Privacy Policy

1. Introduction

This website, cllimber.com ("Cllimber", "we", "us", "our"), is operated by JCA Creative Ltd t/a Cllimber™. Cllimber is an independently curated directory of software and service-provider recommendations, organised by industry and supported by published research. We also offer hosting to customers, including customers in the United States.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using this website, you acknowledge that you have read and understood this Privacy Policy.

Our AI education platform at cllimber.ai is a separate service governed by its own privacy policy. This policy covers cllimber.com only.

2. Who We Are

JCA Creative Ltd is the data controller of your personal data for the purposes of the UK GDPR. If you have any questions about this policy or how we handle your data, you can reach us at legal@cllimber.com.

3. The Data We Collect

Cllimber is primarily an informational website. You can browse our industry hubs, guides, and research without giving us any personal data. We collect personal data only in limited circumstances:

3.1 Enquiry & Contact Data

• Your name and email address
• Your company or organisation (if provided)
• The content of your message or enquiry
• Details submitted when a provider asks to be listed or reviewed in one of our hubs

3.2 Hosting Customer & Payment Data

If you purchase hosting from us, we collect the information needed to arrange and fulfil that purchase:

• Your name, billing email, and any billing details you provide
• Records of the transaction, invoices, and payment status

Payments are processed by Stripe or by bank transfer using links sent to you by email. We do not collect or store full card details on this website; card data is handled directly by Stripe as our payment processor.

3.3 Technical & Analytics Data

• IP address, browser type, and device information
• Pages viewed and general location, collected through analytics
• Standard server logs used to keep the site secure and functioning

We do not operate user accounts or logins on this website, and we do not knowingly collect any special-category (sensitive) personal data through it.

4. How We Collect Your Data

• Directly from you, when you contact us, enquire about a listing, or purchase hosting.
• Automatically, through cookies and analytics when you use the site (in line with your cookie choices).
• From third parties, such as our payment processor (Stripe) confirming a transaction, or analytics tools.

5. How We Use Your Data

6. Cookies and Analytics

We use cookies and privacy-focused analytics to understand how the site is used. Google Analytics may set cookies once you accept them, and we also use Burst Statistics in cookieless mode, which measures visits without storing identifying cookies on your device. Non-essential analytics only run in line with the choice you make in our cookie banner.

Full details are set out in our separate Cookie Policy.

7. Sharing Your Data

We do not sell your personal data. We share it only where necessary, with trusted third parties who act on our instructions:

• Stripe — to process hosting payments (see Stripe's Privacy Policy)
• Website hosting provider — to operate and serve this website
• Analytics providers — Google Analytics, in line with your cookie choices
• Legal and regulatory bodies — where we are required to disclose information by law

All third parties are required to respect their data protection obligations and are not permitted to use your data for their own unrelated purposes.

8. International Data Transfers

Some of our service providers, such as Stripe and Google, may store or process your data outside the UK (for example, in the EEA or USA). Where that happens, we rely on appropriate safeguards, including:

• Adequacy decisions by the UK Government
• The UK International Data Transfer Agreement or Standard Contractual Clauses (SCCs)

9. Data Retention

We keep personal data only for as long as necessary for the purposes described in this policy.

10. Your Rights Under UK GDPR

If you are in the UK or EU, you have the following rights over your personal data:

• Right to access — request a copy of your personal data
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data, in certain cases
• Right to restrict processing — request limits on how we use your data
• Right to data portability — request transfer of your data where applicable
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw analytics consent at any time via the cookie banner

You can withdraw your cookie consent at any time using the button below:

Manage cookie settings →

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended:

• Right to know — what personal information we collect and how we use it, as described in this policy
• Right to delete — request deletion of personal information we hold, subject to legal exceptions
• Right to correct — request correction of inaccurate personal information
• Right to opt out of sale or sharing — we do not sell your personal information for money. To the extent analytics could be considered "sharing" under California law, you can opt out using the "Do Not Sell or Share My Personal Information" link in our footer, or the button above
• Right to non-discrimination — we will not treat you differently for exercising these rights

12. Security Measures

We use appropriate technical and organisational measures, including secure servers and access controls, to protect your data. However, no system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

13. Children's Privacy

This website is intended for business and professional users and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe we have collected data from a child, please contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or the law. When we do, we will revise the "Last Updated" date at the top of this page.

15. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

16. Contact Us

For all privacy-related enquiries, please contact us: