Privacy Policy

This Privacy Policy applies to X10 Marketing Agency, LLC (“we”, “our”, or “us”) and governs how we collect, use, and share information when you visit or interact with our website, https://x10marketing.com. We respect your privacy and are committed to protecting your personal data in accordance with the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other applicable U.S. state privacy laws.

1. Information We Collect

We may collect the following personal and business information from you:

Name
Email address
IP address and location data
Phone number
Company name
Website URL
Business-related information (e.g., challenges, marketing budget)
Payment information (collected and processed securely through QuickBooks)

We collect this data through:

Website contact forms
Cookies and tracking technologies
Account signups
Information shared by your browser or server

Information we receive from clients. When a business engages us, we also receive information needed to perform the services, which may include website content and credentials, advertising and analytics account data, customer lists, form submissions, email accounts hosted on the client's domain, and other business records. We handle that information as described in Section 3A below.

2. How We Use Your Information

We use the information we collect to:

Provide and improve our services
Respond to inquiries and support requests
Analyze website usage and improve user experience
Personalize content and marketing
Process payments securely
Comply with legal obligations

3. Third-Party Services

We use third-party services to help operate our business, including tools for analytics, advertising, email marketing, customer support, and AI assistance. These include (but are not limited to):

Analytics & Advertising

These providers may collect or process personal data according to their own privacy policies.

3A. Client Data and Artificial Intelligence

When we perform services for a client, we act on the client's instructions. We use client data only to perform the services, to produce reports, and to improve our own operations and market intelligence as permitted by our agreement with that client. We protect it with reasonable administrative, technical, and physical safeguards, we handle it with personnel located in the United States unless a client agrees otherwise, and we delete or return it on the client's written request after an engagement ends, except for routine backups and records we must keep.

We use artificial intelligence tools in our work, including the third-party services listed in Section 3 and our own self-hosted systems. Third-party AI services are configured under account settings intended to exclude client data from those providers' model training. Our self-hosted systems may be trained on a client's data to improve our services for that client. Every deliverable is reviewed by a person before delivery.

If a client's customers exercise privacy rights about data we hold on the client's behalf, we refer the request to the client and assist the client in responding.

We are not a HIPAA covered entity or business associate and do not accept protected health information unless a separate Business Associate Agreement is signed.

4. Cookies and Tracking

We use cookies and similar technologies to:

Analyze site traffic and performance
Enable functionality
Serve relevant ads

By continuing to use our site, you consent to our use of cookies.

Opt-Out Preference Signals

We honor opt-out preference signals, including the Global Privacy Control (GPC). When we receive a GPC signal from your browser or a browser extension, we treat it as a valid request to opt out of the sale or sharing of your personal information for that browser or device. Because GPC is tied to a specific browser or device, you may need to enable it separately on each browser and device you use. We do not respond to the legacy “Do Not Track” signal, which has no agreed technical standard, but we do honor GPC as described above.

5. Data Sharing and Disclosure

We do not sell your personal data for money.

However, our use of advertising and targeting cookies (described in our Cookie Policy) may involve “sharing” your personal information — such as online identifiers, IP address, and browsing activity — with advertising partners to deliver ads across other sites and services (cross-context behavioral advertising). Under the CCPA/CPRA, this activity may be treated as a “sale” or “sharing” of personal information even though no money changes hands.

Do Not Sell or Share My Personal Information

You have the right to opt out of this sale or sharing. You can opt out by:

Enabling the Global Privacy Control (GPC) in your browser (see Section 4); or
Emailing us at legal@x10marketing.com with the subject line “Do Not Sell or Share My Personal Information.”

We will not discriminate against you for exercising this right.

We may also share data with trusted service providers under strict confidentiality agreements to help us operate our business. We may also disclose data:

To comply with laws or legal requests
To enforce our terms
To protect the rights, safety, or property of our users, partners, or the public

In the event of a business transfer or acquisition, user data may be part of the transferred assets.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access – Request to see what data we hold about you
Correction – Request changes to incorrect or outdated data
Erasure – Request deletion of your personal information
Data Portability – Request a copy of your data in a machine-readable format
Consent Withdrawal – Withdraw your consent to our data practices
Opt-Out of Sale or Sharing – Opt out of the sale or sharing of your personal information for targeted advertising (see Section 5)
Limit Sensitive Personal Information – Direct us to limit the use of any sensitive personal information to what is necessary to provide our services
Non-Discrimination – We will not deny you services, charge you a different price, or provide a different level of service because you exercised any of these rights

To exercise any of these rights, email us at legal@x10marketing.com. You may also use an authorized agent to submit a request on your behalf; we may ask the agent for proof of authorization and may separately verify your identity.

How we respond: We will acknowledge requests within 10 business days and respond substantively within 45 calendar days. If we need more time, we may extend that period by up to an additional 45 days and will notify you of the extension and the reason. We may need to verify your identity using information reasonably necessary to confirm you are the person whose data is the subject of the request before we can fulfill it.

7. Data Security and Retention

We take reasonable steps to protect your data using industry-standard methods such as SSL encryption and firewalls.

Sensitive payment data is stored only by our secure processor (QuickBooks)
Non-sensitive data (e.g., name, phone) may be stored on private, protected servers

We retain personal data as long as it is needed to fulfill the purpose it was collected for, or as required by law.

If we confirm unauthorized access to client personal data in our possession, we notify the affected client without undue delay.

8. Children’s Privacy

Our services are intended for business use only and are not directed to children under the age of 13. We do not knowingly collect personal data from children.

9. Policy Updates

We may update this Privacy Policy from time to time without notice. The most current version will always be posted on our website with the effective date indicated at the top. We encourage you to review it periodically.

10. Contact Us

If you have questions or requests related to this Privacy Policy or your data, please contact us at:

Email: legal@x10marketing.com
Phone: (505) 395-6293
Address: 539 W Commerce St #3956, Dallas, TX 75208, United States