Privacy Policy
PRIVACY POLICY / TOS
This page describes the personal information collected through the storefront, how it is used, and the choices available to visitors. The final production policy must be approved by the customer and legal counsel.
What personal information do we collect?
The storefront can collect information when a visitor creates an account, places an order, joins a mailing list, completes a form, or otherwise enters information.
When do we collect information?
Information is collected during registration, ordering, newsletter signup, form submission, and other direct interactions with the site.
How do we use your information?
Information can support customer-service requests, promotions and surveys, transaction processing, order communication, and product or service emails.
How do we protect visitor information?
The public policy describes vulnerability checks, malware scanning, restricted access, SSL encryption, and payment processing through a gateway rather than storage on Xpand servers.
Do we use cookies?
Cookies remember cart contents and preferences and help compile aggregate traffic and interaction data. Visitors can change browser cookie settings, although some site features may then work differently.
Third Party Disclosure
The policy says personally identifiable information is not sold or traded. Hosting and operating partners can receive the information required to provide services when they agree to keep it confidential. Disclosure can also occur when required by law or to protect rights and safety.
Third Party Links
The captured public policy says the site does not include or offer third-party products or services. External links elsewhere in the storefront remain subject to the destination site's own terms.
Google and advertising
The captured policy describes Google advertising, remarketing, impression reporting, demographics reporting, and the use of first- and third-party identifiers to understand ad interactions.
Opting out
Visitors can manage Google advertising preferences, use industry opt-out tools, or install the Google Analytics opt-out browser add-on.
California Online Privacy Protection Act
Visitors can use the site anonymously. Policy changes are posted on this page, and customers can request changes to personal information by email, phone, or their account.
Do Not Track and behavioural tracking
The captured policy says Do Not Track signals are honoured, while also stating that third-party behavioural tracking is allowed. This apparent conflict must be reviewed before production publication.
COPPA
Xpand does not specifically market to children under 13.
Fair Information Practices
The captured policy says visitors will receive an in-site breach notification within seven business days and describes a right to seek legal or regulatory redress.