Privacy Policy

We collect personal data that you voluntarily provide while using our website or services. We do not collect information about site visitors from other sources, such as public records or private organizations. We do not collect or use personal data for any purpose other than that indicated at the point of collection on our website. If we wish to use your personal data for a new purpose, we will provide you the means to consent to this new purpose by indicating in a box at the point of collection.

You can access our website home page and browse our Site without disclosing your personal data.

• Our Site does not enable visitors to communicate with other visitors or post information to be accessed by others.
• The Site may include links to third-party web service providers. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review their private policies.

We may collect non-personal data when you visit our Site. For example, we collect data such as randomly assigned numeric identifiers related to general site usage on a non-personally identifiable basis. Other non-personal data may be collected by our partners for statistical purposes.
We use cookies to personalize content and ads, provide social media features, and analyze our traffic. The data collected through cookies may be processed in accordance with applicable laws, including the GDPR, for the following purposes:

• Statistical purposes: To analyze site usage and improve our services
• Marketing: To deliver relevant advertisements and marketing communications.
• Social media features: To allow users to share content and engage with social media platforms.

We may automatically log personal data through technologies such as programming scripts or links that are automatically logged with personal data about specific individuals. This may include information such as your IP address, browser type, device information, and timestamps. The data are processed in accordance with applicable laws, including the GDPR, for the following purposes:

• Technical administration of the website: To ensure the technical functionality and security of our site.
• Research and development: To improve our services and user experience.
• Customer administration: Presumably to manage users’ accounts and interactions.
• Marketing: To promote services and communicate with users.

The site does not intentionally collect personal data from children. Children are not permitted to use the site or submit personal information. Any information inadvertently collected about children will be removed and destroyed.

The site may disclose visitors’ personal data to our subsidiaries or other organizations. When personal data is disclosed for the same purposes stated at the time of collection, users are given the options to opt-out. This is typically done through a checkbox at the point of data collection.
If personal data is to be disclosed for purposes different from those originally indicated, users will be provided the opportunity to consent to this disclosure via a checkbox at the point of collection.

Users have the option to securely send personal data, which may include:

• Primary personal data (e.g., name and contact details)
• Identifiers (e.g., credit card details, website passwords)

The site has implemented various security policies, rules, and technical measures to protect the personal data from:

• Unauthorized access
• Improper use or disclosure
• Unauthorized modification
• Unlawful destruction or accidental loss

All employees and data processors with access to personal data are required to maintain the confidentiality of visitors’ personal information. Personal data may be disclosed in compliance with legal requirements, including mandated reporting and disclosure requirements, judicial orders, subpoenas, warrants, or other government request.

Individuals can inquire whether their personal data is being held by the organization by sending an email to support@xlc.com. Upon request, individuals can receive a machine-readable, structured copy of the personal data within 30 days. The request must be sent to the same support email. Please note that this process requires proof of identity to process data access requests and will verify the email address associated with the request.
Individuals have the right to challenge the data held about them and can request that it be:

• Erased
• Rectified or amended
• Completed

We reserve the right to refuse access to personal data but allows individual to challenge such a decision.