# Privacy Notice

_Effective 2026-10-17_

_Updated 2026-10-17_

We collect company profiles and business contact details, not underlying business datasets. Completing an assessment does not automatically share your profile with prospective buyers.

## Overview

**Zaza Ventures, LLC doing business as DATAWIN** (“DATAWIN,” “we,” “us,” or “our”) operates [datawin.si](https://datawin.si). We are located in Phoenix, Arizona, United States. Contact us at [hi@datawin.si](mailto:hi@datawin.si).

This notice explains how we handle information through our website, company assessment, related communications, and permission-based introductions.

**We collect company profile information and business contact details to review potential data-licensing opportunities. We do not collect or process underlying business datasets through the current service. Completing an assessment does not automatically share your profile with prospective buyers.**

## 1. Scope and responsibility

This notice applies to website visitors, people completing an assessment, business representatives communicating with us, and representatives of referring organizations.

Zaza Ventures, LLC is responsible for the information-handling activities described here. Where applicable privacy law uses the term “controller,” we act as controller for these activities.

A company profile may contain personal information, such as the name and email address of a representative or information about a sole proprietor. Business-related information is not automatically outside privacy protections.

This notice does not govern a prospective buyer’s independent activities after an authorized introduction, a referring organization’s own website, or any future dataset-processing service. Those activities require their own applicable disclosures and arrangements.

## 2. Information we collect and its sources

| Category | Examples | Source |
| --- | --- | --- |
| Business contact information | Name, role, business email, and optional phone number | You or an authorized representative communicating with us |
| Company profile | Company name, website, location, industry, operating status, team size, and operating history | Your assessment and follow-up communications |
| Description of available records | Systems used, categories of material, approximate volume, retained history, language, exportability, ownership descriptions, restrictions, and readiness | Your assessment and follow-up communications; not the records themselves |
| Communications | Questions, corrections, responses, and correspondence about potential introductions | Your interactions with us |
| Permission and administration records | Terms version accepted, introduction permissions, marketing choices, request history, and relevant timestamps | Your choices and service records |
| Referral context | Referring organization, referral identifier, and permitted campaign parameters | The link or co-branded page through which you arrive |
| Technical and usage information | IP address, browser and device information, timestamps, requested pages, errors, security events, and assessment-step events | Your browser and the systems providing the website |
| Review information | Notes about potential fit, criteria considered, missing information, and review status | Our review of your profile and relevant business information |

We may consult publicly available company websites or professional business information to clarify a submission and consult buyer program information to evaluate potential fit. We do not obtain your underlying records from those sources.

Our assessment analytics are designed to exclude form answers and contact details from event payloads. Technical logs may nevertheless contain information such as an IP address; pseudonymous information is not necessarily anonymous.

## 3. Information you should not provide

Do not submit underlying datasets, customer or employee records, source-code archives, medical information, government identifiers, passwords, API keys, payment-card details, bank details, privileged communications, or other sensitive records.

Our questions ask about categories and characteristics of records, not their contents. Provide aggregate company information rather than names or details about individual employees or customers.

If you accidentally send sensitive information, contact [hi@datawin.si](mailto:hi@datawin.si) without repeating it. We will evaluate appropriate steps, such as restricting access and deleting the material, subject to legal obligations. An accidental submission does not authorize us to use that material for data licensing or AI training.

## 4. Why we use information

We use information as reasonably necessary to:

- Receive and administer assessments.
- Understand the company’s profile and compare it with potential buyer requirements.
- Review possible fit, identify missing information, and communicate with you.
- Request and record permission for a specifically identified introduction.
- Carry out an introduction you authorize.
- Operate, maintain, troubleshoot, and protect the website.
- Understand aggregate service usage and improve assessment usability.
- Attribute referrals and produce privacy-protective aggregate partner reporting.
- Maintain records of permissions and handle privacy requests.
- Prevent fraud, enforce applicable terms, resolve disputes, and meet legal obligations.
- Send optional promotional emails when you separately opt in.

We do not use assessment submissions to train general-purpose AI models or license them as AI training datasets. Acceptance of our Terms does not grant permission for such uses.

We do not use the assessment to determine eligibility for employment, credit, housing, insurance, or other similarly consequential services.

## 5. Review and matching

We use company-profile information to identify possible matches against available criteria. Software may assist with organizing, filtering, or ranking profiles, and our team reviews potential fit.

A preliminary match is not a buyer’s qualification decision or a guarantee of an opportunity. You may ask us to correct information, explain the main factors considered in our review, or reconsider a profile using updated information.

We do not make solely automated decisions producing legal or similarly significant effects through this qualification service.

## 6. When we disclose information

### Service providers

We disclose information to providers supporting hosting, storage, website operation, security, communications, and service administration as needed for their functions. We require appropriate confidentiality and information-protection obligations and limit their authorized use to providing services to us, subject to applicable law.

### Prospective buyers and intermediaries

We do not automatically distribute identifiable profiles to a buyer list.

Before an introduction, we identify the proposed recipient, explain what information would be shared and why, and request your specific permission. The proposed disclosure may include contact details, relevant company-profile answers, and a limited assessment summary.

You can decline. You can also withdraw permission for a disclosure not yet made by emailing us. Withdrawal does not undo a completed disclosure or invalidate earlier lawful handling.

An authorized recipient may act independently under its own privacy notice. We will identify the recipient so you can review its practices. We assist with requests concerning our disclosures as required by applicable law.

### Referring organizations

Chambers, associations, and other referring organizations receive aggregate reporting, not individual assessment answers or contact details, through this service. We limit or combine reporting where small counts could reveal an identifiable participant’s activity.

### Legal, safety, and professional purposes

We may disclose information to legal or other professional advisers, authorities, or other appropriate recipients when reasonably necessary to comply with law or lawful process, protect rights or safety, investigate suspected misconduct, or establish or defend legal claims.

### Business transactions

Information may be reviewed or transferred in a merger, acquisition, financing, reorganization, bankruptcy, or sale of business assets, subject to appropriate confidentiality protections and applicable law. We will provide notice of material changes in responsibility or practices where required. Such a transaction does not itself authorize materially incompatible uses.

### Your direction

We may make other disclosures that you specifically request or authorize, subject to applicable law.

## 7. Compensation, advertising, and privacy choices

DATAWIN may receive compensation for an authorized introduction or a later transaction and may pay a referring organization under a separate arrangement. We disclose relevant compensation arrangements before requesting introduction permission.

We do not offer your assessment or contact details as a general-purpose mailing list. We do not use advertising pixels or disclose personal information for cross-context behavioral advertising through the current service.

Some privacy laws define a “sale” broadly enough to include disclosures made for monetary or other valuable consideration. Whether a compensated introduction falls within that definition, or an exception for an interaction you specifically direct, depends on the circumstances and applicable law.

You may ask us not to make compensated disclosures of your personal information by contacting [hi@datawin.si](mailto:hi@datawin.si) with “Privacy opt-out” in the subject line. We will apply applicable opt-out rights and will not treat accepting the Terms, completing an assessment, or opting into email as authorization to override an applicable opt-out.

We recognize legally required opt-out preference signals, such as Global Privacy Control, for processing subject to those signals. Such signals are not a general request to delete an assessment. If we cannot associate a browser signal with an existing submission, contact us to apply your choice to that submission.

## 8. Cookies, browser storage, and tracking

We use functional technologies needed to operate the assessment and referral process.

Draft assessment answers are held in memory during the assessment rather than intentionally saved in browser local storage. This does not mean that a submitted assessment is not stored on our servers.

A functional referral cookie may retain a signed referral reference for up to 30 days. It is not intended to contain assessment answers or contact details. A referral identifier may still be associated with an identifiable submission and is not treated as inherently anonymous.

We use limited assessment-step and technical events to understand operation and resolve errors. We do not intentionally include assessment answers or contact details in those event payloads.

We do not enable third parties to track visitors across unrelated websites for advertising through the current service. Providers may receive technical information needed to deliver their services.

Browser settings can block or delete cookies, although some referral or site features may be affected. Where consent is legally required for nonessential technologies, we obtain it before using them.

Our site does not change its behavior in response to legacy “Do Not Track” browser signals. This is distinct from Global Privacy Control and other legally recognized opt-out signals described above.

## 9. How long we retain information

We retain information only for as long as reasonably necessary for the stated purposes, subject to applicable law.

- **Submitted profiles:** ordinarily up to 365 days after submission. We may retain a profile longer when needed for an active discussion you are participating in, an outstanding request, a dispute, or a legal obligation. This is not permission for indefinite retention of inactive profiles.
- **Unsubmitted answers:** handled in memory as described above, rather than retained as a submitted profile.
- **Referral cookie:** up to 30 days.
- **Communications, consent records, and introduction records:** for the period reasonably needed to administer the relationship, document permissions, resolve disputes, and meet applicable obligations.
- **Security and technical records:** according to their operational purpose, security needs, and applicable obligations, with retention limited accordingly.
- **Marketing preferences and suppression records:** as needed to administer your choices and prevent unwanted future messages.
- **Backups:** removed through the applicable backup lifecycle; deleted information is not restored for ordinary use. If a backup must be restored, applicable deletion restrictions are reapplied.

We may retain limited information where deletion is not required or is prohibited by law. Where appropriate, we instead de-identify information and maintain protections against re-identification.

You may request deletion before these periods expire. We explain applicable exceptions when responding.

## 10. Security

We use administrative, technical, and organizational measures reasonably designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. Access is limited according to business responsibilities.

No website, email channel, or storage system can be guaranteed completely secure. Avoid sending sensitive records or credentials. Our security statement is not a claim of a particular certification or a guarantee against every incident.

## 11. Your choices and requests

You may contact [hi@datawin.si](mailto:hi@datawin.si) to:

- Ask what personal information we hold about you.
- Request access or a copy, and portability where applicable.
- Correct inaccurate information.
- Request deletion or closure of your assessment.
- Decline an introduction or withdraw permission for a future disclosure.
- Opt out of promotional email or compensated disclosures.
- Object to or request restriction of processing where applicable.
- Withdraw consent for an activity that relies on consent.

Some rights depend on your location, the law’s applicability, and lawful exceptions. Withdrawing consent does not affect the lawfulness of prior processing.

We will verify requests using information proportionate to the risk, ordinarily starting with the business email associated with the submission. Do not send government identification unless we specifically explain why it is necessary and provide an appropriate method. Authorized agents may submit requests with suitable proof of authority.

We respond within applicable legal deadlines and explain any lawful extension or denial. If a law provides an appeal right, you may appeal by replying to our response or emailing “Privacy appeal.” You may also contact your applicable regulator. We do not unlawfully discriminate against individuals who exercise privacy rights.

If a request concerns company information as well as personal information, we may verify authority to act for the company. We will not disclose another person’s protected information merely because someone requests the company’s profile.

## 12. Email and contact preferences

We use your contact details to respond to your request and administer your assessment. Optional promotional emails are sent only when you separately opt in. Unsubscribe through the email’s instructions or contact us directly.

An unsubscribe request does not necessarily stop a requested assessment response, a privacy-request response, or a legally necessary notice. We distinguish these from promotional messages.

Providing a phone number does not enroll you in an automated marketing call or text-message program.

## 13. Additional information for U.S. residents

Depending on applicable state law and whether its requirements apply to DATAWIN, you may have rights to access, correct, delete, obtain a portable copy, and opt out of certain sales, targeted advertising, or qualifying automated profiling. Some laws also provide an appeal right and rights concerning sensitive information.

The collection table above describes the current categories and sources. Sections 4–9 explain purposes, recipient categories, compensated introductions, and retention.

For California residents where the CCPA applies, these categories may include identifiers, professional or employment-related information, internet or network activity, and inferences concerning potential business fit. We do not intentionally collect sensitive personal information through the assessment, use information for cross-context behavioral advertising, or knowingly sell or share personal information of minors under 16.

The compensated-introduction disclosure in Section 7 applies to identifiers, relevant professional/company-profile information, and assessment summaries shared with a specifically named prospective buyer or intermediary. We do not provide those recipients with technical logs for an introduction.

If you wish to prevent that disclosure, use the opt-out process in Section 7. We apply legally required opt-out preference signals and do not treat silence as consent.

This notice describes the current service; it does not represent that every state privacy statute applies to DATAWIN or that company information unrelated to an individual is personal information under every law.

## 14. International visitors

DATAWIN is based in the United States. Information may be handled in the United States and in locations where our approved service providers operate. Privacy laws in those locations may differ from those where you live.

Where the GDPR, UK GDPR, or another law requiring a lawful basis applies, we process information on the appropriate basis for the activity: responding to an individual’s requested pre-contractual steps or performing a contract where applicable; legitimate interests in administering business inquiries, operating and securing the service, and managing relationships; compliance with legal obligations; or consent where required.

For representatives of corporate customers, business administration will ordinarily rely on an appropriate legitimate interest rather than assuming the individual is personally a party to the company’s contract.

We use consent for optional marketing and request specific permission for introductions as described above. We assess whether that permission also constitutes the applicable legal basis for a particular disclosure.

Where required for an international transfer, we use an applicable lawful transfer mechanism, such as approved contractual safeguards, and required supplementary measures. Visiting the site or accepting the Terms is not relied on as blanket consent to international transfers.

You may contact us about applicable safeguards, object to processing based on legitimate interests, or complain to the competent data protection authority. If a local representative or other jurisdiction-specific disclosure becomes legally required, we will provide it before undertaking the activity that triggers it.

## 15. Children

The Services are intended for adults acting in a business capacity and are not directed to children. We do not knowingly collect personal information from anyone under 18 through the assessment. If you believe a child has provided information, contact us so we can investigate and take appropriate steps.

## 16. Third-party services

Our site may link to buyers, associations, and other services. Their information practices are governed by their own notices. Following a link does not authorize DATAWIN to share your assessment.

If you authorize an introduction, review the identified recipient’s notice before separately supplying additional information or records.

## 17. Changes to this notice

We may update this notice as the service or requirements change. We will update the effective date and provide prominent or direct notice of material changes where appropriate or required.

We will obtain additional permission where required before materially changing how previously collected information is used or disclosed. A future dataset-ingestion or preparation service will not be authorized merely by updating this notice.

## 18. Contact

**Zaza Ventures, LLC dba DATAWIN** Phoenix, Arizona, United States Email: [hi@datawin.si](mailto:hi@datawin.si) Website: [datawin.si](https://datawin.si)

For privacy questions or requests, use the subject line “DATAWIN Privacy.”

## Related

- [Terms of Use](/terms)