01Who we are
ClickBook is a web app for photographers and their studios, operated by ClickBook from India. In this policy, “ClickBook”, “we” and “us” mean the operator of ClickBook, and “you” means anyone who visits clickbook.si, signs up or uses ClickBook.
For the personal data described here, we are the controller under the EU and UK General Data Protection Regulation (GDPR) and the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act). For questions, requests and grievances, write to info@clickbook.si.
02What we collect and why
When you sign up
The form at clickbook.si/join, for the free trial or to talk to us about Custom, asks for:
- your work email (required) and, if you choose to give them, your name, studio name, country, what you shoot, team size, the tools you use today and a note;
- whether you ticked “Email me tips and product news”.
If your browser’s time zone points to a country, the Country field starts with that country filled in. The guess is made in your browser, and you can change the field or set it back to “Choose…” before you send the form.
With each sign-up we also save which form you used, the time and your IP address.
We use these details to create your trial account and email your login, or to reply about the Custom plan, to prepare your setup, and to learn which kinds of studios sign up so we can improve ClickBook. We use the IP address to spot and stop spam and abuse of the form. The form also has a hidden field that only bots fill in: anything sent with it is dropped and never saved.
Emails about your sign-up
When you sign up, we send your details to our own inbox so we can act on them, and we send you a confirmation, at most one per email address a day. Before a confirmation goes out, we check that your email domain can receive mail, with a standard DNS lookup.
To keep to that limit, we keep a note for 24 hours that a confirmation was sent. It holds a one-way hash of your address, the time and, for company addresses, a short hash of the domain, never the address itself. If you reply asking us to stop, we add your address to a short block list so no confirmation goes to it again.
Product news
Only if you tick the box. You can stop them at any time by emailing info@clickbook.si or with the unsubscribe link in the email.
Protecting the form
To limit repeated tries, the server counts sign-ups per IP address (up to 12 an hour) and confirmations per IP address (up to 3 a day). These counts live only in the server’s memory and are forgotten after an hour or a day. So that an accidental double submit doesn’t send the same emails twice, the server also keeps your email address in its memory for a few minutes after a sign-up (at most about 12), and then forgets it.
Technical logs
Like any website, each visit sends our server and our host technical details: your IP address, browser and device type, the page requested and the time. Our server also writes short operational logs, for example a note with the IP address when sign-ups from it are rate-limited. These logs are kept by our host, Hostinger, and used only to run, fix and secure the site.
The live demo
The demo at clickbook.si/demo runs entirely in your browser. The sample studio, anything you change and any image you add are stored in your browser on your device and are never sent to us.
What we don’t do
Analytics, only if you accept. When you choose Accept in the banner, Microsoft Clarity collects how you use the website and the live demo: pages viewed, clicks, scrolling, mouse movement, session replays, device and browser type, screen size, and an approximate location derived from your IP address. Clarity hides what you type into form fields. We use this to find what's confusing and improve the site. The legal basis is your consent, which you can withdraw at any time (see section 08). If you decline, or your browser sends a Global Privacy Control signal, Clarity doesn't load.
No advertising or social media pixels, and no selling or renting of personal data.
03Your account and your clients’ data
We’re the controller (Data Fiduciary) for the details of the people who sign in to ClickBook, such as the account owner, team members and invited freelancers (their name, email address, role, and sign-in and security records), and for the studio’s billing with us. We use them to provide the service, support you and keep it secure.
For the studio’s content, such as its leads, clients, crew records, projects, documents and images, the studio decides what goes in and why: the studio is the controller (Data Fiduciary), and ClickBook processes that data on the studio’s behalf and only on its instructions, as set out in our Terms of Service. If you’re a client of a studio that uses ClickBook, please contact the studio about your data; we’ll help them answer.
Studios can connect their own Stripe, Razorpay or PayPal account so their clients can pay by card. Those payments are processed by that provider, under its own terms and privacy policy, straight into the studio’s account. ClickBook takes no cut and doesn’t store full card numbers.
04Legal bases
If you’re in the European Economic Area (EEA) or the UK, the GDPR requires a legal basis for each use of your data:
Legal basisWhat we use it for
Steps you ask for, and our contractArt. 6(1)(b)Setting up your trial, replying about Custom and running your account.
ConsentArt. 6(1)(a)Product news emails. You can withdraw consent at any time.
Legitimate interestsArt. 6(1)(f)Keeping the site and form secure and free of spam, technical logs, loading the site’s fonts, and learning from sign-ups to improve ClickBook. You can object at any time.
Legal obligationArt. 6(1)(c)Keeping billing and tax records.
Under India’s DPDP Act, we process personal data you give us voluntarily for the purpose you gave it for (a legitimate use under section 7(a)), such as setting up the trial you asked for, or with your consent (section 6), such as product news. You can withdraw consent at any time, as easily as you gave it, by emailing info@clickbook.si. Withdrawing doesn’t affect what was done before.
05How long we keep it
WhatHow long we keep it
Sign-up details, including your IP address, and the sign-up emails in our inboxIf you become a customer, while your account is open. If you don’t, we delete them within 12 months of signing up, or sooner if you ask.
Confirmation note (a hash of your address)24 hours.
Rate-limit countsIn the server’s memory only: up to an hour for sign-ups, 24 hours for confirmations.
Block list (“don’t email me again”)As long as we need it to keep honouring your request.
Account data and studio contentWhile your account is open. When a trial ends without a plan, or a plan is cancelled, the account stays read-only for 30 days so you can export your data, and is then deleted, except the billing records below.
Billing recordsAs long as tax and accounting laws require.
Technical logsFor a limited time, under Hostinger’s retention policies.
Browser storageOn your device until you clear it (see section 8).
06Who we share it with
We use a few service providers, who handle personal data only to provide their service to us:
ProviderWhat they do
HostingerHosts clickbook.si, the server that stores sign-ups and logs, and our email inboxes, such as info@clickbook.si.
Microsoft (Clarity)Only if you accept analytics: records how the website and demo are used, as described above. Microsoft is based in the United States; see the Microsoft Privacy Statement.
ResendDelivers our emails, to our inbox and to you, so it handles your email address and the content of those emails. Resend is based in the United States.
Google (Gmail)Our team inbox, which receives the email about each sign-up, is on Gmail, so Google stores those emails.
Google FontsThe site and the demo load their typefaces from Google’s servers (fonts.googleapis.com and fonts.gstatic.com), so your browser shares your IP address and browser details with Google when a page loads. Google’s own privacy policy applies.
We also share personal data when the law requires it, to protect our rights or people’s safety, or with a new operator if ClickBook is reorganised or sold, who would have to respect this policy. When a studio connects Stripe, Razorpay or PayPal, payment data goes to that provider as described in section 3. We don’t sell personal data or share it for advertising.
If we add or change a provider that handles personal data, we’ll update this list.
07International transfers
ClickBook is operated from India, and our providers may process data in other countries, including the United States. If you’re in the EEA or the UK, this means your data is transferred outside it. Where the GDPR applies, we rely on appropriate safeguards for these transfers: the European Commission’s Standard Contractual Clauses in our providers’ data processing terms and, for data from the UK, the UK’s International Data Transfer Addendum to them. Ask us at info@clickbook.si for details.
08Cookies and browser storage
The clickbook.si website and the live demo ask first. If you accept analytics, Microsoft Clarity sets its cookies (such as _clck and _clsk) to recognise a visit and link its pages together; if you decline, it sets none. We don't use advertising trackers. Your choice is saved in your browser, and you can change it any time: To make a few features work, the site saves small items in your browser’s local or session storage. They stay on your device, and your browser doesn’t send them to us:
ItemWhat it’s for
clickbook.curYour currency choice on the pricing page (US$ or ₹).
clickbook.site.draftSession storage with what you’ve typed into the sign-up form, so a reload doesn’t lose it. Removed when you send the form or close the tab.
clickbook.join.plan, clickbook.join.emailSession storage that carries your plan choice, or the email from the footer form, over to the sign-up form. Removed once used, or when you close the tab.
clickbooks.prototype.*, clickbooks.themeThe live demo’s sample studio with your changes, and its light or dark theme.
You can delete them at any time by clearing this site’s data in your browser settings.
When you sign in to the ClickBook app itself, it uses only the cookies or similar storage that are strictly needed to keep you signed in and your account secure.
09Security
The site is served over HTTPS. Sign-ups are stored outside the public website folder, exporting them needs a secret key, and access is limited to the people who need it. For the email limits we keep only hashes. No system is perfectly secure, so if a breach affects your personal data, we’ll tell you, and the authorities, as the law requires.
10Your rights
Wherever you are, you can ask us what personal data we hold about you, ask us to correct, complete or delete it, and withdraw consent or unsubscribe at any time.
- In the EEA and the UK (GDPR): you also have the right to restrict or object to how we use your data, to data portability, and to complain to your local data protection authority.
- In India (DPDP Act): you have the right to a summary of your personal data and how it’s processed, to know who it has been shared with, to correction, completion, updating and erasure, to grievance redressal, and to nominate someone to use your rights if you die or can’t. If you’re not satisfied with our answer to a grievance, you can complain to the Data Protection Board of India.
To use any of these rights, email info@clickbook.si from the address you signed up with, or tell us which one it was. We may ask you to confirm it’s you. It’s free, and we answer within one month, which the GDPR lets us extend where a request is complex or we receive many. We don’t make decisions about you by automated means alone.
You can also ask us for this policy in any language listed in the Eighth Schedule to the Constitution of India.
11Children
ClickBook is a service for businesses and isn’t meant for anyone under 18, and we don’t knowingly collect children’s data for our own purposes. Studios that photograph children, for example at newborn and family sessions, may store their details or photos in ClickBook. The studio is responsible for having a parent’s or guardian’s consent where the law requires it (including verifiable consent under India’s DPDP Act), and we process that data only on the studio’s instructions.
If you think a child has given us personal data directly, email info@clickbook.si and we’ll delete it.
12Changes to this policy
We’ll update this page when our practices change, and change the date at the top. If a change materially affects how we use customers’ personal data, we’ll email account owners before it takes effect.
Questions about your data?Write to us any time. We answer every message.
info@clickbook.si