Cookie Policy
Effective Date: June 23, 2025
Last Updated: March 23 2026
 

​

DEXITPLAN
Cookie Policy

Version 2.1 | Effective Date: March 17, 2026 | Charlotte, NC, USA
dexit@dexitplan.com | 10850 Providence Rd, #1054, Charlotte, NC 28277

DISCLAIMER: THIS POLICY IS NOT LEGAL ADVICE This Cookie Policy is an informational disclosure
document. It does not constitute legal advice. DEXITPLAN is not a law firm and does not provide legal
services of any kind. Nothing in this Cookie Policy creates an attorney-client relationship. If you have
legal questions about your privacy rights, consult a licensed attorney in your jurisdiction. Contact:
dexit@dexitplan.com

QUICK REFERENCE — What You Need to Know
 DEXITPLAN does NOT sell your personal information.
 DEXITPLAN does NOT use advertising or targeting cookies.
 DEXITPLAN does NOT use Meta Pixel, Facebook Pixel, LinkedIn Insight Tag, or any social
media tracking pixel.
 We use cookies for: website operation, security, analytics, and form functionality only.
 You can opt out of non-essential cookies via our cookie banner or browser settings.
 California residents have additional rights under CCPA/CPRA — see Section 10.
 Global Privacy Control (GPC) signals are honored where legally required — see Section 7.4.

1. What Are Cookies? Plain-English Explanation
A cookie is a small text file that a website places on your device, your computer, phone, or tablet when you visit.
Think of it as a sticky note the website leaves on your device to remember things about your visit.
Cookies do things like:

 Keep you logged in so you do not have to sign in again on every page
 Remember your preferences, like language settings
 Count how many people visit the site so we can measure traffic
 Help the site load faster and work correctly

Cookies do NOT:

 Give websites access to your files or personal information stored on your device
 Transmit viruses or harmful software
 Collect information you have not provided to the website

1.1 First-Party vs. Third-Party Cookies
First-party cookies are set directly by DEXITPLAN on our own domain. We control these cookies. Third-party
cookies are set by external services we use, such as Google Analytics or Square. Those third-party providers set
and control these cookies under their own privacy policies. We list all third-party cookies in Section 4.

1.2 Session vs. Persistent Cookies
Session cookies are temporary. They are automatically deleted from your device when you close your browser.
They keep things running smoothly during a single visit. Persistent cookies stay on your device for a set period of
time, even after you close your browser. They allow the site to remember you on your next visit. We list retention
periods for all persistent cookies in Section 4.
1.3 Other Tracking Technologies We Use
In addition to cookies, our service providers and we may use:
• Web beacons (also called tracking pixels or clear GIFs), tiny invisible images embedded in web pages or
emails that register when a page is loaded or an email is opened. We use these through Google
Workspace to measure email engagement.
• Log files, server-side records of IP addresses, browser type, pages visited, time, and date stamps. Every
web server generates these automatically.
• Local storage, similar to cookies but stored in your browser's local storage rather than as a cookie file.
Used by Wix for performance purposes.

2. Categories of Cookies We Use
We organize cookies used on our Sites into five categories. Each category has different opt-out rules.
Category What It Does Do We Use

This? Data Collected Your Control

1. Strictly
Necessary

Required for the
website to function.
Includes login sessions,
security tokens (CSRF
protection), payment
processing session
management, and fraud
prevention.

YES, cannot
be disabled
without
breaking
core site
functions.

Session tokens,
encrypted member IDs,
render flags, error
metrics

Browser settings only. If
you disable these key
features, including
forms and payments,
may stop working.

2. Performance
& Analytics

Collects anonymous
information about how
visitors use our site —
pages visited, time
spent, error messages.
Helps us improve the
site. Does not identify
you personally.

YES,
Google
Analytics
(GA4) and
Wix
Analytics.

Anonymous visitor ID,
session state, visit
count, timestamps

Click 'Reject All' on the
cookie banner or use
the Google Analytics
Opt-out Add-on. See
Section 7.

3. Functional /
Preference

Remembers your
settings and choices to
improve your
experience. Examples:
language preference,
form progress, whether
you have seen a notice.

YES, Wix
platform and
Tally forms.

Language setting,
cookie consent
preference, form
session state

Click 'Reject All' on the
cookie banner. Some
features may be
reduced.

4. Advertising &
Targeting

Tracks browsing across
websites to build a
profile and show
targeted ads. Includes
social media advertising
pixels (Meta Pixel,
LinkedIn Insight Tag,
etc.).

NO,
DEXITPLAN
has not
installed any
advertising
or targeting
pixels.

N/A N/A, not currently in

use.

5. Social Media Set by social media YES, follow Visitor ID, session Click 'Reject All' on the

platforms (Meta,
LinkedIn, X/Twitter,
YouTube) when their
follow buttons are
present on our website.
These scripts may track
visitors even without
interaction.

buttons for
Facebook,
Instagram,
LinkedIn, X,
and
YouTube
are present.

state, and device info
collected by each
platform under their
own policies

cookie banner.
DEXITPLAN does not
control these cookies.
See Section 7.

Why Category 4 Is Included Even Though We Do Not Use It: Cookie policies that omit the
advertising/targeting category create a credibility gap and may mislead users. Transparency requires
acknowledging all five categories and stating clearly that we do not use Category 4.
Source: FTC Section 5 guidance; CPPA Enforcement Advisory No. 2024-2 on dark patterns and clear language.

3. Legal Basis for Cookie Use
The United States does not have a single federal cookie law. Cookie use is governed by a combination of federal
and state laws.
3.1 Strictly Necessary Cookies — No Consent Required
Strictly necessary cookies do not require your consent under U.S. law because they are essential to deliver the
service you requested. Their use is based on our legitimate operational need to run a functional, secure website.
Legal basis: Operational necessity; FTC Act Section 5 (security and fraud prevention); CCPA Cal. Civ. Code §
1798.145(a) exemptions for service-operation purposes.
3.2 Analytics and Functional Cookies — Opt-Out Right
Analytics and functional cookies collect information that may constitute personal information under U.S. law (e.g.,
IP addresses, device identifiers, browsing behavior). Their use is based on our legitimate interest in
understanding how our site performs and improving user experience. Under U.S. privacy law, including CCPA
and CPRA, you are not required to opt in to these cookies, but you have the right to opt out at any time. We
provide opt-out mechanisms in Section 7.
Legal basis: Legitimate interest in site improvement and analytics; CCPA Cal. Civ. Code § 1798.120 (right to opt
out); CPRA § 1798.135 (opt-out of sharing).
3.3 No Advertising Cookies — Affirmative Consent Standard Noted
DEXITPLAN does not use advertising or targeting cookies. DEXITPLAN does not collect any health information. If
we ever introduce advertising cookies, we note for the record that the FTC requires affirmative express opt-in
consent before sharing sensitive personal information with third parties for marketing purposes in confidential
contexts such as health or financial platforms. We would comply with that standard before deploying any such
cookies.
Legal basis: FTC Business Guidance, September 2023; CCPA Cal. Civ. Code § 1798.120(c) (opt-in for minors);
Womble Bond Dickinson, Cookies That May Bite Back, 2024.
3.4 The U.S. Is an Opt-Out Regime
Unlike the EU's GDPR, U.S. privacy law does not generally require opt-in consent before placing analytics or
functional cookies. U.S. law is an opt-out regime: cookies may be placed, but users must be given a clear and
easy way to opt out. We provide that in Section 7.
Source: Womble Bond Dickinson, Cookies That May Bite Back, 2024; Ifrah Law, Cookie Consent Guide, October
2024.

4. Complete Cookie Inventory — Third-Party Disclosures

This section discloses every cookie and tracking technology used on DEXITPLAN's Sites. We disclose: the cookie
name, who sets it, its category, its specific purpose, what data it collects, how long it lasts, and the legal basis for
its use.
Last audit: March 17, 2026. Next scheduled audit: March 2027. Cookie inventories change as platforms update.
We commit to updating this table within 30 days of discovering new cookies.
4.1 Strictly Necessary Cookies
Source: Wix.com Ltd. — Website Platform
Cookie Set By Category Purpose Data Collected Retention Legal Basis
hs Wix.com Strictly
Necessary

CSRF attack
prevention
on form
interactions

Session security
token (non-
identifying)

Session Operational
necessity

svSession Wix.com Strictly
Necessary

Identifies
logged-in
Wix
members;
maintains
session
state

Encrypted
member ID

Controlled by
Wix; may
vary by site
configuration.
Verify via live
cookie scan.
Service
delivery

XSRF-TOKEN Wix.com Strictly
Necessary
Security
token for all
form
submissions;
prevents
CSRF
attacks

CSRF token Session Security / FTC
Act § 5

SSR-caching Wix.com Strictly
Necessary

Indicates
page render
method for
performance
optimization

Render method
flag

Session Operational
necessity

fedops.logger.* Wix.com Strictly
Necessary
Platform
health
monitoring;
detects
errors and
performance
issues

Error/performance
metrics
(anonymous)

Session Operational
necessity

Note on svSession: Retention period is controlled by Wix and may vary depending on your site
configuration. DEXITPLAN recommends running a live cookie scanner (e.g., CookieYes, CookieScript, or
Cookiebot) on your Wix domain to verify the current retention value. Do not rely on any stated period as
definitive without live verification.
Source: Square, Inc. — Payment Processing
Cookie Set By Category Purpose Data Collected Retention Legal Basis
sq_* /
_square_*

Square,
Inc.

Strictly
Necessary

Payment
session
management
and fraud
prevention

Transaction
session token,
fraud
prevention
signals

Session Service delivery;
PCI DSS
compliance

Source: Tally BV — Form Platform

Cookie Set By Category Purpose Data Collected Retention Legal Basis
tally_* Tally BV Strictly
Necessary /
Functional

Tracks form
session
state,
prevents
duplicate
submissions,
preserves
progress

Form session
token,
completion
state

Session to
30 days

Service delivery;
operational
necessity

4.2 Performance and Analytics Cookies
Source: Wix.com Ltd. — Wix Analytics
Cookie Set By Category Purpose Data

Collected Retention Legal Basis

_wixCIDX Wix.com Analytics Tracks
unique
visitors for
Wix analytics

Anonymous
visitor ID

12 months Legitimate
interest; opt-
out available

_wix_browser_sess Wix.com Analytics Session
tracking for
Wix analytics
reporting

Anonymous
session ID

Session Legitimate
interest; opt-
out available

bSession Wix.com Analytics Tracks a
single visit
for Wix
business
analytics

Anonymous
session ID

30 minutes Legitimate
interest; opt-
out available

userType Wix.com Functional Distinguishes
new vs.
returning
visitors

New/returning
visitor flag

Session Legitimate
interest

wixLanguage Wix.com Functional Stores
language
preference

Language
setting

12 months User
preference

Source: Google LLC — Google Analytics 4 (GA4)
DEXITPLAN uses Google Analytics 4 (GA4) to measure website traffic and user behavior. GA4 cookies use the
updated GS2 identifier format (previously GS1) as of May 2025. These cookies are first-party cookies, technically,
stored on our domain, but the data is sent to and processed by Google LLC.
Cookie Set By Category Purpose Data Collected Retention Legal Basis
_ga Google LLC
(via
DEXITPLAN
domain)

Analytics Distinguishes
unique
users;
assigns
anonymous
client ID

Anonymous
client ID (GS2
format as of
2025)

2 years Legitimate
interest; opt-out
available

_ga_[ID] Google LLC
(via
DEXITPLAN
domain)

Analytics GA4 session
container;
stores and
updates
session state

Anonymous
session state,
visit count, last
visit timestamp

2 years Legitimate
interest; opt-out
available

_gid Google LLC Analytics Distinguishes Anonymous 24 hours Legitimate

(via
DEXITPLAN
domain)

users for 24-
hour session
tracking

user identifier interest; opt-out
available

_gat /
_gat_gtag

Google LLC
(via
DEXITPLAN
domain)

Analytics Throttles
analytics
data request
rate to
Google's
servers

Request rate
flag only

1 minute Operational
necessity

Google Analytics and Your Data: GA4 data is sent to Google LLC (US, globally distributed). DEXITPLAN has
executed a Google Analytics Data Processing Agreement with Google. IP anonymization is enabled in our GA4
configuration. To opt out of Google Analytics tracking across all websites: Install the Google Analytics Opt-out
Browser Add-on at tools.google.com/dlpage/gaoptout.

4.3 Email Tracking Technologies
Source: Google LLC — Google Workspace (Gmail)
Technology Set By Category Purpose Data Collected Retention Legal Basis
Email open
pixel

Google
LLC via
Gmail

Analytics Registers when
an email sent
by DEXITPLAN
is opened

Open event
timestamp;
approximate IP-
based location;
email client type

Up to 12
months

Legitimate
interest; opt-
out available
(see §7.5)

Click tracking
(redirect links)
Google
LLC via
Gmail

Analytics Registers when
a link inside a
DEXITPLAN
email is clicked

Click event; link
identifier;
timestamp

Up to 12
months

Legitimate
interest; opt-
out available

4.4 Social Media Follow Button Cookies
DEXITPLAN's website includes follow buttons for Facebook, Instagram, LinkedIn, X (formerly Twitter), and
YouTube. When these buttons are present on a page, the respective platforms may automatically load scripts that
set cookies on your device, even if you do not click the buttons and even if you are not logged into those
platforms. DEXITPLAN does not install these cookies; they are set by each platform independently under their
own privacy and cookie policies. DEXITPLAN does not receive or have access to the data collected by these
social media cookies.
Platform Cookie Name(s) Categor

y Purpose Retention Opt-Out

Meta
(Faceboo
k &
Instagra
m)

_fbp, _fbc, fr, c_user Social
Media
Track user
activity and
browsing
behavior
across
websites

_fbp: 3 months; fr: 90
days

facebook.com/privacy/policies/coo
kies

LinkedIn li_gc, lidc, lang,
bcookie, bscookie

Social
Media
Store
consent
preference
s, enable
sharing,
track
interaction
s

li_gc: 2 yrs; lidc: 1
day; bcookie: 2 yrs

linkedin.com/legal/cookie-policy

X guest_id, ct0, Social Assign guest_id: 2 yrs; ct0: twitter.com/en/privacy

(Twitter) auth_token Media unique
visitor ID
and
distinguish
users on
X-widget
pages

session

YouTube
(Google
LLC)

VISITOR_INFO1_LIV
E, GPS, YSC

Social
Media
Estimate
bandwidth,
track video
views,
store
session
data

VISITOR_INFO1_LIV
E: 6 months; YSC:
session

policies.google.com/privacy

5. What Data Is Collected Through Cookies
This section is specific and transparent about the exact types of data collected through cookies and tracking
technologies on our Sites.
Data Category Specific Data Elements Collected Cookie Type Shared
With

Device identifiers IP address (anonymized by GA4 by default);
browser type and version; operating system;
screen resolution; device type
(mobile/desktop/tablet)

Analytics (GA4,
Wix)

Google LLC
(GA4 data
processing)

Browsing behavior Pages visited on DEXITPLAN's Sites; time spent
on each page; links clicked; scroll depth; referral
source; exit page

Analytics (GA4,
Wix)

Google LLC
(GA4);
Wix.com
(Wix
analytics)

Session data Session ID; session start and end time; whether
you are a new or returning visitor; pages viewed
per session

All categories Wix.com;
Google LLC

Security tokens CSRF tokens; session authentication tokens
(encrypted; not human-readable; cannot identify
you)

Strictly
Necessary

Not shared
(processed
locally)

Form interaction data Form session state; form progress (for partially
completed forms); duplicate submission
prevention tokens

Functional
(Tally)

Tally BV
(form
platform
only)

Payment session data Transaction session token set by Square during
checkout. DEXITPLAN does not receive or store
raw payment card numbers, CVV codes, or full
card data.

Strictly
Necessary
(Square)

Square,
Inc.
(payment
processor
only)

Email interaction data Email open events (timestamp; email client type;
approximate IP-based location); link click events
(which link; timestamp)

Analytics (email
pixel)

Google LLC
(Google
Workspace)

User preferences Language setting; cookie consent preferences

(what you chose in our banner)

Functional Wix.com
(preference
storage)

Social media interaction
data

Visitor ID; session state; approximate device
information. Collected by Facebook, Instagram,
LinkedIn, X, and YouTube follow button scripts.

Social Media
(third-party, not
controlled by
Meta;
LinkedIn; X;
Google

DEXITPLAN does not receive this data. DEXITPLAN) (YouTube)
— under
their own
privacy
policies
DEXITPLAN does NOT collect through cookies: Social Security numbers; financial account numbers or
credentials; health or medical information; biometric data; precise geolocation (only approximate
location via IP); race or ethnic origin; sexual orientation; immigration status; or any Sensitive Personal
Information beyond what is explicitly listed above.

6. How Cookie Data Is Shared With Service Providers
DEXITPLAN shares cookie-collected data only with the service providers listed below, for the specific purposes
described. We do not sell cookie data. We do not share cookie data with data brokers, advertising networks, or
social media platforms.
Service Provider What Data Is Shared Purpose of Sharing Location Data Agreement
Wix.com Ltd. Session data; analytics
data; form interaction
data; user preferences

Website hosting;
analytics; form
management; site
functionality

Israel,
USA, EU

Data Processing
Agreement

Google LLC (GA4) Anonymized IP; device
identifiers; browsing
behavior; session data

Analytics and
performance
measurement only

USA,
globally
distributed

Google Analytics
DPA

Square, Inc. Payment session
tokens; fraud prevention
signals during checkout
only

Payment processing;
fraud prevention

USA Square ToS / DPA

Tally BV Form session data
during active form
completion only

Form submission
functionality;
duplicate prevention

Belgium /
EU

Data Processing
Agreement

Google LLC
(Workspace)

Email open and click
event data from email
communications

Email delivery and
communication
effectiveness
measurement

USA,
globally
distributed

Google Workspace
DPA

Third-party service providers are contractually prohibited, where applicable under each provider's Data
Processing Agreement, from using your data for their own commercial purposes, reselling it, or sharing it with
additional parties beyond what is necessary to provide their service to DEXITPLAN.
What DEXITPLAN Does NOT Do
• We do NOT install Meta (Facebook) Pixel, LinkedIn Insight Tag, TikTok Pixel, Twitter/X Pixel, Pinterest
Tag, or any other social media advertising pixel on our website.
• We do NOT share website visitor data with advertising networks, programmatic ad platforms, or real-time
bidding systems.
• We do NOT share data with data brokers.
• We do NOT control the cookies set by social media platforms through their follow buttons. DEXITPLAN
does not install, receive, or have access to these cookies. See Section 4.4 for full disclosure.
• If any of our own practices change, we will update this policy and notify users before the change takes
effect.

7. How to Accept, Reject, and Manage Cookies
You have several ways to control cookies. This section gives you specific, actionable instructions for each
method.
7.1 Our Cookie Consent Banner
When you first visit our Sites, a cookie consent banner appears at the bottom of the page. DEXITPLAN's banner
offers two choices only: Accept All or Reject All. There is no granular category-by-category selection.
'Accept All Cookies': All cookies described in this Cookie Policy will be placed on your device, including
analytics cookies (Wix Analytics, Google Analytics 4) and functional cookies. Strictly necessary cookies are
always active regardless of your choice.
'Reject All Cookies': Only strictly necessary cookies required for the website to function will be placed on your
device. Note: Social media follow button scripts from Facebook, Instagram, LinkedIn, X, and YouTube may still
load independently as they are controlled by those platforms, not by DEXITPLAN. Use browser settings to block
third-party cookies entirely if you wish to prevent these.
If you do not click either button: Only strictly necessary cookies will load. This is treated as equivalent to Reject
All.
7.2 Browser Settings — Step-by-Step Instructions
You can control cookies directly through your browser. Note: Blocking all cookies will likely break core
functionality on our Sites, including forms and payment processing.
• Google Chrome: Settings → Privacy and security → Cookies and other site data → Block third-party
cookies.
• Mozilla Firefox: Settings → Privacy & Security → Enhanced Tracking Protection → Strict.
• Apple Safari (Mac): Safari → Settings → Privacy → Prevent cross-site tracking.
• Apple Safari (iPhone/iPad): Settings → Safari → Prevent Cross-Site Tracking ON.
• Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data
→ Block third-party cookies ON.
7.3 Opt-Out of Google Analytics Specifically
To prevent Google Analytics from collecting data about your visits across all websites: Install the Google Analytics
Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout. Available for Chrome, Firefox, Safari, Edge, and
Opera.
To manage your broader Google data and ad personalization settings: Visit myaccount.google.com/data-and-
personalization.
7.4 Global Privacy Control (GPC)
Global Privacy Control (GPC) is a browser-level signal that allows users to automatically communicate their
preference not to have their personal information sold or shared for targeted advertising. It is currently supported
by browsers including Firefox, Brave, and DuckDuckGo.
As of January 1, 2026, GPC signals are legally required to be honored in 12 U.S. states: California,
Colorado, Connecticut, Montana, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland,
Delaware, Oregon, and Texas.
DEXITPLAN does not currently sell or share personal information for targeted advertising. This is the conduct that
GPC signals are specifically designed to address. Because DEXITPLAN does not engage in these activities,
honoring a GPC signal from any visitor produces no change in our data practices; we already do not sell or share
your data for advertising purposes.
DEXITPLAN's current cookie banner is a binary Accept All / Reject All banner. It does not currently use a GPC-
compatible Consent Management Platform (CMP) that automatically detects GPC signals. DEXITPLAN is actively

monitoring whether deployment of a GPC-compatible CMP becomes necessary as our site grows and as state
enforcement of GPC obligations expands.
Users who wish to opt out of non-essential cookies should click 'Reject All Cookies' on our banner. Users who
wish to opt out of any data sharing beyond cookie controls may contact DEXITPLAN at dexit@dexitplan.com.
Source: CPPA enforcement action against Tractor Supply Co., October 2025 ($1.3M fine for GPC non-
compliance); Global Privacy Control specification (globalprivacycontrol.org); Nelson Mullins, GPC Compliance
Alert, February 2025.
7.5 Email Tracking Opt-Out
To opt out of DEXITPLAN email tracking (open pixels and click tracking), disable automatic image loading in your
email client:
• Gmail: Settings → General → Images → Select 'Ask before displaying external images'.
• Outlook: File → Options → Trust Center → Trust Center Settings → Automatic Download → Check 'Don't
download pictures automatically'.
• Apple Mail: Settings → Privacy → Toggle 'Protect Mail Activity' ON.
You may also contact us at dexit@dexitplan.com to request plain-text emails without tracking pixels.
7.6 Do Not Sell or Share My Personal Information
DEXITPLAN does not currently sell personal information or share it for cross-context behavioral advertising.
Because we do not engage in these activities, a 'Do Not Sell or Share My Personal Information' opt-out link is not
currently required by CCPA/CPRA. If our data practices change to include sale or sharing, the required opt-out
mechanism will be added before those practices begin.
Source: CCPA Cal. Civ. Code § 1798.120; CookieYes CPRA Guide, January 2026; Osano CCPA Cookie
Consent Guide, January 2026.

8. Cookie Retention Periods
Cookie / Technology Set By Retention Period Persistent? Deletable by User?
hs Wix.com Session (deleted on
browser close)

No Yes, browser settings

svSession Wix.com Controlled by Wix;
may vary by site
configuration. Verify
via live cookie scan.

Yes Yes, browser settings

XSRF-TOKEN Wix.com Session No Yes
SSR-caching Wix.com Session No Yes
bSession Wix.com 30 minutes from last

action

Yes (short-
term)

Yes

_wixCIDX Wix.com 12 months from last

visit

Yes Yes, browser settings
or Reject All on banner

wixLanguage Wix.com 12 months Yes Yes
_ga Google LLC (GA4) 2 years from last
activity

Yes Yes, browser settings
or GA Opt-out Add-on

_ga_[ID] Google LLC (GA4) 2 years from last
activity

Yes Yes
_gid Google LLC (GA4) 24 hours Yes (short-
term)

Yes
_gat / _gat_gtag Google LLC (GA4) 1 minute No Yes

sq_* / _square_* Square, Inc. Session only No Yes
tally_* Tally BV Session to 30 days Partially Yes
Email open pixel Google Workspace Up to 12 months in
Google Workspace
logs

Yes (server-
side)

Opt-out via email client
settings (see Section
7.5)

9. Children — No Cookie Collection Under Age 13
DEXITPLAN's Sites and services are strictly intended for adults aged 18 and older. We do not knowingly collect
personal information from children under the age of 13 through cookies, forms, or any other means.
This is consistent with the Children's Online Privacy Protection Act (COPPA) and the FTC's Final Rule
amendments effective June 23, 2025.
Full compliance with the 2025 COPPA Rule amendments is required by April 22, 2026. DEXITPLAN is
committed to meeting this deadline.
If we become aware that we have inadvertently collected personal information from a child under 13 through any
tracking technology, we will delete it immediately. If you are a parent or guardian and believe your child under 13
has visited our Sites or submitted any information, contact us immediately at dexit@dexitplan.com.

10. California Privacy Rights — CCPA / CPRA
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and
the California Privacy Rights Act (CPRA) regarding personal information collected through cookies. These rights
apply to cookie-collected data such as IP addresses, device identifiers, and browsing behavior, all of which qualify
as personal information under California law.
Your Right What It Means for Cookie

Data How to Exercise It

Our
Response
Time

Legal Basis

Right to Know Ask us to disclose what
cookie-collected personal
information we have
collected about you

Email
dexit@dexitplan.com —
Subject: 'CCPA Right to
Know Request'

45 days CCPA §
1798.110

Right to Delete Ask us to delete cookie-
collected personal
information we hold about
you

Email
dexit@dexitplan.com —
Subject: 'CCPA Deletion
Request'

45 days CCPA §
1798.105

Right to Correct Ask us to correct
inaccurate personal
information we hold about
you

Email
dexit@dexitplan.com —
Subject: 'CCPA
Correction Request'

45 days CPRA §
1798.106

Right to Opt Out of
Sale / Sharing

We do not sell or share
your data for advertising.
This right currently has
nothing to opt out of.

Click Reject All on
cookie banner; or email
dexit@dexitplan.com

Immediate
(banner)

CCPA §
1798.120;
CPRA §
1798.135

Right to Limit SPI
Use

Ask us to limit the use of
Sensitive Personal
Information beyond the
purpose for which it was
collected

Email
dexit@dexitplan.com —
Subject: 'SPI Limit
Request'

15 business
days

CPRA §
1798.121

Right to Non-
Discrimination

We will not deny you
services, charge different
prices, or provide a lower
quality of service because
you exercised any of the
above rights

Automatic — no action
needed

N/A CCPA §
1798.125

10.1 Identity Verification for CCPA Requests
We must verify your identity before fulfilling a data access, deletion, or correction request. We will ask for the
email address associated with your account and may request additional verification. We do not fulfill requests
from unverified individuals, consistent with CCPA requirements.
10.2 Authorized Agent Requests
You may designate an authorized agent to submit a CCPA request on your behalf. We require written
authorization signed by you, or proof that the agent has power of attorney, plus identity verification. Contact
dexit@dexitplan.com.
10.3 CCPA Applicability Threshold Disclosure
DEXITPLAN discloses the CCPA/CPRA thresholds for transparency. The CCPA fully applies to for-profit
businesses meeting at least one of the following: annual gross revenue exceeding $26,625,000; buying, selling,
or sharing the personal information of 100,000 or more California consumers or households annually; or deriving
50% or more of annual revenue from selling or sharing personal information. Note: DEXITPLAN does not buy,
sell, or share personal data with any third party except for analytics purposes as disclosed in this policy.
DEXITPLAN voluntarily complies with CCPA/CPRA rights for all users regardless of whether we currently meet
these thresholds, because we collect data from California residents and consider compliance to be a reasonable
baseline standard.
Source: Jackson Lewis, CCPA/CPRA FAQ, January 2026; SecurePrivacy, CCPA Requirements 2026 Guide;
Official CPPA FAQ (cppa.ca.gov).

11. Policy Updates and Cookie Audits
• We perform a full cookie audit at least once every 12 months or immediately following any material
change to our website technology or service providers.
• We update the cookie inventory in Section 4 within 30 days of discovering new cookies.
• We notify users of material changes via email, website banner, or updated effective date.
• The 'Effective Date' at the top of this policy always reflects the date of the most recent material revision.
• DEXITPLAN monitors North Carolina privacy legislation and will update this policy if NC-specific
obligations come into effect.
Practical Note: Because Wix and Google regularly update their platforms, new cookies may be
introduced without prior notice. DEXITPLAN strongly recommends running a cookie scanner (e.g.,
CookieYes, CookieScript, or Cookiebot) on your live Wix domain at least quarterly to catch any new
cookies introduced by platform updates or third-party apps.

12. Contact Information

Company DEXITPLAN

Email dexit@dexitplan.com
Mailing Address 10850 Providence Rd, #1054, Charlotte, NC 28277, USA
Response Time 15 business days for all privacy inquiries
Effective Date March 17, 2026
Version 2.1
DISCLAIMER: This Cookie Policy is an informational disclosure document only. It does not constitute
legal advice. DEXITPLAN is not a law firm and does not provide legal, financial, tax, or professional
advisory services of any kind. Nothing in this Cookie Policy creates an attorney-client relationship or
any professional relationship. Users who have questions about their specific legal rights are
encouraged to consult a licensed attorney in their jurisdiction. Related documents: DEXITPLAN Privacy
Policy (v4) | DEXITPLAN Terms of Service and Disclaimer (v1) | DEXITPLAN Comprehensive Legal
Disclaimer (v1) DEXITPLAN Cookie Policy v2.1 | Effective March 17, 2026 | 10850 Providence Rd,
#1054, Charlotte, NC 28277 | dexit@dexitplan.com