Privacy Policy
1. Who We Are
Data Controller:
ClickReach Single Proprietorship
Querstrasse 1
8805 Zürich, Switzerland
Email: katlego@clickreach.ch
2. What Personal Data We Collect
Data You Provide:
- Identity Data: Name, phone number, email
- Chat Data: Messages and attachments you send through WhatsApp Business and our AI Agent Assistant
- Billing Data: If you purchase any of our services
Data We Collect Automatically:
- Device & Usage Info: IP address, browser type, operating system, and usage analytics
- Cookie & Consent Data: Collected via our Google-certified CMP banner
3. Legal Basis for Processing
| Purpose | Legal Basis (GDPR) | Legal Basis (FADP) |
|---|---|---|
| Delivering Chat Commerce services | Contract (Art. 6(1)(b)) | Lawful processing |
| Customer support (e.g. WhatsApp) | Legitimate interest (Art. 6(1)(f)) | Legitimate interest |
| Marketing (email, SMS) | Consent (Art. 6(1)(a)) | Consent |
| Analytics & product improvement | Legitimate interest | Proportionality & data minimisation |
| Fraud detection & legal compliance | Legal obligation (Art. 6(1)(c)) | Legal obligation |
4. Cookies and Consent Management
We use cookies to improve functionality and analyse usage. Consent is obtained via our Google-certified CMP, which complies with the IAB Transparency and Consent Framework and Google Consent Mode.
You can manage your preferences at any time via our cookie banner or settings page.
5. How We Share Your Data
We may share data with:
- Service providers (hosting, analytics, customer support, payment)
- WhatsApp Ireland Ltd., under the WhatsApp Business Data Processing Terms
- Authorities, when legally required
International Transfers: Protected by Standard Contractual Clauses (SCCs) or adequate safeguards
6. Data Security and Retention
We apply appropriate technical and organisational measures to safeguard your data, including encryption, access controls, and routine audits.
Retention Periods:
Data is stored only as long as necessary or legally required (e.g. up to 5 years for legal documentation).
7. Your Rights Under GDPR and FADP
You have the right to:
- Request access to your data
- Correct or update personal data
- Request deletion ("right to be forgotten")
- Restrict or object to certain types of processing
- Withdraw consent at any time
- Data portability (receive your data in machine-readable format)
- Lodge a complaint with a supervisory authority:
Switzerland: Federal Data Protection and Information Commissioner (FDPIC) – info@edoeb.admin.ch
EU: Local data protection authority in your country
8. Data Breaches
If a personal data breach poses a high risk to your rights, we will notify:
- The Swiss FDPIC (under Art. 24 FADP)
- Affected individuals, if required by law
9. Policy Updates
This policy may change due to legal, technical, or business developments. We'll update the "Last Updated" date and notify users where appropriate.
Contact Us
For any questions regarding this Privacy Policy or your data, please contact:
Email: katlego@clickreach.ch
Last updated: 12.12.2025