Xpander Media

Privacy Policy

Last updated 2026-08-27.

This policy explains how Xpander Media handles personal data in connection with your use of this website, xpandermedia.com, as a visitor. It does not cover the separate relationship between Xpander Media and its affiliates — that relationship, and the personal data handling it involves, is governed by Section 18 (General Data Protection Regulation) of the Affiliate Program Participation Agreement. Nothing here overrides or restates that section.

Who we are

Xpander Media operates this website and the affiliate network it advertises. This website is EU-facing, and the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the ePrivacy rules apply to how it handles visitor data.

Data controller:
Xpander Media, contactable at info@xpandermedia.com — the only public contact address for this site.

What this website actually collects

This site is deliberately data-minimal. Verified directly in the codebase, not assumed:

The one thing this site cannot avoid: like any website, basic technical information (your IP address, request timestamp, browser user-agent, and the page requested) is processed by the hosting infrastructure simply to deliver pages to your browser. This is standard web server behaviour, not a deliberate data-collection feature of this site, and Xpander Media does not use it for analytics or profiling.

Hosting provider:
Hostinger.

Why we process this (legal basis)

Basic server access logging is processed under Xpander Media's legitimate interest in keeping the website secure and operational. If you email us directly, we process that correspondence to respond to you, based on your own initiative in contacting us.

Who we share data with

Our hosting provider (Hostinger) necessarily has access to server logs as part of providing hosting infrastructure. We do not sell, rent, or share visitor data with advertisers or data brokers — this site has no mechanism to do so, since it collects no visitor data to share in the first place beyond the unavoidable hosting-level logs above.

Any other processors/sub-processors:
None. Hosting, named above, is the only processor involved — this site has no analytics vendor, ad-tech vendor, form backend, or other third-party service to name.
International transfer:
Hostinger's infrastructure for this site is located in the United Kingdom, outside the EU/EEA. That transfer is safeguarded under whichever GDPR-recognised transfer mechanism applies to UK-based processors at the time of your visit (such as an adequacy decision or standard contractual clauses).

How long we keep data

This site does not run its own database of visitor data to set a retention period for — there is none to set. Hosting-level access logs are retained by Hostinger under its own standard operational policy, not a period Xpander Media configures or controls. If you email us, we keep that correspondence for as long as it remains relevant to the relationship it relates to, then delete it; you can also ask us to delete it sooner at any time (see Your rights below).

Your rights

Under the GDPR, you have the right to access, correct, delete, restrict, or receive a copy of your personal data, and to object to how it's processed. Given this site collects almost nothing about visitors beyond unavoidable hosting logs, most of these rights will have little to exercise — but if you've emailed us, you can ask us to delete that correspondence at any time by contacting info@xpandermedia.com. If you believe your rights haven't been respected, you also have the right to lodge a complaint with your local data protection supervisory authority — typically the one in the EU/EEA country where you live, work, or where the alleged issue occurred, not necessarily where Xpander Media is registered.

Cookie and tracking detail

See /cookies/ for the full, specific list of what this site does and doesn't set.

Changes to this policy

If Xpander Media ever adds analytics, advertising, or any other tracking to this website, this page will be updated first, before that tracking goes live — not afterward.