Windrush AI ("Windrush AI," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website at windrushai.com (the "Website") or engage our services (the "Services").
We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA") and other applicable privacy laws. By using the Website or our Services, you consent to the practices described in this Policy.
In this Policy, "Windrush AI" refers to [INSERT LEGAL BUSINESS NAME], operating as Windrush AI, a business based in Windsor-Essex, Ontario, Canada.
1. Our Two Roles
Windrush AI handles personal information in two distinct ways:
As a business (data controller): When you visit our Website, request a consultation, or become our client, we collect and use your personal information for our own business purposes. This Policy governs that information.
As a service provider (data processor): When we deliver Services to a client, we process contact and customer data that the client provides to us ("Client Data") on that client's behalf and under their instructions. In that role, the client is responsible for how that data was collected and for obtaining the necessary consents. Individuals whose information appears in Client Data should generally direct privacy requests to the business that collected it, though we will assist that business in responding.
2. Information We Collect
Information you provide directly. When you contact us, request a consultation, or engage our Services, we may collect your name, business name, email address, phone number, and any information you choose to share with us.
Client Data. When you engage us as a client, you may provide customer lists, lead databases, and contact details for the purpose of running campaigns. This may include names, phone numbers, email addresses, and prior interaction history of your customers or leads.
Information collected automatically. When you visit the Website, we may automatically collect certain technical information such as your IP address, browser type, device information, pages viewed, and referring pages, through cookies and similar technologies.
3. How We Use Information
We use personal information to:
a. Respond to inquiries and provide consultations;
b. Deliver, manage, and improve our Services;
c. Operate SMS and marketing campaigns on behalf of our clients using Client Data;
d. Communicate with you about your account, campaigns, or requests;
e. Process payments and maintain business records;
f. Operate, secure, and improve our Website; and
g. Comply with our legal obligations.
We do not sell your personal information.
4. Consent
We collect, use, and disclose personal information with your consent, except where otherwise permitted or required by law. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us using the details below. Withdrawing consent may affect our ability to provide the Services to you.
For Client Data used in messaging campaigns, our clients are responsible for obtaining and maintaining valid consent from the individuals in their databases, as described in our Terms and Conditions.
5. SMS Messaging and Anti-Spam Compliance
Our Services involve sending SMS and other electronic messages on behalf of our clients. These activities are conducted in a manner intended to comply with Canada's Anti-Spam Legislation ("CASL").
All campaign messages are intended to include sender identification and a functioning opt-out mechanism. If you receive a message and wish to stop receiving them, you may reply with the opt-out keyword provided (such as STOP) or contact the sending business directly. Opt-out requests are honoured promptly.
6. How We Share Information
We may share personal information with:
Service providers and platforms. We use third-party platforms and tools to deliver the Services, including customer relationship management, automation, and SMS/telephony providers (for example, GoHighLevel and messaging carriers). These providers process information on our behalf or on our clients' behalf in order to deliver the Services.
Our clients. Where we process Client Data, the results and related information are shared with the client for whom the campaign is run.
Legal and safety reasons. We may disclose information where required by law, to enforce our agreements, or to protect the rights, safety, or property of Windrush AI or others.
Business transfers. If our business is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction.
7. Cross-Border Data Transfers
Some of the third-party platforms we use to deliver the Services, including GoHighLevel and messaging providers, may store or process personal information on servers located outside of Canada, including in the United States. As a result, personal information may be subject to the laws of those jurisdictions, including lawful access requests by courts, law enforcement, and government authorities in those countries. By using the Website or our Services, you acknowledge this transfer and processing.
8. Data Security
We maintain reasonable physical, technical, and organizational safeguards designed to protect personal information against loss, theft, and unauthorized access, use, or disclosure, appropriate to the sensitivity of the information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Data Retention
We retain personal information only as long as necessary to fulfil the purposes described in this Policy, to deliver the Services, and to meet our legal, accounting, and reporting obligations. When personal information is no longer required, we take reasonable steps to securely delete or anonymize it. Client Data is retained and disposed of in accordance with our agreement with the relevant client.
10. Your Privacy Rights
Subject to applicable law, you have the right to:
a. Access the personal information we hold about you;
b. Request correction of inaccurate or incomplete information;
c. Withdraw your consent to our use of your information; and
d. Ask questions or make a complaint about how we handle your information.
To exercise these rights, contact us using the details in Section 14. We may need to verify your identity before responding. If your request relates to Client Data processed on behalf of one of our clients, we will direct you to, or coordinate with, the responsible business.
11. Cookies and Analytics
Our Website may use cookies and similar technologies to operate the site, remember preferences, and understand how visitors use the Website. You can usually adjust your browser settings to refuse cookies, though some features of the Website may not function properly as a result. We may use analytics tools to help us understand Website traffic and usage.
12. Third-Party Links
The Website may contain links to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
13. Children's Privacy
Our Website and Services are intended for businesses and adults. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can delete it.
14. Contact Us and Privacy Officer
We have designated an individual responsible for our compliance with this Policy and applicable privacy law. If you have questions, requests, or complaints about your personal information or this Policy, please contact: