Privacy Policy
Legal disclaimer
Effective Date: 03.07.2025
​
LXpal OÜ (“LXpal”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our website (https://lxpal.com/) or engage with our learning experience design and internal support services.
Our data processing practices comply with the EU General Data Protection Regulation (GDPR), Estonian law, and where applicable, other international data protection standards.
1. Data Controller
Company: LXpal OÜ
Registration Number: 17234653
Registered Address: Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551, Estonia
Contact Email: contact@lxpal.com
2. What Personal Data We Collect
Depending on how you interact with us, we may collect the following personal data:
-
Contact Information: Name, email address, phone number, organization
-
Inquiry Data: Information provided through contact forms, surveys, or email
-
Service Data: Information needed to provide our services (e.g., project requirements, user feedback, platform access, etc.)
-
Technical Data: IP address, browser type, device information, usage patterns (collected automatically)
-
Cookies: Please refer to our [Cookie Policy] for more information
3. How We Use Your Data
We process your personal data for the following purposes, based on the following legal grounds:​​
Purpose
To respond to inquiries and communication
To deliver and manage our services
To administer our website
To send you updates or marketing
To comply with laws and regulations
Legal Basis (GDPR Article 6)
Legitimate interests; pre-contractual step (Art. 6(1)(f), (b))
Performance of contract (Art. 6(1)(b))
Legitimate interests (Art. 6(1)(f))
Consent (Art. 6(1)(a))
Legal obligation (Art. 6(1)(c))
4. Who We Share Your Data With
We may share your data with:
​
-
Service providers (e.g., hosting, analytics, project management, email marketing) who process data on our behalf
-
Authorities if required by law
-
Our clients (if your interaction is as an end learner/participant in a client project — data is handled according to client-provider contracts)
-
Other third parties only with your consent
​​
If personal data is transferred outside the EEA, we ensure adequate safeguards are in place.
5. How Long We Keep Your Data
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Data retention practices are reviewed regularly to ensure compliance.
6. Your Rights
Depending on your jurisdiction (e.g., EU, California, Thailand), you may have the following rights:
-
Access your personal data
-
Correct or update your data
-
Request deletion of your data (“right to be forgotten”)
-
Restrict or object to processing
-
Receive your data in a portable format
-
Withdraw your consent at any time (for consent-based uses)
-
Lodge a complaint with your local Data Protection Authority (e.g., Andmekaitse Inspektsioon for Estonia)
To exercise your rights, contact us at contact@lxpal.com.
7. Data Security
We apply appropriate technical and organisational measures to protect your data against unauthorized access, alteration, misuse, or loss. These include encrypted storage, access control, and team data handling policies.
8. Cookies and Tracking
We use cookies and similar technologies to enhance your experience and analyse site usage. For more information, see our [Cookie Policy].
9. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in regulations, practices, or technologies. All updates will be posted with a new effective date at the top of this page.
10. Contact Us
For any questions or concerns about this policy or your personal data, please contact:
LXpal OÜ
Email: contact@lxpal.com

