Privacy Policy

Information we collect

We collect information you choose to send us, and the minimal technical data any web server records:

• Contact and booking forms: your name, email address, company name (if provided), the topic you select, preferred call times, detected timezone, how long the form was open (an anti-spam check), and the content of your message.
• Direct channels: anything you send us by email, phone, or Telegram.
• Server logs: IP address, requested pages, and browser user-agent, retained briefly for security and reliability purposes.

Analytics and cookies

We use Plausible, a privacy-focused analytics tool, to count visits in aggregate. It runs without cookies, stores no personal information, and does not follow you across other sites; we see page counts and referrers, never individual profiles.

With your permission only, we also load the Meta (Facebook) pixel to measure whether our advertising works. If you allow it, Meta sets a cookie (_fbp) in your browser and receives standard event data such as the pages you visit here; Meta's own privacy policy applies to that data. If you decline, the pixel never loads and nothing is sent to Meta. You can change your choice at any time with the Cookie preferences link in the footer.

What we don’t do

• No marketing cookies load without your consent, and our own analytics runs without cookies entirely.
• We do not sell or rent personal information to anyone.
• We do not use session recording or keystroke tracking.
• We do not add you to marketing lists because you asked us a question.

How we use your information

Form submissions are delivered to our own systems so our team can respond to you, and are retained as part of our business correspondence. If we enter a working relationship, information you provide is used to deliver services under the agreement we sign together. Rate-limiting and anti-abuse checks on the contact form use your IP address transiently; it is not stored with your submission.

For visitors in the EU/UK: our lawful bases are taking steps prior to a contract at your request (responding to your inquiry, Art. 6(1)(b) GDPR) and legitimate interest (site security, anti-abuse, and retaining business correspondence, Art. 6(1)(f) GDPR). The Meta pixel runs only on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via Cookie preferences in the footer.

Where your data lives

Form submissions are delivered to systems we operate ourselves; email correspondence is stored with our email provider under its security controls. If you are in the EU or UK, note that data may be processed outside your jurisdiction, including in Saint Lucia; where we use service providers, engagements that involve personal data are covered by data-processing terms in the agreement we sign with you.

Job applications

If you apply for a role or send a speculative application, we use your materials only for recruitment and delete them within 12 months unless you ask us to keep them on file.

Retention

Business correspondence is retained for as long as it remains relevant to the relationship or as law requires. You may ask us to delete correspondence that isn’t subject to a legal or contractual retention need.

Your rights

You can request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it by writing to [email protected]. We respond to every request within 30 days.

EU/UK visitors may additionally object to or restrict processing, request data portability, and lodge a complaint with their local data protection authority.

Contact

Window Flow Ltd., #10 Manoel Street, Castries, Saint Lucia. For privacy matters, email [email protected].