Privacy Policy
Last updated: March 2026
XonY is operated by Shah Corporation Limited. This policy explains what data we collect and how we use it.
What We Collect
Analytics (Google Analytics 4)
We use GA4 to understand how the site is used. This collects:
- Pages visited and time on page
- Referring site
- General location (country/city level, not precise)
- Device type and browser
GA4 uses cookies. You can opt out via your browser settings or the Google Analytics opt-out extension.
Cloudflare
The site is served through Cloudflare, which may collect:
- IP addresses (for security and performance)
- Basic request data (URL, headers)
This data is processed by Cloudflare under their privacy policy.
If you contact us or subscribe to updates, we’ll store your email address. We’ll only use it for what you gave it to us for — responding to your message or sending updates. You can ask us to delete it at any time.
We do not sell or share email addresses with third parties.
What We Don’t Collect
- We don’t require accounts or registration
- We don’t collect payment information
- We don’t knowingly collect data from children
Your Rights
Under UK GDPR, you have the right to access, correct, or delete your personal data. Contact us at contact to exercise these rights.
Data Retention
- Analytics data: retained per GA4 defaults (14 months)
- Email addresses: until you ask us to remove them
- Cloudflare logs: per Cloudflare’s retention policy
Changes
We may update this policy from time to time. Changes take effect when posted.
Contact
Questions about privacy? Get in touch.