PRIVACY POLICY

Last Updated: May 2026

1. Overview of Data Protection

This website is operated jointly by Chad Forbes t.t.n. Windmill Strategic Consulting, a ZZP (Netherlands) and Windmill Strategic Consulting LLC (United States) (collectively, "we," "us," or "our"). We take the protection of your personal data seriously. This Privacy Policy explains how we collect, process, and secure your personal data when you visit our website and access our Insights Archive.

2. Data Collection on Our Website

  • Analytics Data: When you browse this site, our hosting provider, Squarespace, collects automated technical data (IP address, browser type, device information, and activity logs) to ensure site stability and power traffic analytics.

  • Corporate Communications & Lead Generation: When you request access to our downloadable briefings, white papers, or insights, we collect the personal data you explicitly provide:

    • Email Address

    • Name (if applicable)

3. Purpose and Legal Basis for Processing (GDPR)

For users residing within the European Economic Area (EEA), we process your data under the following legal bases pursuant to the General Data Protection Regulation (GDPR):

  • Consent (Art. 6(1)(a) GDPR): You give us explicit permission to process your email address to deliver requested executive briefings and relevant insight updates.

  • Legitimate Interests (Art. 6(1)(f) GDPR): It is our legitimate business interest to maintain secure, functional website operations and monitor analytics to optimize our services.

4. Third-Party Service Providers & Cross-Border Data Transfers

To operate our automated delivery system, your data is securely shared with the following processors:

  • Squarespace, Inc.: Our website infrastructure provider.

  • Google LLC (Google Workspace / Google Sheets): Your email address is securely routed to a dedicated spreadsheet for lead organization and access validation.

International Data Transfers: Because your data is processed using Google Workspace infrastructure, your personal information will be transferred to and stored on servers located in the United States. We ensure appropriate safeguards are maintained by utilizing service providers that adhere to the EU-U.S. Data Privacy Framework or utilize Standard Contractual Clauses (SCCs) approved by the European Commission to guarantee data security.

5. Data Retention

We retain your email address only for as long as your subscription to our briefings remains active. You may opt out or revoke your consent at any time by clicking the "unsubscribe" link in our correspondence or emailing us directly at info@windmillconsulting.co. Upon withdrawal of consent, your records will be permanently purged from our databases.

6. Your Legal Rights (GDPR)

If you are a resident of the EEA, you possess the following rights regarding your personal data:

  • Right to access and view the data we hold about you.

  • Right to correct inaccurate or incomplete data.

  • Right to request erasure ("Right to be Forgotten") of your personal data.

  • Right to restrict or object to the processing of your data.

  • Right to data portability.

To exercise any of these rights, contact us at info@windmillconsulting.co. You also retain the right to lodge an official complaint with a data protection authority (such as the Dutch Autoriteit Persoonsgegevens).