Privacy Policy

Last updated: February 2026

ClickAware respects your privacy and is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights.

Who We Are

ClickAware is a university dissertation project focused on improving awareness of email phishing threats. If you have any questions about this policy, you can contact us at:

Email: phishing@clickaware.co.uk

What Data We Collect

We only collect data that is necessary to provide and improve the service.

When you register, we collect the following information:

First Name
Last Name
Email Address
Date of Birth
Job Title
City/Town
Password (stored securely in hashed form)

We also collect basic usage data such as simulation results and interactions with the platform.

We do not intentionally collect sensitive personal data.

How We Use Your Data

Your data is used to:

Create and manage your account
Run phishing awareness simulations
Show your results and progress
Improve the ClickAware platform
Support academic research for this dissertation project

Your data will not be sold to third parties.

Legal Basis for Processing

We process your data under the following lawful bases:

Your consent when you register
Legitimate interest in improving the educational platform
Academic research purposes related to this university project

Data Storage and Security

Your data is stored securely using appropriate technical and organisational measures. We take reasonable steps to protect your information from unauthorised access, loss or misuse.

Data is only kept for as long as necessary for the purposes outlined in this policy.

Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Withdraw your consent at any time
Object to or restrict certain processing

To exercise any of these rights, contact us at phishing@clickaware.co.uk.

Withdrawing and Deleting Your Data

You can withdraw from the project and request deletion of your data at any time.

To do this, email phishing@clickaware.co.uk from your registered email address. Your request will be processed within a reasonable timeframe.

Cookies and Basic Analytics

ClickAware may use essential cookies to keep you logged in and ensure the platform works properly.

If analytics are used, they will only collect anonymised usage information to help improve the service.

Third-Party Services

ClickAware may use trusted third-party providers for hosting, authentication or analytics. These providers only process data necessary to deliver their service and are expected to comply with data protection laws.

Changes to This Policy

This policy may be updated as the project develops. The latest version will always be shown on this page.

Contact

If you have any questions about this Privacy Policy or your data, contact:

Email: phishing@clickaware.co.uk