Last updated: October 4, 2026
This Privacy Policy explains how expandedd sl. (“EXPANDEDD”, “we”, “us” or “our”) collects, uses, stores, discloses and otherwise processes personal data when you visit expandedd.com or interact with our website and related services. We aim to process personal data lawfully, fairly, transparently and securely in accordance with applicable data-protection law, including the EU General Data Protection Regulation (GDPR) where applicable.
The data controller responsible for personal data processed through EXPANDEDD is expandedd sl., Spain. Privacy enquiries and data-protection requests can be sent to privacy@expandedd.com.
This Privacy Policy applies when you visit expandedd.com, communicate with us, submit forms, subscribe to communications, interact with content or features, or otherwise use services made available through EXPANDEDD. Third-party websites and services linked from our website are governed by their own privacy practices.
Depending on how you interact with EXPANDEDD, we may process contact details and information you submit to us; communications and enquiries; technical information such as IP address, browser, device type, operating system, language, timestamps and security logs; and usage information such as pages viewed, links clicked, traffic sources, session information and interactions with website features.
We may collect information directly from you when you contact us or submit information, automatically through our website and related technologies, and from service providers that support website hosting, security, analytics, communications or other operational functions.
We may process personal data to provide, operate and secure the website; respond to enquiries; maintain and improve our services; understand website performance and usage; prevent fraud, abuse and security incidents; maintain appropriate business records; comply with legal obligations; establish, exercise or defend legal claims; and send communications where permitted by law.
Where the GDPR or equivalent European data-protection rules apply, we rely on an appropriate lawful basis for each processing activity. This may include performance of a contract or steps requested before entering a contract, our legitimate interests where they are not overridden by your rights, your consent where required, and compliance with legal obligations. Where processing relies on consent, you may withdraw that consent at any time without affecting processing that was lawful before withdrawal.
EXPANDEDD may use cookies, tags and similar technologies for essential website functionality, security, preferences, analytics and, where applicable, marketing. Non-essential technologies that require consent under applicable law should only be used after the required consent has been obtained. You may also be able to control cookies through your browser or the website's consent controls.
EXPANDEDD may use analytics and tag-management technologies to understand website usage and manage website integrations. These technologies can involve technical identifiers, device information and interaction events. Where applicable law requires consent for these technologies, processing will be subject to the user's consent choices.
We may disclose personal data to service providers and processors that support our website, infrastructure, security, communications, analytics and professional services, where reasonably necessary. We may also disclose information when required by law, to respond to lawful requests, protect rights or security, or in connection with a merger, acquisition, restructuring or similar corporate transaction. Service providers are expected to process personal data subject to applicable legal and contractual requirements.
Some service providers may process information outside Spain or the European Economic Area. Where applicable law restricts international transfers, we use an appropriate lawful transfer mechanism, which may include an adequacy decision, Standard Contractual Clauses or another legally recognised safeguard, together with supplementary safeguards where appropriate.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, security, accounting, dispute-resolution and compliance needs. Retention periods depend on the nature of the information, the processing purpose and applicable legal requirements. When information is no longer required, we may delete, anonymise or securely isolate it as appropriate.
We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures may include access controls, secure communications, authentication, logging, backups and security monitoring. No internet transmission or storage system can be guaranteed to be completely secure.
Subject to applicable law, you may have rights to request access to your personal data, correct inaccurate data, request erasure, restrict processing, object to certain processing, receive certain data in a portable format and withdraw consent. You may also object to direct marketing at any time. To exercise an applicable right, email privacy@expandedd.com. We may need to verify your identity before fulfilling a request.
If you are in Spain or otherwise protected by European data-protection law, you may lodge a complaint with the competent data-protection supervisory authority. In Spain, the national supervisory authority is the Agencia Española de Protección de Datos (AEPD). You may contact us first at privacy@expandedd.com so that we have an opportunity to address your concern, but doing so does not limit your right to contact a supervisory authority.
Where we send promotional electronic communications, we do so in accordance with applicable law. You can unsubscribe using the mechanism provided in the communication or by contacting privacy@expandedd.com. We may still send non-promotional communications where necessary for a service, transaction, security matter or legal obligation.
EXPANDEDD is not intended to knowingly collect personal data from children in circumstances prohibited by applicable law. If you believe a child has provided personal data to us unlawfully, contact privacy@expandedd.com so that we can investigate and take appropriate action.
The website may contain links to third-party websites, platforms or services. Independent third parties determine their own processing practices, and their privacy policies apply when you interact with them. We encourage you to review those policies before providing personal data.
We may update this Privacy Policy to reflect changes to our services, technologies, processing activities, service providers, business operations or legal requirements. When we make changes, we will update the date shown at the top of this page and provide additional notice where required by law.
For questions, requests or concerns relating to privacy or this Privacy Policy, contact: expandedd sl., Spain — privacy@expandedd.com.
© 2026 expandedd sl. All rights reserved.
