How we handle your personal data
- We collect only what you choose to give us: when you send the Snapshot form, book a call, or email us.
- Snapshot answers stay in your browser unless you press “Send me a read-out”.
- Website statistics are cookieless and do not identify you.
- We never sell your data. You can ask us to see or delete it at any time.
01Who is responsible
The controller of your personal data is Sophia Hernandez, Zagreb, Croatia, who is setting up Westbound Strategy. The company's registration is in progress. Once it is registered, the company will become the controller and this notice will be updated to show its legal name, address and OIB.
Contact for any privacy question or request: hello@westboundstrategy.com.
02What we collect, why, and on what legal basis
| When | What | Why | Legal basis (GDPR) |
|---|---|---|---|
| You visit the website | Technical data your browser sends (IP address, browser type, pages viewed, referring site). Statistics are aggregated and cookieless. | Deliver and secure the site; see which pages and posts bring visitors. | Legitimate interests, Art. 6(1)(f) |
| You take the US Readiness Snapshot | Nothing. Answers and scores are calculated and kept in your browser. | n/a | n/a |
| You send the Snapshot form | Name, company, email, optional sector and company size, your answers and scores, language, the link that brought you (for example a LinkedIn post), and the time you gave consent. | Send you a personal read-out and contact you about Westbound services. | Your consent, Art. 6(1)(a). You can withdraw it at any time. |
| You book a scoping call | Name, email, the time you choose, and your answers to the booking questions (company, sector, target US state, timeline). | Prepare for and hold the call you asked for, and follow up on it. | Steps taken at your request before a possible contract, Art. 6(1)(b) |
| You email us or message on LinkedIn | Your name, contact details and whatever you write. | Reply to you and keep a record of the conversation. | Legitimate interests, Art. 6(1)(f), or Art. 6(1)(b) where it concerns a possible engagement |
We do not make decisions about you by automated means. The Snapshot score is a self-check calculated in your browser and has no effect on whether or how we work with you.
03Who processes data on our behalf
We use a small number of service providers, each bound by data-processing terms:
- Cloudflare: website hosting, security, cookieless web analytics, and forwarding of email sent to our westboundstrategy.com addresses.
- Web3Forms: receives the Snapshot form and forwards it to our inbox by email.
- Calendly: scoping-call booking and calendar invitations.
- Google (Gmail): the mailbox where our email is received and stored.
- LinkedIn: only if you contact us there, under LinkedIn's own privacy policy.
Some of these providers are based in, or may process data in, the United States. Where data leaves the European Economic Area, we rely on the safeguards the provider offers, such as certification under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
04Cookies
We do not use advertising or tracking cookies, and we do not show a cookie banner because none is needed. Our analytics are cookieless. Cloudflare may set a strictly necessary security cookie to protect the site from automated abuse. Calendly sets its own cookies only when you open its booking page.
05How long we keep it
- Snapshot form submissions: up to 12 months, unless you become a client or ask us to delete them sooner.
- Scoping-call bookings and related emails: up to 24 months after our last contact, unless you become a client.
- Client records: for as long as Croatian accounting and tax law requires.
- Website statistics: aggregated only; no individual profile is kept.
06Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its use, receive it in a portable format, and withdraw consent at any time without affecting what happened before. Email hello@westboundstrategy.com and we will reply within one month.
You can also complain to the Croatian data protection authority, Agencija za zaštitu osobnih podataka (AZOP), at azop.hr.
07Changes
We will update this notice when something changes, including when the company is registered. The version and date at the top always show the current text.