Privacy Policy
Who we are
Winterleaf Investments LLC ("we", "us") operates winterleafinvest.net. This policy explains what personal information the site collects, why, and what control you have over it. The site is built and maintained for us by Mammoth Dev, who act as our service provider and handle privacy requests at the address below.
Information we collect
Information you give us. When you use our contact, investor enquiry, and event registration forms or email us, we collect the details you submit — typically your name, email address, phone number, and whatever you tell us in the message.
Information collected automatically. When you visit the site we collect your IP address, browser and device type, the pages you view, and the site that referred you. This comes from standard server logs, our hosting provider, and analytics.
We do not ask for financial account numbers, government identifiers, or health information through this website. Please do not send them to us by web form or unencrypted email.
How we use it
- To answer your enquiry and provide the information or service you asked for
- To operate, secure, and improve the site
- To send you information you requested, and — where permitted — occasional updates you can opt out of at any time
- To meet our legal, tax, and regulatory obligations, and to establish or defend legal claims
Legal bases (UK/EU visitors)
Where the UK or EU GDPR applies we rely on: your consent (for marketing email and non-essential cookies), performance of a contract or steps taken at your request (responding to your enquiry), legitimate interests (running and securing the site), and legal obligation (record keeping).
Sharing
We do not sell personal information and we do not share it for cross-context behavioural advertising. We disclose it only to:
- Service providers who host, secure, or support this site and our communications, under contract and only for those purposes
- Professional advisers under a duty of confidentiality
- Licensed carriers, providers, or institutions where you have asked us to arrange or quote something on your behalf
- Authorities where we are legally required to, or to protect our rights and the safety of others
Cookies
We use strictly necessary cookies to make the site work, and analytics cookies to understand which pages are useful. You can block or delete cookies in your browser settings; strictly necessary cookies cannot be turned off without breaking parts of the site.
Retention
We keep enquiry records for up to 24 months from our last contact with you, and longer only where tax, accounting, or regulatory rules require it. You can ask us to delete your information sooner.
Security
The site is served over encrypted connections and submitted information is stored with access controls in place. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant regulator where the law requires it.
Your rights
Depending on where you live you may have the right to access, correct, delete, or port your personal information, to object to or restrict processing, to withdraw consent, and to not be treated differently for exercising these rights.
California residents (CCPA/CPRA) may request the categories and specific pieces of personal information collected, request deletion or correction, and opt out of sale or sharing. We do not sell or share personal information.
To exercise any right, email richard@mammoth-dev.com. We will verify your identity before acting. UK and EU visitors may also complain to their local supervisory authority.
International transfers
Our providers may process data in the United States and elsewhere. Where data is transferred out of the UK or EEA we rely on appropriate safeguards such as the Standard Contractual Clauses.
Children
This site is intended for adults and is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.
Changes
We may update this policy. The effective date above will change, and material changes will be posted on this page before they take effect.
Questions about this policy?
Email richard@mammoth-dev.com. We respond within 30 days, or sooner where the law requires it.