Legal
How ConversionXperts collects, uses and protects your information when you visit our website, request an audit, or work with us.
Effective date: June 17, 2026
This Privacy Policy explains how ConversionXperts LLC (“ConversionXperts”, “we”, “us” or “our”) collects, uses and protects personal information when you visit conversionxperts.com (the “Website”), contact us, or work with us as a client.
ConversionXperts is a conversion rate optimization (CRO) agency serving businesses in the United States, United Kingdom, Canada and other countries. For personal information collected through the Website, we are the data controller.
Information you give us
Information from other sources
If you reach us through a freelance marketplace, LinkedIn or a referral, we may receive your name, company and project details from that source.
We do not use your information for automated decisions that have legal or similarly significant effects on you.
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry or audit request | Steps taken at your request before a contract, or our legitimate interest in responding |
| Delivering client services and invoicing | Performance of a contract |
| Analytics, heatmaps and session recordings | Your consent (via the cookie banner) |
| Website security and spam prevention | Legitimate interests |
| Tax and accounting records | Legal obligation |
Where we rely on consent, you can withdraw it at any time through the cookie settings link or by emailing us.
We use cookies and similar technologies. Essential cookies keep the Website working. Analytics and behavior cookies are only set after you consent, where consent is required.
| Tool | Provider | What it does |
|---|---|---|
| Google Analytics 4 | Google LLC | Measures traffic, sources and conversions |
| Google Tag Manager | Google LLC | Loads and manages tracking tags |
| Microsoft Clarity | Microsoft Corporation | Heatmaps and anonymized session recordings |
| Hotjar | Hotjar Ltd | Heatmaps, session recordings and feedback |
| Cloudflare | Cloudflare, Inc. | Security, performance and bot protection (essential) |
Session recording tools are configured to mask text you type into form fields. You can block or delete cookies in your browser settings, and opt out of Google Analytics with Google’s browser add-on. Blocking essential cookies may affect how the Website works.
We share personal information only with:
We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We have not done so in the past 12 months.
During a CRO engagement you may give us access to your analytics, ecommerce platform (such as Shopify or WooCommerce), testing tools, heatmaps or session recordings. Those systems can contain your customers’ personal information.
For that data, you are the controller and we act only as your processor or service provider. We access it only to perform the agreed work, do not copy it outside your systems unless needed for the project, and stop using it when the engagement ends. A Data Processing Agreement is available on request.
Our team works remotely, including from Pakistan, and our service providers process data in the United States and other countries. These countries may have different data protection laws from yours.
Where UK or EEA data is transferred, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or the provider’s own approved transfer mechanisms.
| Information | Retention |
|---|---|
| Enquiries and audit requests that do not become clients | Up to 24 months after last contact |
| Client contracts, invoices and payment records | 7 years, for tax and legal purposes |
| Project communications | Duration of the engagement plus 3 years |
| Analytics data | Per each tool’s retention setting, at most 14 months for GA4 |
After these periods we delete or anonymize the information.
We use HTTPS across the Website, access controls and two-factor authentication on business accounts, and limit access to people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If a breach affects your personal information, we will notify you and regulators where the law requires.
Depending on where you live, you may have the right to:
UK, EEA and Swiss residents may also complain to their local data protection authority, such as the UK Information Commissioner’s Office.
US residents, including in California, Virginia, Colorado and other states with privacy laws, may request to know, delete or correct their information. We will not discriminate against you for exercising these rights.
Canadian residents may access and correct their information under PIPEDA.
To make a request, email info@conversionxperts.com with the subject “Privacy Request”. We will verify your identity and respond within 30 days, or within the time your local law requires. You may use an authorized agent where your law allows.
The Website and our services are for businesses. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, contact us and we will delete it.
The Website links to third-party sites, such as tools we review and platforms where our reviews appear. We are not responsible for their privacy practices. Please read their policies before sharing information with them.
We may update this Privacy Policy as our practices or the law change. We will post the new version here with a new effective date. If changes are significant, we will give more prominent notice.
Questions about this policy or your information:
ConversionXperts LLC
Email: info@conversionxperts.com
