GDPR information

As the leading performance marketing platform, CLICKERWAVE LIMITED is committed to providing its customers with full transparency and control over their users’ personal data, empowering them in their GDPR compliance journey.

What is the GDPR and How it Affects CLICKERWAVE Customers

On May 25, 2018, the European Union enforced the General Data Protection Regulation (GDPR), a new data privacy law. Its primary aim is to harmonize data privacy laws across Europe, protect and empower EU citizens’ data privacy, and reshape how organizations approach data privacy in the region.

Any company collecting or processing personal data of EU residents falls under the GDPR’s scope, regardless of whether it has a physical presence in the EU. This affects most businesses with a global or online presence, including CLICKERWAVE customers.

CLICKERWAVE LIMITED (“CLICKERWAVE”, “us”, or “we”) acts as controller of your personal data when provided to us (see Privacy Policy for details) and as processor of personal data you collect using our products and services.

Shared Responsibility: Controllers and Processors

Data Controller: A natural or legal person determining the purposes and means of personal data processing.
Data Processor: A natural or legal person processing personal data on behalf of the controller.
CLICKERWAVE is a Data Controller when processing its own user data.
CLICKERWAVE clients are Data Controllers for their user data.
CLICKERWAVE is a Data Processor for personal data collected by its users.

CLICKERWAVE’s GDPR Preparation Measures

Personal Data Collection

Users may opt in at the account level for real-time IP obfuscation (replacing the last octet with “0”) and unique Device ID blanking for all EU countries. This feature, currently active for German IPs, will expand to all EU countries.

Data Retention Policies

Consistent with data minimization principles:

IP addresses and Device IDs: 120-day rolling retention.
Log-level reporting: 12-month rolling retention (applies only to Conversion Reports and Click Logs; Stats Report queries may persist beyond these periods).

Data Security & Deletion Compliance

To meet GDPR Articles 17, 30, and 32(4) requirements:

Physical Security: Data centers are protected by onsite security, monitoring systems, and restricted access (no unauthorized server access, including for CLICKERWAVE staff).
Data Controls: Technical measures prevent unauthorized access, alteration, or deletion during transmission.
Data Separation: Information collected for different purposes is processed separately (including test and production systems).
Pseudonymization: Data is hashed to prevent association with a specific data subject without additional information.
Backup & Recovery: Continuous backups are stored remotely to enable rapid data restoration.
Incident Response: Affected parties are notified immediately in case of data loss.

Privacy by Design

CLICKERWAVE integrates technical and organizational measures into development:

Personal data is collected only with confirmed user consent.
No selling or re-brokering of personal data.
Opt-in/opt-out options and do-not-track preferences are honored.

Updated Documentation

Our Terms and Conditions, Privacy Policy, and User Agreement have been updated. This information is for guidance only and not legal advice. Consult your legal counsel to interpret your specific GDPR obligations.

For further details on GDPR compliance, contact our privacy team: [[email protected]]

Contact Information:
CLICKERWAVE LIMITED
Email: [email protected]
Address: FLAT A516, 5/F, EFFICIENCY HOUSE, 35 TAI YAU STREET, SAN PO KONG, KOWLOON, HONG KONG