Scope & our role
This page explains how Xlines approaches the EU General Data Protection Regulation ("GDPR") and the equivalent UK GDPR, for visitors and clients based in the European Economic Area ("EEA"), the UK, and Switzerland. Xlines is a Cairo, Egypt-based BPO/CX company actively building relationships with EU and UK clients, so we take these obligations seriously from day one rather than waiting until they become unavoidable.
Xlines can act in two different roles, depending on the data in question:
When Xlines is the controller
For personal information collected directly through this Site — the contact form and newsletter sign-up — Xlines is the data controller. See our Privacy Policy for full detail on what we collect and why.
When Xlines is the processor
When we deliver outsourced CX services to a client (for example, handling that client's customer support, sales or order-management interactions), we act as a data processor on that client's behalf, processing personal data only on the client's documented instructions. The terms of that processing are set out in our Data Processing Agreement, incorporated into the relevant client services agreement — not in this public page. If you are an end-customer of one of our clients, please direct any GDPR request to that business, since they are the controller of your data.
Legal bases we rely on (as controller)
- Consent — for the newsletter, which you opt into and can withdraw at any time.
- Legitimate interests — for responding to strategy-call inquiries and operating/securing the Site, balanced against your rights and expectations.
- Legal obligation — where we must retain or disclose information to comply with the law.
International transfers
Xlines is based in Egypt, which the European Commission has not issued an adequacy decision for. Our website's hosting infrastructure (Hostinger) is located in France, within the European Union, which keeps stored website data within the EEA at rest. That said, because Xlines personnel access and process this data from Egypt, and because we may process client data as processor from Egypt, transfers of personal data out of the EEA/UK can still occur. Where they do, we rely on appropriate safeguards — in particular, the European Commission's Standard Contractual Clauses (SCCs) and, for UK transfers, the UK's International Data Transfer Addendum — incorporated into our client Data Processing Agreements. See our Subprocessors page for who specifically is involved.
EU/UK representative & data protection contact
Xlines has not yet appointed a formal Data Protection Officer or an Article 27 EU/UK representative, consistent with our current size and stage. We will appoint a representative if and when required (for example, if our large-scale processing of EEA/UK data subjects' data reaches a level that requires one). Until then, all privacy inquiries — including from EU/UK individuals — should go to info@xlinescx.com, which we treat as our privacy contact point.
Your rights
Subject to the conditions and exceptions under GDPR/UK GDPR, you have the right to: access your data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; data portability; object to processing (including for direct marketing); and rights related to automated decision-making. See Data Subject Rights & Privacy Requests for how to submit a request.
Complaints to a supervisory authority
If you believe we have not handled your personal data in line with applicable law, you can lodge a complaint with your local data protection supervisory authority (for example, your national EU data protection authority, or the UK Information Commissioner's Office). We would appreciate the chance to address your concern directly first — please reach out to info@xlinescx.com.
Contact us
Questions about this page can be sent to info@xlinescx.com.
This page is provided for general information and does not constitute legal advice. Given the real regulatory stakes of GDPR, we recommend it be reviewed by qualified EU/UK data-protection counsel before you rely on it.