Privacy Policy

Last updated: April 27, 2026

This Privacy Policy describes how XPAND CONSULTING LLC ("Company", "we", "us", or "our") collects, uses, and shares personal information when you visit xpandconsulting.click (the "Site") or interact with our services.

1. Data Controller

2. Information We Collect

2.1 Information you provide

When you submit our contact form, we collect: name, email address, phone number (optional), company name (optional), and the content of your message. You explicitly consent to this collection by submitting the form.

2.2 Automatically collected information

When you visit the Site, we automatically receive: IP address, browser type and version, device type, referrer URL, pages viewed, and timestamps. Server logs are retained for security and operational purposes.

2.3 Cookies and tracking technologies

We use first- and third-party cookies. Details are provided in our Cookie Policy. Non-essential cookies are loaded only after you give explicit consent through our cookie banner.

3. How We Use Your Information

• To respond to your inquiries and provide the services you request.
• To send service-related communications (transactional emails).
• With your consent, to send marketing messages and analyze advertising performance.
• To maintain Site security, prevent fraud, and comply with legal obligations.

4. Legal Bases (EU/EEA/UK Visitors)

If you are located in the EU, EEA, or UK, we process your personal data under the following GDPR legal bases: (a) consent (Art. 6(1)(a)) — for marketing communications and non-essential cookies; (b) contract (Art. 6(1)(b)) — to respond to your inquiries; (c) legitimate interests (Art. 6(1)(f)) — for Site security, fraud prevention, and aggregated analytics; (d) legal obligations (Art. 6(1)(c)) — where required by law.

5. Sharing of Information

We do not sell your personal information. We share data only with:

• Service providers acting as data processors on our behalf (cloud hosting, email delivery, analytics — primarily Amazon Web Services, Inc. in the United States).
• Authorities when required by law, court order, or to protect our rights.
• Successors in the event of a merger, acquisition, or asset sale, subject to equivalent protections.

6. International Data Transfers

Personal data is processed in the United States. For transfers from the EU/EEA/UK, we rely on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum where applicable, and on appropriate safeguards offered by our processors.

7. Data Retention

Form submissions are retained for up to 36 months from the last contact, after which they are deleted or anonymized. Server logs are retained for up to 12 months. You may request earlier deletion at any time (see Section 9).

8. Security

We use reasonable technical and organizational measures, including TLS encryption, access controls, and isolated cloud environments. No internet transmission is 100% secure; we cannot guarantee absolute security.

9. Your Rights

9.1 EU/EEA/UK residents (GDPR)

You have the right to: access your data, request correction, request deletion, restrict processing, data portability, object to processing, and withdraw consent at any time. You may also lodge a complaint with your local Data Protection Authority.

9.2 California residents (CCPA/CPRA)

You have the right to know what personal information we collect, to delete it, to correct inaccuracies, and to opt out of "sale" or "sharing" (we do not sell or share personal data for cross-context behavioral advertising as defined by the CPRA). You will not be discriminated against for exercising these rights.

9.3 How to exercise your rights

Email us at info@xpandconsulting.click. We respond within 30 days (or as required by applicable law). We may need to verify your identity before processing the request.

10. Children

The Site is not directed to children under 16. We do not knowingly collect data from minors. If you believe a minor has submitted information, please contact us for prompt deletion.

11. Third-Party Links

The Site may contain links to third-party websites. We are not responsible for their privacy practices. Review their policies before sharing personal information.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be communicated through the Site.

13. Contact

XPAND CONSULTING LLC — 16192 Coastal Highway, Lewes, Delaware 19958, United States — info@xpandconsulting.click