Privacy Policy
This policy explains how WinLens, Inc. (“WinLens”, “we”, “us”) handles personal data. It covers our website, our marketing, and the win-loss research programmes we run for our clients — including recorded interviews with their buyers.
1. Who we are
Controller: WinLens, Inc., a Delaware corporation, at Ramat Gan, Israel.
Privacy contact: privacy@winlens.io.
2. Who this policy is about
We handle personal data about three groups, and our role differs for each:
| Group | Example | Our role |
|---|---|---|
| Website visitors and prospects | You submit your work email through a form on our site | Controller |
| Client personnel | Our contacts at a company that has engaged us | Controller |
| Interview participants | A buyer at one of our client’s won, lost, no-decision or churned deals | Processor, acting on our client’s documented instructions under a data processing agreement |
Where we act as a processor, our client is the controller and their own privacy policy governs the underlying relationship with you. You may exercise your rights against either of us; we will pass requests to the relevant client without undue delay.
3. What we collect
From website visitors
- Contact details you submit — your work email address, and anything else you choose to send us.
- Technical data — IP address, browser and device type, pages viewed, referring page, and timestamps.
- Cookie data — see section 8.
From interview participants
- Identity and role — name, job title, employer, and business contact details, supplied to us by our client from their CRM.
- Deal context — the opportunity you were involved in, its value, stage and outcome.
- Interview content — an audio recording of the call, a written transcript, and our analysts’ coded notes on it.
We ask you not to share special category data (health, political opinions, trade union membership and similar), your own company’s trade secrets, or anything you are contractually barred from disclosing. If such material appears in a recording, we remove it from the transcript on becoming aware.
From client personnel
- Name, job title, business contact details, and records of our correspondence and meetings with you.
- Billing and account administration data.
4. Why we use it, and our lawful basis
| Purpose | Data | Lawful basis (UK/EU GDPR Art. 6) |
|---|---|---|
| Responding to an enquiry you submit | Contact details | Legitimate interests — replying to someone who contacted us |
| Sending marketing about our services | Contact details | Consent, or legitimate interests where permitted for existing business contacts. You can opt out at any time. |
| Delivering a research programme to a client | Interview participant data | Performance of our contract with the client; the client is responsible for the lawful basis covering its buyers |
| Recording and transcribing interviews | Audio, transcript | Consent, obtained from the participant at the start of every call and recorded in our logs |
| Operating, securing and improving our site | Technical data | Legitimate interests — running a safe, working service |
| Billing, accounting, tax and legal compliance | Client personnel, billing data | Legal obligation, and performance of contract |
Where we rely on legitimate interests, we have assessed that our interest does not override your rights. You may ask us for that assessment, and you may object at any time (section 9).
Interview recording consent
We do not record any call without asking first. At the start of every interview our interviewer states who we are, who commissioned the research, that the call is being recorded and transcribed, how the material will be used, and that you may decline, stop at any point, or ask us to delete the recording afterwards. Declining costs you nothing. Some jurisdictions require the consent of every party to a recorded call, and we follow that standard everywhere.
5. Who we share it with
We do not sell personal data and we do not share it for cross-context behavioural advertising. We disclose it to:
- The client who commissioned the research. Reports quote buyers verbatim, but attributed by role and company profile only — for example “VP Engineering, mid-market SaaS” — never by name or employer, unless you have specifically agreed otherwise. Recordings and full transcripts are shared with the commissioning client.
- Service providers acting on our instructions under written contract — hosting, call recording, transcription, email and CRM. A current list is available on request from privacy@winlens.io.
- Professional advisers — lawyers, accountants, auditors, insurers.
- Authorities, where we are legally required to, or to establish or defend legal claims.
- An acquirer, if we are involved in a merger, acquisition or asset sale — subject to this policy continuing to apply.
Our contracts with these providers prohibit them from using interview material for their own purposes, including training machine-learning models on it.
6. International transfers
We operate from Israel, so personal data you give us is processed there. Israel holds an adequacy decision from the European Commission, and equivalent recognition in the UK, so transfers from the EEA or UK to us do not require additional safeguards.
Where we or our providers move personal data on to a country without an adequacy decision, we rely on Standard Contractual Clauses (or the UK Addendum), together with a transfer risk assessment and safeguards such as encryption in transit and at rest. You may request a copy of the safeguards we use by writing to privacy@winlens.io.
7. How long we keep it
| Data | Retention |
|---|---|
| Enquiry and marketing contacts | Until you opt out, or 24 months of inactivity, whichever comes first |
| Interview audio recordings | 12 months after the programme ends, then deleted |
| Transcripts and coded notes | As instructed by the client in the data processing agreement; by default 24 months after delivery |
| Client contracts and billing records | 7 years, to meet tax and limitation-period requirements |
| Website server logs | 14 months |
8. Cookies
We use strictly necessary cookies to make the site work. We do not currently use analytics, advertising or tracking cookies. If that changes we will update this policy and ask for your consent before setting them.
We honour Global Privacy Control signals where your browser sends one.
9. Your rights
Under the UK/EU GDPR you may ask us to:
- Access the personal data we hold about you, and receive a copy.
- Correct anything inaccurate or incomplete.
- Delete it, where we have no overriding basis for keeping it.
- Restrict or object to our processing, including any direct marketing — an objection to marketing is always honoured.
- Port data you gave us to another provider, in a machine-readable format.
- Withdraw consent at any time, including consent to an interview recording. This does not affect processing already carried out.
Write to privacy@winlens.io. We respond within one month, extendable by two further months for complex requests, and we will tell you if we need longer. We do not charge, unless a request is manifestly unfounded or excessive.
You can complain to your local supervisory authority. In the UK that is the Information Commissioner’s Office (ico.org.uk); in the EU it is the authority for your country of residence. We would appreciate the chance to address your concern first.
US state privacy rights
If you are a resident of California, Colorado, Connecticut, Virginia or another state with comparable law, you may request access to, correction of, or deletion of your personal information, and may appeal a refusal. We do not sell personal information or share it for cross-context behavioural advertising, and we do not use it for profiling that produces legal or similarly significant effects. We will not discriminate against you for exercising these rights. Use the same address above.
10. Automated decision-making
We use software, including AI tooling, to transcribe and help code interview material. A human analyst reviews the output and writes the findings. We do not make decisions producing legal or similarly significant effects about you by automated means alone.
11. Security
We use encryption in transit and at rest, access controls limiting interview material to the analysts working on that programme, logging, and written confidentiality obligations on everyone handling recordings. No system is perfectly secure. Where a breach is likely to result in a risk to your rights, we notify the relevant supervisory authority within 72 hours and tell affected people where the law requires it.
12. Children
Our services are for businesses. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, write to us and we will delete it.
13. Changes
We may update this policy. We will change the “last updated” date, and for material changes we will give notice by email or a notice on this site before they take effect. Superseded versions are available on request.
14. Contact
Privacy questions and rights requests: privacy@winlens.io
Post: Ramat Gan, Israel