Last Updated: September 5, 2026
ExpandiCore (“ExpandiCore,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information and personal data of visitors, customers, prospective customers, business partners, and other individuals who interact with our website, services, communications, and digital platforms.
This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process personal information when you visit our website, contact us, request our services, communicate with us, or otherwise interact with ExpandiCore.
This Privacy Policy is intended to address applicable privacy and data-protection requirements, including, where applicable, the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable data-protection and privacy legislation.
Because privacy requirements vary by jurisdiction, certain rights and obligations described below may apply only to individuals in particular countries, states, or regions.
1. Who We Are
ExpandiCore is a digital growth agency providing services including SEO, AI-powered search strategies, website development, digital marketing, content marketing, social media strategy, website optimization, AI-powered solutions, and related digital growth services.
For privacy-related questions or requests, you may contact us using the contact information published on our website.
Privacy Contact:
ExpandiCore
Website: expandicore.com
Email: [Expandicore@gmail.com
sals@expandicore.com]
If required by applicable law, we may designate an EU/UK representative or Data Protection Officer and provide their details in this Privacy Policy or through an appropriate privacy notice.
2. Personal Information We Collect
Depending on how you interact with ExpandiCore, we may collect the following categories of information.
Information you provide directly
This may include:
- Full name
- Business name
- Job title or professional information
- Email address
- Telephone number
- Country or general location
- Website address
- Information about your business
- Services you are interested in
- Information submitted through contact forms
- Information provided when requesting a consultation or quotation
- Information contained in communications with us
- Any other information you voluntarily provide
Please do not submit sensitive personal information through ordinary website forms unless we specifically request and are legally permitted to collect it.
Information collected automatically
When you visit our website, we may automatically collect certain technical information, such as:
- IP address
- Browser type and version
- Device type
- Operating system
- Approximate geographic location
- Referring website
- Pages visited
- Date and time of visits
- Website interactions
- General usage and performance information
- Cookie and similar technology information
The exact information collected depends on the technologies and third-party services installed on our website.
3. How We Collect Information
We may collect information through:
- Website contact forms
- Consultation or quotation requests
- Email communications
- Telephone or other communications
- Newsletter or marketing subscriptions
- Website analytics
- Cookies and similar technologies
- Social media interactions
- Customer or business communications
- Information you provide during the delivery of our services
- Publicly available business information, where permitted by applicable law
- Third-party platforms or service providers
When personal information is collected directly from you, we aim to provide relevant privacy information at the point of collection. This is an important transparency requirement under GDPR-style privacy frameworks.
4. How We Use Personal Information
We may use personal information for legitimate business purposes, including:
Providing our services
- Responding to inquiries
- Providing quotations
- Managing client relationships
- Delivering requested services
- Communicating about projects
- Providing technical support
- Managing accounts and business relationships
Business development
- Understanding your business requirements
- Responding to consultation requests
- Following up on business inquiries
- Developing potential business relationships
Website operation
- Operating and maintaining our website
- Improving website functionality
- Monitoring performance
- Troubleshooting technical problems
- Protecting our website and systems
Analytics and improvement
- Understanding how visitors use our website
- Measuring website performance
- Improving user experience
- Developing and improving our services
Marketing
Where permitted by applicable law, we may use contact information to send:
- Business updates
- Service information
- Educational content
- Articles and resources
- Marketing communications
Where consent is required, we will obtain consent before sending the relevant marketing communications.
You may unsubscribe from marketing communications at any time.
Security and legal compliance
We may process information to:
- Detect and prevent fraud
- Protect our website and systems
- Investigate security incidents
- Enforce our agreements
- Establish or defend legal claims
- Comply with applicable laws and lawful requests
5. Legal Bases for Processing — GDPR and UK GDPR
Where the GDPR or UK GDPR applies, we process personal data using an appropriate lawful basis.
Depending on the circumstances, this may include:
Consent
We may process information where you have provided valid consent.
You may withdraw consent at any time. Withdrawal of consent does not affect processing that occurred before withdrawal.
Contract
Processing may be necessary to enter into or perform a contract with you.
Legitimate interests
We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
Examples may include:
- Managing business relationships
- Improving our website
- Securing our systems
- Responding to business inquiries
- Developing and improving services
- Certain forms of business-to-business communication
Legal obligation
We may process information where necessary to comply with a legal or regulatory obligation.
Vital interests
Where applicable and legally permitted, information may be processed to protect someone’s vital interests.
We will not rely on one legal basis where another basis is legally required.
6. Cookies and Similar Technologies
Our website may use cookies, pixels, local storage, analytics technologies, and similar technologies.
These technologies may be used for:
- Essential website functionality
- Security
- Website preferences
- Analytics
- Performance measurement
- Marketing
- Advertising or audience measurement
Where applicable law requires consent for non-essential cookies or similar technologies, we will request consent before activating them.
You may also control certain cookies through your browser settings.
Important: A cookie policy or consent mechanism should accurately reflect the actual technologies installed on your website. Non-essential cookies generally require user agreement in jurisdictions such as the UK when applicable.
7. Analytics and Third-Party Services
We may use third-party service providers to operate and improve our website and services.
These may include providers for:
- Website hosting
- Analytics
- Website security
- Email communications
- CRM systems
- Scheduling
- Customer support
- AI-powered services
- Advertising and marketing
- Payment processing
- Website performance
- Cloud storage
These providers may process personal information on our behalf or, depending on the service, act as independent controllers.
We seek to use reputable providers and, where legally required, enter into appropriate data-processing agreements or other contractual safeguards.
The actual third-party services used by ExpandiCore may change over time.
8. AI and Automated Technologies
ExpandiCore may use artificial intelligence and automated technologies as part of its website, customer communications, marketing, analytics, service delivery, or internal business processes.
For example, AI technologies may assist with:
- Responding to inquiries
- Customer communication
- Content generation
- Website functionality
- Business analysis
- Lead qualification
- Service improvement
- Operational processes
We do not intend to use personal information to make decisions producing legal or similarly significant effects about individuals solely through automated processing unless permitted by applicable law and appropriate safeguards are in place.
Where applicable privacy law provides rights concerning automated decision-making or profiling, those rights will apply.
9. Sharing Personal Information
We do not sell personal information simply as a normal part of operating our business.
We may disclose personal information to appropriate third parties when necessary, including:
- Service providers
- Website hosting providers
- Cloud service providers
- Analytics providers
- CRM providers
- Communication providers
- Marketing service providers
- Professional advisers
- Legal and accounting advisers
- Security providers
- Government authorities where legally required
- Courts, regulators, or law-enforcement authorities where legally permitted or required
We only share information where there is an appropriate business, contractual, legal, or other lawful basis.
10. International Data Transfers
ExpandiCore may work with service providers, partners, or infrastructure located in countries outside your country of residence.
As a result, personal information may be transferred internationally.
Where GDPR or similar laws apply, we will use appropriate legal mechanisms for international transfers where required, which may include:
- Adequacy decisions
- Standard Contractual Clauses
- Appropriate contractual safeguards
- Other legally recognized transfer mechanisms
International transfers will be handled in accordance with applicable data-protection requirements.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention periods may depend on:
- The purpose for which the information was collected
- Our relationship with you
- Legal and regulatory requirements
- Accounting and tax requirements
- Contractual obligations
- Dispute resolution
- Security requirements
- Legal claims
When information is no longer required, we will take reasonable steps to securely delete, anonymize, or otherwise dispose of it.
12. Data Security
ExpandiCore takes reasonable technical and organizational measures designed to protect personal information against:
- Unauthorized access
- Accidental loss
- Misuse
- Unauthorized disclosure
- Alteration
- Destruction
Security measures may include access controls, authentication, secure communications, system monitoring, backups, and other appropriate safeguards.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
13. Your Privacy Rights
Depending on your location and applicable law, you may have rights concerning your personal information.
These may include:
- Right to know what personal information we process
- Right to access your personal information
- Right to correct inaccurate information
- Right to request deletion
- Right to restrict processing
- Right to object to certain processing
- Right to data portability
- Right to withdraw consent
- Right to object to direct marketing
- Rights concerning certain automated decision-making
- Right to lodge a complaint with a relevant privacy regulator
These rights are subject to applicable legal exceptions and limitations.
For example, we may need to retain certain information to comply with legal obligations or establish, exercise, or defend legal claims.
14. California Privacy Rights
If you are a California resident and the CCPA/CPRA applies to ExpandiCore, you may have additional rights.
These may include rights to:
- Know about personal information collected about you
- Access personal information
- Request deletion
- Request correction of inaccurate information
- Opt out of certain sale or sharing of personal information
- Limit certain uses of sensitive personal information where applicable
- Receive information about applicable categories of personal information
- Exercise your privacy rights without unlawful discrimination
California law also contains specific requirements concerning notices at collection and privacy policies.
ExpandiCore does not sell personal information for monetary consideration as a normal part of its business.
If our practices change in a manner that triggers additional CCPA/CPRA obligations, we will update our notices and provide applicable opt-out mechanisms.
15. UK Privacy Rights
If you are located in the United Kingdom and UK GDPR applies, you may have rights including access, rectification, erasure, restriction, objection, data portability, withdrawal of consent, and rights concerning certain automated decision-making.
You may also complain to the Information Commissioner’s Office (ICO) or another applicable supervisory authority.
UK GDPR transparency requirements include information about processing purposes, lawful bases, recipients, retention, international transfers, rights, and relevant automated decision-making.
16. European Economic Area Privacy Rights
If you are located in the European Economic Area and GDPR applies, you may exercise the rights provided by the GDPR.
You may also lodge a complaint with the data-protection supervisory authority in the country where you live, work, or believe an infringement occurred.
17. How to Exercise Your Rights
To submit a privacy request, contact:
Email: [INSERT PRIVACY EMAIL ADDRESS]
Please clearly state:
“Privacy Request”
in the subject line.
We may request reasonable information necessary to verify your identity before completing certain requests.
We will respond within the timeframe required by applicable law.
We will not normally charge a fee for exercising privacy rights unless applicable law permits us to do so.
18. Direct Marketing
Where legally permitted, ExpandiCore may send business or marketing communications.
You can unsubscribe by:
- Using the unsubscribe option included in an email; or
- Contacting us directly.
Even if you opt out of marketing communications, we may still send necessary service-related, transactional, security, or administrative communications.
19. Children’s Privacy
Our services are primarily intended for businesses and adults.
Our website is not intentionally directed toward children.
We do not knowingly collect personal information from children where prohibited by applicable law.
If you believe a child has provided personal information to us, please contact us so that we can review and take appropriate action.
20. Third-Party Websites
Our website may contain links to third-party websites, applications, social-media platforms, or services.
ExpandiCore is not responsible for the privacy practices, content, security, or policies of third-party websites.
We encourage you to review the privacy policies of those third parties before providing them with personal information.
21. Social Media
ExpandiCore may maintain profiles or pages on third-party social-media platforms.
Interactions with those platforms may be governed by the privacy policies of the respective platforms.
Information you voluntarily make publicly available may be visible to others.
22. Business Clients and B2B Data
Where ExpandiCore provides services to businesses, we may process professional information relating to employees, representatives, contractors, or other business contacts.
Business or professional status does not automatically remove privacy protections. We will process personal information in accordance with applicable privacy laws.
Where ExpandiCore processes personal data on behalf of a client, the relevant client may act as the data controller, while ExpandiCore may act as a data processor.
In such circumstances, processing may also be governed by a separate data-processing agreement or contractual terms.
23. Data Breaches
If we become aware of a personal-data breach, we will assess the incident and take appropriate measures in accordance with applicable law.
Where notification to a regulator or affected individuals is legally required, we will make the required notification within the applicable timeframe.
24. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect:
- Changes to our services
- Changes to our website
- New technologies
- Changes in privacy legislation
- Changes in third-party service providers
- Changes in our business practices
The “Last Updated” date at the beginning of this policy indicates when it was most recently revised.
Where legally required, we will provide additional notice of material changes.
25. Contact ExpandiCore
If you have questions about this Privacy Policy, your personal information, or your privacy rights, please contact us:
ExpandiCore
Website: expandicore.com
Email: [sales@expandicore.com]
General Contact: [expandicore@gmail.com]
Business Address: [Berlin, Germany]
Important
These Terms and Conditions have been AI-generated and are provided for general informational purposes only. If you have any specific concerns or require terms that comply with the laws applicable to your business, please DM us or contact us by email. We can help you identify the relevant legal requirements and recommend appropriate terms.
Please note that these Terms and Conditions are not a substitute for professional legal advice and should not be considered legally binding, legally verified, or sufficient as legal evidence in a court of law. We recommend consulting a qualified lawyer or legal professional before relying on them for legal purposes.