WINK Streaming - Privacy Policy

Last Updated: November 9th, 2021

Overview

Your privacy is protected by responsible data practices.

Data plays an important role in making the products and services you use every day more helpful. We are committed to treating that data responsibly and protecting your privacy with strict protocols and innovative privacy technologies. At WINK Streaming, we prioritize the privacy and security of our users and their data. This Privacy Policy outlines our commitment to safeguarding user information and our adherence to internationally recognized compliance frameworks and standards, including GDPR, SOC2, and PCI DSS.

This Privacy Policy applies to all Onsite (Hardware or Virtual Machine), Cloud, and Virtual Services WINK Streaming provides. This includes all trade brands, DBA including, but not limited to; WINK CDN, WINK DNS, WINK.CO, WINK Live and related brands.

We are committed to safeguarding your privacy. Our products are designed to retain your information only for the duration it remains relevant and beneficial to you. Typically, our products do not rely on storing personal details. However, for operational purposes, we may record login times and IP addresses and use cookies sparingly for session management. We strive to minimize data logging and, where feasible, maintain logs for a maximum of 7 days.

1. Data Collection and Storage

1.1. Personal Data

Our commitment to privacy is evident in the minimalistic approach we take towards data collection. Specifically, we do not gather or retain any personal data from our users, with the sole exceptions being IP addresses and the limited use of cookies, which are essential for session management. Our services have been meticulously crafted to operate without the need for any personally identifiable information. This ensures that our users can benefit from our offerings without compromising their personal data.

1.2. Transactional Data

In the course of providing our services, there may be instances where transactional data is processed to fulfill specific tasks or functions. This could include data related to purchases, service requests, or other interactions that necessitate a transaction. It's crucial to understand that our approach to handling this data is rooted in a commitment to privacy and security. We do not store transactional data any longer than is absolutely necessary to complete the transaction and ensure its integrity. Once the transaction is finalized and all related processes are completed, the data is promptly purged from our systems.

1.3. Disk and Transit Encryption

We are deeply committed to the security and privacy of the data we handle. While we always strive to minimize the amount of data we store, it's crucial to understand that any information that does reside within our systems is protected with the utmost care and advanced security measures. All data stored on our servers is encrypted using AES-256 encryption, one of the most secure encryption methods available. This ensures that even in the unlikely event of a breach, the data remains inaccessible. As data travels between our servers and your devices, it is shielded with robust encryption protocols, specifically using TLS 1.2 or greater. This guarantees that any information you send or receive from our services remains confidential and secure during its entire journey.

1.4 Location Tracking

We prioritize your privacy and are committed to ensuring that your location remains confidential. Our systems and applications are designed without any mechanisms to track or record location data, whether it be through GPS, Wi-Fi-based location systems, or any other geolocation services. You can use our products with the assurance that your physical whereabouts will never be monitored or stored by us.

2. Data Protection Rights under GDPR

While we do not collect personal data, users have the right under the General Data Protection Regulation (GDPR) to:

  • Access the personal data we might hold about them.
  • Correct any inaccuracies in their personal data.
  • Request the deletion of their personal data.
  • Object to the processing of their personal data.
  • Request the restriction of processing of their personal data.

3. Compliance with Security Standards

We are unwavering in our commitment to upholding the highest security standards. By rigorously adhering to PCI DSS requirements and SOC2 standards, we ensure the utmost protection, availability, and integrity of transactional and user data. Our dedication signifies that we prioritize and implement the strictest security measures for the benefit of our users.

4. Storage Device Disposal

At the conclusion of a project or in instances of storage device malfunctions, we prioritize the utmost security in our disposal procedures. Every storage device under our purview undergoes a rigorous software wiping process to erase all data. Following this digital cleanse, the devices are then physically destroyed, ensuring an added layer of protection. This meticulous process guarantees that no remnants of data, regardless of whether they were encrypted, remain accessible or recoverable.

5. Data Breach

In the unfortunate event of a security breach, our primary concern is to minimize its impact and protect our users. We pledge to act swiftly and decisively to address the issue. All customers and affected parties will be notified immediately once we have gathered the preliminary information. Our commitment to transparency means we will not delay in informing those affected. As our investigation progresses, we will provide continuous updates to ensure that all stakeholders are informed of the situation and the measures we are taking to resolve it. Your trust is paramount to us, and we are dedicated to maintaining it even in challenging circumstances.

6. Changes to This Privacy Policy

From time to time, we may find it necessary to update our Privacy Policy. Whenever such changes are made, we will not only post the revised Privacy Policy on our website but will also make every effort to contact our users directly. This may include sending notifications through email or other communication methods we have on file for our users. It's our commitment to ensure that our users are always informed about how we protect their privacy

---
We hope this Privacy Policy provides a clear and concise overview of WINK Streaming's commitment to data privacy and security. It's essential to consult with legal counsel to ensure that this policy meets all regulatory requirements specific to your operations and jurisdiction. If there are any additional questions or concerns, please contact your WINK Streaming representative.