Privacy Policy

XolutionLab
Last updated: August 20, 2026

XolutionLab ("XolutionLab," "we," "us," or "our") respects your privacy and is committed to protecting it through compliance with this policy. This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit our website or purchase our products (including The 15-Minute Proposal, The Difficult Email Vault, The Recurring Documents Pack, and any related products, collectively the "Products"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

Please read this policy carefully. By using the Site or purchasing a Product, you agree to the practices described here. If you do not agree, please do not use the Site or purchase a Product.

1. Who We Are

XolutionLab is a sole proprietorship (DBA) operated by David Power, with a business address at:

49 5th Ave, Brooklyn, NY 11217, United States

For the purposes of GDPR and UK GDPR, XolutionLab acts as the data controller for personal information collected through the Site and in connection with the Products.

Contact: [email protected]

2. Information We Collect

Information you provide directly

Information collected automatically

Information from third parties

3. How We Use Your Information

We use collected information to:

We do not sell your personal information to third parties.

4. Legal Basis for Processing (GDPR / UK GDPR)

If you are located in the UK or European Economic Area, we process your personal data on the following legal bases:

PurposeLegal Basis
Processing your purchase and delivering Product accessPerformance of a contract
Customer support and refund processingPerformance of a contract
Sending transactional emailsPerformance of a contract / legitimate interest
Sending marketing emailsConsent (opt-in)
Advertising measurement and retargeting (Meta pixel/CAPI)Consent, obtained via our cookie banner
Fraud prevention, accounting, and legal complianceLegal obligation / legitimate interest

You may withdraw consent at any time (see Section 8) without affecting the lawfulness of processing carried out before withdrawal.

5. Third Parties We Share Data With (Sub-Processors)

We use the following third-party service providers to operate our business. Each processes personal data on our behalf under their own privacy and security terms:

ProviderPurposeData Involved
ThriveCartCheckout, payment processing, order fulfillmentName, email, payment details, purchase history
ActiveCampaignEmail delivery, marketing automationName, email, engagement data
Cloudflare PagesWebsite hosting and deliveryIP address, browser/device data, usage logs
Meta Platforms, Inc.Advertising delivery and measurement (Facebook/Instagram ads, pixel, Conversions API)Ad interaction data, hashed identifiers (e.g., hashed email) for ad matching, where consented
Members-area / LMS platformLogin authentication, content deliveryName, email, login credentials, access logs

We do not control these providers' independent use of data beyond what we've authorized, and we encourage you to review their respective privacy policies. Some of these providers (including Meta) may process data outside your country of residence, including in the United States — see Section 6.

Meta-specific disclosure: If you interact with our Meta (Facebook/Instagram) advertisements, Meta may collect data via its pixel or Conversions API to help us measure ad effectiveness and, where you have consented, show you more relevant ads. Meta acts as an independent controller for its own use of this data. You can manage your ad preferences directly through your Meta account settings ("Ad Preferences") or via facebook.com/adpreferences.

6. International Data Transfers

XolutionLab is based in the United States. If you are located in the UK or EEA, your personal data will be transferred to and processed in the United States and potentially other countries where our service providers operate. Where required, we rely on appropriate safeguards for such transfers, including Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Addendum, as implemented by our service providers (including ThriveCart, ActiveCampaign, Cloudflare, and Meta).

7. Data Retention

We retain personal information for as long as necessary to:

You may request deletion of your account and associated personal data at any time, subject to our legal retention obligations (see Section 8).

8. Your Rights

If you are in the UK or EEA (GDPR / UK GDPR)

You have the right to:

If you are a California resident (CCPA/CPRA)

You have the right to know what personal information we collect, request deletion, and opt out of any "sale" or "sharing" of personal information (note: we do not sell personal information as defined by the CCPA, though certain advertising-pixel sharing may be considered "sharing" under CPRA — you may opt out via our cookie preferences).

For all users

To exercise any of these rights, email [email protected] with your request. We will respond within 30 days (or as required by applicable law). We may need to verify your identity before fulfilling certain requests.

9. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies to:

Where required by law (including for UK/EEA visitors), we will request your consent via a cookie banner before setting non-essential cookies, and you may adjust your preferences at any time through that tool or your browser settings. Disabling cookies may limit some site functionality.

10. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your personal information, including relying on the security infrastructure of our third-party providers (ThriveCart, ActiveCampaign, Cloudflare). However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our Products and Site are intended for business professionals and are not directed at, marketed to, or knowingly used to collect information from anyone under 18. If we become aware we have collected personal data from a child under 18, we will delete it promptly.

12. Marketing Communications and Opt-Out

If you've opted in to receive marketing emails, every email includes an unsubscribe link. You may also email [email protected] to be removed from marketing communications at any time. Transactional emails (e.g., order confirmations, login credentials) are not subject to opt-out, as they are necessary to deliver the Product you purchased.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via email or a notice on our Site prior to taking effect.

14. Contact Us

Questions, requests, or complaints regarding this Privacy Policy or our data practices:

XolutionLab
49 5th Ave, Brooklyn, NY 11217, United States
[email protected]