Privacy Policy

Last updated: 1 January 2025  |  Effective date: 1 January 2025

Welcome to Xendvora ("we", "us", or "our"), operated at xendvora.com. We are committed to protecting your privacy and handling your personal data in a transparent, responsible manner. This Privacy Policy explains what data we collect, why we collect it, how it is used, and your rights in relation to it.

Xendvora is an informational website. We do not sell financial products, offer paid services, or accept payment from users. Our sole purpose is to provide free educational content on personal finance and investment concepts.

1. Data Controller

Xendvora (xendvora.com) is the data controller responsible for your personal data. You may contact us at any time at info@xendvora.com.

2. What Data We Collect

2.1 Data You Provide Voluntarily

When you complete the contact form on our website, we collect:

• Your first and last name
• Your email address
• The subject and content of your message

We do not collect payment information, government identification, or sensitive personal data (as defined under applicable data protection law).

2.2 Data Collected Automatically

When you visit our website, certain technical data is collected automatically by our hosting infrastructure and analytics tools, including:

• IP address (anonymised where possible)
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring URL
• Date and time of visit

3. How We Use Your Data

We use your personal data exclusively for the following purposes:

• To respond to enquiries: Data submitted via the contact form is used solely to respond to your message.
• To improve our website: Anonymised analytics data helps us understand how visitors use the site and improve content quality.
• To comply with legal obligations: We may retain or disclose data where required by law.

We do not use your data for advertising, profiling, or automated decision-making. We do not sell your data to any third party.

4. Legal Basis for Processing

Under GDPR and applicable data protection law, we process your data on the following legal bases:

• Legitimate interests (Art. 6(1)(f) GDPR): For analytics to improve our educational service.
• Consent (Art. 6(1)(a) GDPR): For non-essential cookies, where you have provided consent via our cookie banner.
• Contract / pre-contractual steps (Art. 6(1)(b) GDPR): For processing contact form enquiries.

5. Cookies

We use cookies and similar technologies on our website. Please see our Cookie Policy for full details of the cookies we use, their purpose, and how to manage your preferences.

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with trusted third-party service providers who assist us in operating the website (e.g., hosting, analytics). These providers are contractually obligated to process data only on our instructions and in accordance with applicable data protection law.

We may disclose data if required by law, court order, or regulatory authority.

7. International Transfers

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses or adequacy decisions).

8. Data Retention

Contact form submissions are retained for up to 12 months for correspondence purposes, then deleted. Anonymised analytics data may be retained indefinitely. If you request deletion of your data, we will do so within 30 days unless retention is required by law.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Right of access: Request a copy of personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your personal data.
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at info@xendvora.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

10. Children's Privacy

Xendvora is not directed at children under the age of 16. We do not knowingly collect data from children. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

11. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Our website is served over HTTPS. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via a notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact

For any privacy-related questions or requests, please contact us at:
Email: info@xendvora.com
Website: xendvora.com