Privacy Policy

1. Introduction

This Privacy Policy explains how Click Rocket collects, uses, stores, shares and protects personal information when you visit our website, enquire about our services, become a client, use our software or connected services, or interact with us in any other way.

Click Rocket provides review automation, customer reactivation, review response tools, website design and development, search visibility services, Google Business Profile support, digital marketing support and related services.

This Policy should be read together with our Terms and Conditions.

2. Who is responsible for your personal information?

For personal information collected through the Click Rocket website, sales process, client account, support channels and direct relationship with you:

“Personal information” has the meaning given to it under the Protection of Personal Information Act 4 of 2013 (“POPIA”).

3. When Click Rocket acts as an Operator

Click Rocket may process personal information belonging to a client's own customers, leads, guests or contacts. This may happen when we send review requests, reminders, reactivation messages or related communications on a client's behalf.

In these cases:

• the client is usually the Responsible Party;
• Click Rocket acts as the Operator;
• the client decides why and how its customer information is used;
• Click Rocket processes that information only to provide the agreed services and follow the client's documented instructions.

If you received a review request, SMS, email or other message from one of our clients, that client is normally responsible for explaining why it has your contact details and why it contacted you.

4. Personal information we collect

The personal information we collect depends on how you interact with Click Rocket.

Website visitors and enquiries

We may collect:

• name and surname;
• business name;
• email address;
• mobile number;
• website address;
• service enquiry details;
• information you provide in contact forms, booking forms, chat messages, emails or calls;
• technical information, such as IP address, browser type, device information and pages visited.

Clients and account users

We may collect:

• name and contact details;
• company information;
• billing information;
• login and account details;
• communications with us;
• service preferences;
• information needed to provide support;
• website, business-profile, CRM or other system access details where supplied by you;
• reporting and campaign information.

Client customer data

Where a client uses Click Rocket's review automation or reactivation services, we may process information provided by that client, including:

• customer names;
• mobile numbers;
• email addresses;
• service, booking or job details;
• dates of service;
• review status;
• message history;
• customer tags, notes or custom fields;
• information received from a connected client system.

Clients must only provide information that they are legally entitled to share with Click Rocket.

Payments

Payments may be handled by an external payment service provider. Click Rocket does not intentionally store full debit-card or credit-card details.

We may receive payment confirmation, transaction references, billing contact details, invoice details and payment status information.

5. How we collect personal information

We may collect personal information:

• directly from you when you complete a form, send an email, request a quotation, become a client or contact us;
• from the client business that has instructed us to provide services;
• from a client's connected customer management, booking, payment or messaging system;
• through cookies and similar website technologies;
• from third-party service providers used to run our services;
• from public sources, such as a business website, Google Business Profile or public social-media business page.

6. Why we process personal information

We may process personal information to:

• respond to enquiries and provide quotations;
• create and manage client accounts;
• provide review automation, review response, reactivation, website and related services;
• send service, billing, account and support communications;
• send review requests and customer communications on behalf of clients;
• maintain records of messages, reviews, responses and service activity;
• improve our website, services, support and security;
• prevent fraud, abuse and unauthorised use;
• comply with legal, tax, accounting and regulatory obligations;
• manage disputes and enforce agreements;
• create case studies or marketing material where permission exists or where the information is publicly available.

7. Our basis for processing

We process personal information only where POPIA allows us to do so. Depending on the situation, this may include:

• your consent;
• the need to take steps before entering into a contract with you;
• the need to perform a contract with you or your business;
• compliance with a legal obligation;
• our legitimate business interests, where these do not unfairly override your rights;
• the legitimate interests of a client where Click Rocket acts as an Operator on that client's behalf.

8. Review requests, SMS, email and customer communications

Click Rocket may send review requests, reminders and customer reactivation messages on behalf of its clients.

Clients are responsible for ensuring that they:

• have a lawful reason to use each customer's contact details;
• have given any required privacy notices;
• have obtained consent where required;
• honour unsubscribe, STOP and other opt-out requests;
• do not send unlawful, misleading, excessive or unwanted communications;
• comply with POPIA, the Consumer Protection Act, platform rules and any other law that applies to them.

Click Rocket may block, pause or refuse a campaign where we reasonably believe it could breach law, platform rules or this Policy.

You can opt out of Click Rocket's own marketing emails by using the unsubscribe link in the email or by emailing gino@getclickrocket.com.

For messages sent by one of our clients, use the unsubscribe option in that message or contact the client directly.

9. AI features

Some Click Rocket services may include AI-assisted features, such as review-response suggestions, content drafts or message suggestions.

Where AI features are enabled:

• personal information may be processed by approved AI service providers;
• AI-generated content may be inaccurate, incomplete or unsuitable;
• clients remain responsible for reviewing and approving content before publication;
• Click Rocket does not use AI to make decisions that have legal or similarly serious effects on individuals without appropriate human involvement.

Clients should not submit sensitive personal information to AI features unless this is necessary, lawful and agreed in writing.

10. Who we share personal information with

We may share personal information with trusted service providers where necessary to provide our services. These may include:

• website hosting and cloud-storage providers;
• software and platform providers;
• email, SMS and messaging providers;
• payment service providers;
• customer management and automation platforms;
• analytics and website-performance providers;
• AI service providers where AI features are enabled;
• professional advisers, such as accountants, lawyers or debt-collection providers;
• regulators, courts, law enforcement or other parties where disclosure is required by law.

We do not sell personal information.

We do not sell or share mobile opt-in information with third parties for their own marketing purposes.

11. International data transfers

Some Click Rocket service providers may process or store personal information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer is permitted under POPIA. This may include using providers subject to suitable data-protection laws, contractual safeguards or other lawful transfer arrangements.

12. Cookies and similar technologies

Our website may use cookies, pixels and similar technologies to:

• make the website work properly;
• remember preferences;
• help protect against fraud and abuse;
• understand website traffic and visitor behaviour;
• improve website performance;
• measure marketing activity.

You can control cookies through your browser settings. Disabling cookies may affect certain website features.

Where required, we will ask for consent before placing non-essential cookies on your device. See our Cookie Policy for full details.

13. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to:

• provide services;
• maintain client accounts;
• respond to support requests;
• comply with tax, accounting and legal duties;
• resolve disputes;
• enforce agreements;
• maintain security and backup records.

When client services end, client data may remain available for a limited period to allow account recovery, export requests or lawful record keeping.

A client may request deletion of client data by emailing gino@getclickrocket.com. Deletion may be subject to legal retention duties, backups and information that we must keep for accounting, security or dispute purposes.

14. How we protect personal information

We use reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration and destruction.

These measures may include:

• access controls;
• password protection;
• secure software and infrastructure;
• limited staff access;
• authentication measures;
• supplier reviews;
• backups;
• monitoring and security updates.

No internet-based system is completely secure. You should take care when sharing information online and keep your passwords, login details and devices secure.

15. Security incidents

If Click Rocket has reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, we will investigate the matter and take steps required by POPIA.

Where Click Rocket is acting as an Operator, we will notify the relevant client as soon as reasonably possible so that the client can meet its own legal duties.

16. Children

Click Rocket's website and services are not intended for persons under the age of 18.

We do not knowingly collect personal information from children for our own marketing purposes.

Clients may not upload or provide children's personal information unless they have lawful authority, suitable safeguards and any consent required by POPIA.

17. Your rights

Subject to POPIA and applicable law, you may have the right to:

• ask whether we hold personal information about you;
• request access to your personal information;
• request correction of inaccurate, incomplete, misleading or outdated information;
• request deletion of information where we are no longer authorised to keep it;
• object to certain processing;
• withdraw consent where processing is based on consent;
• object to direct marketing;
• lodge a complaint with the Information Regulator.

To exercise a right, email gino@getclickrocket.com with:

• your full name;
• the email address or mobile number connected to your information;
• the request you are making;
• enough information for us to verify your identity.

We may request reasonable proof of identity before acting on a request.

18. Complaints

Please contact us first at gino@getclickrocket.com so that we can try to resolve your concern.

You may also lodge a complaint with the Information Regulator:

19. Third-party websites and platforms

Our website and services may contain links to third-party websites, platforms and tools.

Click Rocket is not responsible for the privacy practices of third parties. You should read the privacy policy of each third-party service before providing personal information to it.

20. Changes to this Policy

We may update this Privacy Policy from time to time.

The latest version will be published on our website with a revised “Last updated” date. Continued use of our services after an updated Policy takes effect means that you accept the revised Policy.

21. Contact us

For privacy questions, data requests or concerns, contact: