This policy explains what personal data Wingflows collects when you visit our site or get in touch, how we use it, and the choices and rights you have. We keep it plain-spoken on purpose.
Who we are
Wingflows (“we”, “us”, “our”) is a digital agency operated by [legal entity name], based in [city, country]. We are the data controller for personal data processed through this website. You can reach us at hello@wingflows.com.
Information we collect
We only collect what we need to respond to you and run the site:
- Contact form details — your name, work email, company, project type and the message you send us.
- Correspondence — emails and messages you send us, and our replies.
- Technical data — basic, non-identifying information your browser sends (such as approximate region and device type) that our hosting provider logs to keep the site secure and available.
We do not knowingly collect sensitive personal data, and we ask that you don’t include any in your messages.
How we use your information
- To respond to your enquiry and schedule a discovery call.
- To prepare proposals and, if we work together, to deliver the engagement.
- To keep the website secure, available and working correctly.
- To comply with legal obligations where they apply.
We do not sell your personal data, and we don’t use it for automated decision-making or profiling.
Legal bases for processing
Where the GDPR (or UK GDPR) applies, we rely on: legitimate interests (responding to enquiries and running our business), consent (where you actively submit a form), performance of a contract (delivering work you’ve engaged us for), and legal obligation (record-keeping and compliance).
Cookies & analytics
This site does not currently set advertising or tracking cookies, and does not run third-party analytics. If we add analytics or embeds in the future, we’ll update this policy and, where required, ask for your consent through a cookie banner first.
Sharing & third parties
We share personal data only with service providers who help us operate — for example our website host and the email or form service that delivers your message to us. These providers process data on our instructions under appropriate agreements. We may also disclose data where required by law.
Data retention
We keep enquiry and correspondence data for as long as needed to follow up and, where relevant, for the duration of any engagement plus a reasonable period for our records and legal obligations. When it’s no longer needed, we delete or anonymise it.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. Residents of the EU/UK have rights under the GDPR; California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.
To exercise any right, email us at hello@wingflows.com. You also have the right to lodge a complaint with your local data protection authority.
Data security
We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and access controls. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.
International transfers
Our providers may process data in countries other than yours. Where we transfer data internationally, we rely on appropriate safeguards such as standard contractual clauses where they are required.
Children’s privacy
This site is intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we’ll delete it.
Changes to this policy
We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above, and for material changes we’ll take reasonable steps to let you know.