Legal
Privacy notice
Last updated 8 August 2026 · Applies to xrounds.com
Who we are. This website is operated by XROUNDS (“XROUNDS”, “we”, “us”). Registered company details and registered address are available on request from info@xrounds.com, which is also the contact point for anything on this page.
What this page covers
This notice covers the public website at xrounds.com only. When the XROUNDS customer platform launches, a separate and more detailed notice will cover data processed inside it.
What we collect
| Data | Why | Basis |
|---|---|---|
| Name, work email, company, country, round, and your message | To answer your enquiry and prepare the written stage assessment you asked for | Consent, and our legitimate interest in responding to business enquiries |
| Web server logs on our API host (IP address, user agent, requested path, timestamp) | Security, abuse prevention and troubleshooting | Legitimate interest in keeping the service available and secure |
| Security audit records (IP address and action) when you sign in to the XROUNDS platform | To detect and investigate unauthorised access to customer accounts | Legitimate interest in securing the service, and our legal obligation to protect the data we hold |
We do not use advertising trackers, analytics cookies, session recording, or third-party marketing pixels on this site.
How your enquiry reaches us
When you submit the form, your answers are sent directly to our systems and stored in our database, which runs on Amazon Web Services in the United States. See international transfers below.
If that submission fails, the form falls back to opening your own email application with the details pre-filled. In that case nothing reaches us until you press send in your mail client, and the message travels through your own email provider.
Where data is held, and transfers
The site is served from Amazon Web Services. Request logs are retained for a limited period for security purposes. Enquiry emails are held in our business mailbox. Data may be processed outside your country, including in the United States, under the safeguards those providers offer for international transfers.
How long we keep it
Our retention period for enquiries is 12 months from our last contact with you, so that we can pick up a conversation where it left off. Automated deletion at the end of that period is being brought into force: the job runs nightly but currently only reports what is due, so we are not yet deleting enquiries on that schedule. Request logs are kept for a short operational period only. You can ask us to delete your enquiry at any time and we will.
Your rights
- Ask what personal data we hold about you, and get a copy.
- Ask us to correct anything inaccurate.
- Ask us to delete your data, or to restrict what we do with it.
- Receive the data you gave us in a portable, machine-readable format, or have us send it to another provider where that is technically feasible.
- Object to processing based on legitimate interest.
- Withdraw consent at any time, without affecting anything done before you withdrew it.
- Complain to your local data protection authority.
Write to info@xrounds.com for any of these. We respond within one month, as the law requires, and will tell you if we need longer.
Sharing
We do not sell personal data. We share it only with service providers who help us run the business (hosting and email), and with professional advisers where you have asked us to arrange regulated work and have agreed to the introduction.
Changes
If we change this notice we update the date at the top. Material changes will be highlighted on this page.
8 August 2026. We corrected the retention period for enquiries from 24 months to 12 months from our last contact, so that this notice matches our internal retention schedule, and we now state how far the automated deletion has got.