Privacy Policy

Last updated: 9 July 2026 · Effective: 9 July 2026

XSCACE (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains what personal information we collect when you visit xscace.com, how we use it, and the choices available to you. By using our website you agree to the practices described here.

1. Who We Are

XSCACE is an architectural audio brand headquartered in Toronto, Canada. We design and manufacture ultra-thin in-ceiling, in-wall, slim-array, outdoor speakers, subwoofers, and amplifiers. Our registered contact address for privacy matters is: support@xscace.com.

2. Information We Collect

Information you provide directly

• Contact & enquiry forms — name, email address, company name, enquiry type, and any message you submit through our contact or distribution enquiry forms.
• Email newsletter — your email address when you subscribe to XSCACE communications.

Information collected automatically

• Log data — your IP address, browser type and version, pages visited, time and date of visit, and referring URL, collected automatically by our hosting infrastructure.
• Cookies — small text files stored on your device. We use strictly necessary cookies to ensure the site functions correctly. We do not use advertising or tracking cookies without your explicit consent.
• Analytics — aggregated, anonymised usage data to understand how visitors interact with xscace.com. Where we use third-party analytics, we configure them to anonymise IP addresses and respect Do Not Track signals.

3. How We Use Your Information

• Responding to your enquiries, project requests, or distribution applications
• Sending you newsletters or product updates you have opted into
• Improving website content and user experience through anonymised analytics
• Complying with legal obligations applicable in Canada and any jurisdiction where we operate

We do not sell, rent, or trade your personal information to any third party for their marketing purposes.

4. Legal Basis for Processing (where applicable)

Where privacy legislation such as Canada's PIPEDA or the EU General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

• Contract — processing necessary to respond to your enquiry or fulfil a distribution agreement
• Legitimate interests — improving our website and communicating about products in ways you would reasonably expect
• Consent — email marketing, where we rely on your opt-in
• Legal obligation — retaining records required by applicable law

5. Third-Party Services

We use the following third-party services that may process your data on our behalf:

• Formspree — processes contact form submissions. Subject to Formspree's own privacy policy.
• Sanity.io — our content management system. Content data is stored on Sanity's infrastructure.
• Vercel — our website hosting provider. Log data is processed by Vercel in accordance with their privacy policy.
• Resend — used to send transactional email. Your email address is transmitted to Resend when you submit a contact form.

Each of these providers is bound by data processing agreements and maintains industry-standard security measures.

6. Data Retention

We retain contact form submissions and enquiry data for up to 3 years from the date of last communication, or longer if required by law. Newsletter subscriber data is retained until you unsubscribe. Anonymised analytics data may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data (“right to be forgotten”)
• Object to or restrict certain processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, email us at support@xscace.com. We will respond within 30 days.

8. Cookies

Our website uses the following types of cookies:

• Strictly necessary — required for the site to function. No consent is required for these.
• Analytics — where used, we obtain your consent through a cookie notice before placing these.

You can control cookies through your browser settings. Disabling strictly necessary cookies may affect site functionality.

9. International Data Transfers

Our hosting and third-party service providers may process data in countries other than Canada, including the United States and the European Economic Area. Where transfers occur outside of Canada, we ensure appropriate safeguards are in place, such as standard contractual clauses or providers certified under recognised data transfer frameworks.

10. Children's Privacy

xscace.com is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Security

We implement industry-standard security measures including HTTPS encryption, access controls, and secure infrastructure. No method of transmission over the internet is 100% secure; while we strive to protect your information, we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be notified via a notice on our website. Continued use of xscace.com after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related enquiries, complaints, or to exercise your rights:

• Email: support@xscace.com
• Headquarters: Toronto, Canada

If you are located in the EU and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.