Privacy Policy

Omni Clix Ltd Last updated: 22 October 2026

1. Introduction

Omni Clix Ltd ("Omni Clix", "we", "us" or "our") is a digital marketing agency specialising in Google Ads and paid search management for businesses. We are registered in England and Wales under company number 16025517 with our registered office at Silverstream House 4th Floor, 45 Fitzroy Street, London, England, W1T 6EB.

We respect your privacy and are committed to protecting the personal data we handle. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and what rights you have over it.

This policy applies to:

visitors to our website at https://omniclix.ai;

people who contact us, enquire about our services, or receive our marketing communications;

representatives of our current, former and prospective clients;

suppliers, partners and other business contacts; and

anyone else whose personal data we process in the course of running our business.

Employees and job applicants are covered by a separate notice, available on request.

2. Who is responsible for your data

Omni Clix Ltd is the data controller for personal data we collect and use for our own purposes, such as managing our website, marketing our services, managing client relationships and running our business.

When we manage advertising accounts or process data on behalf of a client, we act as a data processor on that client's written instructions. In those cases, the client is the data controller and their own privacy policy will apply to the personal data concerned. Section 6 explains this in more detail.

Contact details for data protection queries: Email: [email protected] Post: Omni Clix Ltd, Silverstream House 4th Floor, 45 Fitzroy Street, London, England, W1T 6EB

We have not appointed a Data Protection Officer. Our director is responsible for data protection matters.

3. The personal data we collect

Depending on how you interact with us, we may collect the following:

Identity and contact data: name, job title, business name, business email address, business telephone number, postal address.

Enquiry and account data: the content of messages you send us, details of the services you are interested in, notes from calls and meetings, and records of your contract and billing relationship with us.

Financial and billing data: invoice details, payment history, and bank details needed to take payment (for example, a sort code and account number for direct debit or bank transfer). We do not store full card details ourselves; card payments are handled by Stripe.

Advertising account data: where we manage Google Ads or other advertising accounts for a client, we may process campaign performance data, account identifiers, keyword and search term reports, conversion data, and in limited cases contact details of individuals recorded in those accounts.

Website and technical data: IP address, browser type and version, device information, pages visited, time and date of visits, referring website, and approximate location derived from IP address.

Marketing and communications preferences: whether you have opted in or out of marketing emails, and your responses to our communications.

Meeting and call records: where we record or transcribe video calls with your consent, or use an AI note-taking tool to summarise meetings, we will tell you before the recording or transcription starts.

We do not intentionally collect special category data (such as health, racial or ethnic origin, political opinions, religious beliefs, or sexual orientation) or data about criminal convictions. Please do not send us this type of information. If you do, we will delete it unless we have a lawful reason to keep it.

4. How we collect personal data

Directly from you, when you fill in an enquiry form, email or call us, sign a contract, attend a meeting, or subscribe to our updates.

Automatically, when you use our website, through cookies and similar technologies (see Section 8).

From third parties, including: referral partners and introducers who pass on your details with your knowledge; publicly available sources such as Companies House, company websites and professional networking sites such as LinkedIn, where we contact you for business purposes; our clients, when they give us access to their advertising or business accounts; and analytics and advertising platforms, where you have interacted with a campaign or our website.

5. Why we use your personal data and our legal basis

Under UK data protection law, we must have a lawful basis for each use of personal data. The table below sets out our main purposes.

Purpose Types of data Lawful basis Responding to enquiries and providing a proposal Identity and contact data, enquiry data Legitimate interests (responding to business enquiries); steps at your request before entering a contract Entering into and performing a client contract Identity and contact data, account and billing data Performance of a contract Managing advertising accounts for clients Advertising account data, identity and contact data Performance of a contract (as processor, on the client's instructions) Invoicing, payment collection and accounting Identity and contact data, financial and billing data Performance of a contract; legal obligation (tax and accounting records) Sending marketing emails to business contacts Identity and contact data, marketing preferences Legitimate interests, or consent where required by PECR (see Section 9) Operating and improving our website Website and technical data Legitimate interests (running and improving our website); consent for non-essential cookies Analysing website use and campaign performance Website and technical data Consent (for analytics cookies); legitimate interests (for aggregated internal reporting) Complying with legal, tax and regulatory obligations Any relevant data Legal obligation Establishing, exercising or defending legal claims Any relevant data Legitimate interests; legal claims Keeping our business secure and preventing fraud Technical data, account data Legitimate interests; legal obligation Recording and summarising meetings Meeting content, identity and contact data Consent (obtained before recording)

Where we rely on legitimate interests, we have carried out a balancing test to confirm that our interests are not overridden by your rights and interests.

6. Our role when we manage client advertising accounts

When we manage a client's Google Ads or other advertising accounts, we typically act as a data processor. In that role:

we process personal data only on the client's documented instructions;

we ensure our staff and contractors are bound by confidentiality obligations;

we implement appropriate technical and organisational security measures;

we assist the client with responding to data subject requests where relevant;

we notify the client without undue delay if we become aware of a personal data breach affecting their data; and

we delete or return the data at the end of the engagement, unless we are required by law to keep it.

Clients are responsible for ensuring they have a lawful basis for collecting personal data through their websites, forms, tracking tags and advertising accounts, and for providing any required privacy notices and consent mechanisms to their own customers. We recommend that clients review their own privacy policy and cookie consent setup, particularly where their advertising relies on conversion tracking or remarketing.

6A. Google user data

Omni Clix uses Google OAuth to connect to Google Ads accounts that our clients authorise us to manage. When a client grants us access, we request the Google Ads permissions needed to deliver the services described in this policy.

What we access. Depending on the scope of the engagement, we may access campaign and ad group structure, budgets and bids, performance metrics (such as impressions, clicks, cost and conversions), keyword and search term reports, conversion tracking configuration, and the account contact details recorded within the Google Ads account.

How we use it. We use Google user data only to provide and improve the advertising management, reporting, budget pacing and optimisation services that the client has engaged us to deliver. We do not use Google user data for advertising, including serving ads or building advertising profiles, and we do not use it to train generic artificial intelligence or machine learning models.

Who we share it with. We do not sell Google user data and do not share it with third parties, except:

where necessary to provide the services, with service providers bound by equivalent confidentiality and security obligations;

where we are required to do so by law; or

with the client who authorised the access, in the form of reports and dashboards.

Storage and retention. Google user data is stored securely within the systems described in Section 12 and is retained only for as long as needed to provide the services. We delete it when the engagement ends or when access is revoked, unless we are required by law to keep it.

Your control. Account holders can revoke Omni Clix's access at any time through their Google Account permissions page at https://myaccount.google.com/permissions, or by asking us to remove access. Revoking access will stop our ability to manage the affected accounts.

Our compliance. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

7. Who we share personal data with

We do not sell personal data. We share it only where necessary for the purposes set out in this policy, with:

Service providers and sub-processors who support our business operations, including: Google (Google Workspace, Google Ads, Google Analytics), for email, document storage, advertising and website analytics; Microsoft (Microsoft 365, including Outlook and Teams), for email, calendar and communications; GoHighLevel, for managing contacts and client records; Xero, for invoicing and bookkeeping; Stripe, for processing payments; GoHighLevel, for hosting our website; Canva, for creating marketing materials; and Granola, for meeting transcription and summaries.

Professional advisers, including accountants, lawyers and insurers, under duties of confidentiality.

Clients and partners, where relevant to a project and within the scope of our agreement with them. For example, a referral partner may be told that a referred enquiry has become a client.

Regulators and authorities, where we are legally required to do so, such as HM Revenue and Customs or the Information Commissioner's Office.

Prospective buyers or investors in our business, under confidentiality terms, in the event of a sale, merger or restructure.

Where we use third-party providers, we require them to protect personal data in line with UK GDPR and to act only on our instructions.

8. Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies are small text files placed on your device when you visit a website.

Category Examples Purpose Consent required Strictly necessary Essential website cookies and the cookie banner's record of your consent Making the website work, security, remembering cookie choices No Analytics Google Analytics, deployed through Google Tag Manager Understanding how visitors use the site Yes Marketing Google Ads conversion tracking, Meta Pixel Measuring the effectiveness of advertising and building audiences Yes

You can accept or reject non-essential cookies using the cookie banner on our website, and you can change your choice at any time by using the cookie settings button on our website. You can also manage cookies through your browser settings. Blocking some cookies may affect how our website works.

9. Marketing communications

We send marketing emails to business contacts in line with the Privacy and Electronic Communications Regulations 2003 (PECR). Where we contact individuals (rather than corporate subscribers) by email, we will do so only with consent or where the soft opt-in applies. The soft opt-in applies where you have previously engaged with us as a customer or enquired about our services, and we give you a simple way to opt out.

You can opt out of marketing at any time by clicking "unsubscribe" in any marketing email or by contacting us at [email protected]. We will keep a record of your opt-out so that we do not contact you again by that means.

We will always separate marketing from service communications, such as invoices, contract updates and account reports, which we need to send you to perform our contract.

10. International transfers

Some of our service providers, such as Google and Microsoft, may process personal data outside the United Kingdom, including in the United States. Where this happens, we rely on appropriate safeguards required by UK data protection law, such as the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework, or transfers to countries covered by a UK adequacy regulation. You can ask us for more information about the safeguards we use by contacting us at [email protected].

11. How long we keep personal data

We keep personal data only for as long as necessary for the purposes described in this policy. Our standard retention periods are:

Data Retention period Enquiry records where no contract is entered into 12 months from last contact Client contract and account records Duration of the engagement plus 6 years, to meet legal and tax requirements Financial and invoicing records 6 years from the end of the financial year to which they relate Marketing contact records Until you opt out or 24 months after your last engagement with us, whichever is earlier Website analytics data 26 months (or as set by the analytics provider) Meeting recordings and transcripts 30 days unless needed for an active client project, in which case until the project ends Advertising account data held for clients Duration of the engagement, then deleted or returned in line with the client agreement

When data is no longer needed, we delete it or anonymise it so that it can no longer identify you.

12. How we keep personal data secure

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration and disclosure. These include:

encrypted connections (HTTPS) to our website and secure access to our systems;

multi-factor authentication on key business accounts;

access to personal data limited to staff who need it for their role;

confidentiality obligations for staff and contractors;

regular review of our access permissions and software updates; and

procedures for identifying, reporting and investigating personal data breaches.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours where required, and we will inform affected individuals where the risk is high.

13. Your rights

Under UK data protection law, you have the right to:

access the personal data we hold about you and receive a copy;

have inaccurate data corrected or incomplete data completed;

have your data erased in certain circumstances;

restrict our processing in certain circumstances;

object to processing based on legitimate interests, and to direct marketing at any time;

data portability, where processing is based on consent or contract and carried out by automated means;

withdraw consent at any time, where we rely on consent, without affecting the lawfulness of processing before withdrawal; and

not be subject to decisions based solely on automated processing that have legal or similarly significant effects.

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before responding. We will normally respond within one month. We do not usually charge a fee, but we may charge a reasonable fee or refuse a request if it is manifestly unfounded or excessive.

Where we process personal data as a processor on a client's behalf, we will forward your request to the relevant client and assist them in responding.

14. Automated decision-making

We do not make decisions about individuals based solely on automated processing that have legal or similarly significant effects. Where we use automated tools, such as campaign optimisation features within advertising platforms, these are used to support business decisions and are subject to human oversight.

15. Children's data

Our services are aimed at businesses and professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have collected such data, please contact us and we will delete it.

16. Links to other websites

Our website and communications may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any personal data.

17. Complaints

If you have a concern about how we handle your personal data, please contact us first at [email protected] so that we have the chance to put things right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Website: ico.org.uk

Telephone: 0303 123 1113

Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would appreciate the opportunity to resolve your concern before you contact the ICO.

18. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or the way we handle personal data. The latest version will always be available at https://omniclix.ai/privacy-policy, and the "Last updated" date at the top of this page will show when it was last revised. Where changes are significant, we will let you know by email or through our website.

19. Contact us

If you have any questions about this Privacy Policy or how we handle personal data, please contact:

Omni Clix Ltd Email: [email protected] Post: Silverstream House 4th Floor, 45 Fitzroy Street, London, England, W1T 6EB Telephone: +44 20 3861 4050