Privacy & Policy

1. Information We Collect

1.1 Information You Provide Directly

When you interact with our website, we may collect:

Contact Form & Discovery Call Bookings:

• First and last name
• Email address
• Phone number (with country code)
• Organization name
• Preferred meeting date
• Any additional information you provide in messages or inquiries

Newsletter Subscriptions:

• Email address
• Name (if provided)
• Subscription preferences

1.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device type (desktop, mobile, tablet)
• Operating system
• Pages visited and time spent on pages
• Referring website or source
• Date and time of visit
• Clickstream data and navigation patterns

1.3 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. Cookies are small text files stored on your device that help us:

• Remember your preferences
• Understand how you use our website
• Improve website functionality
• Analyze traffic and user behavior

Types of Cookies We Use:

• Essential Cookies: Required for website functionality (no consent required)
• Analytics Cookies: Help us understand website usage (e.g., Google Analytics)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: May be used for targeted advertising (if applicable)

When you first visit our website, you will be presented with a cookie consent banner where you can accept or decline non-essential cookies. You can change your cookie preferences at any time through your browser settings or by clearing your cookies and revisiting our site. Note that disabling certain cookies may limit website functionality.

2. Legal Basis for Processing

We process your personal information only when we have a valid legal basis to do so. The legal bases we rely on include:

• Consent: When you opt in to receive marketing emails, subscribe to our newsletter, or accept non-essential cookies. You may withdraw consent at any time by unsubscribing, adjusting cookie settings, or contacting us.
• Contractual Necessity: When processing is necessary to deliver services you have requested, such as scheduling and conducting discovery calls or fulfilling consulting engagements.
• Legitimate Interest: When processing is necessary for our legitimate business interests, such as improving our website, analyzing usage trends, and ensuring security, provided these interests do not override your rights. You may object to processing based on legitimate interest by contacting us.
• Legal Obligation: When we are required to process your data to comply with applicable law, regulation, or legal process.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

• Schedule and conduct discovery calls and consultations
• Respond to your inquiries and requests
• Provide the services you've requested
• Communicate about appointments, services, and updates

3.2 Business Operations

• Improve our website and user experience
• Analyze trends and user behavior
• Develop new services and offerings
• Conduct research and analysis

3.3 Marketing and Communications

• Send newsletters and educational content (with your consent)
• Share insights, strategies, and success stories
• Inform you about new services or offerings
• Send promotional materials (you can opt out at any time via the unsubscribe link in each email or by contacting us)

3.4 Legal and Security

• Comply with legal obligations
• Protect against fraud and security threats
• Enforce our Terms & Conditions
• Resolve disputes and troubleshoot problems

4. AI and Automated Decision-Making

As an AI consulting company, we want to be transparent about how artificial intelligence is used in our operations:

• We may use AI-powered tools to assist in analyzing business data, generating reports, and optimizing our services for clients.
• We do not use automated decision-making or profiling that produces legal or similarly significant effects on you without human oversight.
• Any AI tools used in delivering our consulting services to clients are disclosed and discussed as part of our engagement agreements.

If you have questions about how AI is used in connection with your data, please contact us at contacts@endlesswinning.com.

5. How We Share Your Information

We respect your privacy and do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our business. These categories of providers include:

• Website hosting: Vercel (hosting and content delivery)
• Analytics: Google Analytics (website usage analysis)
• Email and marketing: Email delivery and marketing automation platforms
• Scheduling: Calendar and booking tools for discovery calls
• CRM: Customer relationship management systems
• Payment processing: Stripe (if applicable to your transaction)

These providers are contractually obligated to protect your information, process it only on our instructions, and use it only for the purposes we specify.

5.2 Business Transfers

If Endless Winning is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose your information when required by law, such as:

• Responding to subpoenas, court orders, or legal processes
• Protecting our rights, property, or safety
• Preventing fraud or illegal activity
• Complying with regulatory requirements

5.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

6. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure server infrastructure with reputable cloud providers
• Access controls, authentication, and role-based permissions
• Regular security assessments and vulnerability monitoring
• Employee and contractor training on data protection best practices
• Incident response procedures for data breaches

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and applicable regulatory authorities as required by law.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Our specific retention periods are:

• Contact form submissions: 3 years after your last interaction with us
• Client engagement records: Duration of the engagement plus 5 years
• Newsletter subscriptions: Until you unsubscribe, plus 30 days for processing
• Website analytics data: 26 months (in accordance with Google Analytics defaults)
• Cookie data: Varies by cookie type, from session-only to 2 years maximum
• Financial and tax records: 7 years as required by U.S. tax law

When your information is no longer needed, we will securely delete or anonymize it. You may request earlier deletion subject to our legal obligations (see Section 8).

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information. We honor these rights regardless of where you reside, to the extent practicable:

8.1 Access and Correction

You have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate or incomplete information
• Receive a copy of your data in a portable format
• Update your contact preferences

8.2 Data Deletion

You may request that we delete your personal information, subject to:

• Legal obligations to retain certain records
• Ongoing service relationships
• Legitimate business needs

8.3 Opt-Out Rights

You can:

• Unsubscribe from marketing emails using the link in each message
• Manage cookies through our cookie consent banner or your browser settings
• Request to stop receiving promotional communications
• Withdraw previously given consent at any time, without affecting the lawfulness of processing before withdrawal

8.4 Do Not Track

Some browsers support "Do Not Track" signals. We do not currently respond to Do Not Track signals, but we honor opt-out requests as described in this policy.

8.5 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information (note: we do not sell or share personal information for cross-context behavioral advertising)
• Right to limit the use of sensitive personal information
• Right to non-discrimination for exercising your rights

To submit a verifiable consumer request, contact us at contacts@endlesswinning.com. We will verify your identity before processing your request and respond within 45 days.

8.6 Virginia, Colorado, Connecticut, and Texas Privacy Rights

If you reside in Virginia, Colorado, Connecticut, or Texas, you may have similar rights under the VCDPA, CPA, CTDPA, or TDPSA, including the right to access, correct, delete, and opt out of certain data processing. To exercise these rights, contact us using the information in Section 13.

8.7 European Privacy Rights (GDPR)

If you are in the European Economic Area or the United Kingdom, you have rights under the General Data Protection Regulation:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing (including direct marketing)
• Right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
• Right not to be subject to automated decision-making, including profiling

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated. A list of EU supervisory authorities is available at edpb.europa.eu.

To exercise any of these rights, please contact us at contacts@endlesswinning.com.

9. Children's Privacy

Our website and services are not directed to children under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If we discover that we have inadvertently collected information from a child, we will promptly delete it. If you believe a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Our website is hosted in the United States. If you access our website from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have data protection laws that differ from those in your country.

For transfers of personal data from the EEA or UK, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with our service providers that include appropriate safeguards
• Your explicit consent, where applicable

By using our website and providing your information, you acknowledge and consent to this transfer and processing. If you have concerns about international data transfers, please contact us.

11. Third-Party Websites

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit, as we are not responsible for their content, privacy practices, or data handling.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• Material changes will be prominently posted on our website
• We may notify you via email if you have provided your email address
• For significant changes that affect how we process your data, we will seek renewed consent where required by law
• Your continued use of our website after changes are posted constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Endless Winning
Email: contacts@endlesswinning.com
Location: Tampa, Florida, United States

For Privacy-Specific Inquiries:
Please include "Privacy Inquiry" in your email subject line so we can route your request appropriately.

Response Time:
We will acknowledge your privacy-related request within 5 business days and provide a substantive response within 30 days (or 45 days for CCPA requests), or as required by applicable law. If we need additional time, we will notify you of the extension and the reason.