Last updated: 29 September 2026
XP/ND (“XP/ND”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, contact us, make an enquiry, do business with us or interact with us in a professional capacity.
XP/ND, company number HE470167, is the controller responsible for the personal information described in this Privacy Policy.
Our registered office is Spartis 1, Pahos, 8020, Cyprus.
For privacy enquiries, contact privacy@xpnd.work.
Depending on how you interact with XP/ND, we may collect:
We do not intentionally collect special category personal information through this website and ask that you do not include unnecessary sensitive personal information in enquiries.
We may obtain personal information directly from you when you:
We may also obtain professional contact information from publicly available sources, including company websites, professional directories and LinkedIn, or through introductions and existing business relationships.
We may use personal information to:
We process personal information only where we have an appropriate lawful basis.
Depending on the circumstances, we may process personal information because:
It is necessary for a contract or steps requested before entering into a contract. This may apply where you ask us to provide a proposal, discuss an engagement or provide services.
We have a legitimate interest. This may include operating and developing our business, responding to business enquiries, managing customer and supplier relationships, maintaining business records, identifying prospective customers, communicating with relevant professional contacts, conducting appropriate business-to-business marketing, improving our website and protecting our business and systems.
Where we rely on legitimate interests, we consider whether our use of the information is necessary and proportionate and balance our interests against the rights and interests of the individual concerned.
We need to comply with a legal obligation. This may apply to information we are required to retain or disclose by law.
You have given consent. Where consent is required for a particular activity, you may withdraw it at any time.
XP/ND may identify organisations and professional contacts that we reasonably believe could have an interest in our services, content or the commercial subjects we work on.
For this purpose, we may use business contact information that has been provided directly to us or is available from professional and publicly accessible sources, including LinkedIn and company websites.
We may contact relevant individuals through professional networks, LinkedIn, business email or other appropriate business channels, subject to applicable data protection and electronic marketing laws.
Where we rely on legitimate interests for processing personal information connected with business development, our interests include developing our business, establishing and maintaining relevant professional relationships and communicating information about services or commercial subjects that may be relevant to those relationships.
You have the right to object at any time to the use of your personal information for direct marketing. If you ask us to stop, we will stop using your information for that purpose.
We may retain limited information on a suppression record so that we can respect your request in future.
Information submitted through our website is sent by email to XPND and held in its Zoho-hosted mailbox.
We use this information to respond to enquiries, manage potential and existing business relationships and maintain appropriate records of our communications.
We use analytics technologies, including Google Analytics, to understand how visitors use our website and to measure and improve website performance.
Where cookies or similar technologies require consent, they will not be used until the appropriate consent has been obtained.
More information is available in our Cookie Policy.
We may share personal information where necessary with organisations that support our business, such as:
We do not sell personal information.
Where another organisation processes personal information on our behalf, we take appropriate steps to protect that information.
Some of the service providers or business systems we use may process personal information in countries other than the country in which it was originally collected.
Where personal information is transferred internationally, we use appropriate safeguards where required by applicable data protection law.
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legitimate business, contractual, legal and regulatory purposes.
The appropriate retention period depends on the nature of the information and our relationship with you.
Customer, supplier and business records may be retained for longer periods where they remain relevant to an ongoing business relationship, contractual obligations, legal requirements or potential claims.
For prospective customers and enquiries that do not develop into an ongoing business relationship, we periodically review the information we hold and delete or anonymise personal information when it is no longer reasonably required.
We may retain limited information where necessary to record a marketing objection or other request.
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Depending on the circumstances and the law that applies, you may have rights concerning your personal information, including the right to:
These rights are not absolute in every circumstance.
To exercise a right, contact privacy@xpnd.work.
If you have concerns about how we use your personal information, please contact us first so that we can investigate.
You may also have the right to complain to the data protection supervisory authority responsible for dealing with your complaint.
Our website may contain links to websites operated by third parties.
Those organisations are responsible for their own websites and privacy practices. We recommend reviewing their privacy information when visiting their websites.
We may update this Privacy Policy to reflect changes to our business, website, systems, marketing activities or legal requirements.
The current version will be published on this website with the date of the latest update.
For questions about this Privacy Policy or the way XP/ND uses personal information, contact:
XP/ND
Company number HE470167
Spartis 1
Pahos
8020
Cyprus