When you submit an enquiry, we may collect your name, email address, telephone number, country, and information you choose to share about your background or interest in our business opportunity.

When you use the website, technical information may be collected, including IP address, device and browser details, pages viewed, referring website and cookie preferences, depending on the technologies enabled.

Please do not include sensitive personal information in your enquiry unless specifically requested through an appropriate secure process. Information marked as required on a form is needed for us to respond to that enquiry; optional information may be left blank.

We use your information to respond to enquiries, explain the independent business opportunity and associated educational products, arrange interviews or follow-up discussions, and provide information you request.

We may also use information to manage our communications and records, maintain website security, troubleshoot technical problems, improve website functionality and meet legal obligations.

We do not use enquiry information for unrelated marketing without an appropriate legal basis.

Where the EU General Data Protection Regulation (GDPR) applies, we rely on the lawful basis appropriate to each activity: steps taken at your request before entering a contract (for requested business discussions); legitimate interests (such as responding to relevant enquiries, security and routine business administration, where your rights do not override those interests); consent (for optional marketing and non-essential cookies where required); and compliance with legal obligations.

Where we rely on legitimate interests, those interests are to respond efficiently to genuine enquiries, protect our systems and manage our operations. You may object to processing based on legitimate interests in circumstances provided by law.

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

After you submit an enquiry, Rachel Krider or an authorised member of the Xpansion team may contact you by email or telephone, and through another channel only where you have requested or agreed to that method or where otherwise permitted by law.

We use your contact details to respond to your request, provide relevant business information and arrange follow-up conversations. We send ongoing promotional communications only when we have an appropriate legal basis and comply with applicable marketing rules.

You can ask us to stop promotional messages at any time by using an unsubscribe option where provided or contacting us at [PRIVACY EMAIL]. Opting out of marketing does not prevent necessary replies to an active enquiry or legally required communications.

We may disclose information to authorised Xpansion personnel and business representatives who need it to handle your enquiry, and to contracted service providers who support website hosting, enquiry forms, customer relationship management, email, scheduling, video meetings, security or analytics.

Where appropriate, we require service providers acting on our behalf to use information only for authorised purposes and protect it under suitable contractual and security obligations. We may disclose information where required by law, regulation or a valid legal process.

We do not sell personal information to data brokers. [CONFIRM WHETHER LEADS ARE SHARED WITH INDEPENDENT DISTRIBUTORS OR OTHER CONTROLLERS, AND DISCLOSE THEIR ROLES IF SO.]

Our operations and service providers may involve accessing or processing information outside the European Economic Area, including in the United Arab Emirates and other countries in which our team or technology providers operate.

Where GDPR applies, we will use an applicable transfer mechanism and safeguards required by law, such as an adequacy decision or approved Standard Contractual Clauses where appropriate, together with supplementary safeguards where necessary.

For information about the safeguards relevant to your information, contact [PRIVACY EMAIL]. [VERIFY ACTUAL DESTINATION COUNTRIES AND TRANSFER MECHANISMS BEFORE PUBLICATION.]

We keep personal information only for as long as necessary for the purposes for which it was collected, including handling enquiries, maintaining necessary business records, resolving disputes and meeting legal requirements.

Enquiry records are generally kept for [INSERT ACTUAL ENQUIRY RETENTION PERIOD] after the last meaningful interaction unless a longer period is justified or required by law. Marketing records are retained until you unsubscribe or consent is withdrawn, subject to a limited suppression record where necessary to honour your request.

At the end of the relevant period, we delete or anonymise information using reasonable procedures. [CONFIRM PERIODS FOR CRM, EMAIL, ANALYTICS AND BACKUPS.]

We apply reasonable technical and organisational measures designed to protect information from unauthorised access, accidental loss, misuse, alteration and disclosure. These may include access controls, appropriate account security, restricted team access and security measures provided by our hosting and communication services.

Only people who need personal information for legitimate business purposes should be given access to it. No internet transmission or electronic system is completely secure, so absolute security cannot be guaranteed.

Our website may use strictly necessary cookies for essential operation, and—if enabled—analytics, embedded-content or advertising technologies to understand website use and improve our services.

Where legally required, we will ask for your consent before placing non-essential cookies or similar tracking technologies. You will be able to refuse them and change or withdraw your preferences as easily as you accepted them.

[INSERT ACTUAL COOKIE/PIXEL PROVIDERS, PURPOSES AND DURATIONS OR LINK TO AN ACCURATE COOKIE TABLE.] Browser settings may also allow you to block or delete cookies, although some essential features may be affected.

Depending on applicable law, you may request access to the personal information we hold about you, correction of inaccurate information, deletion, restriction of processing, data portability, or object to certain uses, including direct marketing.

Where we rely on consent, you may withdraw it at any time. You may also lodge a complaint with a competent data protection authority, including the authority in the EU country where you habitually reside, work or believe an infringement occurred.

To exercise your rights, email [PRIVACY EMAIL]. We may request reasonable information to verify your identity before acting on a request. We will respond within the time required by applicable law.

[CONFIRM WHETHER ANY SOLELY AUTOMATED DECISION-MAKING WITH LEGAL OR SIMILAR SIGNIFICANT EFFECTS OCCURS; IF IT DOES, ADD REQUIRED DISCLOSURES.]

This website and the independent business opportunity described on it are intended for adults aged 18 and over. We do not knowingly solicit enquiries from children under 18.

If we learn that we have collected personal information from someone under 18 through our enquiry process without a valid lawful basis, we will take appropriate steps to delete it. A parent or guardian may contact [PRIVACY EMAIL] with a concern.

Our website may link to external websites or services, including scheduling tools, video platforms or social media sites. Those third parties may have their own privacy practices and policies.

We encourage you to review their notices before submitting information to them. We are not responsible for third-party privacy practices that are outside our control.

We may update this Privacy Policy to reflect changes in our business, website technology, legal obligations or information-handling practices.

The current version will be published on this page with its effective date. Where required by law, we will provide additional notice or seek renewed consent for material changes.

For privacy questions, data access or deletion requests, or concerns about how information is handled, please contact:

Xpansion Event Management Services
[REGISTERED BUSINESS ADDRESS]
Dubai, United Arab Emirates
Privacy email: [PRIVACY EMAIL]
Website: https://create.rachelkrider.com

[ADD EU REPRESENTATIVE DETAILS IF REQUIRED; ADD DATA PROTECTION OFFICER CONTACT DETAILS IF APPLICABLE.]