1. Data Controller

New Window
Email: hello@newwindow.io

For any questions about this Privacy Policy or our data practices, please contact us at the email address above.

2. What Information We Collect

2.1 Information You Provide Directly

When you contact us, request a demo, download resources, or use our services, we may collect:

• Contact Information: Name, work email address, phone number
• Professional Information: Company name, job title/role, industry
• Business Information: Monthly invoice/estimate volume, current workflow details
• Communication Content: Messages, questions, or feedback you provide

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• Device & Browser Data: IP address, browser type, operating system
• Usage Data: Pages visited, time spent, referring URLs, clickstream data
• Cookies & Tracking: As detailed in Section 7 below

3. How We Use Your Information

3.1 Legal Bases for Processing (GDPR)

We process your personal data under the following legal bases:

• Consent: When you submit forms or opt in to marketing communications
• Legitimate Interests: For business development, website improvement, and security
• Contract Performance: To provide services you've requested
• Legal Obligations: To comply with applicable laws and regulations

3.2 Purposes of Processing

We use your information to:

• Respond to inquiries and provide customer support
• Schedule demos and scoping calls
• Send requested resources (ROI calculators, case studies)
• Provide and improve our AI automation services
• Send relevant marketing communications (with your consent)
• Analyze website usage and improve user experience
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal data. We may share your information with:

4.1 Service Providers

Third-party vendors who help us operate our business:

• Form Processing: Formspree (contact form submissions)
• Scheduling: Calendly (demo and call scheduling)
• Analytics: Google Analytics 4 (website analytics)
• Marketing: LinkedIn Insight Tag, Meta Pixel (conversion tracking)

These providers process data on our behalf under strict data processing agreements.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or to protect our legal rights.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

5. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States.

We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Service providers certified under the EU-U.S. Data Privacy Framework
• Other approved transfer mechanisms under GDPR

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Prospect Data: Until you request deletion or opt out of communications
• Customer Data: For the duration of our relationship plus legal retention periods
• Website Analytics: Aggregated data retained for up to 26 months (GA4 default)
• Legal Compliance: As required by applicable laws (typically 6-7 years)

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device that help us improve your experience and understand how you use our site.

7.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality (cannot be disabled)
• Analytics Cookies: Google Analytics 4 - tracks usage patterns
• Marketing Cookies: LinkedIn Insight Tag, Meta Pixel - tracks conversions
• Functional Cookies: Calendly - enables scheduling functionality

7.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may limit website functionality.

8. Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights:

To exercise any of these rights, contact us at: hello@newwindow.io

We will respond within 30 days of receiving your request.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit (SSL/TLS)
• Secure data storage with access controls
• Regular security assessments and updates
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Marketing Communications

We may send you marketing emails about our services if:

• You have provided consent, or
• You are an existing customer and the communications relate to similar services (soft opt-in)

You can opt out at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at hello@newwindow.io

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to registered users

Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

13. Supervisory Authority

If you are located in the EEA or UK and have concerns about our data processing practices, you have the right to lodge a complaint with your local supervisory authority:

• EU: Find your data protection authority
• UK: Information Commissioner's Office (ICO)