Privacy Policy

Effective Date: January 1, 2026

D2X Enterprises ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit d2xenterprises.com (the "Site").

Information We Collect

We collect information in two ways: information you provide directly and information collected automatically.

Information You Provide. When you submit our consultation request form at /get-started/, we collect the following personal information: your name, email address, company name, and the contents of your message. Providing this information is voluntary and is used solely to respond to your inquiry.

Information Collected Automatically. When you visit our Site, certain information is collected automatically through cookies and similar technologies. This includes your IP address, browser type and version, operating system, device type, referring URLs, pages viewed, time spent on pages, and other standard web analytics data. This information is collected through Google Analytics and Cloudflare, as described in the sections below.

How We Use Information

We use the information we collect to:

  • Respond to your inquiries and provide requested services
  • Improve our website content, layout, and performance
  • Analyze website traffic and usage patterns to enhance the user experience
  • Protect our Site from spam and abuse (via Cloudflare Turnstile)
  • Deliver form submissions to our team via transactional email

We do not sell, trade, or rent your personal information to any third party. We do not use your information for automated decision-making or profiling.

Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies. Cookies are small data files stored on your device by your browser.

Google Analytics (GA4). We use Google Analytics 4 to understand how visitors interact with our Site. Google Analytics sets cookies (including _ga and _ga_* cookies) to distinguish unique users, track session information, and collect data such as pages visited, time on site, and traffic sources. This data is aggregated and anonymized. Google's use of this data is governed by Google's Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Cloudflare. Our Site is served through Cloudflare's content delivery network. Cloudflare may set cookies (such as __cf_bm) for security and performance purposes, including bot detection and DDoS protection. These are strictly necessary cookies. More information is available in Cloudflare's Privacy Policy.

Cloudflare Turnstile. Our consultation form uses Cloudflare Turnstile, a CAPTCHA alternative, to verify that submissions are made by real users rather than bots. Turnstile may collect interaction data and device information to make this determination. This data is processed by Cloudflare under their privacy policy.

Brevo Conversations. We use Brevo Conversations to provide a live chat widget on our Site. When enabled, Brevo may set cookies to maintain chat sessions and collect interaction data. This data is processed by Brevo under their Privacy Policy.

When you first visit our Site, a cookie consent banner allows you to accept or reject non-essential cookies. You can update your preferences at any time by clicking the "Cookie Preferences" button in the bottom-left corner of any page. Essential cookies (Cloudflare security and Turnstile verification) are always active, as they are necessary for the Site to function.

Third-Party Services

We use the following third-party services in the operation of our Site:

  • Google Analytics — Website analytics and traffic measurement
  • Cloudflare — Content delivery network, DNS, DDoS protection, and Turnstile bot verification
  • Brevo (formerly Sendinblue) — Transactional email delivery for form submissions
  • Brevo Conversations — Live chat widget for visitor support

When you submit our consultation form, the information you provide is transmitted to our team via Brevo's transactional email service. Brevo processes this data solely to deliver the email and is governed by Brevo's Privacy Policy.

Each third-party service operates under its own privacy policy. We do not sell or share your personal information with any third party for their own marketing purposes.

Affiliate Links

Our Sites may contain affiliate links to third-party products and services. The agency site at d2xenterprises.com features affiliate links only occasionally; our blog at blog.d2xenterprises.com features affiliate links more regularly as part of its editorial content. When you click an affiliate link and complete a qualifying purchase or action with the third-party merchant, we may earn a commission at no additional cost to you. Affiliate links are marked with the rel="sponsored" attribute consistent with the Federal Trade Commission's guidance under 16 CFR Part 255.

When you click an affiliate link, the affiliate network or merchant may set cookies or use similar tracking technologies on your device to attribute the click and any resulting purchase to us. These cookies are set by the third-party network, not by us, and the data collected is governed by that network's privacy policy. The networks may track information such as the affiliate link you clicked, the time of the click, the page on our Site where the click occurred, and (if you complete a purchase) the order amount and product details. We do not receive your name, address, payment information, or any other directly identifying personal information from these networks. We typically receive only aggregated commission reports.

The third-party merchants and affiliate networks operate independently and have their own privacy policies and data-collection practices, which apply once you click through to their sites. We are not responsible for those practices.

Our editorial decisions are independent of our affiliate relationships. We recommend products and services because we believe they are useful, not because of the commission structure. For more detail on how we handle affiliate links, please see our Affiliate Disclosure.

Blog Subdomain (blog.d2xenterprises.com)

Our blog at blog.d2xenterprises.com is operated by D2X Enterprises LLC and is governed by this Privacy Policy and our Terms of Service. Information collected on the blog is handled in the same manner as information collected on d2xenterprises.com, except as described in this section.

Sponsored Content. The blog may publish sponsored posts and paid placements from third parties. Sponsored content is clearly identified as such within the post (for example, with a "Sponsored" label or an in-post disclosure). Sponsored relationships do not change how your personal information is handled, but the sponsoring party may be identified in the post and may receive aggregated engagement data (such as page views) about the post.

Display Advertising and Ad Networks. When display advertising is enabled on the blog, third-party ad networks (which may include networks such as ExoClick, Google AdSense, or similar providers) may set cookies and use other tracking technologies on your device to deliver and measure advertisements. These networks may collect information such as your IP address, browser and device characteristics, pages viewed, and interactions with ads, and may use that information to serve interest-based advertising on the blog and on other sites. The data collected by ad networks is governed by their own privacy policies, which we encourage you to review.

Affiliate Links on the Blog. The blog features affiliate links more regularly than the agency site. The handling of affiliate links is described in the "Affiliate Links" section above.

Managing Your Preferences. You can accept or reject non-essential cookies, including cookies set by ad networks and affiliate networks, using the cookie consent banner shown on your first visit. You can update your preferences at any time by clicking the "Cookie Preferences" button in the bottom-left corner of any page on either Site. Many ad networks also provide their own opt-out mechanisms; in the United States, you can use the Digital Advertising Alliance's opt-out tool at optout.aboutads.info and the Network Advertising Initiative's opt-out tool at optout.networkadvertising.org.

Data Security

We implement reasonable technical and organizational measures to protect your personal information, including HTTPS encryption across our entire Site and Cloudflare's security infrastructure. However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.

Data Retention

Personal information submitted through our consultation form is retained in our email system for as long as necessary to respond to your inquiry and provide requested services. Automatically collected analytics data is retained according to the default retention periods set by Google Analytics and Cloudflare.

Your Rights

You may request access to, correction of, or deletion of your personal information at any time by emailing privacy@d2xenterprises.com. We will respond to your request within a reasonable timeframe. You also have the right to opt out of Google Analytics tracking using the browser add-on referenced above. The two sections below describe additional rights specific to California residents and to residents of the EU, UK, and Switzerland.

California Residents - Your CCPA / CPRA Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), gives you specific rights regarding your personal information. This section supplements the rest of this Privacy Policy.

Categories of personal information we collect. In the preceding twelve months we have collected the following categories of personal information, as those categories are defined by the CCPA/CPRA:

  • Identifiers - name, email address, IP address, device identifiers (collected through the consultation form and through analytics).
  • Commercial information - limited information about your inquiry and any subsequent engagement with D2X.
  • Internet or other electronic network activity information - pages viewed, time on site, referrer, browser and device characteristics, interactions with affiliate links and (on blog.d2xenterprises.com) advertising.
  • Geolocation data - approximate location derived from IP address (not precise geolocation).
  • Inferences - none drawn for profiling purposes.

Sources. Directly from you (consultation form), automatically from your device (cookies and analytics), and from third-party services we use (Cloudflare, Brevo, Google Analytics, and on the blog any active advertising or affiliate networks).

Purposes. To respond to inquiries, deliver and improve the Sites, measure traffic, prevent fraud and abuse, and (on the blog) deliver and measure advertising and affiliate referrals.

Disclosure for business purposes. We disclose personal information to our service providers (Cloudflare, Brevo, Google Analytics) as necessary for them to provide their services to us. These disclosures are subject to written contracts that limit each provider's use of the information.

Sale or sharing of personal information. We do not sell personal information for monetary consideration. On blog.d2xenterprises.com, certain advertising and affiliate cookies may transmit identifiers and browsing activity to third-party networks for purposes of cross-context behavioral advertising or affiliate attribution. Under the CPRA's broad definitions of "sell" and "share," that activity may constitute "sharing" of personal information. You can opt out of this sharing at any time using the "Do Not Sell or Share My Personal Information" link in our footer, the cookie preferences modal, or by sending a Global Privacy Control signal from your browser, which we honor.

Your rights. California residents have the right to:

  • Know what personal information we have collected about you and how we have used and disclosed it;
  • Request that we delete personal information we have collected from you;
  • Request that we correct inaccurate personal information;
  • Opt out of the sale or sharing of personal information for cross-context behavioral advertising;
  • Limit our use and disclosure of sensitive personal information (we do not currently collect sensitive personal information as defined by the CPRA);
  • Not be subject to discrimination or retaliation for exercising any of these rights.

How to exercise your rights. Email privacy@d2xenterprises.com with the subject line "California Privacy Rights Request" and a description of the right you wish to exercise, or use the "Do Not Sell or Share My Personal Information" link in our footer. We will verify your request by asking for information that allows us to reasonably confirm your identity in light of the nature of the request and the sensitivity of the information involved. We will respond within forty-five (45) days, with a one-time forty-five (45) day extension if reasonably necessary.

Authorized agents. You may designate an authorized agent to make a request on your behalf. The agent must provide proof of authorization, and we may require you to verify your own identity directly with us before acting on the agent's request.

EU and UK Residents - Your GDPR Rights

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation, the UK GDPR, or the Swiss Federal Act on Data Protection (as applicable) gives you specific rights regarding your personal data. The data controller is D2X Enterprises LLC, contactable at privacy@d2xenterprises.com.

Lawful bases for processing. We process personal data on the following bases:

  • Consent - for non-essential cookies, including analytics and (on the blog) advertising. You may withdraw consent at any time using the cookie preferences modal.
  • Legitimate interests - for site security, fraud prevention, responding to inquiries you submit, and basic operational analytics that we cannot perform with consent-gated tools.
  • Performance of a contract or pre-contractual steps - for processing your consultation request and any subsequent engagement.

Your rights. You have the right to access, rectify, erase, restrict processing of, and port your personal data; to object to processing based on legitimate interests; and to withdraw consent at any time. To exercise these rights, email privacy@d2xenterprises.com. You also have the right to lodge a complaint with your national supervisory authority. UK residents may contact the Information Commissioner's Office at ico.org.uk.

International data transfers. D2X Enterprises is based in the United States. When you interact with our Sites from outside the United States, your personal data is transferred to and processed in the United States. We rely on the EU-US Data Privacy Framework and the UK Extension to the DPF for transfers to processors that are DPF-certified (including Cloudflare and Google), and on the European Commission's Standard Contractual Clauses (with the UK Addendum where applicable) for transfers to processors that are not DPF-certified. Copies of the relevant transfer mechanisms are available on request.

Retention. We retain consultation form submissions for as long as necessary to respond to the inquiry and provide any requested follow-up services, plus a reasonable period to defend or pursue any legal claim. Analytics data is retained according to the default retention periods of Google Analytics and Cloudflare.

Automated decision-making. We do not engage in automated decision-making that produces legal or similarly significant effects on you.

Children's Privacy

Our Site is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

Contact Us

D2X Enterprises LLC is the data controller for the Sites. If you have questions about this Privacy Policy or wish to exercise any privacy right described above, you can reach us at:

D2X Enterprises LLC is a Pennsylvania limited liability company.