Privacy Policy

1. Introduction

Upwind ("we," "us," or "our") operates as a GovCon growth agency providing intelligence, marketing, and business development services to government contractors. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website (upwindgrowth.com) and services.

By using our website or services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information you provide directly:

• Company name and contact information
• NAICS codes and set-aside status
• Business email addresses
• Information submitted through our contact and audit request forms

Information collected automatically:

• Log data (IP address, browser type, pages visited, time and date)
• Cookie data for session management
• Referral source information

Public data used in service delivery:

• SAM.gov registration and award data (public record)
• FPDS contract award data (public record)
• Publicly available business information

3. How We Use Your Information

We use the information we collect to:

• Deliver and improve our intelligence and growth services
• Prepare and deliver your Growth Audit
• Send service-related communications and updates
• Send marketing communications about Upwind services (you may opt out at any time)
• Analyze usage to improve our platform and services
• Comply with legal obligations

4. Marketing Communications (CAN-SPAM)

If you provide your email address, we may send you marketing communications about Upwind services. Every marketing email we send will include:

• A clear identification that the message is advertising
• Our physical mailing address
• An easy, functional opt-out mechanism

We will honor opt-out requests within 10 business days. We will not transfer your email address to third parties for their marketing purposes.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

• Service providers who assist in operating our platform (hosting, email, analytics)
• Law enforcement or legal processes when required by law
• Business successors in the event of a merger or acquisition

All service providers are contractually required to protect your data and use it only for the specific services they provide to us.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Objection: Object to processing of your data for marketing purposes
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, contact us at hello@upwindgrowth.com.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

8. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Audit request data is retained for 2 years. You may request deletion at any time.

9. Cookies

We use essential cookies for session management and analytics cookies to understand how our site is used. You can control cookies through your browser settings. Disabling cookies may affect site functionality.

10. Children's Privacy

Our services are not directed at individuals under 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page with an updated date. Continued use of our services after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or to exercise your rights: