Privacy Policy

Clictic Ltd (“Clictic”, “we”, “our”, “us”) is committed to protecting your privacy and handling your personal information in a fair, lawful and transparent manner. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our websites, ticketing systems, consultancy services or any associated platforms operated under the Clictic brand (including Merlinsoft and MerlinTickets).

We process personal data in accordance with the Isle of Man Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR) as applied in the Isle of Man.

By using our services, you agree to this Privacy Policy.

1. Who We Are

Clictic Ltd is a hospitality technology and consultancy company offering ticketing platforms, booking systems, event management tools and professional advisory services.

For specific products (such as white label ticketing services), Clictic may act as a data processor on behalf of event organisers or venues. In those cases, the organiser remains the data controller.

2. What Personal Data We Collect

We collect the following categories of personal information:

2.1 Information you provide directly

• Name
• Email address
• Phone number
• Postal address
• Account details (for event organisers)
• Payment details (processed through secure third party providers)
• Booking information (tickets purchased, events attended, transaction details)
• Customer service enquiries
• Consultancy engagement information

2.2 Information we collect automatically

• IP address
• Browser type and device information
• Website usage analytics
• Cookies and tracking information
• Behavioural and interaction data on our platforms

2.3 Information collected through our clients

When venues or organisers use our systems, we may process customer data on their behalf, including:

• Attendee information
• Booking and ticket data
• Communication preferences
• Access and visitation patterns

In these cases, Clictic acts as a data processor.

3. How We Use Your Personal Data

We use personal data only where we have a lawful basis. This includes:

3.1 To provide services

• Processing bookings and payments
• Issuing tickets and confirmations
• Managing event information
• Delivering digital services and user accounts

3.2 To support event organisers

• Platform hosting
• Customer service support
• Reporting and analytics
• Fraud prevention

3.3 For consultancy engagements

• Delivering contracted advisory services
• Communication and project management
• Documentation and report generation

3.4 Legitimate interests

• Improving our systems and user experience
• Security monitoring and fraud detection
• Responding to enquiries
• Marketing our services where appropriate

3.5 Legal obligations

• Financial record keeping
• Responding to lawful requests from authorities

We do not use your data for automated decision making that produces legal or significant effects.

4. Marketing Communications

We may send you marketing material where:

• You have provided consent, or
• You are an existing client and the communication relates to similar products or services

You may opt out at any time by clicking “unsubscribe” in emails or contacting us directly.

We never sell personal data to third parties.

5. Cookies and Tracking

Our websites use cookies and similar technologies to:

• Understand how visitors use our site
• Improve performance and security
• Support essential functions such as login or checkout

You can control cookie settings through your browser or via our cookie management tool.

6. Sharing and Disclosure of Personal Data

We only share personal data where necessary and lawful. This includes:

6.1 Service providers

Trusted partners who support:

• Payment processing
• Website hosting
• Email and communication tools
• Analytics and reporting
• Technical support

These providers are contractually required to protect your data.

6.2 Event organisers

Where you purchase tickets or make a booking, your details are shared with the relevant organiser as the data controller for that event.

6.3 Legal or regulatory bodies

We may disclose data where required by law, court order or regulatory authority.

6.4 Business transfers

If Clictic reorganises, merges or transfers business assets, your data may be transferred as part of that process. You will be notified where required.

We do not sell or trade your personal data.

7. International Transfers

Where we transfer personal data outside the Isle of Man, United Kingdom or European Economic Area, we ensure appropriate safeguards are in place, including:

• Adequacy decisions
• Standard contractual clauses
• Equivalent data protection measures

8. Data Retention

We retain personal data only for as long as necessary for the purposes collected, including:

• Booking and transaction data: retained for statutory accounting periods
• Customer accounts: retained while active or until deletion requested
• Consultancy documentation: retained in line with contractual obligations
• Marketing data: retained until consent is withdrawn

We securely delete or anonymise data when no longer required.

9. Your Rights

Under the Isle of Man Data Protection Act and UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion (right to be forgotten)
• Restrict processing
• Object to processing
• Request transfer of your data (data portability)
• Withdraw consent at any time

To exercise any rights, contact us at: brendon@clictic.co

We may require identification to verify your request.

10. Security

We use appropriate technical and organisational measures to safeguard your personal data, including:

• Encrypted data transfer
• Secure data centres
• Access controls and authentication
• Regular system monitoring and audits
• Staff training and confidentiality obligations

Despite these measures, no system is entirely risk free. We will notify relevant authorities and affected individuals in the event of a significant data breach.

11. Children's Data

Our services are not directed at children under 16 unless an event organiser collects details for a family booking. In such cases the organiser acts as data controller.

We do not knowingly collect personal data from children without appropriate consent.

12. Links to Third Party Sites

Our websites may contain links to third party sites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

13. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with the updated date shown at the top of the page.

We encourage you to review the policy periodically.

14. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy, please contact:

You may also contact the Isle of Man Information Commissioner: www.inforights.im