Privacy Policy

Last updated: 26 June 2026.

This Privacy Policy explains what personal data XQLGROUP SL collects when you use xql.group, why we collect it, the legal bases we rely on, and the rights you have. It should be read together with our Cookie Policy.

Data controller

• XQLGROUP SL
• NIF: B21773171
• Registered address: Avenida d'Escandinavia, 96, 03130 Santa Pola, Alicante, Spain
• Email: info@xql.group

For the purposes of the EU General Data Protection Regulation (GDPR), XQLGROUP SL is the data controller for personal data collected through this website.

Contact forms

When you submit a contact form we collect:

• Name
• Work email
• Company
• Message
• Any other information you voluntarily submit

Purpose: to respond to inquiries, qualify potential clients, prepare proposals, and manage pre-contractual communication. Legal basis: pre-contractual steps taken at your request and our legitimate interest in responding to business inquiries.

Meeting booking (Calendly)

When you book a meeting we collect:

• Name
• Email
• Company
• Meeting time
• Calendar metadata
• Information submitted in booking forms

Purpose: to schedule and manage meetings. Processor: Calendly. Legal basis: pre-contractual steps or legitimate interest.

CRM and sales follow-up

We record and manage commercial conversations using a CRM. We process:

• Contact details
• Company information
• Commercial interest
• Meeting notes
• Proposal and communication history

Purpose: to manage leads, commercial conversations, proposals, and client relationships. Legal basis: legitimate interest and pre-contractual steps.

Analytics

We measure how the website is used. We process:

• Cookie identifiers
• Device and browser information
• Pages visited
• Referrer
• Approximate location
• Website interaction data

Purpose: to measure website performance and improve the website. Legal basis: consent, where required for non-essential cookies. See our Cookie Policy for details.

Advertising and remarketing

We measure and optimize advertising. We process:

• Cookie or pixel identifiers
• Conversion events
• Page interactions
• Ad campaign attribution data

Purpose: to measure advertising performance, track conversions, and run remarketing campaigns. Legal basis: consent.

Email marketing

We keep one-to-one sales replies separate from newsletter and automated marketing. For newsletter or bulk marketing communications we rely on your consent or another clearly documented legal basis, and every marketing email includes a clear unsubscribe option.

Processors

We share personal data only with the third-party providers that help us run the business, who process it on our behalf under written agreements. Depending on the activity, these include:

• Google Workspace (email and productivity)
• Website hosting platform (Vercel)
• Google Analytics and Google Tag Manager
• Google Ads
• Meta
• LinkedIn
• Calendly
• reb2b
• CRM and email marketing platform (Loops)
• Cloud storage and project-management tools where lead data is stored

We do not sell your personal data.

International transfers

Some processors are located outside the European Economic Area. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or another legally valid transfer mechanism.

Retention periods

• Contact inquiries are kept for up to 24 months after the last interaction unless a contractual relationship is created.
• Client and proposal records are kept for the duration of the business relationship and for the legally required retention or limitation periods.
• Analytics and marketing cookies are kept according to the periods listed in the Cookie Policy.
• Marketing consent records are kept until consent is withdrawn or the data is no longer needed.

Your rights

Subject to applicable law, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion
• Restrict processing
• Object to processing
• Request portability, where applicable
• Withdraw consent, where processing is based on consent

You can exercise these rights by emailing info@xql.group. We will respond within the timeframes required by law.

Complaints

You have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) if you believe your data protection rights have been violated.

Changes and contact

We may update this Policy from time to time; the current version will always be published on this page, and material changes take effect when posted. For any question about this Policy or your personal data, contact us at info@xql.group.