Your Privacy Rights with Winn Winn: CCPA and GDPR
At Winn Winn, we are committed to protecting your privacy and respecting your rights under applicable data protection laws, including the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR).
We process personal data responsibly and transparently. In many cases, we work with limited or pseudonymised data; however, certain personal information may be collected where necessary for recruitment, research, or analytical purposes to ensure appropriate participant selection and research quality.
Your Privacy Choices and Rights
Under the CCPA, the term “sell” may include certain types of data sharing beyond monetary exchanges. Winn Winn does not sell personal information for monetary or commercial gain. You have the right to request that your personal information is not disclosed to third parties, subject to applicable legal and contractual requirements.
Under the GDPR and CCPA, you have the following rights in relation to your personal data:
- Right of Access – to request confirmation of whether personal data is processed and to receive a copy of that data
- Right to Rectification – to request correction of inaccurate or incomplete personal data
- Right to Deletion – to request deletion of personal data, subject to legal or contractual obligations
- Right to Restriction of Processing – to request limitation of how your data is processed in certain circumstances
- Right to Object – to object to processing where applicable
- Right to Data Portability – to request personal data in a structured and commonly used format, where applicable
- Right to Opt Out – of certain disclosures or processing activities
To exercise any of these rights, please contact us using the details below.
How to Submit Your Request
To protect your privacy and ensure that requests are handled accurately and securely, we may need to verify your identity before processing your request.
When contacting us, please provide:
- Your full name
- Your preferred contact email
- Your phone number
- The specific nature of your request, such as access, correction, deletion, or opt-out
This information is used solely for verification purposes and is securely deleted once the request has been completed.
How We Handle and Protect Your Information
Personal data is:
- Collected only for legitimate recruitment and research-related purposes
- Stored securely and accessed only by authorised personnel
- Protected through appropriate technical and organisational measures
- Shared with third parties only where necessary and under confidentiality and data protection obligations
We take reasonable steps to protect personal data against unauthorised access, loss, misuse, or disclosure and regularly review our data protection practices.
Data Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including contractual, legal, or regulatory requirements. Once the applicable retention period expires, personal data is securely deleted or anonymised in accordance with our internal data retention policies.
International Data Access
Where operationally required, personal data may be accessed or processed outside the originating territory. Such access is governed by contractual data protection obligations and supported by appropriate technical and organisational safeguards to ensure an adequate level of protection.
Contact Us
If you have any questions about this policy or wish to exercise your data protection rights, please contact us at:
We are committed to ensuring that your privacy choices are respected and that your personal data is handled in accordance with applicable data protection laws.