Privacy Policy



EXPANSE is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients.

EXPANSE’ clients, employees, vendors, partners and visitors provide us with significant amounts of personal information and protecting the privacy and security of this personal information is critical to EXPANSE.

EXPANSE has a Privacy Policy that applies to all affiliates and employees worldwide. This program helps us ensure that personal information is handled properly. The Privacy Policy governs personal information collected by EXPANSE for its own purposes as well as information provided to us as a data processor for our clients. It concerns the protection of information collected online as well as offline.

For specific information on how EXPANSE protects personal information online, please see the EXPANSE Online Privacy Notice.

For clients based outside of the United States, their customers’ personal information may be transferred to EXPANSE affiliates and data processers in the United States and elsewhere in the world. EXPANSE will always protect the privacy and security of this personal information, regardless of where it is processed. Personal information transfers from the European Economic Area and other countries with data transfer restrictions will be authorized by approved model contracts, an EU-U.S. Privacy Shield certification, or other appropriate means.

EXPANSE is also committed to transparency. We want everyone to understand how we collect and use personal information so they can interact with EXPANSE with confidence.


Expanse recognizes and respects the privacy expectations of today’s consumers and the requirements of applicable regulations in protecting their online privacy. EXPANSE believes that making you aware of how we use your personal information, including sensitive personal information, as discussed further below, and to whom it is disclosed, will form the basis for a relationship of trust with the public that we serve.

EXPANSE is compelled to safeguard your privacy rights with respect to any data or information we receive that identifies you or is identifiable to you. For purposes of this Notice, we will call such data or information “personal data”.

Personal data will always be collected, used, and disclosed by EXPANSE in accordance with the requirements and prohibitions of applicable laws or regulations. This Notice explains how we collect, use, store and share the personal data you provide us on EXPANSE websites. If you use any EXPANSE websites, you agree your use of these websites is subject to the terms of this Online Privacy Notice, the Terms of Use and also subject to the terms of any other agreement you, or where appropriate, your employer or other person or company you are representing, may have with EXPANSE.

The EXPANSE Online Privacy Notice was developed not only to safeguard our clients’ privacy but also to provide assurance that your privacy is of paramount importance to us. For further information, please review the EXPANSE Privacy

Policy and Privacy Shield Consumer Notice which explain EXPANSE’s data collection and usage practices in greater detail.


What kind of personal information does EXPANSE collect online?

In the course of our business, EXPANSE may collect personal data about you from the following sources:

  • from applications or other forms we receive from you or your authorized representative;
  • from our internet websites;
  • from public sources such as vendors who may provide personal data needed for money laundering and trade sanctions compliance, so EXPANSE may confirm you are not listed as a restricted party with whom EXPANSE is legally prohibited from doing business; and
  • from any mobile websites or applications you visit.


How does EXPANSE safeguard the personal data EXPANSE collects?

  • EXPANSE maintains physical, electronic, and procedural safeguards designed to protect your personal data from unauthorized access or intrusion. EXPANSE limits access to the personal data only to those employees, contractors and agents who need such access in connection with providing products or services to you, to clients with whom you have a relationship, or for other legitimate business purposes. Some of these measures may include encryption, physical access security, user access security measures or other technologies and tools which EXPANSE believes may enhance the security of its systems and facilities. However, EXPANSE has no responsibility or liability for the security of information you provide to EXPANSE transmitted via the Internet.
  • EXPANSE employees and contractors receive annual training regarding EXPANSE’ privacy and information security policies and procedures. EXPANSE understands that protecting consumer privacy is an integral part of protecting our relationship with our clients.

How does EXPANSE use the personal data collected?

  • EXPANSE uses the data we collect to assist us in providing products or services to you, to our clients, to provide you with information about those products or for other legitimate business purposes.
  • EXPANSE does not seek to determine your identity when you simply browse our site; however, if you provide EXPANSE with your contact information, such as by completing an online form or providing information in a job application, EXPANSE will know your identity.
  • EXPANSE may use cookies to aggregate information about the web pages you visit, so EXPANSE can update or enhance our services. EXPANSE does not provide your domain name to third parties, other than to the vendors, such as those with whom we contract for website design and maintenance. These vendors are under contractual confidentiality requirements.
  • EXPANSE may disclose your personal data if regulatory obligations require EXPANSE to do so, if EXPANSE determines such disclosure is legally advisable or necessary in order to protect EXPANSE’ rights, the rights of others, or in order to prevent harm.
  • EXPANSE will process your personal data to assure EXPANSE compliance with applicable laws. For example, for fraud prevention purposes, we may confirm your IP address matches the location you enter into our online forms, and for money laundering and trade sanctions compliance, EXPANSE may confirm you are not listed as a restricted party with whom EXPANSE is legally prohibited from doing business.
  • We will only retain your data for as long as is necessary and in accordance with applicable law. We set out our retention periods within our company policies.

What is the legal basis for processing your personal data?

  • EXPANSE collects, uses, stores and otherwise processes personal data where necessary to provide a service which you request, where necessary to comply with a legal obligation, and where necessary pursuant to EXPANSE’ legitimate interests and where these interests are not overridden by your data protection rights. For example, EXPANSE has a legitimate interest in ensuring the security and integrity of its systems and facilities and in ensuring that relevant information for the conduct of our business is available across the EXPANSE group. EXPANSE may also process your personal data where you have given consent. For example, when you fill in an online form or request more information about EXPANSE products or services, you consent to EXPANSE using your personal data as requested. Where EXPANSE asks for consent, you are free to withhold or revoke it.


Who has access to the personal information EXPANSE collects?

  • EXPANSE limits access to personal information to those employees, contractors, business partners or agents who require such access in connection with providing products or services to you or for other legitimate business purposes.

With whom does EXPANSE share the personal information we collect?

Where appropriate or necessary to do so, EXPANSE may share your personal data among our affiliated group of companies. EXPANSE also may disclose your personal data:

  • to agents, brokers, business partners or representatives to provide you with services you have requested;
  • to third-party contractors or service providers to enable us to provide services or other functions to you or to a client of EXPANSE whose services you have requested;
  • to regulatory authorities or public authorities to meet our legal requirements connected to the collection, retention and disclosure of personal data, such as tax reporting or identification of money laundering;
  • to law enforcement in connection with investigations, or civil or criminal subpoenas or court orders;
  • to a prospective buyer or seller in the event EXPANSE sells or buys any business or assets;
  • EXPANSE will disclose your personal data when you direct or give us permission to do so, when we are required by law to do so, or when we suspect fraudulent or criminal activities; and
  • EXPANSE may also disclose your personal data when otherwise permitted by applicable privacy laws, such as when disclosure is required to enforce our rights arising out of any agreement, transaction, or relationship with you or another party.


EXPANSE website(s) are not directed at persons under the age of 18.

  • EXPANSE website(s) are not directed at persons under the age of 18. EXPANSE does not knowingly collect, maintain or use personal data from persons under the age of 18 on any EXPANSE website. If you are under the age of 18 years, please do not register or otherwise provide information to EXPANSE on an EXPANSE website.


What are cookies?

  • Cookies are text files containing small amounts of information which are downloaded to your computer or mobile device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognizes that cookie. Cookies are useful because they allow a website to recognize a user’s device. For more information on EXPANSE’ use of cookies and your options, visit
  • Cookies do many different jobs, such as allowing you to navigate between pages efficiently, remembering your preferences, and generally improving the user experience. They can also help to verify the advertisements and other content you see online are more relevant to you and your interests. They can be set by the website you are visiting (known as first party cookies), or by another entity such as an advertising network (known as third party cookies). The cookies used on this website have been categorized on the basis of the four categories found in the International Chamber of Commerce United Kingdom (ICC UK)


Cookie guide.

We use the following types of cookies:

▪ ‘Session’ cookies remain in your browser during your browser session only (e.g. until you leave the website).

▪ ‘Persistent’ cookies remain in your browser after the session (unless deleted by you).

▪ ‘Performance’ cookies collect information about your use of the website, such as webpages visited and any error messages you receive. The information they collect is aggregated and is not used to directly identify any particular visitor. Performance cookies are used to improve how a website works.

▪ ‘Functionality’ cookies allow the website to remember any choices you make about the website(such as changes to text size, or customized pages) and enable services such as commenting on a blog.

  • Some of these cookies are provided by third parties. For example, we use Google analytics cookies to allow us to analyse statistics on the numbers of visitors to our websites and how users interact with different features on the websites. We also use social media cookies to construct visitor interest models and assess user habits. These cookies are also used to show you relevant advertising.

What if I don’t want cookies?

  • By using EXPANSE’ website you agree we can place cookies and other similar technologies on your device as explained above. If you want to remove existing cookies from your device, you can do this using your browser options. If you want to block future cookies being placed on your device, you can change your browser settings to do this. When you review your browser settings or options, you can identify the EXPANSE cookies by the fact they include “EXPANSE” in the name. For more information on managing cookies, see www.allaboutcookies.org/manage-cookies or www.youronlinechoices.com/

How does EXPANSE respond to “Do Not Track” signals?

  • Current “Do Not Track” initiatives are not recognized by our website.
  • No other parties that are not EXPANSE are authorized by EXPANSE to track users of EXPANSE websites.

EXPANSE websites may be linked to other websites . As you navigate this site, you may click on links that take you to websites that belong to other business units or business partners affiliated with EXPANSE. In addition, we may include

links on EXPANSE sites that are third-party websites, which are not business units or EXPANSE affiliates. EXPANSE is not responsible for the content or privacy practices of other non-EXPANSE websites to which EXPANSE’ websites may link. If you are asked to provide information on one of these sites, we urge you to carefully review their privacy policies before sharing.


EXPANSE is a global enterprise, and so for aggregation and efficiency purposes, EXPANSE may transfer data it collects in one country to a different country. EXPANSE will utilize protection method(s) it determines appropriate and lawful when transferring your data across international borders. These methods may consist of Model Contracts, Privacy Shield, Binding Corporate Rules or other schemes that continue to meet EXPANSE’ commitment in protecting the privacy of your personal data. However, the laws of all countries may not protect your personal data or provide to you the same rights as the privacy laws of your home country.


For other valuable consumer information, including information on protecting yourself from identity theft and fraud,

visit the following sites:

  • United States: www.consumer.gov
  • Australia: www.oaic.gov.au
  • Canada: www.priv.gc.ca/index e.asp
  • Hong Kong: www.pcpd.org.hk/
  • Korea: www.pipc.go.kr/
  • Europe: http://ec.europa.eu/justice/data-protection/
  • Japan: www.ppc.go.jp/en/
  • United Kingdom: https://ico.org.uk/for-the-public/


What rights do I have with respect to my personal data that EXPANSE may have collected?

  • The laws of certain jurisdictions may afford you the right to access your personal data held by EXPANSE and to request correction, amendment, portability or deletion of your personal data held by EXPANSE. In addition, where applicable, you may have the right to object to processing based on legitimate interests and to withdraw consent where consent forms the legal basis for processing. These rights may be limited, for example if fulfilling a request would reveal personal data about another person, or if the processing is required by law or another compelling legitimate interest. If you have unresolved concerns, you have the right to complain to a data protection authority. EXPANSE reserves the right, where permitted by law, to verify your identity, to refuse such requests where appropriate, and to charge a reasonable fee to cover the costs incurred in responding to such requests.
  • In some circumstances, EXPANSE processes personal data on behalf of its clients and subject to the control and instructions of its clients. If you believe EXPANSE may have personal data about you due to services EXPANSE is providing or has provided to an EXPANSE client with whom you have a relationship, it may not be possible for EXPANSE to respond to your request. In that circumstance, it would be more appropriate for you to direct your request to the EXPANSE client with whom you have the relationship.




  • This Online Privacy Notice is subject to change. Please review this Notice periodically. Any changes will become effective when we post the revised Notice on the site (please note effective date listed at top). Your use of the site following these changes means that you accept the revised Notice.