Last updated 26 August 2026.
Who we are
xpandly Ltd is the data controller for personal data collected through xpandly.com. You can reach us at hello@xpandly.com.
What we collect
When you submit our contact form we collect your full name, work email address, company name, the service you are interested in, and the content of your message. Our web server also records standard technical data such as IP address, browser type and the pages requested, which is used to operate and secure the site.
Why we use it and our lawful basis
We use contact form data to respond to your enquiry and to provide the services you ask about. Our lawful basis is legitimate interests, specifically responding to business enquiries directed to us, and where we go on to work together, performance of a contract. We use technical server data on the basis of our legitimate interest in keeping the site available and secure.
Marketing
We do not add contact form submissions to a marketing list without asking you first. If you do opt in to marketing you can withdraw at any time by emailing hello@xpandly.com.
Who we share it with
We do not sell personal data. We share it only with service providers who help us operate the business, such as our website hosting and email providers, and only so far as they need it to provide that service.
Third parties and international transfers
This site loads fonts from Google Fonts, which means your IP address is transmitted to Google when a page loads. Some of our service providers are based outside the UK. Where personal data is transferred outside the UK we rely on the UK international data transfer agreement or addendum, or on adequacy regulations.
How long we keep it
We keep enquiry correspondence for as long as needed to deal with your enquiry and for a reasonable period afterwards in case you come back to us, and then delete it. Server logs are kept for a short operational period.
Cookies
This site does not use advertising or analytics cookies and does not run third-party tracking scripts.
Your rights
Under UK data protection law you have the right to ask for a copy of the personal data we hold about you, to have inaccurate data corrected, to ask us to delete it, to restrict or object to how we use it, and to ask for it in a portable format. To exercise any of these, email hello@xpandly.com and we will respond within one month.
Complaints
If you are unhappy with how we have handled your personal data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this notice
We will update this page if our practices change and will revise the date at the top.