Privacy Policy

Last Updated: 06-01-2026

XponentialWorks (“XponentialWorks,” “we,” “us,” or “our”) operates the website https://www.xponentialworks.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and protect personal information, and describes your rights under applicable privacy laws, including the EU General Data Protection Regulation (EU GDPR), the UK General Data Protection Regulation (UK GDPR), and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

1. Information We Collect

a. Personal Information You Provide

We may collect personal information that you voluntarily provide, including:

Identifiers (name, email address, phone number)
Professional or employment-related information (company name, job title)
Communications submitted through forms, email inquiries, newsletter sign-ups, or downloads

b. Information Collected Automatically

When you visit our Site, we may automatically collect:

IP address
Device and browser information
Operating system
Pages viewed, session duration, and interaction data
Referring and exit URLs

This data is collected using cookies, pixels, tags, and similar technologies.

2. How We Use Personal Information

We use personal information for the following purposes:

To respond to inquiries and provide requested information
To operate, maintain, and improve the Site
To communicate marketing and business-related content (where permitted by law)
To analyze website usage and performance
To secure the Site and prevent fraud or misuse
To comply with legal and regulatory obligations

3. Legal Bases for Processing (EU GDPR and UK GDPR)

For individuals located in the European Economic Area (EEA) and the United Kingdom, we process personal information under the following legal bases:

Consent (e.g., marketing communications, non-essential cookies)
Legitimate interests (e.g., website analytics, business development)
Performance of a contract (e.g., responding to service requests)
Legal obligations (e.g., compliance with applicable laws)

4. Marketing, Analytics, and Third-Party Tools

a. HubSpot

We use HubSpot, a marketing automation and CRM platform, to manage inquiries, marketing communications, and customer relationships. HubSpot may collect personal information such as contact details, website activity, and form submissions.

HubSpot acts as a data processor on our behalf and processes data in accordance with its own privacy policy and applicable data protection laws.

b. Google Analytics 4 (GA4)

We use Google Analytics 4 (GA4) to analyze how visitors interact with the Site. GA4 collects information such as device data, approximate location, and on-site behavior using cookies and similar technologies.

Google processes this data as a service provider. IP addresses may be anonymized or truncated where required by law. You can learn more about Google’s data practices through Google’s privacy documentation.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Enable core website functionality
Analyze Site traffic and performance
Support marketing and lead-generation efforts

For more details, please see our Cookie Policy below.

6. Sharing of Personal Information

We do not sell personal information.

We may disclose personal information to:

Service providers and vendors (e.g., hosting, analytics, marketing platforms)
Professional advisors (e.g., legal, accounting)
Government or regulatory authorities when required by law

All service providers are contractually obligated to protect personal information and use it only for authorized purposes.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

8. Your Privacy Rights

a. GDPR Rights (EEA and UK Residents)

You have the right to, subject to applicable law:

Access your personal data
Request correction or deletion
Restrict or object to processing
Request data portability
Withdraw consent at any time
Lodge a complaint with a supervisory authority

b. CCPA/CPRA Rights (California Residents)

You have the right to:

Know what personal information we collect, use, and disclose
Request deletion of personal information
Request correction of inaccurate personal information
Opt out of the sale or sharing of personal information (we do not sell or share for cross-context behavioral advertising)
Limit the use of sensitive personal information (if applicable)
Not be discriminated against for exercising your rights

Requests may be submitted using the contact information below.

9. International Data Transfers

For individuals located in the EEA or the United Kingdom, personal information may be transferred outside of your jurisdiction. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum or International Data Transfer Agreement (IDTA).

9A. How to Exercise Your Privacy Rights

To exercise any of your privacy rights under EU GDPR, UK GDPR, or CCPA/CPRA, please submit a request by email.

When contacting us, please:

Use the subject line “Privacy Rights Request”
Specify the right you wish to exercise (e.g., access, deletion, correction)
Provide sufficient information for us to verify your identity

We will respond within the timeframes required by applicable law.

Email: privacy@xponentialworks.com

10. Data Security

We implement reasonable technical and organizational safeguards designed to protect personal information. However, no system is completely secure.

11. Children’s Privacy

The Site is not intended for children under 13, and we do not knowingly collect personal information from children.

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised effective date.

13. Contact Information

To exercise your rights or ask questions about this Privacy Policy, contact:

XponentialWorks
Email: [Insert Privacy Contact Email]

Cookie Policy

This Cookie Policy explains how XponentialWorks uses cookies and similar technologies on https://www.xponentialworks.com.

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites function properly and provide information to site owners.

2. Types of Cookies We Use

a. Strictly Necessary Cookies

These cookies are required for the Site to function and cannot be disabled.

b. Analytics Cookies

Used to understand how visitors interact with the Site (e.g., Google Analytics 4).

c. Functional Cookies

Enable enhanced functionality and personalization.

d. Marketing Cookies

Used to track visitors across websites and support marketing efforts (e.g., HubSpot).

3. Consent Management

Where required by law (including GDPR), non-essential cookies are placed only after you provide consent via a cookie banner or preference center.

4. Managing Cookies

You can control or delete cookies through your browser settings. You may also opt out of Google Analytics using Google’s opt-out tools.

5. Updates to This Cookie Policy

We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated date.