Privacy Policy

Controller

XPBLY LLC FZ
Represented by Ximena Paula Barbano
Meydan Grandstand, 6th floor
Meydan Road, Nad Al Sheba
Dubai, United Arab Emirates
Email: ximena@xpbly.com

General Information

This privacy policy explains how personal data is collected and processed when you visit this website or submit an inquiry through the contact form. We process personal data only where necessary to provide this website, respond to inquiries, and maintain secure communication.

Data Collected When Visiting This Website

When you access this website, technical data may be processed automatically by the hosting provider. This may include your IP address, browser type, operating system, referring URL, date and time of access, and requested files. This data is used to ensure security, stability, and proper delivery of the website.

Contact Form

If you submit the inquiry form, the information you provide, such as your name, email address, and message, will be used to respond to your request. This data is not sold or shared for advertising purposes.

Email Communication

If you contact us by email, your message and contact details will be processed for the purpose of handling your inquiry and any follow-up communication.

Hosting

This website is hosted by an external hosting provider. The hosting provider processes technical data required to operate and secure the website. Processing is carried out for the purpose of providing a reliable and secure online presence.

External Links

This website may contain links to external websites, including LinkedIn, Instagram, and XPBLY. We are not responsible for the privacy practices or content of third-party websites. Please review the privacy policies of those external services separately.

Retention

Personal data submitted through inquiries is retained only as long as necessary to respond to the request, maintain business communication, or comply with applicable legal obligations.

Your Rights

Depending on applicable law, you may have the right to request access to, correction of, deletion of, or restriction of the processing of your personal data. You may also have the right to object to processing or request data portability. To exercise these rights, contact us at ximena@xpbly.com.

Cookie Choices and Optional Analytics

You can choose "Only necessary" or "Accept optional cookies" in our cookie banner. Optional analytics is blocked until you accept; rejecting it does not prevent you from using the website or sending an inquiry. You can change or withdraw your choice at any time through "Cookie settings" in the footer.

We store this choice in your browser's local storage under "ximena-cookie-choice-v1" for up to 180 days. This preference is used only to remember your decision, not to analyse your visits. If browser storage is unavailable or cleared, you may be asked again. Withdrawing consent stops future optional tracking; it does not automatically erase data already held by the providers. Contact us about any data-rights request.

With your consent, Google Analytics is used for website statistics and inquiry-related events, and Microsoft Clarity for usage analysis, which can include clicks, scrolling and session recordings. Depending on the service, these tools process technical and usage information such as page addresses, browser and device information, and cookie identifiers. Google Tag Manager manages the configured tags; its containers are not loaded until optional analytics is accepted. Advertising consent remains disabled.

These providers may process information outside your country, including in the United States. Their handling of data, international transfers and retention is explained in Google's information for partner websites and the Microsoft Privacy Statement.

Contact-Form Security: Cloudflare Turnstile

The inquiry form uses Cloudflare Turnstile, provided by Cloudflare, Inc., to help detect bots and prevent spam. The security check loads on the inquiry page, independently of your optional-cookie choice. Cloudflare processes technical signals such as your IP address, browser information, connection characteristics and the website origin. Our server checks the verification token with Cloudflare and can include your IP address; it does not send the name, email address or message entered in the form to the Turnstile verification API.

Cloudflare processes these signals to provide bot protection and to improve its bot-detection service. For details about data handling, see the Turnstile Privacy Addendum and Cloudflare Privacy Policy. If the check cannot be completed, you can contact us by email instead.

To limit repeated form submissions, our server also stores a keyed hash derived from the requesting IP address together with attempt timestamps. This rate-limit file does not contain raw IP addresses, names, email addresses, messages or verification tokens. Entries stop counting after at most 15 minutes and are removed during subsequent checks; inactive entries can remain until another check occurs.

Updates

This privacy policy may be updated from time to time to reflect changes in the website, legal requirements, or business operations.

Last updated: October 13, 2026