Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

We may collect personal information that you voluntarily provide to us when you fill out a contact form, request a quote, subscribe to our newsletter, or otherwise communicate with us. This information may include your name, email address, phone number, company name, job title, mailing address, and any other information you choose to provide.

1.2 Information Collected Automatically

When you visit our Site, we automatically collect certain technical and usage information, including your IP address and approximate geographic location, browser type and version, operating system and device information, pages visited and time spent on pages, referring website or source, and the date and time of your visit.

This data is collected through the following third-party services:

• Google Analytics 4 (GA4) — provided by Google LLC, used to analyze website traffic and user behavior. GA4 collects data such as page views, session duration, traffic sources, and user interactions. Data may be transferred to and processed on Google servers in the United States. For more information, visit Google's Privacy Policy.
• Google Search Console (GSC) — provided by Google LLC, used to monitor and analyze how the Site appears in Google Search results. GSC processes search query data and site performance metrics.
• Meta Pixel (Facebook Pixel) — provided by Meta Platforms, Inc., used to measure the effectiveness of advertising, understand user actions on the Site, and deliver targeted advertisements. Meta Pixel collects data about your browsing activity and may link it to your Facebook or Instagram account. For more information, visit Meta's Privacy Policy.

1.3 Hosting

Our Site is hosted by dhosting.pl (H88 S.A., Poland). The hosting provider may process certain technical data (such as server logs containing IP addresses) as part of providing hosting services. For more information, visit dhosting.pl's privacy policy.

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide customer support
• Send marketing communications and updates (with your consent)
• Improve and optimize our Site and user experience
• Analyze website traffic and usage patterns
• Measure the effectiveness of our advertising campaigns
• Protect against fraud and security threats
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of third parties:

• Service Providers — third-party vendors who help us operate our website, including Google LLC (analytics), Meta Platforms, Inc. (advertising), and H88 S.A. (hosting).
• Professional Advisors — lawyers, accountants, and auditors as needed for business operations.
• Legal and Regulatory — when required by law, court order, or government request, or to protect our rights and safety.
• Business Transfers — in connection with a merger, acquisition, restructuring, or sale of assets.

4. Your Privacy Rights

4.1 Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we have collected about you
• Request deletion of your personal information
• Request correction of inaccurate personal information
• Opt out of the sale or sharing of your personal information (note: we do not sell personal information)
• Non-discrimination for exercising your privacy rights

4.2 Rights Under Other U.S. State Privacy Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with applicable privacy legislation may have similar rights, including the right to access, correct, delete, and opt out of certain processing of personal data.

4.3 How to Exercise Your Rights

To submit a privacy request, please contact us at info@xton.eu or use the contact information in Section 13 below. We will verify your identity before processing your request and respond within the timeframe required by applicable law (generally 45 days).

5. "Do Not Sell or Share My Personal Information"

We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. If this practice changes in the future, we will update this Privacy Policy and provide a clear opt-out mechanism.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Google Analytics 4 data is retained for 14 months by default. When your information is no longer needed, we will securely delete or anonymize it.

7. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies. Below is an overview of the cookies used:

You can manage your cookie preferences through your browser settings. You may also opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on. To manage Meta advertising preferences, visit facebook.com/adpreferences. Please note that disabling certain cookies may affect the functionality of the Site.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us immediately.

10. Third-Party Links

Our Site may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party websites you visit.

11. International Data Transfers

Our Site is intended for users in the United States. XTON sp. z o.o. is based in Poland, and our hosting infrastructure is located in Poland (dhosting.pl). Your data may be processed in the European Economic Area (EEA) and/or the United States (by Google and Meta). Where data is transferred outside the EEA, appropriate safeguards are in place as required by applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: