PRIVACY POLICY
This Privacy Notice for WINSPERT (“we,” “us,” or “our“), describes how and why we might collect, store, use, and/or share (collectively referred to as “process“) your personal information when you use our services (“Services“), such as when you:
- Visit our website at https://winspert.com, or any website we operate, that links to this Privacy Notice.
- Interact with us in other related ways, such as engaging with our sales, marketing efforts, or events.
Questions or Concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please refrain from using our Services. If you have any further questions or concerns, please contact us at info@winspert.com.
SUMMARY OF KEY POINTS
This summary highlights the key points from our Privacy Notice. For more details on any of these topics, you can click the links following each point or use the table of contents below to navigate to the relevant section.
What personal information do we process?
When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products or features you use. [Learn more about the personal information you disclose to us.]
Do we process any sensitive personal information?
No, we do not process sensitive personal information.
Do we receive any information from third parties?
We do not receive any information from third parties.
How do we process your information?
We process your information to:
- provide, improve, and administer our Services
- communicate with you
- ensure security and prevent fraud
- comply with legal requirements
In what situations and with which parties do we share personal information?
We may share your information in specific situations and with certain third parties. [Learn more about when and with whom we share your personal information.]
How do we keep your information safe?
We have implemented organisational and technical measures to protect your personal information. However, no method of electronic transmission over the internet or information storage is 100% secure. While we take reasonable precautions to protect your information, we cannot guarantee that hackers, cybercriminals, or other unauthorised parties will not defeat our security measures and improperly collect, access, steal, or modify your data. [Learn more about how we keep your information safe.]
What are your rights
Depending on your location, applicable privacy laws may grant you certain rights regarding your personal information. [Learn more about your privacy rights.]
How do you exercise your rights?
The easiest way to exercise your rights is by contacting us directly at info@winspert.com. We will evaluate and respond to any requests in accordance with applicable data protection laws.
Want to learn more about what we do with the information we collect?
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
Personal Information You Disclose to Us
We collect personal information that you voluntarily provide to us, such as when you register for our Services, express interest in our products or Services, participate in activities, or contact us directly.
The personal information we collect depends on your interactions with us, the choices you make, and the features you use. This may include:
- Contact Information: Names, phone numbers, email addresses, and usernames.
- Payment Information: If you make a purchase, we may collect payment details, including your payment instrument number and security code. All payment data is processed and stored by Stripe. You can review their privacy notice here: Stripe Privacy Notice.
Sensitive Information: We do not collect or process sensitive personal information.
Accuracy of Information: You are responsible for ensuring that the personal information you provide is true, complete, and accurate. Please notify us of any changes.
Information Automatically Collected
We collect technical data automatically when you visit, use, or navigate our Services. This information does not personally identify you but helps us maintain the security and functionality of our Services. It may include:
- Log and Usage Data: This includes data about your interactions with our Services, such as IP address, browser type, device information, operating system, language preferences, referring URLs, and pages you visit.
- Device Data: Information about the device you use to access our Services, such as your device type, IP address, location, browser, operating system, and mobile carrier.
- Cookies and Similar Technologies: Like many websites, we use cookies to collect data for analytics and to improve your experience.
2. HOW DO WE PROCESS YOUR INFORMATION?
We process your personal information for several reasons, depending on your interaction with our Services. These include:
- To Provide and Manage Our Services: We use your information to operate and improve our Services, including account creation, authentication, and maintaining your account.
- To Communicate with You: We process your data to communicate with you about your account, updates, or other relevant information related to our Services.
- For Security and Fraud Prevention: We process your information to ensure the security of our Services and to prevent fraudulent activities.
- To Comply with Legal Obligations: We may process your information to comply with applicable laws, regulations, or legal processes.
- With Your Consent: We may process your information for additional purposes with your explicit consent.
- To Protect Vital Interests: In certain cases, we may process your information to protect an individual’s vital interests, such as preventing harm or ensuring safety.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
Legal Bases for Processing Your InformationWe process your personal information only when we have a valid legal reason to do so under applicable laws, such as with your consent, to fulfil contractual obligations, comply with legal requirements, protect your rights, or serve our legitimate business interests.For EU or UK Residents (GDPR/UK GDPR Compliance)If you are located in the EU or UK, we rely on the following legal bases to process your personal information:
- Consent: We may process your personal information if you’ve given us permission for a specific purpose. You can withdraw your consent at any time. [Learn more about withdrawing your consent.]
- Legal Obligations: We may process your information to comply with legal obligations, such as cooperating with law enforcement or regulatory bodies, defending legal claims, or using your data as evidence in litigation.
- Vital Interests: We may process your information when necessary to protect your or a third party’s vital interests, such as in situations involving threats to safety.
- Consent (Express or Implied): We may process your information if you provide us with specific permission or if consent can be inferred from the context. You can withdraw your consent at any time.
- If the collection is in the interest of an individual and consent cannot be obtained quickly.
- For investigations, fraud detection, and prevention.
- During business transactions, provided certain conditions are met.
- To assess, process, or settle an insurance claim based on witness statements.
- To identify injured, ill, or deceased persons and communicate with next of kin.
- If we suspect financial abuse or need to protect an individual from harm.
- If collection without consent is reasonable to investigate breaches of agreements or laws.
- If disclosure is required to comply with a subpoena, warrant, or court order.
- If the information was produced by an individual in the course of their employment, business, or profession, and the collection is aligned with those purposes.
- If the collection is for journalistic, artistic, or literary purposes.
- If the information is publicly available and meets regulatory standards.
We may need to share your personal information in the following situations:
- Business Transfers: We may share or transfer your information in connection with a merger, sale of company assets, financing, or acquisition of all or part of our business.
- With Google Analytics: We may share information with Google Analytics to track and analyse the use of our Services. This may include Google Analytics Demographics and Interests Reporting. To opt out of being tracked, visit Google Analytics Opt-out or adjust your settings through Ads Settings. You can also opt out through Network Advertising Initiative or Mobile Ad Choices.
- With Google Maps Platform APIs: We may share your information with Google Maps APIs (e.g., Google Maps API, Places API). This may involve storing your location data on your device. You can revoke your consent at any time by contacting us using the details provided at the end of this document.
We may use cookies and similar tracking technologies (like web beacons and pixels) to collect and store information when you interact with our services. These technologies help us improve your experience and gather data on how our Services are used.
For detailed information about how we use cookies and how you can control, or refuse certain cookies, please refer to the ‘Consent Preferences’ icon at the bottom left to access our Cookie Notice.
6. HOW LONG DO WE KEEP YOUR INFORMATION?
We keep your personal information only as long as necessary to fulfil the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law (eg. for tax, accounting, or other legal requirements).
Your personal information will not be retained longer than the period in which you have an active account with us.
When we no longer have a legitimate business need to process your information, we will either delete or anonymise it. If deletion is not immediately possible (e.g., due to backup storage), we will securely store your data and prevent further processing until it can be deleted.
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
We implement reasonable technical and organisational security measures to protect your personal information. While we take steps to secure your data, no electronic transmission or storage method is completely risk-free. Therefore we cannot guarantee that unauthorised parties, such as hackers or cybercriminals, will not be able to access or misuse your information.
Although we strive to safeguard your data, the transmission of personal information to and from our Services is at your own risk. We recommend accessing our Services only from a secure environment.
8. DO WE COLLECT INFORMATION FROM MINORS?
We do not knowingly collect personal information from children under 18 years of age, nor do we market to them. By using our Services, you confirm that you are at least 18 years old, or that you are the parent or guardian of a minor and consent to their use of the Services.
If we discover that we have collected personal information from a user who is less than 18 years of age, we will deactivate their account and take reasonable measures to promptly delete such data from our records.
If you believe we may have collected information from a minor, please contact us at info@winspert.com.
9. WHAT ARE YOUR PRIVACY RIGHTS?
If you are located in regions such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, or Canada, you have certain rights under data protection laws. These may include the right to:
- Access and obtain a copy of your personal information.
- Request correction or deletion of your personal information.
- Restrict the processing of your personal information.
- Request data portability (where applicable).
- Object to automated decision-making and profiling.
- Withdraw your consent to process your personal information at any time.
We will consider and act upon any request in accordance with applicable data protection laws.
If you are located in the EEA or UK and believe we are unlawfully processing your data, you have the right to file a complaint with your Member State data protection authority or UK data protection authority.
If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing Your Consent: If we are rely on your consent to process your information, you have the right to withdraw that consent at any time. This can be done by contacting us or updating your preferences. Please note that withdrawing consent does not affect the lawfulness of processing before the withdrawal or processing based on other legal grounds.
Opting Out of Marketing Communications: You can unsubscribe from marketing and promotional communications by clicking the unsubscribe link in our emails, replying “STOP” or “UNSUBSCRIBE” to our SMS messages, or by contacting us directly. However, we may still send you service-related messages, such as those needed for account management or responding to your requests.
Account Information: If you would at any time like to review or change the information in your account, or terminate your account, you can:
- Log in to your account settings and make changes.
- Contact us directly for assistance.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some data for purposes such as fraud prevention, troubleshooting, legal compliance, and enforcement of our terms.
Cookies and Tracking Technologies: You can adjust your browser settings to accept or reject cookies. Note that rejecting cookies may affect certain features of our Services.
If you have questions or comments about your privacy rights, you may email us at info@winspert.com.
10. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (DNT) feature that allows you to signal your privacy preference not to have data about your online browsing activities monitored and collected.However, there is currently no universal standard for DNT signals, and we do not respond to them at this time.If a standard for online tracking is established in the future that we are required to follow, we will update this privacy notice to reflect that practice.
11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
If you are a resident of California, Colorado, Connecticut, Utah or Virginia, you have specific rights regarding your personal information.
Categories of Personal Information We Collect
We may collect the following categories of personal information:
- Identifiers: Name, contact details (email, phone number), online identifiers, IP address, etc.
- Personal Information (California Customer Records): Name, contact information, education, employment, financial data.
- Protected Classification Characteristics: Gender, date of birth.
- Commercial Information: Transaction and purchase history, payment details.
- Biometric Information: Fingerprints, voiceprints.
- Internet or Network Activity: Browsing history, search activity, online behavior.
- Geolocation Data: Device location.
- Audio, Video, and Visual Information: Call recordings, images, and audio.
- Professional or Employment Information: Business contact details, job title, work history.
- Education Information: Student records, directory information.
Categories of Personal Information We Do Not Collect
- Sensitive Personal Information: We do not process sensitive personal information.
- Inferences: We do not create profiles or summaries based on inferences drawn from personal information.
How We Use and Share Your Personal Information
We use your personal information as described in the section, “HOW DO WE PROCESS YOUR INFORMATION?“ We may share it with service providers under contract, but we do not sell your information.
California Residents’ Rights
This section applies only to California residents. The California Code of Regulations defines a ‘resident’ as:
(1) every individual who is in the State of California for other than a temporary or transitory purpose, and
(2) every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose.
Under the California Consumer Privacy Act (CCPA), you have the following rights:- Right to Request Deletion: You can request the deletion of your personal data, subject to certain exceptions (e.g., legal obligations or fraud prevention).
- Right to Know: You may request details about the data we collect, how it is used, whether it is shared or sold, and to whom.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
- Right to Limit Use of Sensitive Information: We do not process sensitive personal information.
- Verification Process: We will verify your identity before processing your request, using information you have already provided us.
We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.
Other Privacy Rights
- Objection to Processing: You have the right to object to the processing of your personal information.
- Correction and Restriction: You may request the correction of inaccurate or outdated personal data, or ask to restrict its processing.
- Authorised Agents: You can designate an authorised agent to submit a request on your behalf under the CCPA. We may deny a request from an agent unless they provide valid proof of authorisation to act on your behalf in accordance with the CCPA.
Colorado Residents’ Rights
This section applies only to Colorado residents. Under the Colorado Privacy Act (CPA), you have the right to:
- Be informed whether or not we are processing your personal data.
- Access, correct, delete, and obtain a copy of your data.
- Opt out of targeted advertising or the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
You can submit a request to exercise your rights by contacting us via email at info@winspert.com.
However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.
If we decline to take action regarding your request, you can appeal the decision. Within forty-five (45) days of receiving an appeal, we will inform you in writing of any actions taken or not taken in response to the appeal, including a written explanation of the reasons for our decision.
Connecticut Residents’ Rights
This section applies only to Connecticut residents. Under the Connecticut Data Privacy Act (CTDPA), you have the right to:
- Be informed whether or not we are processing your personal data.
- Access, correct, delete, and obtain a copy of your data.
- Opt out of targeted advertising or the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
You can submit a request to exercise your rights by contacting us via email at info@winspert.com.
However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.
If we decline to take action regarding your request, you can appeal the decision. Within sixty (60) days of receiving an appeal, we will inform you in writing of any actions taken or not taken in response to the appeal, including a written explanation of the reasons for our decision.
Utah Residents’ Rights
This section applies only to Utah residents. Under the Utah Consumer Privacy Act (UCPA), you have the right to:
- Be informed whether or not we are processing your personal data.
- Access, correct, delete, and obtain a copy of your data.
- Opt out of targeted advertising or the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. You can submit a request to exercise your rights by contacting us via email at info@winspert.com.
Virginia Residents’ Rights
This section applies only to Virginia residents. Under the Virginia Consumer Data Protection Act (VCDPA):
“Consumer” means a natural person who is a resident of the Commonwealth acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.
“Personal data” means any information that is linked or reasonably linkable to an identified or identifiable natural person. It does not include de-identified data or publicly available information.
“Sale of personal data” means the exchange of personal data for monetary consideration.
If this definition of “consumer” applies to you, you have the right to:
- Be informed whether or not we are processing your personal data.
- Access, correct, delete, and obtain a copy of your data.
- Opt out of targeted advertising or the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
To exercise your rights provided under the Virginia VCDPA, contact us via email at info@winspert.com.
We may request that you provide additional information reasonably necessary to verify you and your consumer’s request. If you are using an authorised agent to exercise your rights, we may deny a request if the authorised agent does not submit proof that they have been validly authorised to act on your behalf.
Upon receiving your request, we will respond within forty-five (45) days. We will inform you in writing of any actions taken or not taken in response to the request, including a written explanation of the reasons for our decision. The response period may be extended once by forty-five (45) additional days when reasonably necessary. We will inform you of any such extension within the initial 45-day response period, together with the reason for the extension.
Right to appeal
If we decline to take an action regarding your request, we will inform you of our decision and reasoning behind it. If you wish to appeal our decision, please email us at info@winspert.com. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any actions taken or not taken in response to the appeal, including a written explanation of the reasons for our decisions. If your appeal is denied, you may contact the Attorney General to submit a complaint.
12. DO WE MAKE UPDATES TO THIS NOTICE?
We may update this privacy notice from time to time to comply with applicable laws. The updated version will be indicated with an updated “Revised” date and will be effective immediately upon posting. If we make significant changes, we may notify you either by posting a prominent message or by sending you a direct notification. We recommend reviewing this notice regularly to stay informed about how we protect your information.
13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions or comments about this notice, you may write to us at info@winspert.com.
14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
Based on the applicable laws of your country, you may have the right to access, update, or delete the personal information we collect from you. To make a request, please visit info@winspert.com.