Exerfly Privacy Policy

Effective Date: 25th May 2026

At Exerfly, we are committed to protecting your privacy and handling your personal data in a transparent and secure way. This Privacy Policy explains how we collect, use, share, and safeguard your personal information when you interact with our website, products, and services.

1. Who We Are (Data Controller)

Exerfly is the data controller responsible for your personal data under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and UK GDPR.

‍

Exerfly
2020 Prairie Lane
Eau Claire, WI 54703
United States

Email: help@exerfly.com

‍

If you are located in the EU or UK and have questions about your data rights, please contact us using the details above. We aim to respond to all data rights requests within 30 days.

2. Personal Data We Collect

If you are located in the EU or UK and have questions about your data rights, you may contact us using the details above.

We collect the following categories of personal data:

A. Device & Usage Information

When you visit our website, we automatically collect certain technical and usage data, including:

• Browser type and version
• IP address
• Time zone
• Device identifiers
• Pages visited, time spent, and referring URLs
• Cookies installed on your device

Technologies used:

• Cookies
• Log files
• Web beacons, tags, and pixels

B. When you request a quote, contact us, or complete a form, we collect:

• Name
• Email address
• Phone number
• Country (and State if in the US)
• Any additional details you choose to provide

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• To respond to quote requests and inquiries
• To communicate with you about our products and services
• To provide customer support
• To improve our website, content, and services
• To send marketing communications (only if you opt in)
• To analyze website usage and performance
• To prevent fraud and ensure website security
• To comply with legal and regulatory obligations

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases, which vary depending on how you interact with us:

Legitimate Interests — Lead

Where you submit a Newsletter Sign-Up form or a Request a Quote form, we process your personal data on the basis of legitimate interest. We have a legitimate interest in communicating with individuals who have expressed interest in our products and services. You do not need to tick a checkbox as we rely on this basis to send relevant communications. You may unsubscribe at any time.

‍

Legitimate Interests — Engagement

Where you submit a comment, we process your name and email address solely to respond to your comment. This is based on our legitimate interest in communicating with users who engage with our website content. We do not use comment data for marketing purposes. You have the right to object to this processing at any time.

We also rely on legitimate interests to improve our website, ensure security, prevent fraud, and understand user behavior — balanced against your rights and freedoms.

‍

Implicit Processing Consent

Where you submit a Contact Us form, your personal data is processed on the basis of implicit consent (the act of submitting the form). An optional opt-in checkbox is provided if you also wish to receive marketing communications. If you do not select the checkbox, your enquiry will still be processed but you will not be subscribed to any communications.

‍

Legal Obligations

To comply with applicable laws, tax, and accounting requirements.

5. Marketing Communications

We send marketing communications on the following bases depending on how you came into contact with us:

• Newsletter Sign-Up forms
  
  • Legal basis: Legitimate Interest — Lead
  • What you may receive: New products, research, blog content, offers
• Request a Quote form
  
  • Legal basis: Legitimate Interest — Lead
  • What you may receive: Product and service information relevant to your enquiry
• Contact Us form
  
  • Legal basis: Implicit processing consent + opt-in checkbox
  • What you may receive: Only if opt-in checkbox selected
• Comment Form
  
  • Legal basis: Legitimate Interest — Engagement
  • What you may receive: Reply to comment only — no marketing communications unless requested

You may unsubscribe from marketing communications at any time using the link in any email we send, or by contacting us at help@exerfly.com.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website and improve your experience.

• Essential cookies are required for website functionality and cannot be disabled.
• Non-essential cookies (e.g., analytics and marketing cookies) are only used with your consent.
• We use a cookie consent manager powered by Usercentrics, which allows you to manage your preferences at any time.

7. Third-Party Services and Data Sharing

We share personal data only with trusted service providers who help us operate our business. Some of the tracking and analytics tools listed below are deployed via Google Tag Manager. All providers are contractually required to protect your data and use it only on our behalf.

• HubSpot
  
  • Role: CRM, email marketing, forms, cookie consentData shared: Name, email, phone, enquiry details, form submissions, cookie preferences
• Webflow
  
  • Role: Website hosting and infrastructureData shared: Usage data, IP address, device information
• Google Analytics
  
  • Role: Website analytics and performance tracking (via GTM)Data shared: Anonymised usage data, pages visited, referral sources
• Google reCAPTCHA
  
  • Role: Bot and spam prevention on HubSpot forms (via GTM)Data shared: Form submission data, IP address, browser behaviour
• Meta Pixel
  
  • Role: Ad performance measurement and retargeting (via GTM)Data shared: Page visits, browser/device data, behavioural events
• Supersparks
  
  • Role: Comment functionalityData shared: Name, email, and comment content submitted via comment form
• Zapier
  
  • Role: Workflow automation and data routingData shared: Name, email, and form submission data as required for automation workflows
• Usercentrics
  
  • Role: Cookie consent managementData shared: Cookie preferences and consent records

We do not sell your personal data. We may disclose your data if required by law or to enforce our legal rights.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy. Typical retention periods include:

Contact and quote request data: Up to 36 months

• Marketing subscription data: Until you unsubscribe
• Analytics data: Up to 26 months
• Cookie and device data: Up to 13 months (in line with cookie consent standards)
• Legal and financial records: As required by law (typically 7 years for financial records)

You may request deletion of your personal data at any time (see Section 11).

9. International Data Transfers

You may request deletion of your personal data at any time (see Section 11).

Your personal data may be transferred to and processed outside the EU/UK, including in the United States, where our service providers (including HubSpot, Webflow, Google, Meta, Supersparks, Zapier, and Usercentrics) are headquartered or operate.

Where required, we rely on Standard Contractual Clauses (SCCs) and appropriate safeguards to ensure your data remains protected.

10. Do Not Track Signals

Our website does not currently respond to "Do Not Track" browser signals due to the lack of a consistent industry standard.

11. Your Rights and Choices (GDPR)

If you are located in the EU, UK, or other applicable jurisdictions, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your personal data
• Withdraw consent at any time (without affecting the lawfulness of prior processing)
• Object to processing based on legitimate interests
• Restrict processing
• Receive your data in a portable format
• Lodge a complaint with your local data protection authority

To exercise your rights, contact us at: help@exerfly.com

We will respond to your request within 30 days. In some cases, we may need to verify your identity before fulfilling a request.

12. California Residents (CCPA/CPRA)

If you reside in California, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• The right to know the categories of personal data we collect and the purposes for which it is used
• The right to access your personal data
• The right to correct inaccurate personal information
• The right to request deletion of your personal information
• The right to limit the use of sensitive personal information
• The right to opt out of the sale or sharing of your personal information

We do not sell your personal data.

To make a CCPA/CPRA request, email: help@exerfly.com

13. Children’s Privacy

Our website and services are not intended for individuals under the age of 16.

We do not knowingly collect personal data from children.
If you believe your child has provided us with personal data, please contact us so we can delete it.

14. Changes to This Policy

We may update this policy to reflect legal, regulatory, or operational changes.

When we do, the "Effective Date" at the top of this page will be updated.

15. Contact Us

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact:

help@exerfly.com