lines
Overview
This Privacy Policy explains how Xlines ("Xlines", "we", "us", "our") collects, uses and protects personal information in connection with xlinescx.com (the "Site") and our own business and marketing activities. Because Xlines is an outsourced customer-experience (CX) and back-office provider, it's worth being upfront about a distinction that matters throughout this page — see "Website data vs. client data" below.
Who we are
Xlines (trading as "Xlines CX Solutions & BPO") is based in Cairo, Egypt, and provides managed customer support, sales, order management and back-office services to businesses in the US and Europe.
For any question about this policy, contact info@xlinescx.com.
Website data vs. client data
Xlines can be involved with personal data in two different ways, and this policy only speaks to the first:
- Website / prospect data (this policy applies): personal information collected directly through this Site — the contact form and newsletter — where Xlines decides how and why it's processed. Here, Xlines is generally the controller (or equivalent responsible party under applicable law).
- Client operational data (governed separately): when we deliver outsourced CX services, the client determines the purposes and instructions, and Xlines processes that data as a processor / service provider under the client's documented instructions and the applicable services agreement and Data Processing Agreement — not under this public page.
- End-customer data: if you're a customer of one of our clients, that business remains responsible for its relationship and notices to you; please direct privacy questions to them directly, since they are the controller of your data.
Information we collect
- Strategy-call / contact form: full name, work email, company name, and optionally phone number and a message about what you're looking to outsource.
- Newsletter sign-up: your email address.
- Server logs: standard technical logs generated by our hosting provider (e.g. IP address, browser type, pages requested).
- Local display preference: a light/dark mode choice and your cookie-banner choice, stored in your browser's local storage. This preference is stored locally in your browser and is not transmitted to Xlines.
Xlines does not intentionally deploy advertising or behavioral-tracking technologies on the Site at this time. If that changes, we'll update this Policy and, where required, obtain appropriate consent — see our Cookie Policy for the current, honest state of what's actually running.
How we use it
- Respond to strategy-call requests and follow up about our services.
- Send the newsletter to subscribers who opted in (unsubscribe anytime).
- Operate, secure and improve the Site.
- Comply with legal obligations and enforce our agreements.
We do not sell personal information, and we do not use it for third-party advertising.
Legal bases
For visitors in the EEA, UK or similar regimes, here's the basis we generally rely on for each purpose — see GDPR & EU Privacy for more detail:
| Purpose | Typical legal basis |
|---|---|
| Responding to a strategy-call inquiry | Legitimate interests / steps taken at your request |
| Sending the newsletter | Consent (withdraw anytime) |
| Operating and securing the Site | Legitimate interests |
| Legal compliance / protecting our rights | Legal obligation / legitimate interests |
Who we share it with
We do not sell or rent personal information to anyone, and we do not "share" personal information for cross-context behavioral advertising as that term is defined under California privacy law. Data submitted through the Site is stored within systems used by Xlines and its authorized service providers, and is accessible to authorized Xlines personnel and, where necessary, trusted service providers that support the operation, security, hosting, maintenance or delivery of the Site — subject to appropriate contractual and security safeguards. We may disclose categories of information to:
- Hosting, IT and security providers who help run the Site;
- Email/communications providers we use to reach you;
- Professional advisers (legal, accounting) where necessary;
- Regulators or law enforcement, where required by law; and
- A successor entity, if Xlines is ever involved in a merger, acquisition or asset sale, subject to applicable law.
Our current, specific list of who actually touches data with us — not just categories — is published on our Subprocessors page and updated whenever it changes.
International transfers
Xlines is based in Egypt, and works with international service providers and clients across the US, UK and Europe. As a result, personal information may be processed or transferred across borders. Where applicable law requires safeguards for such transfers, Xlines implements appropriate mechanisms — see GDPR & EU Privacy for the specific mechanism we rely on (Standard Contractual Clauses).
How long we keep it
For website inquiries and newsletter sign-ups, we generally retain personal information for up to 24 months following your last meaningful interaction with us, unless a longer period is reasonably necessary for legal, contractual, security, dispute-resolution or record-keeping purposes. You can ask us to delete your data sooner at any time — see Data Subject Rights & Privacy Requests.
Retention periods for personal data processed on behalf of a client — as described in "Website data vs. client data" above — are governed by the applicable client agreement and Data Processing Agreement, not by this 24-month default.
How we protect it
We apply reasonable technical and organizational safeguards proportionate to a company of our current size — see our Security & Data Protection page for the specifics. These are appropriate, commercially reasonable controls, not a guarantee: no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
If something goes wrong
If Xlines experiences a security incident involving personal information, we will assess and respond to it in accordance with applicable law and our contractual obligations. Where notification is legally required, we will notify affected individuals and/or relevant authorities within the applicable timeframes.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal information, and to object to certain processing. See Data Subject Rights & Privacy Requests for how to exercise these, or the region-specific pages: GDPR & EU Privacy and California Privacy Policy (CCPA/CPRA).
Children's privacy
The Site is a B2B business site directed at business professionals and is not directed to children. We do not knowingly collect personal information from children under 16.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will always reflect the latest version, and material changes will be highlighted on the Site.
Contact us
Questions about this policy or your personal information can be sent to info@xlinescx.com. Xlines is based in Cairo, Egypt.
This page is provided for general information and does not constitute legal advice. We recommend it be reviewed by qualified counsel in your jurisdiction before you rely on it.