Privacy policy
This notice explains what personal information Xcubed collects, why we collect it, how we use and protect it, and the rights you have. It applies to visitors to xcubed.world and to people who enquire about our services, in the United Kingdom, the United States, and elsewhere.
Who we are
Xcubed is a trading name of X3 Advisory Ltd, a company registered in England and Wales (No. 17465702). Our registered office is 171-175 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For any question about your data, or to exercise your rights, contact us at info@xcubed.world.
X3 Advisory Ltd is the data controller for the personal information described here.
What we collect
We collect only what we need to respond to you and to run our services.
- Details you give us through a form or by email: your name, email address, phone number, organisation, job title, and anything you write in a message or enquiry.
- For our Future Generations journeys: the number and type of travellers, preferred departure, and information a parent or guardian chooses to share about a young person who may travel.
- Basic technical information your browser sends when you visit the site, such as pages viewed. See our Cookie policy for detail.
How we use it
- To reply to your enquiry and follow up about the service you asked about.
- To plan, quote for, and deliver an advisory engagement, an immersion, or a Future Generations journey.
- To meet our legal, safeguarding, insurance, and accounting duties.
- To improve the website and our services.
We do not sell your personal information. We do not use it for automated decision-making or profiling.
Our legal grounds (UK and EU)
Under UK GDPR we rely on the following grounds:
- Your consent, for example when you tick a box to be contacted. You may withdraw consent at any time.
- Our legitimate interest in responding to enquiries and running our business, balanced against your rights.
- Performance of a contract, when you book a service with us.
- Legal obligation, where the law requires us to keep records.
Children and young people
Our Future Generations journeys involve young people, so we take particular care. We collect information about a young person only from a parent or guardian, or with their involvement. We use it solely to plan the journey, to keep the young person safe, and to meet our safeguarding and insurance duties. We ask for the minimum needed. A parent or guardian may review, correct, or ask us to delete this information at any time by emailing info@xcubed.world.
For visitors in the United States, we do not knowingly collect personal information from a child under 13 without verifiable parental consent, in line with the Children's Online Privacy Protection Act. If you believe a child has given us information without consent, contact us and we will delete it.
Who we share it with
We share personal information only where needed to deliver a service or meet a legal duty:
- Service providers who host our website and process form submissions, including Netlify, our hosting and forms provider.
- On-the-ground delivery partners in China and other markets, where sharing is needed to run a programme or journey you have booked. We share only what is necessary.
- Insurers, and travel and logistics providers, for a booked journey.
- Professional advisers, and authorities where the law requires it.
Where you opt in to a group messaging channel such as WhatsApp for a specific programme, your phone number and messages will be visible to other members of that group. Joining is optional and you may leave at any time.
Sending data outside the UK
Delivering our services means working across the UK, the United States, China, India, and other countries. When we transfer personal information outside the UK, we put appropriate safeguards in place, such as standard contractual clauses or an equivalent lawful mechanism, so your information keeps a similar level of protection. Ask us for detail at any time.
How long we keep it
We keep enquiry information for as long as needed to respond and for a reasonable period afterwards in case you come back to us. We keep records tied to a booking for as long as the law requires, usually up to seven years for accounting. We keep information about a young person only for as long as needed for the journey and any follow-up duty, then delete it.
How we protect it
We use reasonable technical and organisational measures to keep your information secure and limit access to those who need it. No system is perfectly secure, so we cannot promise absolute security, but we take the duty seriously.
Your rights
Depending on where you live, you have rights over your personal information. In the UK and EU these include the right to access a copy, to correct it, to delete it, to restrict or object to its use, to withdraw consent, and to data portability. To exercise any right, email info@xcubed.world. We will respond within the time the law allows.
If you are in California or another US state with privacy rights, you may ask what personal information we hold, ask us to delete it, and ask us not to sell or share it. We do not sell personal information. We will not treat you differently for exercising a right.
If you are in the UK and unhappy with how we handle your data, you may complain to the Information Commissioner's Office at ico.org.uk. We would ask you to raise it with us first so we can put it right.
Changes to this notice
We may update this notice as our services or the law change. The date at the top shows the latest version. Material changes will be posted on this page.
Contact
Questions, requests, or complaints about your data: info@xcubed.world, or write to X3 Advisory Ltd, 171-175 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.