What we collect, why, and what stays with you.

Controller

CLICKOAI LTD is the controller. Company number 17322603. Registered in England and Wales. Registered office: 66 Paul Street, London, England, EC2A 4NA. Contact: hamza@clickoai.com.

What we collect

A course subscription uses your work email, the signup source, the consent-notice version and the subscription, confirmation, delivery, bounce and unsubscribe events needed to operate the course. A fit-review booking can include your first and last name, work email and law firm. Do not submit client names, matter details, contract text, legal questions, privileged material or special-category data.

Margo waitlist

Joining the Margo waitlist requires your first name, last name, email address and separate consent to Margo product updates. Phone number and LinkedIn profile are optional and do not give permission for telephone or LinkedIn marketing. Cloudflare provides the anti-bot check and stores waitlist records in an EU-jurisdiction D1 database. Google Workspace delivers confirmation and welcome emails. There are no email open pixels or click-tracking links, and joining does not enrol you in the course or grant access to Margo.

Unconfirmed requests are removed after 30 days. Inactive confirmed profiles are removed after twelve months. Readable profile and message details are removed 30 days after unsubscribe, bounce or complaint; a minimal email suppression hash remains to prevent further contact. Records involved in an unresolved delivery are held for reconciliation before cleanup. Unsubscribe stops future queued messages immediately, although a message already being sent may still arrive.

Fit-review booking

The Fit Call page links to a Google Calendar appointment schedule. Google processes the booking details and creates the Google Meet invitation. Booking creates no engagement and does not enrol you in another Margo Legal email purpose. You may instead email two suitable times to hamza@clickoai.com.

Legal AI Operating Essentials course

The optional seven-day Legal AI Operating Essentials course uses separate course-specific consent. Margo Legal sends a confirmation email first through Google Workspace. The seven lessons begin only after you confirm the work email, and each plain-text message includes a direct unsubscribe route. The course uses no open or click tracking. Opening or downloading a resource, completing a score, booking a call, receiving cold outreach or connecting on LinkedIn never subscribes you.

Readiness Score

The twelve score answers and calculation stay in your browser. Margo Legal does not receive the raw answers through the score. A later fit-review request is a separate action.

Emailed results and resource requests

Optional email requests - an annotated checklist, an emailed copy of a result you produced on screen, or the separate editorial newsletter - are currently unavailable. Before enabling them, we will name the delivery provider here. When enabled, each request will use its own consent form, no download or tool will require one, and we will record your email address, request purpose, source page, exact consent wording, consent time and any requested result snapshot. The address is used only for the stated purpose: the one-off item and a single one-off reply about it, or the newsletter you explicitly joined. The lawful basis is your consent, which you can withdraw at any time by replying to the message or contacting hamza@clickoai.com.

Retention once enabled: a one-off request, its snapshot and its delivery record are removed within 30 days of delivery. Newsletter records are removed within 30 days after you unsubscribe or a delivery permanently fails, and a one-way suppression hash remains to honour the unsubscribe. Consent records are kept for as long as the consent they record is relied upon.

Business research and outreach

Margo Legal may contact a limited number of people at incorporated law firms about professional workflow research and relevant Margo Legal resources. For this purpose, we may use your professional name, role, work email, firm, firm website, public professional profile, public professional posts, comments, reposts with added words, public descriptions of the firm’s services and our records of delivery, replies and objections. We do not use client-matter information, private-life information or special-category data for this outreach.

These details may come from your firm’s website, public professional and company registers, lawful business directories, public company-research services and information you provide in a reply. Public availability is not treated as consent. Provider output may be used as a research hypothesis, but it is not treated as proof of a firm’s private working conditions.

Purposes and lawful basis

We use fit-review details to take the scheduling step you request and to assess whether a possible engagement is suitable. We send the seven-day course only on consent, recorded through its dedicated form and confirmation step; you may withdraw that consent at any time. Emailed results, resource requests and the newsletter are sent only on the consent recorded through their own separate forms. For the bounded business-research pilot, we rely on legitimate interests to identify one relevant professional contact at an incorporated firm, ask a proportionate workflow question and evaluate whether the research should continue. We balance that interest against the person’s rights through strict targeting, one contact per firm, limited data, human review, tracking disabled, an easy opt-out and immediate suppression. You may object to direct marketing at any time.

We may use minimal technical records for security and service reliability under our legitimate interests, balanced against your rights. Downloading a resource does not subscribe you to a course or newsletter.

Google Analytics 4 and consent

With your consent, the public website loads Google Analytics 4 to understand page views, broad traffic sources, devices and engagement. Google Analytics may receive the static page title, the page URL and referrer without query strings or fragments, device and browser details, approximate location and online identifiers stored in analytics cookies. Margo Legal does not send form contents, email addresses, firm names, Readiness Score answers or search terms to Google Analytics. It sends the small set of custom events listed in the Cookie Notice, each only with the detail named there, and it does not send Web Vitals telemetry. Analytics cookies and the Google tag remain disabled until you select Accept analytics. Google explains how it uses information from sites that use its services.

You can select Decline analytics and continue using the website. You can withdraw or change consent at any time through the Analytics choices control. Withdrawing replaces the accepted choice with a declined choice, disables analytics for the current page and removes Margo Legal’s Google Analytics cookies. It does not affect earlier processing based on consent. See the Cookie Notice for cookie names and controls.

Selection and human review

Public firm information may be checked against fixed size, practice and workflow criteria before outreach. Public evidence may also be used to select a short opening or relevant resource. A person reviews the proposed source and message before release. This process does not make a legal or similarly significant decision about you.

Bounded public-source research with Exa

For a bounded, separately approved research experiment, Margo Legal may use Exa to search known law-firm domains for public firm pages about commercial-contract teams, named practice leaders, supplier-side contract work, firm news and legal-technology activity. We may also use firm and role terms to locate public professional profile candidates for an already verified decision-maker. No names, work emails or private notes are included in Exa firm-domain search queries. No existing contact name, work email or private note is included in those People Search queries. Exa results are treated only as private source candidates: Exa does not verify email addresses, clear suppression, certify Margo Legal's firm criteria or make a person eligible for outreach. A human reviews and matches each retained source before it can affect research or message preparation.

Bounded public professional activity research

For a bounded, separately approved research batch, Margo Legal may use Apify and a selected limited-permission Actor provider to retrieve recent public posts, comments, reposts and firm posts from already known public professional or company profile URLs. The batch uses no LinkedIn account cookies or private messages. A bare reaction or like is not treated as proof of interest, need or private working conditions and is not quoted as personalisation. Every retained source requires an exact public URL, date, excerpt, matching identity and human review. There is no automated LinkedIn connection or message.

Processors and recipients

The website host serves the public pages. Cloudflare provides the anti-bot check, stores the minimum course consent, confirmation, delivery, bounce and unsubscribe state in D1, and releases each due plain-text message directly to the Google Workspace Gmail API. Google Workspace sends it from Margo Legal. This route adds no open pixels and does not rewrite links for click tracking. Google Calendar and Google Meet process fit-review bookings and meeting invitations. Google Analytics 4 processes optional website analytics after consent. A specialist outbound-email service may distribute an authorised business-research message and record delivery, reply, bounce and suppression status. Exa may support the bounded firm-domain research described above. Apify and the selected limited-permission Actor provider may support the bounded public professional activity research. Approved AI or research services may otherwise help structure public-source research before human review. We do not sell personal information. Processor access is limited to providing the relevant service and is subject to its terms and safeguards.

International transfers

Some processors may handle information outside the United Kingdom. Where that happens, we rely on the processor's stated transfer safeguards and contractual protections. Ask us if you want the current processor and transfer details for your request.

Retention

Google Analytics event and user-level data is configured for the shortest practical property retention available for the reporting need; aggregate reports may remain longer. Analytics cookies can persist for up to two years unless you withdraw consent or delete them sooner. An unconfirmed course request and its queued confirmation are removed after three days. Course operational profile and message data is removed within 30 days after the course ends, you unsubscribe, or a delivery permanently fails, unless another separately consented purpose applies. For a bounce or complaint, a one-way email hash and the suppression reason may be retained to prevent another send; the message and readable address are removed. Unsuccessful or inactive fit enquiries are normally deleted or anonymised after twelve months. Public-source outreach research, message and delivery records are deleted or anonymised within 180 days of the last authorised touch unless a shorter pilot schedule applies. A minimal suppression record may be retained for as long as needed to honour an objection and prevent further contact. Client records follow the relevant business and legal retention schedule. We may retain a record longer where needed to establish, exercise or defend legal claims.

Your rights and objections

You may ask for access, correction, deletion, restriction, portability or an objection where the law provides it. The right to object to processing for direct marketing is absolute. Reply stop to an outreach email or contact hamza@clickoai.com; Margo Legal will stop the contact and maintain only the suppression information needed to respect your request.

Complaints

Contact us first if you would like us to resolve a concern. You can also complain to the Information Commissioner's Office, the UK supervisory authority.

Changes

Material changes will be dated on this page. We will not turn a one-off request into newsletter consent.