This policy explains how Xpance Infotech Pvt Ltd ("Xpance IT", "we") collects and uses personal data when you visit xpanceit.com or contact us. We collect as little as we can, and we never sell your data.
Who we are
Xpance Infotech Pvt Ltd is a company registered in India (CIN U78300RJ2024PTC096815), at A660, Second Floor, Calgiri Marg, Malviya Nagar, Jaipur, Rajasthan, India. We are the controller (under the UK and EU GDPR) and the data fiduciary (under India's Digital Personal Data Protection Act 2023) for the personal data described here.
Contact us about privacy at info@xpanceit.com.
What we collect
When you send an enquiry through our forms, we collect:
- your name, company, work email, country and (if you give it) phone number;
- what you tell us about your project or hiring need, and whether you asked for an NDA.
When you visit the site, our hosting provider processes technical data such as your IP address, browser type and the pages requested, to deliver the site and protect it from abuse. Our bot check (Cloudflare Turnstile) processes similar signals to tell people from automated traffic.
We use Cloudflare Web Analytics to count page views. It does not use cookies or collect personal data to track you across sites.
How we use it, and our legal basis
- To reply to your enquiry and discuss working together: taking steps at your request before a contract, and our legitimate interest in responding to business enquiries.
- To keep the site secure and working: our legitimate interest in protecting our services.
- To meet legal obligations, such as keeping business records.
We do not use your data for automated decision-making, and we do not send marketing emails unless you ask us to.
International transfers
We are based in India, and our providers may process data in other countries, including the United States. Where UK or EU data is transferred to a country without an adequacy decision, we rely on safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.
How long we keep it
We keep enquiry data for as long as we need it to respond and, if we work together, for the length of the engagement and any legal record-keeping period afterwards. If an enquiry does not lead to an engagement, we delete it within 24 months. Technical logs are kept for a short period by our hosting provider.
Your rights
Depending on where you live, you can ask us to:
- give you a copy of your personal data;
- correct or complete it;
- delete it;
- restrict or object to how we use it;
- move it to another provider (portability);
- withdraw consent where we rely on it, and nominate someone to exercise your rights (India).
Email info@xpanceit.com to use these rights. We will reply within one month. If you are in the UK or EU, you can also complain to your data protection authority, such as the UK Information Commissioner's Office.
Grievance officer (India)
Under the Digital Personal Data Protection Act 2023, you can raise a grievance with our Grievance Officer at info@xpanceit.com. We will acknowledge it promptly and respond within the time the law requires. If you are not satisfied, you can approach the Data Protection Board of India.
Security
Data is encrypted in transit, and access is limited to the people who need it to respond to you. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
Changes to this policy
If we change this policy, we will update it here and change the date at the top.