Privacy Policy

Last Updated: 1/31/2025

XARITES THE CREATIVE AGENCY (“we,” “our,” “us”) is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws. This Privacy Policy outlines how we collect, use, and protect your personal data when you visit XARI.com.

Who We Are

• Company Name: XARITES THE CREATIVE AGENCY
• Tax Code: RO35381226
• Company Registration Number: J19/4/2016
• Registered Address: Kossuth Lajos street no. 11, Harghita county, Romania
• Contact Email: hello@xari.com

As the data controller, we are responsible for ensuring that your personal data is handled in accordance with applicable laws.

What Data We Collect

We collect the following types of personal data through our website:

• Identification Information: Full name, email address, phone number, company name.
• Website & Communication Data: Website address, form responses, messages sent via our website.
• Technical Information: IP address, browser type, operating system, pages visited, and other analytical data.

This data is collected when you:

• Submit a contact form or inquiry.
• Schedule a call via Calendly.
• Subscribe to our newsletters or marketing communications.
• Browse our website (through cookies and analytics tools).

Users are responsible for ensuring the accuracy of the personal data they provide to XARI.com. We are not liable for any issues arising from incorrect or incomplete data submissions.

Sensitive Data Notice: We do not collect or process sensitive personal data, such as health information, biometric data, financial account details, racial or ethnic origin, or political opinions, unless legally required.

Purpose & Legal Basis for Processing

We process your personal data for the following purposes:

You have the right to withdraw your consent at any time where processing is based on consent.

Automated Decision-Making: We do not engage in automated decision-making or profiling that produces legal effects concerning you. Any automated marketing decisions are based on user preferences and behaviors, with manual oversight where necessary.

Data Retention

We retain personal data as follows:

• Client records: Retained for the duration of the contractual relationship plus five years for legal compliance.
• Marketing data: Retained until the user withdraws consent.
• Analytics data: Retained for 24 months before anonymization.

If you wish to have your data deleted, you may request deletion at any time by contacting us at hello@xari.com.

Data Sharing & Third-Party Services

We do not sell or rent your personal data. However, we may share your data with third-party service providers for business purposes, such as:

• Calendly (Scheduling Calls) – Processes your name and email for appointment booking.
• Google Analytics (Website Tracking) – Collects anonymized browsing data.
• Meta & LinkedIn Pixels (Advertising & Retargeting) – Used for analytics and targeted advertising.
• Brevo (Newsletter Sign-ups & Email Marketing) – Processes email addresses for marketing purposes.
• Instant.ly (Marketing Campaigns & Promotions) – Used for audience engagement and digital marketing strategies.

All third-party processors are GDPR-compliant and process data only under our instructions.

Some third-party service providers may process data outside the EEA. We ensure that such transfers comply with GDPR by using Standard Contractual Clauses (SCCs) and other safeguards where applicable.

While we use third-party tools for marketing and analytics, XARITES THE CREATIVE AGENCY is not responsible for the data processing, security measures, or privacy practices of these third parties. Users should review their respective privacy policies before engaging with such services.

We may disclose personal data if required by law, regulation, or legal process, such as in response to a court order, law enforcement request, or regulatory inquiry.

Your GDPR Rights

As an EU resident, you have the following rights under GDPR:

• Right to Access – Request a copy of your personal data.
• Right to Rectification – Request corrections to inaccurate data.
• Right to Erasure (‘Right to be Forgotten’) – Request deletion of your data.
• Right to Restrict Processing – Request limited processing of your data.
• Right to Data Portability – Request your data in a structured format.
• Right to Object – Object to processing of your data.
• Right to Lodge a Complaint – File a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or your local data protection authority.

To exercise these rights, contact us at hello@xari.com. We will respond to all GDPR requests within 30 days. If additional time is required, we will notify you accordingly.

Cookies & Tracking Technologies

XARI.com uses cookies to enhance user experience and analyze website traffic. Cookies may collect technical data such as your IP address and browsing behavior.

By using our website, you consent to the use of cookies in accordance with our Cookie Policy. You can adjust cookie preferences in your browser settings.

Data Security Measures

We implement strict security measures to protect your personal data, including:

• Encryption of sensitive data.
• Access controls and authentication measures.
• Regular security audits and compliance checks.

However, no online platform is 100% secure. We encourage users to take precautions when sharing personal information online.

While we take reasonable measures to protect your data, we cannot guarantee complete security against unauthorized access, hacking, or cyber threats beyond our control. Users acknowledge and accept this risk when sharing personal information online.

International Data Transfers

Since we work with a global clientele, some data may be processed outside the European Economic Area (EEA). Any such transfers will comply with GDPR safeguards, including:

• Standard Contractual Clauses (SCCs) with third-party processors.
• Data protection assessments to ensure adequate security.

While our primary compliance framework is GDPR, we also adhere to applicable privacy laws in jurisdictions where we operate, including CCPA (California), PIPEDA (Canada), and UK GDPR.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in regulations or our practices. The latest version will always be available on our website. Continued use of our website after updates constitutes acceptance of the new terms.

Contact Us

For questions or requests related to this Privacy Policy, please contact us at:

• Email: hello@xari.com
• Registered Address: Kossuth Lajos street no. 11, Harghita county, Romania