Privacy Policy

Last updated: December 20, 2025

This Privacy Policy explains how EXPANS (“EXPANS,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you visit https://expans.us/ (the “Site”) or interact with us through the Site and related communications (collectively, the “Services”).

By using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Services.

1. Scope

This Policy applies to information collected through the Site and Services. It does not cover third-party websites, services, or platforms that may be linked from the Site or used to communicate with us (e.g., messaging platforms). Their privacy practices are governed by their own policies.

2. Information We Collect

2.1 Information you provide directly

We collect information you submit when you:

Fill out forms on the Site (e.g., request/consultation/contact/affiliate or partner inquiries)
Contact us by email, phone, or messaging platforms
Post comments on the blog (if enabled)

Depending on the interaction, this may include:

Identifiers & contact details: name, email address, phone number
Business information: website URL and any business details you include in your message
Content you submit: inquiry text, project description, other information you choose to provide
Blog comment data: comment content and related metadata (e.g., timestamp, IP address, user agent), if collected by the Site for moderation/security

Storage: Form submissions are stored in the Site’s WordPress database and may be synced to our CRM and/or routed to business email.

2.2 Information collected automatically (online identifiers and usage data)

When you visit or use the Site, we (and providers we use) may automatically collect:

Device/network data: IP address, device identifiers, browser type, OS, language, approximate location derived from IP
Usage data: pages viewed, referring URLs, clickstream events, time spent, interactions with forms and site elements
Log and security data: timestamps, error logs, security events, and similar diagnostic information
Cookie/pixel/tag identifiers: identifiers used for analytics and advertising (see Section 4)

2.3 Information related to call tracking

We use call tracking to measure marketing performance and to connect calls. Depending on configuration and provider features, this may include:

Call metadata (time, duration, source/attribution)
Phone numbers involved in the call (or partial/redacted forms)
Call routing data

If call recording is enabled, we will provide notice where required by law.

3. Sources of Information

We collect information from:

You (forms, messages, calls, comments)
Your device/browser (automatic collection and logs)
Service providers that support analytics, advertising, performance/security, lead management, communications, and fraud/spam prevention (see Section 6)

We do not buy consumer lists as a primary source for the Site’s lead collection. If this changes, we will update this Policy.

4. Cookies, Tracking, Analytics, and Advertising

4.1 What we use

We use cookies and similar technologies (pixels, tags, local storage, scripts) for:

Site operation and performance
Analytics and reporting
Conversion measurement
Remarketing/targeted advertising
Security, fraud and spam prevention

4.2 Tools commonly used on this Site

Based on your current setup, the Site uses or may use the following categories of tools:

Google Tag Manager (GTM) to deploy tags
Google Analytics 4 (GA4) for analytics
Google Ads conversion tracking and remarketing
Meta Pixel (Facebook/Instagram) for conversion measurement and remarketing
Hotjar and/or Microsoft Clarity for user-experience analytics (may include session replay/interaction analytics depending on configuration)
Call tracking solutions for attribution and call routing
Google reCAPTCHA for bot/spam prevention
Cloudflare for CDN, performance, and security

4.3 Your controls (no cookie banner)

Because we do not currently provide a cookie banner/consent manager on the Site, you can control tracking via:

Browser settings (block/delete cookies, limit third-party cookies)
Google’s controls (analytics and ad personalization)
Meta ad preferences
Controls offered by session analytics providers (where available)
Third-party industry opt-out mechanisms (where available)

Blocking cookies may reduce functionality and can affect analytics accuracy and ad measurement.

4.4 Global Privacy Control (GPC)

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of certain targeted advertising to the extent required by applicable U.S. state privacy laws. GPC may not disable:

strictly necessary processing (security, fraud, basic site operations),
contextual advertising,
measurement that is not considered “targeted advertising” under applicable law.

4.5 Do Not Track (DNT)

We do not respond to browser “Do Not Track” signals because there is no uniform industry standard for DNT.

5. How We Use Information

We process information to:

Provide and operate the Site (performance, troubleshooting, accessibility)
Respond to requests (quotes, consultations, follow-ups)
Manage leads and client relationships (CRM, internal workflows)
Measure marketing and improve campaigns (attribution, conversion measurement)
Remarketing/targeted advertising (where enabled)
Prevent fraud/spam and protect the Site (security monitoring, reCAPTCHA)
Comply with legal obligations and enforce our rights

6. How We Share Information

We may share information in the following scenarios:

6.1 Service providers (processors/vendors)

We share information with vendors that help us run the Services, such as:

Hosting/CDN/security providers (e.g., Cloudflare)
Email and productivity providers (e.g., Google Workspace)
CRM and lead management providers
Analytics and advertising providers (e.g., Google, Meta)
UX analytics/session analytics providers (e.g., Hotjar, Microsoft Clarity)
Spam/fraud prevention providers (e.g., reCAPTCHA)
Call tracking providers

These vendors generally process information under contracts and instructions to support our business.

6.2 Messaging platforms you choose to use

If you contact us through Telegram, Viber, Messenger, or similar platforms, those platforms process your data under their own policies. We receive the information you send us through those channels.

6.3 Legal and protection purposes

We may disclose information if we reasonably believe it is necessary to:

comply with law, regulation, legal process, or lawful requests,
protect rights, safety, and property of EXPANS, users, or others,
investigate or prevent fraud, abuse, or security incidents.

6.4 Business transfers

If we are involved in a merger, acquisition, restructuring, or sale of assets, information may be transferred as part of that transaction.

7. “Sale” / “Share” and Targeted Advertising (U.S. State Laws)

We do not sell personal information for money. However, some U.S. state privacy laws define “sell” or “share” broadly to include certain disclosures for targeted advertising (for example, use of advertising cookies/pixels for remarketing).

You can opt out of targeted advertising by:

enabling GPC in your browser (we honor it as described above), and/or
contacting us (Section 10).

8. Data Retention

We keep personal information only as long as reasonably necessary for the purposes in this Policy, unless a longer period is required by law. Typical retention periods:

Website form submissions and lead data (WordPress/CRM): up to 24 months after the last interaction, unless needed for an active business relationship
Email correspondence: up to 3 years
Blog comments: retained until deleted by you or upon request (and as needed for moderation/security)
Analytics data: up to 26 months (tool settings may vary)
Session analytics/replay (Hotjar/Clarity): up to 12 months
Server/security logs: typically 30–90 days (longer if needed for security investigations)
Call tracking records: up to 24 months (provider settings may vary)

We may retain aggregated or de-identified data longer, because it does not reasonably identify you.

9. Data Security

We use reasonable administrative, technical, and organizational measures to protect information. No system is 100% secure, and we cannot guarantee absolute security of data transmitted over the internet.

10. Your Privacy Rights and Requests (U.S.)

Depending on your state of residence, you may have rights to:

request access to personal information we hold about you,
request deletion,
request correction (where applicable),
opt out of targeted advertising,
request information about disclosures (as applicable under state law),
not be discriminated against for exercising privacy rights.

How to submit a request

Email: hello@expans.us
Phone: +1 (929) 309-2022

Verification

To protect you, we may verify your request by confirming you control the email address or other information associated with the request. If we cannot verify, we may deny the request as permitted by law.

Authorized agents (where applicable)

If permitted by your state law, you may use an authorized agent to submit a request. We may require proof of authorization and may still verify your identity directly.

Appeals (where applicable)

If we deny your request and your state law provides an appeals process, you may appeal by emailing hello@expans.us with the subject line “Privacy Request Appeal”.

Response timing

We aim to respond within timeframes required by applicable law. Complex requests may take longer where allowed, with notice.

11. Children’s Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child provided information, contact us and we will take appropriate steps to delete it.

12. International Processing

Although the Site is intended for the U.S. market, some providers may process data in other locations. We take reasonable steps to ensure protections consistent with this Policy.

13. Changes to This Policy

We may update this Policy from time to time. The “Last updated” date reflects the most recent revision. Material changes may be posted on the Site or communicated by other appropriate means.

14. Contact

Questions or requests:

Email: hello@expans.us
Phone: +1 (929) 309-2022