Effective Date: May 11, 2026 ยท Last Updated: May 11, 2026
What's in this policy
- Scope and who this policy applies to
- Information we collect
- How we use information
- How we share information
- Cookies and tracking technologies
- Your rights and choices
- California residents (CCPA / CPRA)
- Data retention
- Security
- Children's privacy
- Users outside the United States
- Third-party sites and services
- Do Not Track signals
- Changes to this policy
- Contact us
1. Scope and who this policy applies to
This Privacy Policy applies to wininjurynetwork.com and the related services we offer through this website, including our intake forms, our AI-powered chat widget, and any phone calls or text messages that result from your interaction with the site (together, the "Services").
WIN Injury Network is a referral and case-coordination platform based in Chicago, Illinois. We are not a law firm. We connect injured workers and accident victims with independent attorneys, medical providers, and financial professionals in our network ("Network Professionals"). When you submit information to us, you understand that we may share it with one or more Network Professionals so they can evaluate whether they can help with your case.
Each Network Professional is independent and has its own privacy practices. Once a Network Professional contacts you, that professional's own privacy policy will govern the information you share with them directly.
2. Information we collect
2.1 Information you give us
We collect the information you provide directly when you:
- Submit a case evaluation form or contact form
- Use our live chat or AI chat widget
- Call us at (773) 831-5000 (calls are tracked through CallRail and may be recorded for quality and intake purposes)
- Send us an email at info@wininjurynetwork.com
- Use our case-value calculator, weekly-benefits calculator, or injury-timeline tool
The specific categories of information we collect from you include:
- Contact information: name, phone number, email address, and ZIP or city
- Case information: the type of injury, the date and location of the injury, what happened, your current medical situation, your employer or the other party involved, whether you have already retained counsel, and any other details you choose to share
- Communications: messages you send us through chat, email, web forms, or phone, including transcripts and recordings of phone calls
- Calculator inputs: figures like average weekly wage, body part injured, percentage of impairment, or hours missed, used to produce illustrative output
Some of the information you provide may include details about your physical or mental health, work history, or financial situation. We treat this information as sensitive and only share it with Network Professionals who are reviewing your case.
2.2 Information collected automatically
When you visit the site, we and our service providers automatically collect certain technical information about your device and your interaction with the site. This includes:
- Device and browser data: IP address, browser type and version, operating system, device type, screen size, and language settings
- Usage data: the pages you view, the time and date of your visit, the time you spend on each page, the links you click, and the page that referred you to our site
- Approximate location: derived from your IP address (typically accurate at the city or region level, not your precise location)
- Source attribution: the search terms, advertisement, or referring URL that led you to our site, including UTM parameters, Google click identifiers, and Facebook click identifiers
- Call data: when you call a number displayed on our site, our call-tracking provider (CallRail) records the phone number you called from, the date and time of the call, the duration, and (in some cases) a recording or transcript of the call. CallRail uses a session cookie to attribute each call to the specific marketing source that brought you to the site
2.3 Information from third parties
In limited cases, we may receive information about you from third parties, such as:
- Advertising and lead-generation partners (for example, if you submitted a form on a partner site that referred your inquiry to us)
- Public sources (for example, a court filing or news report relevant to your case)
- Network Professionals (for example, if a Network Professional refers your matter back to us because they cannot take it)
3. How we use information
We use the information we collect for the purposes below. The legal basis for each use is your consent, our legitimate interest in operating our business, or our need to comply with the law.
| Purpose | What this looks like in practice |
|---|---|
| Respond to your inquiry | Reviewing your case details, calling you back, replying to your chat or email, scheduling a consultation |
| Refer your case to a Network Professional | Sharing your case information with attorneys, medical providers, or financial professionals in our network who can evaluate whether they can help |
| Operate and improve the Services | Maintaining the site, debugging errors, measuring which pages perform well, training our intake staff and AI chat agent, A/B testing layouts |
| Communicate with you | Sending case-status updates, appointment reminders, and (only if you opt in) marketing or educational emails and text messages about your legal rights |
| Marketing and attribution | Measuring which advertising campaigns work, retargeting visitors who left without submitting a form, calculating return on advertising spend |
| Security and fraud prevention | Detecting and blocking abusive traffic, spam form submissions, and bot activity through Cloudflare's edge protections |
| Comply with the law | Responding to subpoenas, court orders, and lawful government requests; enforcing our Terms of Use; protecting our rights |
We do not use your information to train any third-party large-language model or AI service, and we do not allow our AI chat provider to train on your case content.
4. How we share information
We share information only in the categories below. We do not sell your personal information for money.
4.1 Network Professionals
The core purpose of WIN Injury Network is to connect you with attorneys, medical providers, or financial professionals who can help with your situation. When you submit a case evaluation request, we share the information you provided (your name, contact details, and case description) with one or more Network Professionals so they can decide whether to take your case. Once a Network Professional accepts your case, they will contact you directly and their own privacy practices will govern that relationship.
You can ask us at any time to stop referring your information to additional Network Professionals by emailing info@wininjurynetwork.com or calling (773) 831-5000.
4.2 Service providers
We use a small set of vetted third-party service providers to operate the site. Each provider only receives the information it needs to perform its function for us, and each is contractually required to protect your information.
| Provider | What they do for us |
|---|---|
| Cloudflare | Hosts the website, delivers content from edge servers, protects against bots and attacks. Receives IP, browser headers, and request data. |
| CallRail | Tracks phone calls, dynamically swaps the phone number shown on the site based on the marketing source, records and transcribes calls for quality. Receives caller phone number, session ID, and recording. |
| LawRuler | Our customer relationship management (CRM) platform that stores and routes intake records to Network Professionals. Receives your case information. |
| Google Analytics 4 | Measures site traffic and conversion events. Receives pseudonymous identifiers and event data; IP anonymization is enabled. |
| Email and SMS providers | Deliver transactional and marketing email and text messages. Receive your email address or phone number and message content. |
| AI chat provider | Powers the on-site chat widget. Receives the messages you type during a chat session. Does not train on your data. |
4.3 Legal and compliance disclosures
We may disclose information if required by law or in good faith to:
- Comply with a subpoena, court order, search warrant, or other legal process
- Respond to a lawful government request
- Enforce our Terms of Use or other agreements
- Investigate fraud, abuse, or violations of law
- Protect the rights, property, or safety of WIN, our users, our Network Professionals, or the public
4.4 Business transfers
If WIN is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, information about our users may be transferred as part of that transaction. We will notify you (for example, by email and by posting a notice on this site) of any change of ownership, and you will have a chance to opt out before your information becomes subject to a different privacy policy.
4.5 With your consent
We may share your information for any purpose not described above if you give us your consent.
4.6 Aggregated or de-identified information
We may share aggregated or de-identified information (information that cannot reasonably be used to identify you) for any purpose. For example, we may publish statistics about average case duration or settlement ranges across our network.
5. Cookies and tracking technologies
We and our service providers use cookies, web beacons, pixels, local storage, and similar technologies (collectively, "cookies"). Cookies fall into the following categories on our site:
- Strictly necessary cookies. Required for the site to function. These include Cloudflare's bot-protection cookies and CallRail's session identifier (which links a phone call back to the page you were viewing). These cookies cannot be turned off.
- Functional cookies. Used by the on-site chat widget to remember your name and contact details for the length of your visit so you don't have to re-enter them.
- Analytics cookies. Used by Google Analytics 4 to measure site traffic and which pages perform well. These are set with IP anonymization enabled, which means we do not store your full IP address.
- Marketing and attribution cookies. May be set by advertising platforms (such as Google Ads or Meta) to measure the performance of advertising campaigns and to show you relevant ads on other sites. These are set only when an advertising campaign is active.
You can control cookies through your browser settings or, where available, through the cookie-preferences banner on the site. Blocking strictly necessary cookies will prevent parts of the site from working.
6. Your rights and choices
You can exercise the following rights at any time by contacting us at info@wininjurynetwork.com or (773) 831-5000:
- Access: Ask what personal information we hold about you
- Correct: Ask us to correct information that is inaccurate or incomplete
- Delete: Ask us to delete the information we hold about you (subject to exceptions for legal claims and recordkeeping obligations)
- Restrict referrals: Ask us to stop sharing your information with additional Network Professionals
- Opt out of marketing: Stop receiving marketing emails by clicking the unsubscribe link in any email we send, or text STOP to opt out of marketing SMS
- Withdraw consent: Withdraw any consent you have given us (this will not affect processing already carried out)
We will respond to all verifiable requests within forty-five (45) days. We may ask you for additional information to verify your identity before fulfilling certain requests.
7. California residents (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA"):
- Right to know: Request disclosure of the specific categories and pieces of personal information we have collected about you in the past twelve months, the sources we collected it from, our purposes for collecting it, and the categories of third parties we share it with
- Right to delete: Request deletion of personal information we have collected from you
- Right to correct: Request correction of inaccurate personal information
- Right to opt out of sale or sharing: We do not sell personal information for money. We may "share" certain personal information for cross-context behavioral advertising as defined under California law (for example, advertising cookies). You can opt out using the link at our contact page or by emailing us
- Right to limit use of sensitive personal information: We do not use or disclose sensitive personal information beyond what is necessary to perform our Services
- Right to non-discrimination: We will not deny services, charge different prices, or provide a different level of service because you exercised a privacy right
An authorized agent may submit a request on your behalf. We will require proof of your authorization and proof of the agent's identity.
8. Data retention
We keep personal information only as long as we need it for the purpose we collected it for, or as long as the law requires us to keep it. Specifically:
- Lead and case information: retained for the longer of (a) seven (7) years from the date of last contact, which aligns with the statute of limitations and recordkeeping considerations applicable to personal injury and workers' compensation matters in Illinois and Wisconsin, or (b) the period required by the engaging Network Professional
- Call recordings and transcripts: retained by CallRail according to its own retention schedule, typically twelve (12) to thirty-six (36) months
- Chat transcripts: retained for three (3) years after the conversation ends
- Analytics data: retained by Google Analytics 4 for fourteen (14) months by default; aggregated reports may be retained longer
- Server logs: retained by Cloudflare for the rolling window defined by Cloudflare's standard retention (typically thirty (30) days)
When we no longer need information, we delete it or de-identify it so that it can no longer be associated with you.
9. Security
We use commercially reasonable physical, technical, and administrative safeguards to protect your information. These include encryption in transit (HTTPS / TLS 1.2 or higher across the entire site), access controls and authentication on our CRM and email systems, edge bot protection through Cloudflare, and vendor diligence on the third-party services we use.
No system is one hundred percent secure. If we ever experience a data security incident that affects your personal information, we will notify you and the appropriate authorities as required by law.
10. Children's privacy
The Services are not directed at children under the age of thirteen (13), and we do not knowingly collect personal information from children under thirteen. If you believe a child under thirteen has provided us with personal information, please contact us at info@wininjurynetwork.com and we will delete it. If you are a minor between thirteen and seventeen, please ask a parent or legal guardian to help you communicate with us; we typically require parental or guardian involvement to evaluate a case on behalf of a minor.
11. Users outside the United States
The Services are intended for users in the United States, and specifically for injured workers and accident victims in Illinois and Wisconsin. If you access the site from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, which may have data protection laws that differ from those of your country. By using the Services, you consent to this transfer.
12. Third-party sites and services
Our site may link to third-party websites, social media platforms, or external resources. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policy of any third-party site or service before providing them with personal information.
13. Do Not Track signals
Some browsers send a "Do Not Track" ("DNT") signal to websites you visit. There is currently no industry consensus on how to respond to DNT signals. Our site does not change its behavior based on DNT signals at this time. You can still manage your tracking preferences through your browser settings and through the cookie-preferences controls described in Section 5.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make a material change, we will update the "Last Updated" date at the top of this page and, where required by law, give you additional notice (for example, by emailing you or posting a banner on the site). The current version is always available at https://wininjurynetwork.com/privacy-policy.
15. Contact us
If you have questions about this Privacy Policy or want to exercise any of the rights described above, you can reach us at:
WIN Injury Network
712 North Dearborn Street
Chicago, Illinois 60654
Phone: (773) 831-5000
Email: info@wininjurynetwork.com
If you have a concern about our privacy practices that we have not resolved to your satisfaction, you may also contact the appropriate state regulator. California residents may contact the California Privacy Protection Agency. Illinois residents may contact the Illinois Attorney General's Consumer Protection Division.