Privacy Policy

Effective Date: May 11, 2026

This Privacy Policy explains how Maxwell Book LLC, doing business as XbooK ("we", "us", "our"), collects, uses, shares, and protects information when you visit xbooklaptop.com (the "Site") or buy from us. By using the Site, you agree to the practices described here. If you do not agree, please do not use the Site.

If you have questions, email us at support@xbooklaptop.com.

1. Information We Collect

Information you give us directly:

Contact details (name, email, shipping address, phone)
Order information (items, payment confirmation — payment card data is handled by Shopify and our payment processors; we do not store full card numbers)
Communications you send us (support emails, returns, warranty claims)
Marketing preferences (email signups, SMS opt-ins if applicable)

Information collected automatically:

IP address, device/browser type, operating system, referring URL
Pages viewed, time on page, click paths, search terms used on the Site
Cookie identifiers and similar tracking technologies (see Section 4)
General location inferred from IP

Information from third parties:

Order and customer data from Shopify
Marketing engagement data from Klaviyo (email opens, clicks)
Aggregated ad performance from Meta and Google
Fraud and authentication signals from payment processors

2. How We Use Information

Fulfill orders, ship products, process returns, provide warranty service
Send transactional emails (order confirmations, shipping updates)
Send marketing emails to subscribers (you can unsubscribe any time)
Improve the Site, our products, and your experience
Run and measure advertising campaigns
Detect fraud and protect the Site from abuse
Comply with legal obligations (taxes, recordkeeping, valid legal requests)

3. How We Share Information

We do not sell your personal information for money.

We do "share" personal information in a specific California-CPRA sense: we use Meta Pixel and Google advertising tags to measure ad effectiveness and to retarget visitors. Under California law, this counts as "sharing" for cross-context behavioral advertising even though we receive no payment. You can opt out — see Section 7.

We share information with:

Service providers acting on our behalf (Shopify for storefront and orders; Klaviyo for email; Affirm/Shop Pay for installment payments; shipping carriers for delivery; cloud hosting; customer support tooling)
Advertising partners (Meta, Google) for measurement and retargeting — only after consent where required (see Section 4)
Analytics providers (Google Analytics, Shopify analytics) for aggregated traffic insights
Legal recipients when required by valid legal process or to protect rights, property, or safety
A successor entity in connection with any merger, acquisition, financing, or sale of assets

4. Cookies, Tracking, and Consent

We use cookies and similar technologies for:

Essential site function (cart, checkout, login, security)
Analytics (understanding how the Site is used)
Advertising and retargeting (Meta Pixel, Google Ads tags)
Email engagement tracking (Klaviyo)

Cookie banner. When you visit the Site, you'll see a cookie banner managed through Shopify's Customer Privacy Platform. You can accept all, reject all, or pick categories. Non-essential cookies (analytics and advertising) do not fire until you accept.

Global Privacy Control (GPC). If your browser sends a GPC signal, we treat it as a request to opt out of "sale" and "sharing" of personal information for cross-context behavioral advertising in jurisdictions where GPC has legal effect (California, Colorado, Connecticut, others). The Shopify Customer Privacy Platform we use respects GPC signals by default.

Do Not Track (DNT). DNT does not have a uniform standard. We do not separately respond to DNT, but our cookie banner and GPC handling provide equivalent or stronger control.

5. Embedded Video and the VPPA

Our Site includes embedded videos (product demos, customer videos, third-party press videos). When you watch an embedded video while advertising trackers are active, the third-party platform hosting the video may receive an identifier and the title of the video being played. If you do not want this, decline analytics/advertising cookies in our cookie banner before watching, or use a private/incognito browsing window.

6. Email and SMS Marketing

We send marketing emails through Klaviyo to subscribers who opt in (popup, checkout box, or other capture point). Every marketing email includes an unsubscribe link. Unsubscribing stops marketing emails but does not stop transactional emails (order confirmations, shipping updates, warranty notices).

If we ever introduce SMS marketing, separate opt-in and disclosures will appear at the point of capture.

7. Your Privacy Rights

The rights you have depend on where you live. For most U.S. residents, you have at least these rights:

Right to know / access — request a copy of the personal information we hold about you.
Right to correct — ask us to fix inaccurate information.
Right to delete — ask us to delete personal information (subject to legal/operational exceptions like tax records, fraud prevention, and active orders).
Right to opt out of "sale" / "sharing" — opt out of cross-context behavioral advertising (Meta Pixel, Google Ads tags).
Right to limit use of sensitive personal information — we do not currently use sensitive personal information for advertising, but the right exists if that ever changes.
Right to non-discrimination — we will not deny products or services, charge different prices, or provide a different level of quality because you exercised a privacy right.

State-specific frameworks: California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Oregon (OCPA), Texas (TDPSA), Montana (MTCDPA), Florida (FDBR), and other states with comprehensive privacy laws all map to the rights above.

How to exercise rights:

Cookie/advertising opt-out: Use the cookie banner, or click Your Privacy Choices in the Site footer.
Access / correct / delete: Email support@xbooklaptop.com from the email address tied to your account, or write to us at the address in Section 12. We may need to verify your identity (typically by matching the email and order details).
Authorized agents: If someone is acting on your behalf, we will need written authorization plus identity verification.

We aim to respond within 45 days. We may extend by an additional 45 days for complex requests, with notice.

EU / UK residents. We do not actively market or sell to the European Union or United Kingdom. If you are an EU/UK resident who landed on the Site and wants your data deleted, email us — we will process the request the same as a U.S. request.

8. Data Retention

Order records: kept for at least 7 years for tax and warranty purposes.
Customer accounts: kept while the account is active, plus a reasonable period after for fraud prevention.
Marketing data: kept while you remain subscribed, plus a short window after unsubscribe for suppression list purposes.
Server logs: typically 90 days.

9. Security

We use commercially reasonable technical and organizational safeguards, including:

Encrypted transport (HTTPS) for all Site traffic
Vendor-managed payment processing — we do not store full card numbers
Access controls and least-privilege principles for staff systems
Regular review of third-party processor security posture

No system is perfectly secure. If a breach affects you, we will notify you as required by law.

10. Children

The Site is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, email us and we will delete it.

11. Changes to This Policy

We may update this policy. The Effective Date at the top reflects the most recent change. Material changes will be highlighted on the Site or sent to subscribers. Continued use of the Site after changes means you accept them.

12. Contact

Maxwell Book LLC, dba XbooK
New Jersey, USA
Email: support@xbooklaptop.com
Site: https://xbooklaptop.com