Effective date: September 4, 2026
A Division of Local 207 Inc. (“us”, “we”, or “our”) operates the https://crosspeak.us/ website (the “Service”).
This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from https://crosspeak.us/.
Definitions
- Service: Service is the https://crosspeak.us/ website operated by A Division of Local 207 Inc.
- Personal Data: Personal Data means data about an individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
- Usage Data: Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- Cookies: Cookies are small pieces of data stored on your device (computer or mobile device).
- Data Controller: Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information is, or are to be, processed. For the purpose of this Privacy Policy, we are a Data Controller of your Personal Data.
- Data Processors (or Service Providers): Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.
- Data Subject (or User): Data Subject is any living individual who is using our Service and is the subject of Personal Data.
Information Collection and Use
We collect several different types of information for various purposes to provide and improve our Service to you.
Types of Data Collected
Personal Data
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City
- Cookies and Usage Data
We may use your Personal Data to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.
eCommerce
We collect information about you during the checkout process on our store. This information helps fulfill orders and serve our users/customers. This information is collected during the checkout or account creation process and includes the following personal data:
- Name
- Address
- Email address
- Phone number
- Payment details
In addition, we collect and use cookies to keep track of the following information while you are on our site to support your visit:
- Products viewed
- Cart contents
- Location/IP address
- Browser type
- Shipping address
(For details regarding cancellations, returns, and exchanges, please view our Refund & Returns Policy).
When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, credit card/payment details, and optional account information like username and password. We’ll use this information for purposes such as to:
- Send you information about your account and order
- Respond to your requests, including refunds and complaints
- Process payments and prevent fraud
- Set up your account for our store
- Comply with any legal obligations we have, such as calculating taxes
- Improve our store offerings
- Send you marketing messages, if you choose to receive them
If you create an account, we will store your name, address, email, and phone number, which will be used to populate the checkout for future orders.
Usage Data
We may also collect information about how the Service is accessed and used (“Usage Data”). This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.
Location Data
We may use and store information about your location if you give us permission to do so (“Location Data”). We use this data to provide features of our Service, to improve and customize our Service. You can enable or disable location services when you use our Service at any time through your device settings.
Tracking & Cookies Policy
We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
Cookie Schedule & Inventory
Below is a detailed list of the cookies utilized on https://crosspeak.us/
1. Strictly Necessary Cookies
Necessary cookies help make a website usable by enabling basic functions like page navigation, security, and access to secure areas of the website. The website cannot function properly without these cookies.
| Cookie Key | Domain | Vendor | Expiration | Description |
__cf_bm | .crosspeak.us / .hcaptcha.com | Cloudflare Inc. | ~30 minutes | Distinguishes between humans and bots to secure traffic and generate accurate usage reports. |
_px3 | .stripecdn.com | Wix.com, Inc. | ~5.5 minutes | Used for security purposes to detect malicious visitors and minimize blocking legitimate users. |
__cflb | api2.hcaptcha.com | Cloudflare, Inc. | ~30 minutes | Load balancing and routing trusted web traffic to maintain consistent service. |
CookieScriptConsent | crosspeak.us | CookieScript | ~4 weeks | Remembers user cookie consent preferences for compliance banners. |
wc_cart_created | crosspeak.us | WooCommerce | Session | Tracks creation of user shopping cart sessions. |
wc_cart_hash_* | crosspeak.us | WooCommerce | Session | Stores unique hash identifying cart contents. |
woocommerce_cart_hash | crosspeak.us | Automattic Inc. | Session | Helps WooCommerce identify when cart contents or data change. |
woocommerce_items_in_cart | crosspeak.us | Automattic Inc. | Session | Tracks items held in the active shopping cart. |
woocommerce_recently_viewed | crosspeak.us | Automattic Inc. | Session | Powers the “Recently Viewed Products” widget. |
wp_woocommerce_session_* | crosspeak.us | WooCommerce | 2 days | Identifies the unique WooCommerce session for logged-in or browsing users. |
2. Performance & Analytics Cookies
Performance cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.
| Cookie Key | Domain | Vendor | Expiration | Description |
sbjs_current | .crosspeak.us | Sourcebuster | Session | Tracks current user activity and traffic source data. |
sbjs_current_add | .crosspeak.us | Sourcebuster | Session | Stores session source, campaign data, and user entry behavior. |
sbjs_first | .crosspeak.us | Sourcebuster | Session | Tracks initial user session source, search engine keywords, and location. |
sbjs_first_add | .crosspeak.us | Sourcebuster | Session | Stores timestamp and referral data from first visit. |
sbjs_migrations | .crosspeak.us | Sourcebuster | Session | Tracks user migration across pages to optimize site navigation. |
sbjs_session | .crosspeak.us | Sourcebuster | ~30 minutes | Tracks user session activity to analyze site performance and usability. |
sbjs_udata | .crosspeak.us | Sourcebuster | Session | Stores user-specific data to monitor advertising campaign effectiveness. |
_ga | .crosspeak.us | Google LLC | 1 year 1 month | Used by Google Analytics to distinguish unique users by assigning a random client ID. |
_ga_3PR4TVM2RM | .crosspeak.us | Google LLC | 1 year 1 month | Persists Google Analytics session state. |
_ga_HLKWV99J6L | .crosspeak.us | Google LLC | 1 year 1 month | Persists Google Analytics session state. |
pxcts | .stripecdn.com | Flipkart | Session | Tracks visitor behavior and engagement to improve service delivery. |
_pxde | .stripecdn.com | Security/Analytics | ~5.5 minutes | Securely collects data via pixel for performance optimization. |
_pxvid | .stripecdn.com | Wix.com Inc. | 1 year | Tracks user interactions to improve overall browsing experience. |
__kla_id | crosspeak.us | Klaviyo Inc. | 1 year 1 month | Tracks user navigation resulting from Klaviyo email marketing campaigns. |
m | m.stripe.com | Stripe | 1 year 1 month | Optimizes payment processing performance and browser caching. |
3. Functionality Cookies
Functionality cookies allow the website to remember choices you make (such as your user name, language, or the region you are in) and provide enhanced, more personal features.
| Cookie Key | Domain | Vendor | Expiration | Description |
__stripe_mid | .crosspeak.us | Stripe Inc. | ~1 year | Set by Stripe to distinguish users and ensure secure payment processing fraud prevention. |
__stripe_sid | .crosspeak.us | Stripe Inc. | ~30 minutes | Set by Stripe to manage session state during checkout and payment processing. |
Interactions, Media, & Additional Features
Comments
When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to assist with spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to verify if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract location data from images hosted on the site.
Contact Forms & Email Communications
If you contact us through one of our contact forms, we collect the data provided in the form, alongside your IP address and browser user agent string to assist with fraud prevention and spam detection.
We use an SMTP service to deliver emails sent through our contact forms:
- Message Metadata: Metadata (sender, recipient, subject line, IP address) is maintained for 30 days to troubleshoot delivery issues.
- Message Body: Incoming and outgoing message bodies are temporarily retained for up to 72 hours for redelivery attempts.
- Suppressions: Permanently stored addresses created from hard bounces, complaints, or unsubscribes are kept until account deletion or manual removal.
- Recipient Data: Activity information of recipient email addresses is retained in pseudonymized formats to pre-validate delivery processes.
User Interactions
When logged-in visitors interact with the site, we log actions alongside usernames and IP addresses. This information is utilized solely by development staff for performance debugging and support. Logged data is retained for 30 days before deletion.
Use of Data
A Division of Local 207 Inc. uses the collected data for various purposes:
- To provide and maintain our Service
- To notify you about changes to our Service
- To allow you to participate in interactive features of our Service when you choose to do so
- To provide customer support
- To gather analysis or valuable information so that we can improve our Service
- To monitor the usage of our Service
- To detect, prevent, and address technical issues
- To provide you with news, special offers, and general information about other goods, services, and events which we offer that are similar to those that you have already purchased or inquired about, unless you have opted not to receive such information.
Legal Basis for Processing Personal Data Under GDPR
If you are from the European Economic Area (EEA), A Division of Local 207 Inc.’s legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it.
A Division of Local 207 Inc. may process your Personal Data because:
- We need to perform a contract with you
- You have given us permission to do so
- The processing is in our legitimate interests and is not overridden by your rights
- For payment processing purposes
- To comply with applicable law
Retention of Data
A Division of Local 207 Inc. will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
A Division of Local 207 Inc. will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.
Transfer of Data
Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.
If you are located outside the United States and choose to provide information to us, please note that we transfer data, including Personal Data, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
A Division of Local 207 Inc. will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. No transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of your data.
Disclosure of Data
Disclosure for Law Enforcement
Under certain circumstances, A Division of Local 207 Inc. may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
Legal Requirements
A Division of Local 207 Inc. may disclose your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of A Division of Local 207 Inc.
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of users of the Service or the public
- Protect against legal liability
Security of Data
The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
Your Data Protection Rights Under GDPR
A Division of Local 207 Inc. aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.
If you wish to be informed what Personal Data we hold about you and if you want it removed from our systems, please contact us. In certain circumstances, you have the following data protection rights:
- The right to access, update, or delete: Accessible directly within your account settings section or by contacting us.
- The right of rectification: Request to rectify inaccurate or incomplete information.
- The right to object: Object to our processing of your Personal Data.
- The right of restriction: Request that we restrict processing of your personal information.
- The right to data portability: Obtain a copy of your information in a structured, machine-readable format.
- The right to withdraw consent: Withdraw consent at any time where processing was based on consent.
Note: You have the right to complain to a Data Protection Authority regarding our collection and use of your Personal Data.
Service Providers
We employ third-party companies and individuals to facilitate our Service (“Service Providers”), perform Service-related functions, or assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Analytics
- Google Analytics: Used to monitor and analyze web traffic. Review Google Privacy & Terms.
- Akismet: Anti-spam service protecting against comment spam. Review Akismet Privacy Notice.
- Hotjar: Behavioral analytics tool. Opt-out options are available via Hotjar Opt-out.
- Microsoft Clarity: Behavioral analytics tool providing heatmaps and session recordings. Review Microsoft Privacy Statement.
Behavioral Remarketing & Advertising
A Division of Local 207 Inc. uses remarketing services to advertise on third-party websites after you visit our Service. Third-party vendors use cookies to optimize and serve ads based on your past visits:
- Google Ads / DoubleClick:Google Ads Settings
Payment Processors
We process payments using third-party services. Payment details are not stored or collected on our servers. Payment data is provided directly to payment processors adhering to PCI-DSS standards managed by the PCI Security Standards Council.
- Stripe:Stripe Privacy Policy
Links to Other Sites
Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.
Children’s Privacy
Our Service does not address anyone under the age of 18 (“Children”). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective date” at the top.
Contact Us
If you have any questions about this Privacy Policy, please contact us:
- By Email:info@crosspeaksoftware.com
- By Visiting Our Website:https://crosspeak.us/
- By Mail:A Division of Local 207 Inc.
10 Mill Brook Rd.
Saco, Maine 04072