Privacy Policy (Global)

Effective date: 2 January 2026

X3WEB (we, us, our) is committed to protecting personal information and handling it responsibly. This Privacy Policy explains what we collect, how we use it, how we share it, how we protect it, and the rights and choices available to you under applicable privacy laws worldwide.

This policy applies to our websites, services, and any related pages or communications that link to this Privacy Policy (collectively, the Services).

1. Who We Are
X3WEB is the business responsible for your personal information (the data controller, or similar term under applicable laws), unless stated otherwise for a specific service.

Contact:
Email: support@x3web.co.za

2. Information We Collect
We may collect the following categories of personal information, depending on how you use the Services:

A. Information you provide to us
Contact details: name, email address, phone number, business name, address (if provided)
Account details: login details or profile information (if you create an account)
Communications: messages you send us (support requests, inquiries, feedback), including attachments
User content: content you submit through forms or uploads (e.g., text, images, documents)

B. Information collected automatically
Device and usage data: IP address, device type, browser type, operating system, pages viewed, clicks, time on page, referring/exit pages
Approximate location data: derived from IP address
Cookies and similar technologies: used to operate the site, remember preferences, and measure performance (see Cookies section)

C. Information from third parties (where applicable)
We may receive information from service providers (e.g., payment processors, analytics providers, advertising platforms) or partners when they help us provide the Services.

3. How We Use Personal Information
We use personal information for the following purposes:

Service delivery and operations
Provide, maintain, and improve the Services
Set up and manage accounts (if applicable)
Provide customer service and technical support
Process transactions (if applicable) and send service-related notices

Communications
Respond to inquiries and support requests
Send administrative messages (updates, security notices, changes to terms/policies)

Marketing and advertising (where permitted by law)
Send marketing communications (you can opt out at any time)
Measure and improve marketing performance
Show relevant content or ads (where used and permitted)

Security and compliance
Protect against fraud, abuse, and security incidents
Enforce our terms and protect our legal rights
Comply with applicable laws, regulations, and lawful requests

4. Legal Bases for Processing (Where Required)
Where laws require a legal basis (such as GDPR/UK GDPR and similar regimes), we process personal information under one or more of the following bases:

Contract: to provide the Services you request
Consent: where you provide permission (e.g., certain cookies, optional marketing in some regions)
Legitimate interests: to operate, improve, and secure our Services, and communicate with customers (balanced against your rights)
Legal obligation: to comply with legal requirements

5. Cookies and Similar Technologies
We use cookies and similar technologies to:
Keep the website functioning properly
Remember preferences
Understand usage and improve performance
Support marketing (where enabled)

Your choices:
You can control cookies via your browser settings and, where available, our cookie banner/preferences tool. Blocking some cookies may impact site functionality.

6. How We Share Personal Information
We do not sell your personal information in the conventional sense. We may share personal information in the following situations:

Service providers (processors)
We may share information with vendors who help us run the Services, such as:
Hosting and infrastructure providers
Website analytics providers
Email and communication tools
Customer support tools
Payment processors (if applicable)
Advertising/marketing platforms (if applicable)

Legal, safety, and rights
We may disclose information if required by law, court order, or lawful government request, or if necessary to:
Protect our rights and property
Enforce agreements
Prevent fraud or security threats
Protect users or the public

Business transfers
If we are involved in a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of that transaction (subject to appropriate safeguards).

7. International Data Transfers
Because we operate and use service providers globally, your personal information may be processed in countries other than your own. Where required by law, we use safeguards for international transfers, such as:
Adequacy decisions (where applicable)
Standard Contractual Clauses or equivalent contractual protections
Other lawful mechanisms permitted by applicable law

8. Data Retention
We keep personal information only as long as necessary for the purposes described in this policy, including:
Providing the Services
Maintaining business records
Complying with legal obligations
Resolving disputes and enforcing agreements

Retention periods vary depending on the type of information and how it is used. We may retain and use aggregated or de-identified information for longer periods.

9. Security
We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Privacy Rights and Choices (Global)
Depending on where you live, you may have one or more of the following rights:

Access: request a copy of your personal information
Correction: request correction of inaccurate or incomplete information
Deletion: request deletion of your personal information (subject to legal exceptions)
Portability: request a portable copy of certain information
Restriction: request that we limit processing in certain cases
Objection: object to certain processing (including some marketing or legitimate interest processing)
Withdraw consent: where processing is based on consent, you can withdraw it at any time
Opt out of marketing: you can unsubscribe from marketing emails at any time

How to exercise your rights:
Email us at support@x3web.co.za with your request. We may need to verify your identity before responding. In some cases, we may decline or limit a request where permitted by law (for example, where retention is required for legal compliance).

Complaints:
If you believe we have not addressed your concern adequately, you may have the right to lodge a complaint with your local data protection authority or regulator.

11. Regional Notices (Applies Where Relevant)
A. EEA/UK/Switzerland (GDPR/UK GDPR)
You have rights described above, including the right to object to processing based on legitimate interests and to lodge a complaint with a supervisory authority.

B. South Africa (POPIA)
You may request access, correction, or deletion of your personal information and object to processing in certain circumstances. You may also lodge a complaint with the Information Regulator.

C. California (CPRA)
If applicable, California residents may have rights to know, delete, correct, and opt out of certain sharing for cross-context behavioral advertising (if used). We respond to verifiable consumer requests as required by law.

D. Brazil (LGPD) and other jurisdictions
Similar rights may apply, including access, correction, deletion, portability, and information about sharing.

Note: Rights and terminology vary by country/state. We apply the relevant standard based on your location and the applicable law.

12. Children’s Privacy
Our Services are not intended for children. We do not knowingly collect personal information from children under the age required by local law (typically under 13, and in some regions under 16). If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.

13. Third-Party Links
Our Services may link to third-party websites or services. We are not responsible for their privacy practices. Please review their policies before providing personal information.

14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the Effective date above. Your continued use of the Services after changes become effective means you accept the updated policy.