This Privacy Policy explains how we collect, use, store, and share information when you visit our website [https://xpandly.com], contact us, or use our digital marketing services. It also describes your rights under applicable United States privacy laws.

By using our website or services, you agree to this Privacy Policy. If you do not agree, please discontinue use of our website and services.

1. About xpandly

xpandly is a digital marketing agency headquartered in the United States. We provide marketing strategy, advertising management, content creation, and related services to businesses. We act as a “business” under US privacy laws when collecting data directly from website visitors or clients, and as a “service provider” when handling data on behalf of our clients.

2. Information We Collect

We collect information that you voluntarily provide, such as your name, email address, phone number, job title, company name, and the contents of any communication you send us. If you are a client, we may also collect billing information and other details required to deliver our services.

When you visit our website, we automatically collect certain data about your device and activity, including your IP address, browser type, operating system, referring URL, pages viewed, and the time and date of your visit. This helps us improve the functionality and performance of our website.

We also use cookies and similar technologies to analyse site traffic, personalise your experience, and support marketing activities. You can manage or disable cookies through your browser settings.

3. How We Use Information

We use your personal information to communicate with you, provide and manage our services, process payments, and respond to enquiries. We may also use your information to send newsletters, updates, and promotional materials when you have opted in or when otherwise permitted by law.

We use aggregated and anonymised data to evaluate and improve our marketing efforts, understand user behaviour, and enhance the performance of our services. We may also process personal information to comply with legal obligations or protect our business interests.

4. How We Store and Manage Data

We use HubSpot as our customer relationship management (CRM) and marketing automation platform. When you submit a form on our website or engage with our marketing content, your information is securely stored and processed within HubSpot’s system. HubSpot acts as our data processor and maintains industry-standard security certifications to safeguard your information.

All data collected by xpandly is stored in secure environments with limited access. We apply encryption, password protection, and access controls to protect personal information from unauthorised use or disclosure.

5. Sharing Information

We do not sell personal information. We share data only with trusted third parties who help us operate our business—such as web hosting providers, analytics services, advertising platforms, and payment processors. These partners are required to use the information solely for the purposes we specify and to protect it in accordance with applicable privacy laws.

We may also share information when required by law, in response to a legal process, or to protect our rights or the rights of others. In the event of a merger, acquisition, or business transfer, personal data may be transferred as part of that transaction.

6.Your Privacy Rights

Depending on your state of residence, you may have certain rights under US privacy laws. These may include:

• The right to know what categories of personal information we collect, use, or disclose.
• The right to access and obtain a copy of your personal information.
• The right to request deletion of your personal information, subject to certain exceptions.
• The right to correct inaccurate information.
• The right to opt out of the sale or sharing of your personal information for targeted advertising.
• The right to non-discrimination for exercising your privacy rights.

To make a privacy request, contact us at privacy@xpandly.com. We will verify your identity before fulfilling your request. You may also appoint an authorised agent to act on your behalf, as permitted under applicable law.

7. Data Retention

We retain personal information only as long as necessary to fulfil the purposes described in this policy, comply with legal obligations, or resolve disputes. When information is no longer needed, it is securely deleted or anonymised.

8. Data Security

We take reasonable administrative, technical, and physical measures to protect personal data from unauthorised access, alteration, or loss. Despite these efforts, no online transmission or storage system can be guaranteed to be completely secure. If we become aware of a data breach involving your personal information, we will take appropriate steps to notify affected individuals in accordance with applicable law.

9. Marketing Communications

You can opt out of receiving marketing emails from us at any time by clicking the “unsubscribe” link at the bottom of our messages or by contacting us directly. Even if you unsubscribe from marketing emails, we may still send administrative messages relating to your account or ongoing services.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to provide essential functionality, remember user preferences, and understand site usage. Some cookies are necessary for the operation of the site, while others support analytics or advertising. You can adjust your cookie preferences or disable non-essential cookies through your browser settings.

11. International Users

Our website is operated from the United States. If you access our website from outside the US, you acknowledge that your information may be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction. We take reasonable steps to ensure that your information remains protected during such transfers.

12. Children’s Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal data from them. If you believe that a child has provided us with personal information, please contact us so that we can delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal obligations. When we make updates, we will post the revised version on this page with an updated “Last Updated” date. Your continued use of our website after changes are posted constitutes your acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

xpandly
Email: privacy@xpandly.com
Website: https://xpandly.com
Address: Koral Center, San Jose Del Cabo 23400, B.C.S. MX

If you are a California resident and have concerns about our handling of your data, you may also contact the California Privacy Protection Agency (CPPA) for more information about your rights under the CCPA.