Privacy policy
Last updated: 11 October 2026
About this policy
This policy explains how AH Technology Ltd, trading as Klyk (company number 11773440) ("Klyk", "we", "us"), collects and uses personal data. It covers our website (helloklyk.com), our services, and the Klyk Platform (app.helloklyk.com). It is written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Who we are and how to contact us
For personal data we decide how to use, we are the controller. Our privacy contact is:
Asad Hamir
Email: care@helloklyk.com
Post: Unit A12, Eldon Way, Park Royal Industrial Estate, London, NW10 7QQ
We are registered with the Information Commissioner's Office (ICO), registration number ZA537673.
Information we collect
Depending on how you deal with us, we may collect:
- Identity and contact data: name, job title, company, work email, phone number and business address.
- Transaction data: details of goods and services you buy from us, invoices and payments. Card payments are handled by our payment provider; we don't store full card numbers.
- Technical data: IP address, browser and device type, and how you use our website and platform.
- Communications: enquiries, support requests and feedback.
- Marketing preferences: whether you want to hear from us.
We don't ask for special category data (such as health, race, religion or political opinions). If you share it with us, we only use it where the law allows.
How we collect it
- Directly from you, when you contact us, buy from us, sign up for the Klyk Platform or use our services.
- From your employer, if your employer is a Klyk customer (see "The Klyk Platform" below).
- Automatically, through cookies and similar technologies on our website.
How we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Providing goods, services and the Klyk Platform, including support, delivery and collection of equipment | Performing our contract with you or your employer |
| Invoicing, accounting and tax records | Legal obligation |
| Keeping our services secure, preventing fraud and improving our services | Our legitimate interests |
| Telling you about similar Klyk services if you are a customer | Legitimate interests (you can opt out at any time) |
| Other marketing, newsletters and non-essential cookies | Your consent, which you can withdraw at any time |
The Klyk Platform (app.helloklyk.com)
Who is responsible
When a business uses the Klyk Platform to manage its devices and people, that business is the controller of its employees' personal data and Klyk is its processor. We process that data only on the business's instructions, under our data processing agreement. Klyk is the controller of the account data of people who sign in to the platform (owners, admins and viewers), and of billing and support records.
What we process
- Account users: name, work email, job title, phone (optional), sign-in records and which sign-in method you use (Google, Microsoft or an email link). We don't store passwords.
- A customer's employees and contractors: name, work email, phone, job title, team, office, start and leave dates, home address (only for delivering and collecting equipment) and an optional profile photo.
- Devices and activity: device details, serial numbers, who holds each device, repairs, service requests and photos, and an audit log of changes.
We never collect salary, date of birth, National Insurance number, bank details, health, diversity or performance data.
Where it comes from
Directly from account users. Or, if a customer connects them, from the customer's Google Workspace or Microsoft Entra ID directory, HR system or device management tool, and from spreadsheets the customer uploads.
Google and Microsoft data
When you sign in with Google or Microsoft, we receive your name, email address and profile picture to create and secure your account. If a customer's administrator connects their directory, we read only the user directory fields listed above, to keep the customer's people list up to date. We don't read emails, files, calendars or passwords. We don't use this data for advertising, sell it, or use it to train AI models, and we only share it with the service providers listed below to run the platform. An administrator can disconnect at any time in Klyk, or remove access in their Google or Microsoft admin console.
Klyk's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Klyk support access
Named Klyk staff can open a customer's workspace to provide support. Every action they take is recorded in that customer's audit log, and we review staff access every quarter.
If your employer uses Klyk
To access, correct or delete your data, contact your employer first, as they control it. We will help them respond within 10 working days.
Who we share it with
We use these service providers (sub-processors). We give Klyk Platform customers 30 days' notice before changing this list.
| Provider | What for | Where |
|---|---|---|
| Vercel Inc. | Hosting the Klyk Platform | London region (US company) |
| Neon | Platform database | AWS London |
| Amazon Web Services | File storage (photos, receipts, logos) | London |
| Resend | Sending service emails (sign-in links, invites, notifications) | US company |
| Stripe | Payments and invoices | US and EU |
| Google and Microsoft | Sign-in and directory sync, when used | US companies |
| Shopify | Our website | Canada and US |
| HR and device management tools | Only those a customer chooses to connect | Varies |
We may also share data with regulators or law enforcement where the law requires, and with a buyer if Klyk's business is sold (on the same privacy terms). We never sell personal data.
Where your data is stored
Klyk Platform data is stored in the United Kingdom. Where a provider is outside the UK, we protect transfers using the UK–US data bridge, UK adequacy regulations, or the UK International Data Transfer Agreement or Addendum.
How long we keep it
- Leavers on the Klyk Platform: home address and phone are deleted 30 days after their devices are returned; their name stays on device history for 12 months, then is replaced with "Former employee".
- Free trials that end without a subscription: deleted after 30 days.
- Closed Klyk Platform workspaces: the owner can export everything first; data is deleted within 30 days and removed from backups within 90 days.
- Audit logs: 24 months.
- Invoices and financial records: 6 years, as HMRC requires.
- Marketing: until you unsubscribe.
- Other enquiries: as long as needed to deal with them, then deleted.
Security
We use encryption in transit (TLS 1.2 or later) and at rest, role-based access, an audit log of changes, multi-factor authentication for Klyk staff, and sign-in links that expire after 15 minutes. If a personal data breach is likely to put you at risk, we will report it to the ICO within 72 hours where required and tell you without undue delay if the risk is high. For Klyk Platform customers, we tell the customer within 24 hours of becoming aware of a breach.
Cookies
The Klyk Platform uses only essential cookies, to keep you signed in, remember your workspace and protect against misuse. Our website uses essential cookies and, only if you agree through our cookie banner, analytics and marketing cookies and tracking pixels. You can change your choice at any time from the cookie settings link on our website.
Your rights
You have the right to access your data, correct it, have it deleted, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. To use these rights, email care@helloklyk.com. We will respond within one month. We don't make decisions about you based solely on automated processing.
Complaints
If you're unhappy with how we've handled your data, please contact us first at care@helloklyk.com and we will look into it. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes to this policy
We will update this policy when our services or the law change, and show the date of the latest version at the top. If a change materially affects Klyk Platform customers, we will tell them by email.
