Privacy Policy

Last updated as of May 5, 2025

INTRODUCTION

XP Network, LLC (“XPN,” “we,” “our,” or “us”) respects the privacy of your information. This Privacy Policy is designed to assist you in understanding how we collect, use, share, and safeguard your information. This Privacy Policy applies to individuals who access this website and our mobile application (collectively, “Site”) and any of our online and, where required, offline services (collectively, "Services”).

From time to time, we may change this Privacy Policy. If we do, we will post an amended version on this webpage. Please review this Privacy Policy periodically.

This Privacy Policy covers the following topics:

1. PERSONAL DATA WE COLLECT
2. HOW WE USE YOUR PERSONAL DATA
3. HOW WE SHARE YOUR PERSONAL DATA
4. COOKIES AND OTHER TRACKING TECHNOLOGIES
5. "DO NOT TRACK" SIGNALS
6. SECURITY
7. THIRD PARTY LINKS
8. CHILDREN'S PRIVACY
9. NOTICE TO NEVADA RESIDENTS
10. NOTICE TO CALIFORNIA RESIDENTS
11. YOUR PERSONAL DATA AND YOUR RIGHTS - EUROPE AND THE UNITED KINGDOM ONLY
12. YOUR CHOICES AND RIGHTS – CANADA AND THE REST OF THE WORLD
13. HOW TO CONTACT US

1. PERSONAL DATA WE COLLECT

We collect personal data from you through your use of the Site and Services. Personal data is information that is linked or reasonably linkable to an identified or identifiable individual. We collect the following types of personal data:

Personal Data You Provide

Depending on how you interact with our Site and Services, we will collect the following personal data that you voluntarily provide to us for the following purposes:

• Create an Account. If you create an account, you will provide us with your name, email address, zip code, date of birth, and you will set a password.
• Sign In. When you sign into your account, you will provide us with your email address and password.

• Make a Purchase. If you make a purchase, you will provide us with your name, address, and payment information. We use Stripe and Shopify to process payments. Please review Stripe's privacy policy here and Shopify's privacy policy here.
• Contact Us. If you contact us or provide feedback on our Services, you will provide us with your name, email address, and any information you choose to provide in your message.
• Complete a Survey. If you complete a survey, you will provide us with your name and email address.

Personal Data as You Navigate Our Site

We automatically collect certain personal data through your use of our Site and our use of cookies and other tracking technologies, such as the following:

• Usage Information. For example, the pages on the Site you access, the frequency of access, and what you click on while on the Site.
• Device Information. For example, hardware model, operating system, application version number, and browser.
• Mobile Device Information. Aggregated information about whether the Site is accessed via a mobile device or tablet, the device type, and the carrier.
• Location Information. Location information from Site visitors on a city-regional basis.

For more information on our cookie usage see our “COOKIES AND OTHER TRACKING TECHNOLOGIES” section below.

Personal Data We Collect About You from Other Sources

In some cases, we may receive personal data about you from other sources. This includes government entities, advertising networks, data brokers, operating systems and platforms, mailing list providers, social networks and advertising and marketing partners.

2. HOW WE USE YOUR PERSONAL DATA

In addition to the purposes stated above, we may use all the personal data we collect in accordance with applicable law such as to:

• Maintain and improve our Site and Services;
• Protect the security and integrity of our Site and Services;
• Investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or violations of our Terms of Use, and to otherwise fulfill our legal obligations;

• Monitor compliance with and enforce this Privacy Policy and any applicable agreements and policies;
• Defend our legal rights and the rights of others;
• Fulfill any other purposes for which you provide it;
• For any purpose that is reasonably necessary to or compatible with the original purpose for which we collected the personal data as disclosed to you; and
• Comply with applicable law.

3. HOW WE SHARE YOUR PERSONAL DATA

We may share the personal data that we collect about you in the following ways:

• With vendors who perform data or Site-related services on our behalf (e.g., email, hosting, maintenance, backup, analysis, etc.);
• To the extent that we are required to do so by law;
• With vendors to prepare, deploy and analyze advertising content;
• In connection with any legal proceedings or prospective legal proceedings;
• To establish, exercise, or defend our or a third party's legal rights, including providing information to others for the purposes of fraud prevention;
• With any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal data where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal data;
• With any other person or entity as part of any business or asset sale, equity transaction, merger, acquisition, bankruptcy, liquidation, or similar proceeding, or in preparation for any of these events and that person or entity may use your personal data for their own purposes;
• With any other person or entity where you consent to the disclosure; and
• For any other purpose disclosed by us when you provide the personal data or for any other purpose we deem necessary, including to protect the health or safety of others.

4. COOKIES AND OTHER TRACKING TECHNOLOGIES

Like many other companies, we use cookies and other tracking technologies (such as pixels and web beacons) (collectively, “Cookies”). “Cookies” are small files of information that are stored by your web browser software on your computer hard drive, mobile or other devices (e.g., smartphones or tablets).

We use Cookies to:

• Estimate audience size and usage patterns;
• Understand and save your preferences for future visits, allowing us to customize the Site and Services to your individual needs;
• Advertise new content and services that relate to your interests;
• Keep track of advertisements and search engine results;
• Compile aggregate data about site traffic and site interactions to resolve issues and offer better site experiences and tools in the future; and
• Recognize when you return to the Site.

We set some Cookies ourselves and others are set by other entities. We use Cookies set by other entities to provide us with useful information to help us improve our Site and Services, to conduct advertising, and to analyze the effectiveness of advertising. For example, we use Cookies from Google, Facebook and other similar companies.

How You Can Opt-Out of Cookies

Cookies can be blocked by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies) you may not be able to access all or parts of the Site.

You can find out more about Cookies and how to manage them by visitingwww.AboutCookies.org or www.allaboutcookies.org.

Platform Controls

You can opt out of Cookies set by specific entities by following the instructions found at these links:

• Adobe: https://www.adobe.com/privacy/opt-out.html
• Google: https://adssettings.google.com
• Facebook: https://www.facebook.com/about/ads
• LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
• Microsoft: https://account.microsoft.com/privacy/ad-settings/
• Twitter: https://twitter.com/personalization
• Yahoo: https://policies.yahoo.com/xa/en/yahoo/privacy/topics/opt-outfaq/

Advertising Industry Resources

You can understand which entities have currently enabled Cookies for your browser or mobile device and how to opt-out of some of those Cookies by accessing the Network Advertising Initiative's website or the Digital Advertising Alliance's website. For more information on mobile specific opt-out choices, visit the Network Advertising Initiative's Mobile Choices website.

Please note that these opt-out mechanisms are specific to the device or browser on which they are exercised. Therefore, you will need to opt out on every browser and device that you use.

5. "DO NOT TRACK" SIGNALS

Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the "Do Not Track" signal, the Site does not currently interpret, respond to or alter its practices when it receives “Do Not Track” signals.

6. SECURITY

We maintain commercially reasonable security measures to protect the personal data we collect and store from loss, misuse, destruction, or unauthorized access. However, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

7. THIRD PARTY LINKS

The Site and Services may contain links that will let you leave the Site and Services and access another website. Linked websites are not under our control. We accept no responsibility or liability for these other websites.

8. CHILDREN'S PRIVACY

The Site and Services are not intended for children under 13 years of age. We do not knowingly collect, use, or disclose personal data from children under 13.

9. NOTICE TO NEVADA RESIDENTS

Nevada law allows Nevada residents to opt-out of the sale of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person. We do not currently sell personal information as defined in the Nevada law. However, if you are a Nevada resident, you still may submit a verified request to opt-out of sales and we will record your instructions and incorporate them in the future if our policy changes. Opt-out requests may be sent to support@xpnetwork.com.

10. NOTICE TO CALIFORNIA RESIDENTS

If you are a California resident, California Civil Code § 1798.83 permits you to request information regarding the disclosure of your personal information by us to third parties for the third parties' direct marketing purposes (as those terms are defined in that statute). To make such a request, please send an email to support@xpnetwork.com with the subject line "Shine the Light Request" or write us: XP Network, 500 Seawall Blvd, STE 611, Galveston, TX 77550.

If you are a California resident under the age of 18 and a registered user of the Services, California Business & Professions Code § 22581 permits you to request and obtain removal of content or information posted on the Services by you. If you wish to make a request, please contact us at support@xpnetwork.com. Please be aware that removal does not ensure complete or comprehensive removal of the content or information posted on the Services by you and there may be legal reasons for denying your request.

11. YOUR PERSONAL DATA AND YOUR RIGHTS - EUROPE AND THE UNITED KINGDOM ONLY

If you are in a country in the European Economic Area (EEA) or in the United Kingdom, you are entitled to the following explanation of the legal bases we rely on to process your Personal Data and a description of your privacy rights.

Legal Bases for Processing Your Personal Data

The legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which we collect it.

Consent

We may process your Personal Data based on your consent such as when you create an account or when you ask us to send certain kinds of marketing communications. You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal.

Our Legitimate Interests

We may process your Personal Data if doing so is necessary for our legitimate interests and your rights as an individual do not override those legitimate interests. For example, when we process your Personal Data to carry out fraud prevention activities and activities to increase network and information security, to market directly to you, to expand our business activities and to improve our services and the content and functionality of our Site.

To Perform a Contract

We may process your Personal Data to administer and fulfill contractual obligations to you.

To Enable Us to Comply with a Legal Obligation

We may process your Personal Data to comply with legal obligations to which we are subject. This may include any requirement to produce audited accounts and to comply with legal process.

Necessary for the Exercise or Defense of Legal Claims

If you bring a claim against us or we bring a claim against you, we may process your Personal Data in relation to that claim.

If you have any questions about or need further information concerning the legal basis on which we collect and use your Personal Data for any specific processing activity, please contact us using the "HOW TO CONTACT US" section below.

Your Rights

Access Your Personal Data

You have the right to obtain from us confirmation as to whether or not we are processing Personal Data about you and, if so, the right to be provided with the information contained in this Privacy Policy. You also have the right to receive a copy of the Personal Data undergoing processing.

Rectify Your Personal Data

You have the right to ask us to rectify any inaccurate Personal Data about you and to have incomplete Personal Data completed.

Restrict Our Use of Your Personal Data

You have the right to ask us to place a restriction on our use of your Personal Data if one of the following applies to you:

• You contest the accuracy of the information that we hold about you, while we verify its accuracy;
• We have used your information unlawfully, but you request us to restrict its use instead of erasing it;
• We no longer need the information for the purpose for which we collected it, but you need it to deal with a legal claim; or
• You have objected to us using your information, while we check whether our legitimate grounds override your right to object.

Object to Our Use of Your Personal Data

You have the right to object to our use of your Personal Data where our reason for using it is based on our legitimate interests or your consent (rather than when the reason for using it is to perform an obligation due to you under a contract with us).

Delete Your Personal Data

You can ask us to delete your Personal Data if:

• We no longer need it for the purposes for which we collected it;
• We have been using it with no valid legal basis;
• We are obligated to erase it to comply with a legal obligation to which we are subject;
• We need your consent to use the information and you withdraw consent;
• You object to us processing your Personal Data where our legal basis for doing so is our legitimate interests and there are no overriding legitimate grounds for the processing.

However, this right is not absolute. Even if you make a request for deletion, we may need to retain certain information for legal or administrative purposes, such as record keeping, maintenance of opt-out requirements, defending or making legal claims, or detecting fraudulent activities. We will retain information in accordance with the “How Long Is Your Personal Data Kept” section below.

If you do exercise a valid right to have your Personal Data deleted, please keep in mind that deletion by third parties to whom the information has been provided might not be immediate and that the deleted information may persist in backup copies for a reasonable period (but will not be available to others).

Transfer Your Personal Data to Another Service Provider

You may request that we transfer some of the Personal Data you have provided to you or another service provider in electronic copy. This applies to Personal Data we are processing to service a contract with you and to Personal Data we are processing based on your consent.

To exercise any of these rights, please contact us as described in the “HOW TO CONTACT US” section below.

Make a Complaint

If you have any concerns or complaints regarding our processing of your Personal Data, please contact us as described in the "HOW TO CONTACT US" section below and we will do our best to answer any question and resolve any complaint to your satisfaction.

If, for whatever reason, you feel we do not meet the standards you expect of us, you are also entitled to make a complaint to your local supervisory authority:

• EU Data Protection Authorities (DPAs)
• Swiss Federal Data Protection and Information Commissioner (FDPIC)
• Information Commissioner's Office (United Kingdom)

How Long Is Your Personal Data Kept?