Last Updated: January 2026
This page provides information for California residents about their rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
If you are a California resident, this page explains your privacy rights and how to exercise them.
This CCPA Compliance page applies to California residents whose personal information is processed by Xponential7 Ltd and its brands:
For our main privacy notice, see our Privacy Policy.
We collect the following categories of personal information from California residents:
Personal Identifiers
Professional Information
Internet Activity
Geolocation Data
Note: We do not collect sensitive personal information as defined by CCPA (e.g., Social Security numbers, driver's license numbers, precise geolocation, health data, financial account information).
We use the personal information we collect for the following business purposes:
For detailed information, see the "How We Use Your Data" section in our Privacy Policy.
We may share your personal information with the following categories of third parties:
Service Providers
We share data with trusted service providers who assist us with:
These service providers are contractually obligated to process data only as instructed by us and to maintain appropriate security measures.
Business Clients (B2B Marketing Data Only)
For our Demand7 and GTM7 brands, we provide business contact information to our business clients for legitimate B2B marketing purposes. This activity may be considered a "sale" or "sharing" under CCPA.
Important distinction: This applies only to business contact data acquired from third-party sources (not data you submit directly through our website contact forms or career applications).
For details, see Section 7 "Distinction Between Website Visitor Data and B2B Marketing Data" in our Privacy Policy.
Website Visitor Data: NO
We do NOT sell or share for cross-context behavioral advertising:
B2B Marketing Data: YES (Demand7 and GTM7 Only)
For our Demand7 and GTM7 lead generation services, we provide business contact information to our business clients. Under CCPA's broad definition of "sale", this may be considered a sale or sharing of personal information.
What this means:
This does NOT include:
Legal basis: Legitimate business interests for B2B marketing (as permitted under CCPA's B2B exemption and GDPR Recital 47)
California residents have the following rights under CCPA/CPRA:
1. RIGHT TO KNOW
You have the right to request information about the personal information we have collected, used, disclosed, and sold about you in the past 12 months.
What we will provide:
How to request: Email privacy@xponential7.com with subject line "California Right to Know Request"
Response time: 45 days (may be extended by 45 days for complex requests)
Frequency: You can make this request twice in a 12-month period
2. RIGHT TO DELETE
You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
Exceptions: We may retain your data if necessary to:
How to request: Email privacy@xponential7.com with subject line "California Deletion Request"
Response time: 45 days (may be extended by 45 days for complex requests)
3. RIGHT TO CORRECT
You have the right to request that we correct inaccurate personal information we hold about you.
How to request: Email privacy@xponential7.com with subject line "California Correction Request" and include the correct information.
Response time: 45 days
4. RIGHT TO OPT-OUT OF SALE/SHARING
You have the right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising.
How to opt out:
For B2B Marketing Databases (Demand7/GTM7):
If your business contact information is in our Demand7 or GTM7 marketing databases and you wish to be removed:
For Website Data:
If you visit our websites and do not want cookies/analytics data collected, decline cookies via our cookie consent banner.
Note: This opt-out applies only to the specific email address and device/browser you use. If you use multiple email addresses or devices, you will need to opt out separately for each.
5. RIGHT TO LIMIT USE OF SENSITIVE PERSONAL INFORMATION
We do not collect or use sensitive personal information (as defined by CPRA) in ways that would trigger this right.
6. RIGHT TO NON-DISCRIMINATION
You have the right to not receive discriminatory treatment for exercising any of your CCPA rights.
We will not:
To exercise your California privacy rights, contact us:
Email: privacy@xponential7.com
(Include the relevant subject line from the rights descriptions above)
Postal Address:
Xponential7 Ltd
Attn: Privacy Team
43 Tournay Road
London SW6 7UQ
United Kingdom
What to include in your request:
Automated confirmation: When you submit a privacy request to privacy@xponential7.com, you will receive an automated confirmation email with a case reference number. We aim to respond to all requests within 45 days as required by California law.
Verification process:
To protect your privacy, we must verify your identity before processing your request. We verify requests by:
Authorized agents:
You may designate an authorized agent to make a request on your behalf. The authorized agent must:
No fee: Exercising your CCPA rights is free.
California Civil Code Section 1798.83 (California's "Shine the Light" law) permits California residents to request information about disclosures of personal information to third parties for direct marketing purposes.
Our position: We do not disclose Website Visitor Data (contact forms, career applications, newsletters) to third parties for their direct marketing purposes.
For B2B marketing data provided through Demand7/GTM7 services, see the "Do We Sell or Share Personal Information?" section above and opt out if desired.
If you are a California resident under age 18 and have registered for any of our services, you have the right to request removal of content or information you posted.
How to request: Email privacy@xponential7.com with subject line "California Minor Content Removal Request"
Note: This does not ensure complete removal, as content may be retained in backups or republished by third parties.
We may update this CCPA Compliance page from time to time to reflect changes in California law or our practices.
When we make changes:
We encourage you to review this page periodically.
If you have questions about your California privacy rights, please contact us:
Email: privacy@xponential7.com
Postal Address:
Xponential7 Ltd
Attn: Privacy Team
43 Tournay Road
London SW6 7UQ
United Kingdom
For more information, please see:
