Privacy statement

1.1 We are committed to protecting the privacy of visitors to our websites and users of our services, including websites and systems we manage for clients.

1.2 This policy applies when we act as data controller, meaning when we determine the purposes and means of processing personal data.

1.3 We use cookies on our website and other websites we manage. Non-essential cookies are only placed after you have given consent, which you can manage through our cookie settings.

1.4 Our websites include privacy settings that let you manage your preferences for data processing and marketing communications.

1.5 In this policy, "we", "us" and "our" refer to XPRT.agency. See section 12 for contact information.

1.6 This policy applies to our main website https://xprt.agency and all other websites or online services we manage.

2.2 Usage data – such as IP address, browser type and browsing behaviour, to analyse our website and services. Legal basis: consent or legitimate interest.

2.3 Account data – such as name and email address, to give access to our services. Legal basis: consent, contract or legitimate interest.

2.4 Profile data – such as contact details and preferences, to personalise your experience. Legal basis: consent or performance of a contract.

2.5 Service data – data you provide while using our services. Legal basis: consent or performance of a contract.

2.6 Enquiry data – information you enter in contact or quote forms. Legal basis: consent.

2.7 Transaction data – data about payments or purchases. Legal basis: performance of a contract or legal interest.

2.8 Marketing data – data for sending newsletters or offers. Legal basis: consent or performance of a contract.

2.9 Correspondence data – communication between you and us. Legal basis: legitimate interest.

2.10 Legal data – we may process data to comply with legal obligations or to substantiate legal claims. Legal basis: legal obligation or legitimate interest.

2.11 Do not provide personal data of third parties unless we explicitly ask for it.

3.1 We may share data with employees or partners within our organisation. Legal basis: legitimate interest.

3.2 We may share data with professional advisers and insurers for legal and risk management purposes.

3.3 We use external suppliers for things like hosting, support or development. Only necessary data is shared.

3.4 Payments are processed through secure external payment services. We only share the data needed to process transactions.

3.5 We only share data with marketing partners with your explicit consent.

3.6 In exceptional cases we may disclose data to comply with a legal obligation or to protect vital interests.

4.1 We will not transfer personal data outside the European Economic Area (EEA) without appropriate safeguards, such as standard contractual clauses.

5.2 Where necessary to comply with legal obligations or to protect vital interests, the retention period may be extended.

6.1 This privacy policy may be updated from time to time.

6.2 We advise you to check this page regularly.

6.3 We will inform you of significant changes by email or via our website.

7.2 You can exercise your rights by sending an email to: privacy@xprt.agency

8.1 Cookies are small text files stored on your device to improve functionality and ease of use.

8.2 Some cookies are essential, others are used for analytics, marketing or personalisation. Non-essential cookies are only placed after consent.

9.2 You can manage cookies through our cookie policy or your browser settings.

10.1 Our external service providers, such as Google, may also place cookies. Please see their privacy policies for more information.

11.1 You can manage cookies through your browser or our cookie banner.

11.2 Blocking cookies may limit how the website works.