Effective Date: 1st January 2025
Client Max Limited (“Client Max,” “we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of any personal data you share with us. This Privacy Policy outlines how we handle your data when you use our services, including access to the Client Max platform (the “Platform”) powered by HighLevel Inc. and related third-party tools (e.g. Lead Connector).By using our Service, you confirm your understanding of and agreement to the practices outlined in this Privacy Policy.
Service: The software and related support services provided by Client Max Limited.Personal Data: Any information relating to an identified or identifiable individual.Usage Data: Information automatically collected, such as IP addresses, device data, and user interactions.Data Controller: The party that determines the purpose and means of processing personal data.Data Processor: The party that processes personal data on behalf of the Data Controller.
You (the Client): You are the Data Controller of the personal data you upload to and process within the Platform. You are responsible for ensuring compliance with applicable data protection laws.Client Max Limited: We are a Data Processor with respect to any data you upload to the Platform. Separately, we are the Data Controller of data we collect about you as a user or account holder.HighLevel Inc.: HighLevel is the sub-processor and infrastructure provider. It may use additional sub-processors such as Lead Connector. You are responsible for reviewing and understanding their privacy policies.Our Data Processing Agreement (DPA) governs our responsibilities as a processor. It forms part of our Terms of Service and is available upon request or via [Insert Link].
Contact names, email addresses, phone numbers, and other CRM-related dataMessage history (e.g. emails or SMS sent through the Platform)Files, forms, or tags associated with your leads and clients
We do not access or use this data unless required for support or system maintenance under our DPA.
We collect and process the following personal data as a data controller, for business and service operations:
Your name, business name, email address, and contact detailsAccount login credentials and usage logsBilling and payment detailsSupport and communication records (e.g. emails, chat history)Website usage data, including cookies and IP addresses
We process personal data under the following lawful bases, as outlined in UK GDPR:
Contractual Obligation: To deliver and manage your subscription, provide platform access, and handle payments and support.Legitimate Interests: To operate, improve, and secure our services, communicate with you about your account, and send you relevant marketing communications via email, SMS, or WhatsApp, where these communications relate to products and services similar to those you’ve purchased or expressed interest in. We carefully assess and balance our legitimate interests against your rights and freedoms.Legal Obligation: To comply with tax, accounting, fraud prevention, and other regulatory requirements.Consent: For marketing communications where consent is legally required, or for optional features like cookie tracking where applicable. You may withdraw consent at any time.
We may send you marketing communications by email, SMS, or WhatsApp based on our legitimate interest in promoting our products and services, as permitted under UK data protection and e-privacy laws (including the Privacy and Electronic Communications Regulations 2003).These messages may include:
Tips and updates about using the Client Max platformAnnouncements of new features or servicesSpecial offers, content, or event invitationsReminders to take action on your account
You can opt out of marketing messages at any time by:
Clicking the unsubscribe link in emailsReplying STOP to SMS or WhatsApp messagesContacting us at [email protected]
Please note: opting out of marketing does not affect essential service communications (e.g. billing alerts or platform updates).
We use cookies and similar technologies to enhance website and Platform functionality, analyse traffic, and improve the user experience. You may manage cookie preferences through your browser settings. Disabling cookies may affect functionality.
Your data may be processed by our authorised sub-processors, including:
HighLevel Inc. – Infrastructure provider (USA)Lead Connector – Integrated communication toolAmazon Web Services (AWS) – Data hostingA current list of authorised sub-processors is available at: clientmax.com/subprocessorsWe will notify users of any material changes in advance.
Each sub-processor maintains its own privacy and data security policies. You are responsible for reviewing those policies.
To provide our services, your personal data may be transferred to and processed in countries outside the UK, including the United States.When we transfer data internationally, we take appropriate steps to protect it in line with UK data protection law. This may include using Standard Contractual Clauses or working with providers certified under approved data transfer frameworks.
We retain your account and support data only for as long as necessary to provide services and comply with legal obligations. Uploaded data on the Platform is controlled by you and can be deleted at any time.Upon account closure, all Platform data is deleted in accordance with our Terms and the Platform’s retention policy.
We implement appropriate technical and organisational security measures including:
SSL/TLS encryption for data in transitRole-based access controlsRegular security assessments and audits
No system is 100% secure. You are responsible for maintaining the confidentiality of your login credentials and taking appropriate measures on your end.
As a data subject or Controller, you have rights including:
Access – Request a copy of your personal dataRectification – Correct inaccurate or incomplete dataErasure – Request deletion of your personal dataRestriction – Ask us to limit data usePortability – Request transfer to another providerObjection – Object to certain types of processingWithdraw Consent – Where applicable
To exercise any rights or make a complaint, contact us at [Insert Email].
We may update this Privacy Policy to reflect changes in our practices or legal obligations. Any changes will be posted on our website with the updated effective date. Significant changes will be notified by email or via the Platform.
If you have questions or concerns about this policy or your personal data, please contact:Client Max Limited
Lower Ground Floor, 122 Bath Road, Cheltenham, Gloucestershire, United Kingdom, GL53 7JX