Privacy Policy

Who we are

Winklook is a live video selling product operated by Winklook Pvt Ltd, a company incorporated in India. In the language of India's Digital Personal Data Protection Act 2023, we are the Data Fiduciary for the information described below, which means we decide why and how it is handled and we are answerable for it.

Our registered office is at Cyber Towers, Hyderabad.

What this policy covers

This policy covers winklook.com, the pages you are reading now, and the trial request form on this site. That is currently the whole of it.

It does not cover the Winklook platform itself. The product is not generally available yet, and when it launches it will handle a different and far more sensitive category of information, including live video calls between a business and its shoppers. That will be governed by its own privacy notice and a data processing agreement with each business, published before anyone is onboarded. We would rather tell you that than stretch this document to cover something it does not.

What we collect

Three things, and only three.

1. What you type into the trial request form

If you ask for a free trial, we collect your email address, your company name, your mobile number with its country code, and the optional message you write in the last field. You choose to give us all of it. Nothing on this site asks for your data any other way, and there are no accounts to create.

2. Analytics, but only if you agree to it

We use Google Analytics to understand which pages help people decide and which ones lose them. It sets cookies on your device and records the pages you view, the site or search that sent you, an approximate location worked out from your IP address, and basic details about your browser and device.

None of this happens until you accept it. When you first arrive we ask, and analytics stays switched off unless you say yes. If you decline, or simply ignore the banner, no analytics cookies are set at all.

3. Server logs

Like every website, ours runs on servers that record requests as they arrive. Those records include your IP address, the page requested, and your browser's user agent string. They exist so the site can be kept running and secure, and we do not use them to build a picture of you.

What we do not collect

Worth stating plainly, because it is short and it is true:

• No accounts and no passwords. There is nothing to sign into on this site.
• No payment details. Nothing on this site takes money.
• No advertising cookies and no cross-site tracking. We do not run ad pixels and we do not build profiles for advertising.
• No sensitive personal data. We do not ask for it and you should not send it to us.

Why we collect it, and on what basis

Your trial request is used to reply to you, to understand what you are looking for, and to set up a trial if that is what you want. We may follow up by email, phone or WhatsApp on the number you gave us, because that is what asking for a trial invites. Tell us to stop at any point and we will.

Analytics is used to improve the site. Nothing more.

Under the DPDP Act, our basis for both is your consent, given when you submit the form or accept the cookie banner. If you are reading this in the EU or the UK, the equivalent framing is legitimate interest for answering an enquiry you sent us, and consent for analytics cookies.

We do not sell your personal data, and we never have. There is no version of this business where we do.

Who else sees it

Running a website means other companies handle parts of it. These are the ones that touch your data, named rather than hidden behind a phrase like trusted partners. Each one is a processor acting on our instructions, not a buyer.

• Web3Forms, which delivers the trial request form to our inbox. Everything you type into that form passes through them.
• Google Analytics, which receives the analytics described above, and only if you accepted it.
• Vercel, which hosts this site and serves every page you load.
• Our email provider, which holds the replies and the thread once a conversation starts.

We will also share information where the law requires it of us, which is a sentence every policy carries and which we hope never to rely on.

Where your data goes

All four of the companies listed above are based outside India and store data on servers outside India, mostly in the United States. Submitting the form or accepting analytics means your information is transferred there. Indian law permits this, and we would rather say it clearly than leave you to work it out from the company names.

How long we keep it

• Trial enquiries: for as long as the conversation is live, and for up to 24 months after it ends, so we can pick up a thread that goes quiet and comes back. After that we delete them.
• Analytics: retained by Google for 14 months, then deleted automatically.
• Server logs: a short rolling window kept by our host, measured in days rather than months.
• Your cookie choice: stored on your own device for 180 days, after which we ask again.

Ask us to delete your enquiry sooner and we will, without asking you why.

Cookies and your choice

The only cookies this site sets are Google Analytics cookies, and one small cookie of our own that remembers whether you said yes or no so we do not ask you on every page.

Nothing analytics-related is set before you accept. Decline and the site works exactly the same, because we do not use analytics to run the site, only to understand it.

To change your mind later, clear this site's cookies in your browser settings and the banner will ask you again on your next visit. You can also block cookies entirely in your browser, or install Google's opt-out add-on, and nothing here will break.

Your rights

Under the DPDP Act you can ask us to do any of the following, and you do not need a reason:

• Tell you what information about you we hold and who we have shared it with.
• Correct anything that is wrong, incomplete or out of date.
• Delete what we hold, unless a law requires us to keep it.
• Withdraw your consent, which stops us using your information from that point on.
• Nominate someone to exercise these rights on your behalf if you die or become incapable of doing it yourself.

If you are in the EU or the UK, the comparable rights under GDPR apply and we will honour them the same way, including the right to object and the right to receive a copy of your data in a portable form.

Write to us at Privacy@winklook.com and we will respond within 30 days.

If something goes wrong

If you are unhappy with how we have handled your information, tell us first and give us a chance to fix it. Write to us at Privacy@winklook.com and we will respond within 30 days.

If we do not resolve it to your satisfaction, you can escalate to the Data Protection Board of India. If you are in the EU or the UK, you can complain to your national supervisory authority.

Children

This site is aimed at businesses and the people who run them. It is not directed at anyone under 18, and we do not knowingly collect information about children. If you believe a child has sent us their details, tell us and we will delete it.

How we protect it

The site is served over HTTPS everywhere, so what you type into the form is encrypted in transit. Access to the inbox that receives enquiries is limited to the people who need it, and it is protected by two-factor authentication.

We are not going to tell you your data is perfectly safe, because nobody can honestly say that. What we can say is that we collect very little, we keep it for a stated period, and we do not pass it around.

Changes to this policy

When this changes we update the page and move the date at the top. If a change materially affects what you agreed to, we will ask you again rather than rely on you noticing a new date.