Privacy Policy

1. Introduction & Scope

Winkie — Operational Systems Engineering ("Winkie," "we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our services, including but not limited to:

• Google Business Profile management and optimization services;
• Website design, development, and maintenance services;
• Custom software construction and development services;
• Our website located at winkie.ca and all related subdomains.

By engaging our services or accessing our website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Personal Information You Provide

We may collect the following personal information when you interact with us:

• Full name, business name, and job title;
• Email address, phone number, and mailing address;
• Billing and payment information (processed through secure third-party payment processors);
• Google Business Profile credentials and access tokens (with your explicit consent);
• Website content, brand assets, and project specifications you provide;
• Any other information you voluntarily submit through forms, emails, or communications.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address, browser type, and operating system;
• Device identifiers and screen resolution;
• Pages visited, time spent, and referring URLs;
• Cookies and similar tracking technologies (see Section 8).

2.3 Information from Third Parties

We may receive information from third-party platforms such as Google (including Google Business Profile data, Google Analytics data, and Google Ads data) when you authorize us to access your accounts for service delivery purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To deliver, manage, and improve our services;
• To manage and optimize your Google Business Profile on your behalf;
• To design, develop, and maintain websites and software applications;
• To communicate with you regarding projects, invoices, and service updates;
• To process payments and maintain financial records;
• To comply with legal obligations and enforce our agreements;
• To analyze website usage and improve user experience;
• To send marketing communications (only with your prior consent, and you may opt out at any time).

4. Google Business Profile Services

When you engage Winkie for Google Business Profile management, you may grant us access to your Google account. We want you to understand the following:

• We access your Google Business Profile solely for the purpose of managing, optimizing, and reporting on your business listing;
• We do not store your Google account password. Access is granted through OAuth 2.0 authorization tokens;
• You may revoke our access at any time through your Google Account settings;
• We may collect and analyze performance metrics (views, clicks, calls, direction requests) to provide you with reports and recommendations;
• All data obtained from your Google Business Profile is treated as confidential and is not shared with third parties without your consent.

5. Website & Software Development Services

When you engage Winkie for website or software development, the following applies:

• We may receive proprietary business information, brand guidelines, content, and intellectual property necessary for project delivery;
• Client project data is stored securely and accessed only by authorized team members;
• Source code and project files are maintained in secure version-controlled repositories;
• Upon project completion and final payment, all deliverables and intellectual property rights are transferred to you as outlined in your service agreement;
• We may retain anonymized project data for internal portfolio or case study purposes only with your prior written consent.

6. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist us in delivering our services (e.g., hosting providers, payment processors, email services), subject to confidentiality agreements;
• Legal Requirements: When required by law, subpoena, court order, or government regulation;
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets;
• Protection of Rights: To protect the rights, safety, or property of Winkie, our clients, or the public.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Active client data is retained for the duration of our business relationship;
• Project files and deliverables are retained for 12 months following project completion;
• Financial and billing records are retained for 7 years as required by U.S. tax law;
• Marketing consent records are retained for 3 years after last interaction;
• You may request deletion of your data at any time by contacting us (subject to legal retention requirements).

8. Cookies & Tracking Technologies

Our website may use cookies and similar technologies to:

• Remember your preferences and improve your browsing experience;
• Analyze website traffic and usage patterns;
• Deliver relevant content and measure advertising effectiveness.

You can control cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website.

9. Your Rights — California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you;
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions;
• Right to Opt-Out: You have the right to opt out of the "sale" of your personal information. Winkie does not sell personal information;
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your rights, please contact us at admin@winkie.ca. We will respond to verifiable requests within 45 days.

10. Children's Privacy (COPPA)

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take immediate steps to delete it. If you believe a child under 13 has provided us with personal information, please contact us immediately.

11. Security Measures

We implement industry-standard technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest;
• Secure access controls and authentication mechanisms;
• Regular security assessments and vulnerability testing;
• Employee training on data protection best practices;
• Incident response procedures for potential data breaches.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

12. Third-Party Links & Services

Our website and services may contain links to third-party websites or integrate with third-party platforms (such as Google, hosting providers, and analytics services). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify you via email or a prominent notice on our website. Your continued use of our services after any modifications constitutes your acceptance of the updated Privacy Policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: