XpRelay (hereinafter referred to as “XpRelay”, “we”, “us” or “our”) operates a platform and community marketplace that helps people form offline experiences and relationships directly with one another, where they can create, list, discover and book unique advising sessions around the world through our website(“Platform”).
“Affiliates” means companies related by common ownership or control. They can be financial and non-financial companies.
“Aggregated Information” means information about all of our users or specific groups or categories of users that we combine together so that it no longer identifies or references an individual user.
“Data Controller” means XpRelay, the company responsible for the use and processing of Personal Information.
“Third Parties” means companies or persons not related by common ownership or control (i.e. non-affiliates) or other unrelated individuals. Third Parties can be financial and non-financial companies, or persons other than you and XpRelay.
“Personal Information” means information (which may include sensitive information) relating to a living individual who is or can be identified either from that information or from that information in conjunction with other information that is in, or is likely to come into, the possession of the Data Controller.
WHAT TYPES OF INFORMATION DOES XPRELAY GATHER ABOUT ITS USERS?
Information that you give us, we receive, store and process information, including Personal Information, that you make available to us when accessing or using our Platform and Services. Examples include when you:
fill in any form on the Platform, such as when you register or update the details of your user account, or when you supply ID and other verification information;
access or use the Platform, such as to search for or post Advisor and Advising Service, create or accept Sessions, pay for Session, book or pay for any associated services that may be available, post comments or reviews, or communicate with other users; link your account on a Third-Party site (e.g. Facebook) to your XpRelay Account, in which case we will obtain the Personal Information that you have provided to the Third-Party site, to the extent allowed by your settings with the Third-Party site and authorized by you; communicate with XpRelay; and
share information with another Member.
Information we get from your use of our Platform
We also receive, store and process information, possibly including Personal Information, when you access or use our Platform and Services, including but not limited to:
We may also receive, store and process Log Data, which is information that is automatically recorded by our servers whenever you access or use the Platform, regardless of whether you are registered with XpRelay or logged in to your XpRelay Account, such as your IP Address, the date and time you access or use the Platform, the hardware and software you are using, referring and exit pages and URLs, the number of clicks, device event information, pages viewed and the order of those pages, and the amount of time spent on particular pages.
Cookies and other Tracking Technologies
While you may disable the usage of cookies through your browser settings, we do not change our practices in response to a “Do Not Track” signal in the HTTP header from your browser or mobile application. We track your activities if you click on advertisements for XpRelay services on Third-Party platforms such as search engines and social networks, and may use analytics to track what you do in response to those advertisements.
Third-Party social plugins
Our Platform may use social plugins which are provided and operated by Third-Parties.
As a result of this, you may send to the Third-Party the information that you are viewing on a certain part of our Platform. If you are not logged into your account with the Third-Party, then the Third Party may not know your identity. If you are logged into your account with the Third Party, then the Third Party may be able to link information about your visit to our Platform to your account with them. Similarly, your interactions with the social plugin may be recorded by the Third Party.
HOW XPRELAY USES AND PROCESSES THE INFORMATION THAT YOU PROVIDE OR MAKE AVAILABLE
We use, store and process information about you for the following general purposes:
to enable you to access and use the Platform;
to enable you to communicate with other Members, including but not limited to by sending them messages or other information during the Booking process;
to operate, protect, improve and optimize the Platform, XpRelay’s business, and our users’ experience, such as to perform analytics, conduct research, personalize or otherwise customize your experience, and to provide customer service;
to help create and maintain a trusted and safer environment on the Platform and Services, such as detection and prevention of actual and potential fraud and other harmful activity, conducting investigations and risk assessments, enforcing our Terms and policies, verifying any Advice and education experience provided by you, and conducting checks against databases and information sources (such as but not limited to public government databases) for fraud detection and prevention, risk assessment and harm prevention purposes. In this regard, we may do any or all of the foregoing with or without further notifying you;
to send you service, support and administrative messages, reminders, technical notices, updates, security alerts, and information requested by you;
to send you marketing, advertising, and promotional messages and other information that may be of interest to you, including information about XpRelay, our services, or general promotions for partner campaigns and services. You can unsubscribe or opt-out from receiving these communications in your settings when you login to your XpRelay Account; and
to comply with our legal obligations, resolve any disputes that we may have with any of our users, and enforce our agreements with Third Parties.
How XpRelay Uses and Processes User Communications
We may, either directly or through Third-Parties we engage to provide services to us, review, scan, or analyze your communications with other users exchanged via the Platform for fraud prevention, risk assessment, regulatory compliance, investigation, product development, research and customer support purposes. For example, as part of our fraud prevention efforts, the Platform may scan and analyze messages to mask contact information and references to other websites. This helps to prevent fraudulent actors from asking Advice Seeker to send them money outside of the Platform, such as by bank transfer or other money transfer methods. We may also scan, review or analyze messages for research and product development purposes to help make search, booking and user communications more efficient and effective, as well as to debug, improve and expand product offerings. We will not review, scan, or analyze your communications for sending Third-Party marketing messages to you. We will also not sell these reviews or analyses of communications to Third Parties. We will also use automated methods to carry out these reviews or analyses where reasonably possible. However, from time to time we may have to manually review some communications. By using the Platform, you consent that XpRelay, in its sole discretion, may, either directly or through Third-Parties we engage to provide services to us, review, scan, analyze, and store your communications, whether done manually or through automated means.
WHEN XPRELAY DISCLOSES OR SHARES YOUR PERSONAL INFORMATION, AND TO WHOM
IMPORTANT: When you use the Platform, your data may be sent to Hong Kong and possibly other countries.
We may transfer, store, use and process your information, including any Personal Information, to countries outside of Hong Kong. Please note that laws vary from jurisdiction to jurisdiction, and so the privacy laws applicable to the places where your information is transferred to or stored, used or processed in, may be different from the privacy laws applicable to the place where you are resident.
Your Personal Information may be disclosed as follows:
Parts of your public profile page that contain some Personal Information may be displayed in other parts of the Platform to other users for marketing purposes or if you post content in a community forum or other features on the Platform that are visible to the general public. Your public profile page will always include some minimum information such as your Advising Service description, your public profile photo, your responsiveness in replying to Advice Seeker' queries, and any additional information you share with other Members. Your public profile page may also include aggregated demand information (such as number of page views over a period of time). Parts of your public Profile page may be displayed in other parts of the Platform to other Members and/or Third Party platforms for marketing purposes. The Platform allows your public profile to be included in search engines, in which case your public profile will be indexed by search engines and may be published as search results. We do not control the practices of Third-Party search engines, and they may use caches containing outdated information, including any information indexed by the search engine before you change your settings or the information on your public profile. When you submit a request to book an Accommodation, your full name, we may disclose parts or all of your public profile; other Member reviews of you; and any additional information you share with other Members. We will not share your phone number and email without your approval. Your billing and payment information will never be shared with another user.
When Advice Seeker receive advising Session from you or when you advise Advice Sekker, we may ask you to review the Advice Seeker, Advisor, or the Advising Session. If you choose to provide a review, your review may be public on the Platform. Likewise, another Member’s review of you as a Advice Seeker or Advisor may be public on the Platform. You may link your account on a Third-Party social networking site to your XpRelay Account. We refer to a person’s contacts on these Third-Party sites as “Friends”. When you create this linkage:
some of the information you provide to us from the linking of your accounts may be published on your XpRelay Account profile;
your activities on the Platform may be displayed to your Friends on the Platform and/or that Third-Party site; a link to your public profile on that Third-arty social networking site may be included in your XpRelay public profile; the information you provide to us from the linking of your accounts may be stored, processed and transmitted for fraud prevention and risk assessment purposes; and
the publication and display of information that you provide to XpRelay through this linkage is subject to your settings and authorizations on the Platform and the Third-Party site.
We may distribute parts of the Platform (including your Profiles) for display on sites operated by XpRelay's business partners and affiliates, using technologies such as HTML widgets. If and when your Public Profiles are displayed on a partner’s site, information from your public profile page may also be displayed.
We will use commercially reasonable efforts to notify users about law enforcement requests for their data unless:
providing notice is prohibited by the legal process itself, by court order we receive, or by applicable law; or we believe that providing notice would (a) be futile, (b) be ineffective, or (c) would create a risk of injury or bodily harm to an individual or group, or (d) create or increase a risk of fraud upon XpRelay's property, its Members, the Platform, Application, or Services (collectively, “Risk Scenarios”). In instances where XpRelay complies with legal requests for user data without notice to the user for the reasons described above, XpRelay will use commercially reasonable efforts to notify that user about the request after the fact if we determine in good faith that we are no longer legally prohibited from doing so and that no Risk Scenarios apply.
We may also publish, disclose and use Aggregated Information and non-personal information for industry and market analysis, demographic profiling, marketing and advertising, and other business purposes.
BUSINESS TRANSFERS BY XPRELAY
HOW TO ACCESS, CHANGE OR DELETE YOUR INFORMATION, OR CANCEL YOUR XPRELAY ACCOUNT
You may review, update, correct or delete the Personal Information in your XPRELAY Account. If you would like to correct your information, you can do so by logging in to your XPRELAY Account. If you would like to cancel your XPRELAY Account entirely, you must write us an email at firstname.lastname@example.org. Please also note that any reviews, forum postings and similar materials posted by you may continue to be publicly available on the Platform in association with your display name, even after your XpRelay Account is cancelled.
SECURING YOUR PERSONAL INFORMATION
We are continuously implementing and updating administrative, technical, and physical security measures to help protect your Personal Information against unauthorized access, destruction or alteration. However, no method of transmission over the Internet, and no method of storing electronic information, can be 100% secure. So, we cannot guarantee the security of your transmissions to us and of your Personal Information that we store.
YOUR PRIVACY WHEN YOU ACCESS THIRD-PARTY WEBSITES AND RESOURCES
Events The Platform may allow registered account holders to organize, search for or participate in offline events (“Meetups”) in selected cities.
If you organize an Event or indicate that you will attend one, this information, together with some of your public information (such as your profile picture and public profile page) and any messages that you post about that Event, will be visible to users who browse the event.
We endeavor to keep your information accurate, complete and up to date. If your Personal Information that we hold is inaccurate, please let us know and we will make the necessary amendments, erase or block the relevant information and notify you within 40 days of your valid request that the relevant action has been taken.
XpRelay uses “cookies” in conjunction with the Platform to obtain information. A cookie is a small data file that is transferred to your device (e.g. your phone or your computer) for record-keeping purposes. For example, a cookie could allow the Platform to recognize your browser, while another could store your preferences and other information.
Your browser may allow you to set how it handles cookies, such as declining all cookies or prompting you to decide whether to accept each cookie. But please note that some parts of the Platform may not work as intended or may not work at all without cookies.
XpRelay cookies and Third Party cookies
We may also allow our business partners to place cookies on your device. For example, we use Google Analytics for web analytics, and so Google may also set cookies on your device. As further explained below, Third Parties may also place cookies on your device for advertising purposes.
There are two types of cookies used on the Platform, namely “persistent cookies” and “session cookies”.
Session cookies will normally expire when you close your browser, while persistent cookies will remain on your device after you close your browser, and can be used again the next time you access the Platform.
The Platform may also use other technologies with similar functionality to cookies, such as web beacons and tracking URLs to obtain Log Data about users. We may also use web beacons and tracking URLs in our messages to you to determine whether you have opened a certain message or accessed a certain link.
Uses for XpRelay cookies
to enable, facilitate and streamline the functioning of the Platform across different webpages, devices and browser sessions.
to simplify your access to and use of the Platform and make it more seamless.
to monitor and analyze the performance, operation and effectiveness of the Platform, so that we can improve and optimize it.
to show you content (which may include advertisements) that is more relevant to you. for fraud detection and prevention.
Uses for Third-Party cookies
Most browsers automatically accept cookies, but you can modify your browser setting to decline cookies by visiting the Help portion of your browser’s toolbar. If you choose to decline cookies, please note that you may not be able to sign in, customize, or use some of the interactive features of the Platform. Flash cookies operate differently than browser cookies, and cookie management tools available in a web browser will not remove flash cookies. To learn more about how to manage flash cookies, you can visit the Adobe website and make changes at the Global Privacy Settings Panel.
LAST UPDATED: 21 JULY 2016