Introduction
Welcome to Expanly ("Expanly," "we," "our," or "us"). We are committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy explains how we collect, use, and protect your information when you visit https://expanly.com ("Website") and when you use the Expanly software-as-a-service platform ("Service").
Data we collect
Automatically collected data
IP address, browser type, operating system, pages visited, time spent on pages, and other analytical data via Google Analytics.
Provided data
When you contact us or submit a website form, we may collect your name, work email address, company or agency name, website, country, message and the commercial details relevant to your request. Depending on the form, these details may include advertising spend, catalog size, client count, how you heard about us and whether you have an immediate client need.
If you arrive on our Website through a tagged campaign link or an online advertisement, then with your marketing-cookie consent we store the ad click identifier (such as a Google Ads click ID) and campaign parameters from the address of the page you landed on. If you then submit our audit request form, we include these values and your current marketing-consent status with the submission so we can attribute your enquiry to the campaign that brought you. We stop using these values 90 days after your arrival; an expired record is deleted from your browser the next time you visit, and rejecting or withdrawing marketing-cookie consent deletes it immediately. The stored values are sent with your audit request to the form provider named below and, where you have allowed marketing cookies, may be used to report the resulting enquiry back to the advertising platform that referred you.
Service data
When you use the Service, we process data retrieved from third-party platforms that you connect, such as Google Ads, Google Analytics, and Google Merchant Center. This data may include campaign performance metrics, product data, and conversion data. We process this data on your behalf as a data processor, as set out in the Data Processing Agreement appended to our Terms of Service.
When you connect Shopify, we process order and product information, including product and variant identifiers, quantities, sales amounts, discounts, cancellations, and refunds, to calculate product-level performance and support your product prioritization rules. This integration does not request customer names, email addresses, phone numbers, or billing and shipping addresses.
How we use your data
We process your data for the following purposes:
- To analyze website traffic and improve user experience.
- To comply with legal obligations.
- To respond to and manage inquiries, audit requests, agency applications and related communications.
- To provide the Service to you, including retrieving, processing, and analyzing data from connected platforms such as Google Ads, Google Analytics, and Google Merchant Center.
Legal basis for processing
Under GDPR, we rely on the following legal bases for processing your data:
- Consent: For analytical and marketing cookies when you accept them through our cookie banner.
- Steps before entering into a contract: When you ask for an audit, product discussion or other service-related information that you may use to evaluate working with Expanly.
- Legitimate interest: To respond to general business, partner, investor and media inquiries, manage business correspondence and improve our Website, provided these interests are not overridden by your rights and interests.
- Legal obligation: When required by law.
Cookies and tracking technologies
We use cookies and similar tracking technologies to analyze traffic and enhance user experience. When you visit our Website, you will see a cookie banner allowing you to manage your preferences. For more details, please see our Cookie Policy.
Data sharing & third parties
We do not sell or rent your personal data. However, we may share data with:
- Service Providers: Google Analytics (to analyze Website traffic). Google processes data according to its Privacy Policy .
- Advertising Partners: LinkedIn Insight Tag (to measure ad campaign effectiveness and conversion tracking). LinkedIn processes data according to its Privacy Policy .
- Website form provider: HubSpot receives and manages submissions from our contact, audit request and agency partner forms, together with the related communications. HubSpot processes data according to its Privacy Policy .
- Legal Authorities: If required by law.
- Sub-processors: We use third-party sub-processors to provide the Service, including Google Cloud Platform (hosting, EU/EEA) and Auth0 (authentication). A full list of our third-party sub-processors is maintained in the Data Processing Agreement appended to our Terms of Service.
Google API Services User Data Policy Compliance
Expanly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data storage & retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.
International data transfers
We primarily host and process personal data within the EU/EEA. Some personal data may nonetheless be transferred to, or accessed from, outside the EU/EEA, for example by certain sub-processors or their group companies. Where this happens, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs), as described in the Data Processing Agreement appended to our Terms of Service.
Your rights under GDPR
As an EU visitor, you have the following rights:
- Access: Request access to your personal data.
- Correction: Request correction of inaccurate data.
- Erasure: Request deletion of your data.
- Objection: Object to data processing.
- Data Portability: Request data transfer.
- Withdraw Consent: Withdraw cookie consent at any time.
To exercise your rights, please contact us at contact@expanly.com.
Data security
We implement security measures to protect your personal data. However, no online service is 100% secure.
Changes to this policy
We may update this Privacy Policy periodically. The latest version will always be available on our Website.
Contact us
For any questions or concerns regarding this Privacy Policy, contact us at:
Expanly Oy (Business ID 3506966-5)
Siltasaarenkatu 12 C, 00530 Helsinki, Finland
contact@expanly.com