Privacy Policy

Last updated: 24th October 2025

1. Introduction

Welcome to Commergic, a trading name of Click Lab Digital Ltd (“we”, “us”, “our”).

We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website or use our software-as-a-service (SaaS) platform (together, the “Service”).

We act as:

a Data Controller for information we collect directly (e.g. from visitors, account holders, marketing communications), and
a Data Processor for data processed on behalf of our customers through our AI chatbot.

2. Who We Are

Click Lab Digital Ltd (T/A Commergic)Registered in England & Wales — Company No. 13675701Registered Address: 14 Grosvenor Square, Sale, England, M33 6QUData Protection Contact: info@commergic.com

3. Personal Data We Collect

Depending on how you interact with us, we may collect:

A. Information you provide to us

Account registration data (name, email, business details, password hash).
Billing and payment information (processed via secure third-party providers such as Stripe).
Support or enquiry correspondence.
Marketing preferences and consent records.

B. Information we collect automatically

Usage data (IP address, browser type, device ID, pages visited, time on page).
Cookies and similar tracking technologies (see our Cookie Policy).
System logs and performance metrics to improve the Service.

C. Customer chatbot dataWhen you deploy the Commergic AI Chatbot on your WooCommerce site, customer conversations and events may be processed. These may contain personal data such as names, email addresses or order references entered by your site visitors. You remain the Data Controller of that information; we process it only on your documented instructions.

4. How We Use Your Data

We process personal data to:

Provide, operate and maintain the Service;
Authenticate users and secure accounts;
Process payments and manage subscriptions;
Communicate with you about updates, support, or security;
Send marketing communications (with your consent or legitimate interest);
Comply with legal obligations and enforce our Terms & Conditions;
Analyse and improve performance through aggregated usage analytics.

We do not sell or rent your personal data to third parties.

5. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

Performance of a contract (for providing the Service);
Legitimate interests (for analytics, security and product improvement);
Consent (for marketing and non-essential cookies);
Legal obligation (for record-keeping and compliance).

6. Sharing Your Data

We may share information with:

Service providers / sub-processors (e.g. hosting providers, AI model APIs, payment processors, email delivery platforms) under confidential agreements and data-processing contracts;
Professional advisors (accountants, lawyers, auditors);
Authorities when required by law or court order;
Corporate affiliates or successors in the event of reorganisation or merger.

All sub-processors are vetted for GDPR compliance and only process data to deliver our Service.

7. International Data Transfers

Where data is transferred outside the UK or EEA (e.g. to cloud infrastructure providers in the US), we use appropriate safeguards such as UK Addendum to the EU Standard Contractual Clauses or other approved mechanisms to ensure adequate protection.

8. Data Retention

We retain personal data only as long as necessary for the purposes stated above or as required by law.

Account data → kept for the duration of your subscription + 12 months for record keeping.
Chatbot interaction logs → retained for up to 90 days unless you delete them earlier via dashboard or request.
Support tickets and communications → kept for up to 24 months.
After these periods, data is securely deleted or anonymised.

9. Data Security

We maintain industry-standard safeguards including:

Encryption in transit (HTTPS/TLS) and at rest;
Secure data centres with access controls;
Regular vulnerability assessments;
Role-based access and staff training;
Incident-response procedures in case of breach.

10. Your Data Protection Rights

You have the right to:

Access your personal data and receive a copy;
Request correction of inaccurate data;
Request erasure (“right to be forgotten”);
Object to or restrict processing;
Data portability (where technically feasible);
Withdraw consent at any time (for marketing or cookies).

To exercise these rights, contact us at info@commergic.com.We may require identity verification before responding.You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (www.ico.org.uk).

11. Cookies and Tracking

We use cookies and similar technologies to operate the website, analyse usage and personalise experience.For full details, see our Cookie Policy, where you can also manage your preferences.

12. Marketing Communications

You may receive emails about product updates, offers or news if you have opted in or we have a legitimate interest in doing so. You can unsubscribe at any time via email link or by contacting us directly.

13. Children’s Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal data from minors. If you believe a child has provided information to us, please contact info@commergic.com for prompt removal.

14. Third-Party Links

Our Website may contain links to other websites. We are not responsible for their content or privacy practices. Please review those policies independently.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be notified via email or prominent notice on our Website. The “Last updated” date indicates the latest revision.

16. Contact UsIf you have questions about this Privacy Policy or our data practices, please contact:info@commergic.comClick Lab Digital Ltd T/A Commergic.