instructions given through the Service (for example, storing leads, exporting them, and sending them to a webhook you configure).
2. Details of processing
- Subject matter: hosting quizzes and collecting Leads.
- Duration: the term of your account plus 30 days.
- Nature and purpose: storage, display to you, export, transmission to endpoints you configure, aggregate counting for statistics.
- Categories of data: email address, name (optional), quiz answers and result, campaign tags from the referring link, timestamps.
- Data subjects: people who take your quizzes.
3. Our obligations
We will: process Lead Data only on your instructions; ensure people processing it are bound by confidentiality; implement appropriate technical and organisational measures (encryption in transit and at rest, row-level access controls, least-privilege service credentials, audit logging of administrative changes); assist you with data-subject requests and impact assessments in so far as reasonably possible; notify you without undue delay, and in any event within 48 hours, of a personal data breach affecting Lead Data; delete or return Lead Data at the end of the term; and make available information reasonably needed to demonstrate compliance.
4. Sub-processors
You authorise the sub-processors listed below. We will give at least 14 days' notice before adding or replacing one; you may object on reasonable grounds and, if we cannot resolve the objection, terminate the affected Service.
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | EU |
| Lovable | Application hosting and server functions | EU/US |
| FloPay and routed gateways | Payments (account holder data only, not Lead Data) | US |
| Anthropic | AI generation (page text and settings only, not Lead Data) | US |
| Pexels | Stock image search (search terms only) | US |
| Resend | Transactional email to account holders | EU (Ireland) |
| Analytics provider (to be confirmed) | Product analytics (account holders only) | — |
5. International transfers
Where a sub-processor processes personal data outside the UK, we rely on the UK International Data Transfer Agreement or Addendum, or the sub-processor's participation in the UK Extension to the EU–US Data Privacy Framework.
6. Your obligations
You warrant that you have a lawful basis for collecting Lead Data, that your quiz and any notices comply with applicable law, and that your instructions to us are lawful.
7. Liability
Liability under this Addendum is subject to the limits in the Terms of Service.
8. Precedence
If this Addendum conflicts with the Terms in relation to Lead Data, this Addendum prevails.