1. Who We Are
Xpand Media ("we," "us," "our") is a digital marketing agency providing performance marketing, web design, social media management, and related services. This privacy policy explains how we collect, use, protect, and share information when you visit our website, contact us, or use our services.
2. Information We Collect
We collect information in two ways:
Information You Provide
- Contact forms: name, email, company, message
- Calls booked: phone number, company details, preferred dates
- Email communications: any details you share
- Account creation: login credentials, business information
Information Collected Automatically
- Browser type, IP address, pages visited, time spent on site
- Device information: OS, screen resolution, browser version
- Cookies and similar tracking technologies
- Analytics data through Google Analytics
3. How We Use Your Information
We use collected data to:
- Respond to inquiries and provide customer support
- Schedule and manage calls with prospects
- Send marketing communications (with your consent)
- Improve our website and services
- Understand user behavior and optimize experience
- Comply with legal obligations
- Prevent fraud and enforce our terms
4. Legal Basis for Processing (GDPR)
If you're in the EU, we process your data based on:
- Consent: For marketing emails and non-essential cookies
- Legitimate interest: For analytics and website improvement
- Contract: To fulfill services you've requested
- Legal obligation: To comply with laws
5. Data Retention
We retain your data only as long as necessary:
- Contact inquiries: 1 year or until you unsubscribe
- Client data: Duration of engagement plus 3 years for legal compliance
- Analytics data: 26 months (Google Analytics default)
- Email lists: Until you unsubscribe
6. Third-Party Sharing
We share data only with trusted partners:
- Google Analytics: For website usage tracking
- Email service providers: For sending communications
- Hosting providers: For storing website and data
- Calendar services: For scheduling calls
- Legal/law enforcement: If required by law
We do not sell your personal data to third parties.
7. Your Rights
Depending on your location, you have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Request we delete your data ("right to be forgotten")
- Restriction: Limit how we use your data
- Portability: Get your data in a portable format
- Opt-out: Withdraw consent for marketing or analytics
To exercise these rights, contact privacy@xpandmedia.io with "GDPR Request" in the subject line.
8. CCPA Rights (California Residents)
If you're in California, you have the right to:
- Know what personal data we collect and how it's used
- Delete your personal data (with exceptions)
- Opt-out of data sales or sharing
- Non-discrimination for exercising your rights
Submit requests to privacy@xpandmedia.io with "CCPA Request" in the subject line.
9. Cookies & Tracking
We use cookies to improve your experience. See our Cookie Policy for details on managing preferences.
10. Data Security
We use industry-standard security measures:
- SSL/TLS encryption for data in transit
- Password protection for accounts
- Limited access to personal data by employees
- Regular security audits and updates
No method is 100% secure, but we implement reasonable safeguards. If you suspect a breach, contact privacy@xpandmedia.io immediately.
11. Contact Us
For privacy questions, requests, or complaints:
- Email: privacy@xpandmedia.io
- Website: xpandmedia.io
EU residents can lodge a complaint with your local data protection authority.
12. Policy Updates
We may update this policy periodically. Material changes will be announced on this page or via email. Your continued use means acceptance of updates.
