PRIVACY POLICY

Last updated: June 2026

This website is operated by Born to Click, trading name of Aga Peda ("we", "us", "our"). We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store and protect your personal data when you use www.borntoclick.com ("Website") or engage with our services.

1. How We Collect Information

We may collect personal data when you:

  • Use or browse our website

  • Contact us via email, contact forms or telephone

  • Book a consultation via TidyCal

  • Sign up to our newsletter or download a freebie via Kit (ConvertKit)

  • Purchase a digital product via Kit (ConvertKit)

  • Engage with us on Instagram, Facebook or LinkedIn (including via Manychat automations)

  • Sign a contract or commission our services

  • Interact with our cookie banner or accept marketing cookies

We also collect technical data automatically through cookies and analytics tools (see Section 9).

2. Types of Information We Collect

The personal data we may collect includes:

  • Name and business name

  • Email address and telephone number

  • General location or address where relevant to service delivery

  • Payment information (processed securely by third-party providers; we do not store card details)

  • IP address, browser type and device information

  • Pages visited, time spent on site and referral sources

  • Instagram username or other social media handles where you interact with our automations

  • Any information you voluntarily provide via forms, emails or consultation calls

3. How We Use Your Information

We process your personal data for the following purposes:

  • To provide, manage and deliver our services

  • To respond to enquiries and booking requests

  • To manage billing, invoicing and contracts

  • To send marketing emails and newsletters (where you have opted in)

  • To deliver digital products and freebie downloads

  • To run social media automations (e.g. Manychat keyword triggers on Instagram)

  • To improve our website and understand how visitors use it

  • To conduct re-marketing and behavioural advertising (only where you have provided explicit consent via our cookie banner)

  • To meet legal, regulatory and accounting obligations

4. Lawful Bases for Processing

We rely on the following lawful bases under UK GDPR:

Consent - when you sign up to our newsletter, download a freebie, accept marketing cookies or opt in to Instagram automations via Manychat. You can withdraw consent at any time (see Section 8).

Contractual necessity - when we need your data to fulfil a contract with you, such as delivering a website project, audit or consultation.

Legitimate interests - for business administration, responding to enquiries, service improvement and follow-up communication with existing clients or warm leads, where your interests and rights do not override ours.

Legal obligation - where we are required to retain records for tax, accounting or compliance purposes (typically up to 6 years under HMRC requirements).

5. Third-Party Data Processors

We work with the following trusted third-party processors who may handle your data on our behalf. We only share data that is necessary for the relevant service, and we ensure all processors maintain appropriate data protection standards.

  • Squarespace - Website hosting and analytics - USA (Standard Contractual Clauses in place)

  • Google Analytics - Website traffic analysis - USA (Standard Contractual Clauses in place)

  • Kit (ConvertKit) - Email marketing, newsletter, freebie delivery and digital product sales - USA (Standard Contractual Clauses in place)

  • Manychat - Instagram and Facebook messaging automations - USA (Standard Contractual Clauses in place)

  • TidyCal - Booking and consultation scheduling - USA (Standard Contractual Clauses in place)

  • Payment processors (e.g. Stripe, PayPal) - Secure payment processing - USA/EU (Standard Contractual Clauses or adequacy decisions in place)

  • Subcontractors - Project delivery support where applicable - UK/EU

We do not sell or rent your data to third parties.

6. International Data Transfers

Several of our processors are based in the United States. Where personal data is transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the UK ICO or European Commission, to protect your data to an equivalent standard.

7. Data Retention

We retain your personal data only for as long as necessary:

  • Client project data: up to 6 years after project completion, for accounting and legal purposes

  • Email subscribers and freebie downloaders: until you unsubscribe or withdraw consent, after which data is deleted within 30 days

  • Booking data (TidyCal): in line with TidyCal's own retention policies

  • Website analytics data: in line with Google Analytics retention settings (typically 14 months)

  • Social media automation data (Manychat): in line with Manychat's retention policies

  • Enquiry and contact data: up to 2 years if no contract results, or 6 years if a contract is formed

8. Your Rights

Under UK GDPR, you have the following rights:

  • Right of access - to request a copy of the personal data we hold about you

  • Right to rectification - to request correction of inaccurate or incomplete data

  • Right to erasure - to request deletion of your data, subject to legal obligations

  • Right to restriction - to request that we limit how we process your data

  • Right to data portability - to receive your data in a structured, machine-readable format

  • Right to withdraw consent - at any time where processing is based on consent, without affecting the lawfulness of prior processing

  • Right to object - you have an absolute right to object to us processing your data for direct marketing purposes at any time. We will stop immediately upon receipt of your objection. You can unsubscribe from any email marketing via the unsubscribe link in every email, or by contacting us directly.

  • Right to lodge a complaint - with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113

To exercise any of these rights, contact us at hello@borntoclick.com. We will respond within one calendar month.

9. Cookies

Our website uses cookies to function and to improve your experience. The types of cookies we use include:

  • Essential cookies - required for the site to operate (e.g. security, session management). These cannot be disabled.

  • Analytics cookies - used to understand how visitors use our site (Google Analytics). These are only placed with your consent.

  • Preference cookies - to remember your settings and choices.

  • Marketing cookies - used for re-marketing and behavioural advertising via Google and/or Meta platforms. These are only placed with your explicit consent via our cookie banner.

  • Social media cookies - to enable sharing and embedded content from social platforms.

We request your consent for all non-essential cookies via the cookie banner shown on your first visit. You can change your preferences at any time by clearing your cookies and revisiting the site, or by adjusting your browser settings. Disabling cookies may affect certain site functionality.

10. Social Media & Manychat Automations

When you interact with our Instagram or Facebook content - for example, by commenting a keyword to trigger an automated response - your username and message may be processed by Manychat on our behalf. By participating in these automations, you consent to this processing. Manychat's own privacy policy applies to their platform's handling of your data.

Your broader activity on social media platforms (Instagram, Facebook, LinkedIn) is subject to the respective platform's privacy policies. We encourage you to review these independently.

11. Third-Party Links

Our website may contain links to third-party websites, including affiliate links. We are not responsible for the privacy practices of these websites and recommend reviewing their privacy policies separately. The presence of a link does not constitute endorsement of their privacy practices.

12. Children's Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@borntoclick.com and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our business or the services we use. When we make material changes that affect how we use data previously collected, we will notify affected individuals by email where we hold their contact details. The updated policy will always be available on this page with the revised date at the top.

14. Contact

If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise your rights, please contact:

Born to Click:hello@borntoclick.com