Privacy Policy

Effective Date: August 6, 2026
Last Updated: August 6, 2026

At Exponential Industry (“we,” “us,” or “our”), accessible from exponentialindustry.com, we prioritize the privacy and security of our visitors. This Privacy Policy describes how we collect, use, process, and protect your information when you visit our website, and explains your privacy rights under applicable global regulations, including the European Union General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Brazilian General Data Protection Law (LGPD), the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable legal frameworks.

1. Information Collection & Usage

We limit data collection to what is reasonably necessary to operate, maintain, secure, and improve our website and services:

A. Automated Technical & Log Data

As is standard with web infrastructure, our edge hosting infrastructure (Cloudflare Pages) automatically collects and logs certain technical information when you access the site. This may include:

IP address (anonymized or processed in accordance with applicable privacy standards)
Browser type, operating system, and device parameters
Referring pages, requested URLs, and HTTP header data
Date, time, and duration of visits

Purpose & Retention: This technical data is processed to ensure system stability, analyze performance, protect against security threats or unauthorized activity, and deliver digital assets. Technical logs are retained for as long as reasonably necessary for operational security and auditing purposes, or as required by law.

B. First-Party Local Storage

We utilize browser localStorage to preserve user display choices across sessions:

theme: Remembers your selected color scheme (light or dark).
ei_cookie_consent: Remembers your cookie consent preferences.

Data Boundary: Local storage data is stored directly on your browser/device and is not used to build cross-site tracking profiles.

C. User-Provided Information

If you voluntarily subscribe to our newsletter via Substack or send us inquiries, we process the information provided (such as your email address or name) to fulfill your request and communicate with you. Newsletter subscriptions are managed under Substack’s privacy terms and may be updated or cancelled at any time via the unsubscribe options provided in communications.

Where applicable under European or similar data protection laws, we process personal data under the following legal bases:

Legitimate Interests (Art. 6(1)(f)): Necessary for our legitimate business interests in operating, securing, protecting, and optimizing our web platform and user experience.
Consent (Art. 6(1)(a)): Where you have provided express consent for optional communications or non-essential embedded content.
Legal Compliance (Art. 6(1)(c)): Where processing is required to satisfy legal obligations, regulatory inquiries, or statutory requests.

3. Data Disclosures & Service Providers

We do not sell, rent, or lease your personal information to third-party data brokers. We may share or process data with trusted service providers who assist us in operating our website, delivering content, or conducting our operations, subject to appropriate confidentiality and security standards:

Hosting & Infrastructure: Cloudflare Pages (content delivery and DDoS defense).
Publishing & Communications: Substack (newsletter distribution).
Privacy-Enhanced Media: YouTube (youtube-nocookie.com) and Twitter/X, integrated with privacy-enhanced facades or Do Not Track (data-dnt="true") settings.

We may also disclose information if required to do so by law, in response to valid legal requests, or to protect the rights, property, or safety of Exponential Industry, our users, or the public.

4. Global Data Rights & Choices

Subject to applicable local privacy laws (including GDPR, CCPA/CPRA, LGPD, and PIPEDA), you have specific rights regarding your personal data:

A. European Union, UK & LGPD Data Rights

Access & Portability: Request details regarding personal data processed and receive a copy of your data.
Correction & Deletion: Request correction of inaccurate information or deletion of personal data, subject to legal retention exemptions.
Objection & Restriction: Object to or request restrictions on data processing based on legitimate interests.
Regulatory Complaints: You have the right to lodge a complaint with your local Data Protection Authority.

B. California & US State Rights (CCPA / CPRA)

Right to Know & Access: Request information about categories and specific items of personal information collected.
Right to Request Deletion: Request deletion of personal information, subject to legal exceptions.
No Sale or Sharing: We do not sell personal information or share it for cross-context behavioral advertising.
Global Privacy Control (GPC): Our site recognizes browser-based navigator.globalPrivacyControl signals.
Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

5. Exercising Your Rights & DSAR Procedures

To submit a Data Subject Access Request (DSAR) or exercise any of your statutory privacy rights, please contact us at [email protected]. We will review, verify, and respond to verifiable consumer requests in accordance with applicable legal timelines and statutory guidelines.

6. Children’s Privacy

Our website is intended for a general audience and is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that personal information of a child under 16 has been collected without parental consent, we will take appropriate steps to remove such data.

7. Security & International Transfers

We employ industry-standard technical, administrative, and physical security measures (including HTTPS encryption) to protect data from unauthorized access, disclosure, or modification. Because our hosting infrastructure operates globally, technical data may be transferred to and processed in jurisdictions outside your home country, in accordance with applicable legal transfer mechanisms.

8. Updates to This Privacy Policy

We reserve the right to modify or update this Privacy Policy from time to time to reflect operational changes, technology enhancements, or evolving legal requirements. Updates will be posted on this page with a revised “Last Updated” date.

9. Contact Us

If you have questions, feedback, or privacy-related requests regarding this Privacy Policy, please reach out to:

Exponential Industry
Email: [email protected]
Website: https://exponentialindustry.com