Last updated 5 October 2026
Support Wins is a one-person consultancy. This notice explains what personal information we hold, why we hold it, and what you can tell us to do with it — including if we contacted you first and you would rather we hadn’t.
Support Wins is operated by Aman Bhatia, a sole practitioner based in Punjab, India, trading at supportwins.com. For data protection purposes we are the controller of the information described below.
Contact for anything in this notice, including any request about your data: hello@supportwins.com. We answer within five working days.
That is the whole form. We do not ask for a name, a company, a phone number, or a budget, and there is no hidden field collecting them.
Your email address, your message, and anything you choose to attach. Correspondence is held in our mailbox so we can carry on the conversation and keep a record of what was agreed.
We do outbound business development. Before approaching a company we research it and record information that is already public: the company’s website and help centre, which support tools it appears to run, what its published help content covers, and a business contact address published for that purpose. We do not buy contact lists, we do not scrape personal social media profiles, and we do not use anything behind a login.
Our host records standard server logs, including IP address, browser type and the page requested, for security and reliability. We use Cloudflare Web Analytics, which counts page views without cookies and without building any profile of you.
No cookies. This site sets none — not for analytics, not for advertising, not for anything else. That is why you were not asked to accept any.
For visitors in the UK and EU, the UK GDPR and EU GDPR require us to name a lawful basis for each use. These are ours.
| What we do | Why | Lawful basis |
|---|---|---|
| Produce and send your scorecard | You asked us to, and we cannot deliver it without an address to send it to | Steps taken at your request before entering a contract |
| Follow up once after sending it | To ask whether it was useful and whether you want the detailed review | Legitimate interests — modest, business-to-business, and easy to stop |
| Research and approach prospective clients | To offer a service we believe is relevant, with a specific finding rather than a generic pitch | Legitimate interests — balanced against your rights, see below |
| Deliver work we are engaged for | To perform the contract you have with us | Performance of a contract |
| Keep invoices and tax records | Because we are required to | Legal obligation |
| Keep the site up and secure | To prevent abuse and diagnose faults | Legitimate interests |
On being contacted out of the blue. If we emailed you first, you can reply with the single word stop, or write to hello@supportwins.com. We will delete what we hold about you and your company, and we will not contact you again. You do not need to give a reason, and we will not ask for one.
We are one person, so there is no internal sharing. A small number of service providers process data on our behalf, under contract and only on our instructions:
| Provider | What it handles |
|---|---|
| Cloudflare | Hosting, DNS and cookieless analytics for this site |
| Formspree | Delivers the scorecard form submission to our mailbox |
| Zoho | Our email, where correspondence is stored |
We do not sell personal information, we do not share it for advertising, and we do not pass client data to anyone else. If a legal authority compels disclosure we will comply, and will tell you unless we are forbidden from doing so.
We operate from India, and our providers operate internationally, so information may be processed outside the UK and the European Economic Area. Where that happens we rely on the standard contractual clauses our providers offer, together with their own technical safeguards. You can ask us for details of the arrangements covering your data.
Wherever you are, you may ask us to show you what we hold, correct it, delete it, or stop using it. If you are in the UK or EEA, the GDPR gives you these rights specifically:
Email hello@supportwins.com to exercise any of these. There is no charge, and we will respond within one month. If you are unhappy with how we handle it you may complain to your national data protection authority — in the UK that is the Information Commissioner’s Office, and in the EU it is the supervisory authority for the country you live in.
If you are in India, the Digital Personal Data Protection Act 2023 gives you comparable rights to access, correction, erasure and grievance redressal. Use the same address, and we will handle the request the same way.
Access to our systems is protected by unique passwords and two-factor authentication, and client data stays inside your own platforms wherever the work allows it. No system is perfect; if a breach affects you and carries real risk, we will tell you and the relevant regulator within the time limits that apply.
This is a business-to-business service and is not directed at children. We do not knowingly collect information about anyone under 18.
If we change how we handle personal information we will update this page and move the date at the top. Where a change is significant and we hold your address, we will tell you directly rather than relying on you to notice.