Privacy policy
Last updated 5 September 2026
Who we are
XPATIC is a trading brand of Payd Media. We provide paid media and lead generation services to businesses that want to reach expats and foreign nationals living in their market.
To confirm before launch: registered entity name, company number, registered address, and ICO or AEPD registration number. These must appear here.
What this policy covers
This policy covers information we collect about you through this website, including the enquiry form. It does not cover data we process on behalf of our clients under a separate agreement, where the client is the controller and we act as processor.
What we collect
- What you give us. Your name, company, work email, phone number, website, and whatever you tell us about your market, sector and requirements through the enquiry form.
- How you arrived. Campaign parameters in the link you clicked (source, medium, campaign) and advertising click identifiers, so we know which marketing brought you here.
- Technical information. Your IP address and browser user agent, recorded when you submit the form.
If you begin the enquiry form and do not finish it, we keep the answers you gave before stopping. You can ask us to delete these at any time.
Why we use it
- To reply to your enquiry. Our lawful basis is your consent, given when you tick the box on the form, and our legitimate interest in responding to a business enquiry we received.
- To measure our advertising. Understanding which campaigns produce enquiries. Our lawful basis is legitimate interest.
We do not sell your information, and we do not pass your enquiry to third parties for their own marketing.
Who we share it with
We use a small number of service providers to run this site and respond to you:
- Hetzner Online GmbH hosts our server. Data is stored in the European Union.
- Resend delivers our notification and reply emails.
- Meta and Google receive advertising measurement data where you arrived through one of their platforms.
To confirm before launch: the final list of providers, and whether analytics or advertising tags are actually installed. Remove any that are not.
Where your data is stored
Our database is hosted in the European Union. Backups are encrypted. Some service providers listed above may process data outside the EU or UK; where they do, they rely on standard contractual clauses or an adequacy decision.
How long we keep it
We keep enquiry records for as long as we are in contact with you, and for up to 24 months afterwards so that we can pick up a conversation you may return to. After that we delete or anonymise them. If you ask us to delete your data sooner, we will.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or object to us processing it. You can withdraw consent at any time, which does not affect anything we did before you withdrew it.
To do any of these, email hello@xpatic.com. We respond within one month.
If you are unhappy with how we have handled your data, you can complain to the supervisory authority in your country. In Spain that is the Agencia Española de Protección de Datos, and in the UK the Information Commissioner's Office.
Cookies
This site stores a small record in your browser to remember the answers you gave in the enquiry form and which campaign brought you here. It is not used to track you across other websites.
To confirm before launch: if you add analytics or advertising tags, this section needs expanding and the site will need a consent banner.
Changes
If we change this policy we will update the date below. Material changes will be brought to your attention.