whistworks Renewals. Deal Support. Operating Discipline.

Privacy Policy

Last updated: [30-APR-2026]

Whistworks respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information submitted through this website.

1. Who we are

This website is operated by Whistworks.

For privacy-related questions, you can contact us at hello@whistworks.com.

2. What personal data we collect

We may collect personal data that you voluntarily submit through our website forms, including:

  • name
  • email address
  • company name
  • job title or role, if provided
  • message content
  • information about your business needs or request
  • any other information you choose to submit

We may also collect limited technical information when you visit the website, such as browser type, device information, approximate location based on IP address, pages visited, and similar usage information, depending on the hosting, security, or analytics tools used.

3. How we use your personal data

We use your personal data to:

  • respond to your inquiry
  • assess whether Whistworks can support your business needs
  • communicate with you about our advisory services
  • prepare proposals or follow-up materials, if requested
  • manage business records and correspondence
  • maintain the security and functionality of the website
  • comply with applicable legal obligations

We do not sell your personal data.

4. Legal basis for processing

Where the General Data Protection Regulation applies, we process your personal data based on one or more of the following legal bases:

  • legitimate interests, including responding to business inquiries, operating the website, and developing business relationships
  • steps prior to entering into a contract, where you contact us about potential services
  • legal obligations, where we are required to keep certain business, tax, or accounting records
  • consent, where you have specifically given consent, for example for optional marketing communications

5. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

If you submit an inquiry but no business relationship is established, we generally retain the information for up to 24 months from the last meaningful interaction, unless a longer period is required for legal, accounting, tax, or dispute-resolution purposes.

If a business relationship is established, relevant records may be retained for longer as required by applicable law.

6. Who we share personal data with

We may share personal data with trusted service providers that help us operate the website and communicate with you, such as:

  • website hosting providers
  • domain and email providers
  • form submission or automation tools
  • analytics or security providers, if used
  • accounting, legal, or professional advisers, where necessary

These providers may process personal data only as needed to provide their services or as required by law.

We may also disclose personal data if required to do so by law, regulation, court order, or a competent public authority.

7. International transfers

Some of our service providers may process personal data outside the European Economic Area.

Where this happens, we rely on appropriate safeguards required by applicable data protection law, such as standard contractual clauses or other lawful transfer mechanisms.

8. Cookies and analytics

This website may use essential cookies or similar technologies required for basic website functionality, security, or form operation.

If we use analytics or tracking tools, this Privacy Policy will be updated to describe those tools and how you can manage your preferences.

At this stage, Whistworks does not use advertising tracking or sell personal data.

9. Your rights

Depending on applicable law, you may have the right to:

  • request access to your personal data
  • request correction of inaccurate or incomplete data
  • request deletion of your personal data
  • object to processing based on legitimate interests
  • request restriction of processing
  • request data portability
  • withdraw consent where processing is based on consent

To exercise your rights, contact us at hello@whistworks.com.

You also have the right to lodge a complaint with your local data protection authority. In Romania, this is the National Supervisory Authority for Personal Data Processing.

10. Data security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no website, email, or online transmission method can be guaranteed to be completely secure.

11. Third-party links

This website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of third-party websites.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date.