Privacy Policy of XMPRO

Personal Data processed for the following purposes and using the following services:

• • Advertising

    • LinkedIn Ads

      Personal Data: Cookies; Usage Data

    • Hotjar Form Analysis & Conversion Funnels and Meta ads conversion tracking (Meta pixel)

      Personal Data: Trackers; Usage Data

  • Analytics

    • Google Analytics (Universal Analytics)

      Personal Data: Cookies; Usage Data

    • Google Analytics 4

      Personal Data: number of Users; session statistics; Trackers; Usage Data

    • Meta Events Manager

      Personal Data: browsing history; clicks; page views; Trackers; Usage Data

  • Building and running XMPRO

    • WordPress (self-hosted)

      Personal Data: date of birth; Usage Data

  • Contacting the User

    • Mailing list or newsletter

      Personal Data: company name; country; email address; first name; last name; phone number; profession; website; ZIP/Postal code

    • Contact form

      Personal Data: company name; email address; first name; last name; website

  • Data transfer outside of the UK

    • Data transfer abroad based on consent (UK) and Other legal basis for Data transfer abroad (UK)

      Personal Data: various types of Data

  • Data transfer outside the EU

    • Data transfer abroad based on consent and Other legal basis for Data transfer abroad

      Personal Data: various types of Data

  • Displaying content from external platforms

    • Adobe Fonts

      Personal Data: Usage Data; various types of Data as specified in the privacy policy of the service

    • YouTube video widget

      Personal Data: Cookies; Usage Data

  • Heat mapping and session recording

    • Hotjar Heat Maps & Recordings

      Personal Data: Tracker; Usage Data; various types of Data as specified in the privacy policy of the service

  • Hosting and backend infrastructure

    • Microsoft Azure and Amazon Web Services (AWS)

      Personal Data: various types of Data as specified in the privacy policy of the service

  • Interaction with data collection platforms and other third parties

    • Mailchimp widget

      Personal Data: email address; Trackers; Usage Data

  • Managing contacts and sending messages

    • Mailchimp

      Personal Data: email address

  • Remarketing and behavioral targeting

    • Facebook Remarketing and Remarketing with Google Analytics

      Personal Data: Cookies; Usage Data

  • SPAM protection

    • Akismet

      Personal Data: various types of Data as specified in the privacy policy of the service

    • Google reCAPTCHA

      Personal Data: Cookies; Usage Data

  • Tag management

    • Google Tag Manager

      Personal Data: Trackers; Usage Data

  • Traffic optimization and distribution

    • Cloudflare

      Personal Data: Trackers; various types of Data as specified in the privacy policy of the service

Information on opting out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.

Further information about the processing of Personal Data

• • Appcues

    Personal Data: Cookies and Usage Data

  • Supervisory Authority

    In accordance with the UK General Data Protection Regulation (UK GDPR), our designated supervisory authority is the Information Commissioner's Office (ICO). For more information or to raise concerns, please contact the ICO: https://ico.org.uk/

  • Compliance with UK GDPR and DPA 2018

    This privacy policy is intended to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. These laws govern the processing of personal data of individuals located in the United Kingdom. XMPro ensures that the collection, storage, and processing of personal data is lawful, fair, and transparent under UK law.

  • Rights of UK Data Subjects

    Under the UK GDPR, individuals in the United Kingdom have the following rights regarding their personal data:
    
    The right to access their personal data
    
    The right to request correction of inaccurate data
    
    The right to request erasure of data (‘right to be forgotten’)
    
    The right to restrict processing
    
    The right to data portability
    
    The right to object to processing
    
    To exercise any of these rights, users may contact us using the details provided in this policy. XMPro will respond to all requests in accordance with applicable UK data protection laws.

  • Legal Basis for Processing Personal Data (UK GDPR)

    XMPro processes Personal Data in accordance with the UK General Data Protection Regulation (UK GDPR). The legal bases on which we rely include:
    
    Consent – For activities such as the use of non-essential cookies, email marketing, and certain advertising and analytics services.
    
    Contractual necessity – For processing contact form submissions or fulfilling service-related obligations where a user has requested information or engagement.
    
    Legitimate interests – For internal analytics, service improvement, and certain forms of marketing, provided such interests are not overridden by the rights and freedoms of the data subject.
    
    Where consent is the legal basis, users have the right to withdraw it at any time without affecting the lawfulness of prior processing.

  • Cookie Consent and ePrivacy Compliance (UK)

    In accordance with the UK’s Privacy and Electronic Communications Regulations (PECR), XMPro uses a cookie consent mechanism to ensure valid consent is obtained prior to placing non-essential cookies on a user’s device. Users are informed about:
    
    The types of cookies in use (e.g., analytics, advertising, functional)
    
    The purposes of data collection
    
    How to manage their preferences or withdraw consent
    
    Essential cookies that are strictly necessary for the operation of the site do not require prior consent. Users can adjust cookie settings through the banner or their browser at any time.

  • Transfer of personal information outside of Brazil based on contracts and other legal means

    We can transfer your personal information outside of the Brazilian territory provided that we are able to ensure that any further processing of your personal information will be in compliance with the principles and the rules established by the LGPD, and your rights are safeguarded.

    To do so, we may use one of the following legal means:

    specific contractual clauses for each given transfer. This means that we will enter into an agreement with the recipient of your personal information to make sure that such transfers meet the requirements explained above. Such an agreement shall be subject to the ANPD’s prior verification; standard contractual clauses. These clauses set terms and conditions for the transfer of personal information and are adopted by the ANPD; global corporate clauses. These clauses set terms and conditions for the transfer of personal information within an organisation and, before they come into force, are subject to the ANPD’s prior verification; seals of approval, certificates and codes of conduct regularly issued by the ANPD. These legal instruments allow us to transfer your personal information provided that we abide by their rules. They are subject to the previous approval of the ANPD.

Contact information

• • Owner and Data Controller

    XMPro Inc. - 10 000 North Central Expressway, Suite 400, Dallas, Texas 75231

    Owner contact email: info@xmpro.com