Clinked Privacy Policy
Last Updated: 27 October 2026
1. INTRODUCTION
Rabbitsoft Ltd, trading as Clinked (“Rabbitsoft”, “Clinked”, “we”, “us” or “our”), respects the privacy of individuals who visit our website, communicate with us or use our services.
This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when acting as a data controller.
Where we process personal data on behalf of our business customers, our Data Processing Agreement governs our obligations as a processor.
2. DATA CONTROLLER
Rabbitsoft Ltd is the controller of personal data processed for its own business purposes, including account administration, billing, customer communications, sales, marketing and website operations.
For personal data uploaded or otherwise processed by Customers through their Clinked workspaces, the Customer will ordinarily determine the purposes and means of processing, and Rabbitsoft will ordinarily act as a processor.
3. PERSONAL DATA WE COLLECT
We may collect:
(a) Contact information, including names, business email addresses, telephone numbers and organisation details.
(b) Account information, including usernames, account preferences and authentication-related information.
(c) Billing and transaction information, including subscription details, invoices and payment status.
(d) Technical information, including IP addresses, browser information, device identifiers and diagnostic data.
(e) Website usage information, including pages visited, interactions and relevant analytics data.
(f) Communications, including support requests, emails, telephone conversations, survey responses and feedback.
(g) Information supplied through integrations or third-party authentication services where authorised.
Payment card information may be processed by third-party payment service providers rather than stored directly by Rabbitsoft.
4. PURPOSES AND LAWFUL BASES
We process personal data for the following purposes:
Providing and administering services: Where necessary for contractual performance or our legitimate interests in operating our business.
Account management and customer support: For contractual performance and legitimate business interests.
Billing, accounting and compliance: For contractual performance and compliance with legal obligations.
Security, fraud prevention and service integrity: For legitimate interests and, where applicable, legal obligations.
Service analytics and improvement: For legitimate interests, subject to applicable privacy requirements.
Marketing communications: Based on consent where required, or another applicable lawful basis where permitted.
Website analytics and advertising technologies: Subject to applicable consent and electronic communications requirements.
Where we rely on legitimate interests, we consider the impact on individuals and their rights.
5. CUSTOMER CONTENT
Business Customers control the information they upload to Clinked.
Rabbitsoft processes such information to provide the contracted services and according to the applicable Data Processing Agreement.
We do not sell Customer Content or use confidential Customer Content for unrelated advertising purposes.
Individuals seeking to exercise rights concerning information controlled by a Clinked Customer should ordinarily contact that Customer directly.
We will provide reasonable assistance as required by applicable law and our DPA.
6. WEBSITE ANALYTICS AND COOKIES
We use cookies and similar technologies to operate our website, maintain security, understand website usage and improve user experience.
Certain technologies may be used for analytics or advertising.
Where required by applicable law, we obtain consent before placing non-essential cookies or activating relevant tracking technologies.
Users may manage applicable cookie preferences through our cookie management tools.
7. MARKETING COMMUNICATIONS
We may send information about our products, services, updates, events and offers where permitted by applicable law.
Recipients may unsubscribe from marketing communications using the unsubscribe mechanism in the relevant message or by contacting us.
Unsubscribing from marketing does not prevent essential contractual, security or account-related communications.
8. SHARING PERSONAL DATA
We may share personal data with service providers assisting with:
(a) Hosting and infrastructure.
(b) Payment processing.
(c) Customer relationship management.
(d) Customer support.
(e) Business communications.
(f) Analytics and website operations.
(g) Accounting and financial administration.
(h) Security and fraud prevention.
We require appropriate contractual and organisational protections where applicable.
We may also disclose information where required by law, necessary to establish or defend legal claims, or in connection with a legitimate corporate transaction subject to applicable safeguards.
We do not sell personal data in exchange for monetary payment.
9. INTERNATIONAL DATA TRANSFERS
Personal data may be processed in countries outside the United Kingdom or European Economic Area.
Where applicable law requires safeguards, we use appropriate transfer mechanisms, which may include:
(a) Applicable adequacy regulations or decisions.
(b) The UK International Data Transfer Agreement.
(c) The UK Addendum to EU Standard Contractual Clauses.
(d) EU Standard Contractual Clauses.
(e) Other legally recognised transfer mechanisms.
The specific safeguards depend on the processing activity, destination and applicable legal requirements.
10. DATA SECURITY
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss and destruction.
These measures are reviewed according to the nature of the processing and relevant risks.
No internet-based system can guarantee absolute security.
Users are responsible for protecting their credentials and maintaining appropriate access controls.
11. DATA RETENTION
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including contractual, accounting, security and legal obligations.
Retention periods depend on the category of information and applicable requirements.
Customer-controlled personal data is handled according to the applicable DPA and service retention arrangements.
Information may be retained where necessary to establish, exercise or defend legal claims or comply with legal obligations.
12. INDIVIDUAL RIGHTS
Depending on applicable law, individuals may have rights to:
(a) Access personal data.
(b) Correct inaccurate information.
(c) Request deletion.
(d) Restrict processing.
(e) Object to certain processing.
(f) Receive portable copies of relevant information.
(g) Withdraw consent where processing relies on consent.
(h) Lodge a complaint with a relevant supervisory authority.
Requests may be submitted using the contact details below.
We may request information reasonably necessary to verify identity.
Rights are subject to applicable legal conditions and exceptions.
13. UNITED STATES PRIVACY RIGHTS
Residents of certain US states may have additional rights under applicable privacy legislation.
Depending on the law and processing activity, these may include rights to access, correct, delete or obtain personal information, and to opt out of certain sales, sharing or targeted advertising.
Rabbitsoft will respond to applicable requests in accordance with relevant law.
Where Rabbitsoft acts solely as a processor or service provider for a business Customer, requests concerning Customer-controlled data should ordinarily be directed to that Customer.
14. THIRD-PARTY SERVICES AND INTEGRATIONS
The Service may support integrations with third-party applications.
Where users authorise such integrations, relevant information may be exchanged according to the permissions granted.
Third-party providers may operate under their own privacy policies.
Users should review those policies before enabling integrations.
15. CHILDREN’S PRIVACY
Clinked is primarily intended for business and professional use.
We do not knowingly collect personal data directly from children under thirteen through our own registration processes.
Where Customer-controlled services involve minors, the Customer is responsible for ensuring an appropriate legal basis and compliance with applicable requirements.
16. CUSTOMER REFERENCES
Rabbitsoft may identify business Customers in marketing materials only where authorised by contract or otherwise appropriately permitted.
Customers may request that Rabbitsoft discontinue the use of their company name or logo in marketing materials.
Nothing in this provision permits disclosure of confidential Customer Content.
17. CHANGES TO THIS POLICY
We may update this Privacy Policy to reflect changes in our services, practices or legal obligations.
Material changes will be communicated where required by applicable law.
The current version will be available on our website.
18. CONTACT INFORMATION
Rabbitsoft Ltd
Trading as Clinked
Cambridge, United Kingdom
Email: info@clinked.com
Individuals in the United Kingdom may also have the right to complain to the Information Commissioner’s Office.
Individuals in other jurisdictions may contact their relevant privacy regulator where applicable.