Data and Privacy Policy

We require it for our Legitimate Interests in order to provide Services and/or Goods to you;
You have provided it to us;
We collect it from you;
And/or third parties we engage (such as data analytics providers) collect it from you on our behalf. So where we describe below (Information You Provide to Us) the ways in which we collect information from you, you acknowledge that such collection may also be carried out by third parties. These third parties may have their own privacy policies that they also adhere to.

We collect both Personal Information and non-personal information, such as Anonymous Information, about our Customers and Users. "Personal Information" is information that can be used to contact or identify you, such as your full name, email address and/or phone number as well as information that is linked to such Personal Information. "Anonymous Information" is information that is not linked to your Personal Information, cannot be used to contact or identify you and is not linked to information that can be used to do so. Anonymous Information includes passively collected information about your activities on our Website(s) or on the Services or using our Software, such as usage data.

"Legitimate Interests" provides a lawful basis for processing where: "processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child." As Extra requires name, address, and/or payment information, to perform our Legitimate Interests, we are not required to obtain consent to process this information.

We may also offer the option of creating a Company Account through connecting via a third party account (for example, with a social media site - a "Third Party Account"), in which case you will be required to approve the connection as well as the types of information (which may include Personal Information) that is made available to us and the types of activities that we may perform in connection with that Third Party Account. Even if you later disconnect your Company Account from the Third Party Account, we still keep a copy of the Personal Information that we received from the connection of the two accounts.

Our Websites may contain blog forums displaying information about us and some of our products and services. The Site may also offer you the opportunity to subscribe to newsletters and participate in surveys and other promotional activities. Your interaction (such as responding on any blog forum, subscribing to a newsletter, or participating in a survey) may require you to provide certain Personal Information such as your name and email address, together with any additional Personal Information you choose to enter on the blog forum. You should read the separate terms and conditions that govern these activities, if any.

In the interest of giving our Website(s) an attractive appearance and in order to allow the use of certain functions, we use cookies on various pages of our Website(s). They consist of small text files that are stored on your device. Most of these cookies used by us will be erased from your device immediately after your browser session (so-called session cookies). Other cookies may remain saved to your device and enable us to recognize your computer in the event of a later visit to our Website(s) (so-called persistent cookies). It is particularly these cookies that allow us to make our Website(s) more user-friendly, effective and safe. Thanks to these files, for example, it is possible to display information specifically suited to your personal preferences on a certain webpage. These cookies will be erased automatically once the retention period expires.

Extra will store your information for as long as it is necessary to provide our services, deal with your queries, and as required to conform to the minimum data retention requirements as dictated by law or regulatory bodies, or for as long as you might legally bring claims against us. We adopt appropriate data collection, storage, processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data stored on secure servers provided by our trusted affiliates.

We take what we consider to be appropriate measures to protect Personal Information. Data is stored on secure servers with appropriate security measures taken to aid in the protection of the data. All data files are treated as confidential and employees who may see any data are bound and subject to confidentiality agreements. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we try to use reasonably acceptable means to protect your Personal Information, we cannot guarantee its absolute security or confidentiality. If you have any questions about security you can contact us at info@extrauk.co.uk

We may transfer, store and/or process the personal data we collect from you outside the European Economic Area ("EEA") which is known as a "Cross-Border Data Transfer". In particular, this may happen as some of our trusted third-parties, trusted third-parties data server, back up servers may be located outside of the EEA. By submitting personal data, you agree to this transfer storage and/or processing of data. You should be aware that countries outside the EEA may not offer the same level of data protection as the United Kingdom; however we take reasonable steps to ensure that your data is treated securely and in accordance with our Privacy Policy.

We may also release your information when we believe release is appropriate to comply with the law or to protect our rights, property or safety. It is our policy to notify customers of requests for their data from law enforcement unless we are prohibited from doing so by statute or court order. Law enforcement officials who believe that notification would jeopardise an investigation should obtain an appropriate court order or other process that specifically prevents Customer notification.

We would like to maintain accurate Personal Information, and we endeavour to comply with all rights you might have under data protection laws. If you would like to delete, access or correct any of your Personal Information that we may be storing, there may be tools that we make available via our Website(s) or Services. Otherwise, please contact us at info@extrauk.co.uk to make your request. A formal request for the data must be submitted in writing using our "Data Access Request" form and furnished to our Data Controller. We will comply with the request in accordance with the law and endeavour to furnish the information within one month. Should we decide than an extension is required you will be informed. No charge will be made for complying with a request unless the request is manifestly unfounded, excessive or repetitive, or unless a request is made for duplicate copies to be provided to parties other than the person making the request. In these circumstances, a reasonable charge will be applied.

You may choose not to receive future promotional, advertising or other Services-related emails from us by selecting an unsubscribe link at the bottom of each email that we send or by modifying your selections on our Website(s) using the tools we may provide. Please note that even if you opt out of receiving the foregoing emails, we may still respond to communications initiated by you, as well as send administrative emails that are necessary to facilitate your use of our Website(s) and/or Services (for example, emails confirming updates to our policies).