Privacy policy
What we collect on this website, why, and your rights under UK and EU GDPR.
Last updated: 2026-10-16
Who is responsible
This website, xearch.xyz, is operated by ESS ENN Associates (“we”, “us”), the owner of the Xearch product. We are the data controller for personal data collected on this site. You can contact us about privacy through the contact form or via essenn.associates.
What we collect and why
| Data | Purpose | Legal basis (UK/EU GDPR) | Kept for |
|---|---|---|---|
| Name, work email, company, catalog size and message you send in a form | To reply to your enquiry and arrange a call | Your consent and our legitimate interest in answering business enquiries (Art. 6(1)(a) and (f)) | Up to 24 months after our last contact, unless you become a customer |
| Analytics data (pages viewed, device type, approximate location, from Google Analytics) | To understand which pages are useful and improve the site | Consent (Art. 6(1)(a)); only collected after you click “Allow analytics” | 14 months (Google Analytics retention setting) |
| Server logs (IP address, browser, time of request) | Security and fixing errors | Legitimate interest (Art. 6(1)(f)) | Up to 30 days |
| Search queries typed into site search | To return results; not linked to your identity | Legitimate interest (Art. 6(1)(f)) | Not stored by us beyond search service logs |
Who processes data for us
- Formspree (Formspree, Inc., USA) receives form submissions and forwards them to us.
- Google Analytics (Google Ireland Ltd / Google LLC) provides analytics, only with your consent. IP addresses are not stored or logged by Google Analytics 4.
- Our hosting provider serves the website and keeps server logs.
- Typesense (if enabled) powers site search; queries are processed to return results.
Some processors are based in the United States. Transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses, and the UK Extension where applicable.
Your rights
You can ask to access, correct, delete, restrict or export your personal data, object to processing based on legitimate interest, and withdraw consent at any time without affecting earlier processing. Use the contact form and write “Privacy request” in the message. You can also complain to your data protection authority, for example the UK Information Commissioner’s Office (ico.org.uk) or the authority in your EU country.
Cookies
See the cookie policy. You can change your choice at any time with .
Changes
We will update this page if our practices change and revise the date at the top.