Privacy Policy

Privacy Policy

Effective date: January 2, 2025. Last updated: October 21, 2025.

Overview

Wingflows (“we”, “us”, or “our”) is a digital product and growth studio headquartered in the United States with team members in the European Union. This Privacy Policy describes how we collect, use, share, and protect personal information when you visit our website, engage with our services, or communicate with us. We operate in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Information we collect

  • Contact details such as name, email address, company, and phone number when you submit forms or contact us directly.
  • Professional information including role, organisation size, and project goals as provided voluntarily to scope engagements.
  • Usage data such as IP address, browser type, referring URLs, and interactions with our website. We use analytics tools that aggregate and anonymise this information for performance monitoring.
  • Communications, proposals, contracts, and project documentation necessary to deliver services.

How we use information

  • To respond to enquiries, schedule discovery calls, and prepare proposals tailored to your business needs.
  • To deliver our services, manage client relationships, and provide support throughout engagements.
  • To send newsletters, insights, or event invitations when you opt in to receive them. You can unsubscribe at any time.
  • To analyse website performance, improve user experience, and maintain the security of our digital infrastructure.
  • To comply with legal obligations, enforce agreements, and protect our rights or those of our clients and partners.

Data retention

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, or resolve disputes. For active clients, project documentation is stored securely for the duration of the engagement and archived with restricted access thereafter.

International transfers

Wingflows operates globally. When we transfer personal data outside the country of origin, we implement safeguards such as Standard Contractual Clauses or equivalent agreements to ensure adequate protection.

Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information. You may also request data portability or object to certain processing activities. To exercise these rights, email privacy@wingflows.com with your request. We will respond within 30 days. If you are unhappy with our response, you may contact your local data protection authority.

Security

We use administrative, technical, and physical safeguards to protect personal information. Access to client data is restricted to authorised team members with a legitimate business need. Despite our efforts, no method of transmission or storage is completely secure and we cannot guarantee absolute security.

Third-party services

We may share information with trusted service providers who support our operations (e.g., cloud hosting, analytics, CRM, payment tools). These providers process personal data on our behalf and are contractually obligated to handle it securely.

Updates

We may update this Privacy Policy to reflect new regulations or operational changes. If updates are material, we will notify you via email or a prominent notice on our website. Continued use of our services constitutes acceptance of the revised policy.

Contact

Questions about this policy or your data rights can be sent to privacy@wingflows.com or Wingflows, 548 Market Street, Suite 92780, San Francisco, CA 94104.