Privacy Policy

This Privacy Policy applies to the Click and Mortar website, project inquiry tools, account and referral features, and communications that link to this notice. In this policy, “Click and Mortar,” “we,” “us,” and “our” refer to the operator of this site.

For information we collect for our own business purposes, Click and Mortar acts as the business or controller. When we process information solely on a client's instructions while delivering contracted services, the client's agreement and privacy terms may also apply.

Depending on how you use the site, we may collect the following categories:

• Contact and identity information: name, display name, email address, phone number, login credentials handled through our authentication provider, and communication details.
• Project and business information: business name, website URL, goals, project type, content and design needs, requested functionality, integrations, accessibility and SEO needs, budget range, timeline, and other details submitted in a project brief.
• Scheduling information: the name, email address, meeting time, and other details you submit when booking a call through Calendly.
• Account, referral, and commission information: profile details, referral codes, referral activity, project values, commission status, and payment handles you choose to provide. Do not send full card, bank-account, or password details through ordinary site forms or email.
• Device and usage information: IP-derived approximate location, browser and device type, pages viewed, referring pages, interaction events, and session information. Google Analytics and Microsoft Clarity receive this information only after you accept analytics cookies.
• Necessary technical information: security events, authentication tokens, consent choices, and short-lived interface state required to operate and protect the site.

We collect information directly from you, automatically from your browser or device, and from service providers or clients when reasonably necessary to deliver a requested service.

We use personal information to:

• respond to inquiries and evaluate potential projects;
• prepare estimates, proposals, schedules, and requested deliverables;
• create and secure accounts and administer referral or commission features;
• communicate about projects, support, billing, and service changes;
• operate, troubleshoot, protect, and improve the site;
• measure site use when you consent to analytics; and
• comply with law, enforce agreements, and establish or defend legal claims.

Where a law requires a legal basis, we rely on your consent, performance of a contract or steps you request before a contract, our legitimate interests in operating and securing the business, or compliance with legal obligations. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

We may disclose information to the following recipients for the purposes described above:

• Supabase for database, authentication, storage, and server-side functions supporting accounts and site tools;
• hosting, domain, security, and infrastructure providers that deliver and protect the website;
• Google Analytics and Microsoft Clarity for consented measurement and experience analysis;
• Calendly to display availability and process discovery-call bookings you choose to make on the booking page;
• professional advisers and contractors subject to appropriate duties when their work requires access;
• authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or enforce agreements; and
• a successor organization in connection with a merger, financing, acquisition, reorganization, or sale of business assets, subject to applicable law.

We do not disclose passwords, payment credentials, or sensitive project secrets for marketing.

We do not sell personal information for money and do not use this website to serve targeted advertisements. Some privacy laws use broad definitions of “sale” or “sharing” that may include transfers to analytics providers. You can opt out of optional analytics by selecting “Reject optional” on the banner or reopening Manage Cookies in the footer.

We do not knowingly use or disclose sensitive personal information to infer characteristics about you. We also honor legally required browser-based opt-out preference signals where applicable to our processing.

We retain information only for as long as reasonably necessary for the purpose collected, including project delivery, account administration, legitimate business records, accounting and tax obligations, dispute resolution, security, and legal compliance. Retention varies by record type and relationship. Provider-controlled analytics data is retained according to our provider settings and their applicable terms.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls for account data. No internet transmission or storage method is completely secure, so we cannot guarantee absolute security. Contact us promptly if you believe your information or account has been compromised.

Depending on where you live and subject to legal exceptions, you may have the right to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also have the right to opt out of certain sales, sharing, targeted advertising, or profiling; appeal a decision; and receive equal service without unlawful discrimination for exercising a privacy right.

Submit a request to tkochavy@clickandmortar.bio. Describe the request and the email or account involved. We may need to verify your identity and authority before acting. An authorized agent may submit a request where permitted, but we may require proof of authorization and direct identity confirmation.

Field Notes email subscriptions are separate from client inquiries. We store your email address, confirmation and consent records, and delivery status to send developer notes you request. Supabase stores these records and Resend delivers the emails. Confirmation links expire after 24 hours, and every post email includes an unsubscribe link. You can unsubscribe from marketing using the instructions in the message. Operational, security, billing, and project communications may continue when necessary. You may also review our Cookie Policy and update analytics preferences at any time.

Click and Mortar and its service providers may process information in the United States and other countries where privacy laws may differ from those in your location. Where required, we rely on recognized transfer mechanisms and contractual or organizational safeguards. Contact us if you need more information about an applicable transfer.

The site and services are intended for business users and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child provided information through this site, contact us so we can investigate and take appropriate action. Microsoft states that Clarity should not be used on sites targeting users under 18; this site is not directed to that audience.

We may update this policy when our practices, providers, or legal obligations change. We will post the revised version with a new effective date and provide additional notice when required by law. Continued use after an update does not override consent or other rights provided by applicable law.

Privacy questions and requests may be sent to tkochavy@clickandmortar.bio. Please do not include passwords, full payment credentials, or unrelated sensitive information.