Privacy Policy
WHAT THIS PRIVACY POLICY DEFINES
This privacy policy ("Privacy Policy") governs Extra (UK) Ltd, its
subsidiaries and trusted affiliates (each individually and collectively may
be referred to herein as "Extra", "we", "our" or "us"), information
collection, processing and usage practices in our capacity as controller.
With this Privacy Policy Extra aims to provide the highest possible level of
transparency regarding the way in which the data you provide, or is obtained
by us, is processed and managed.
Safeguarding the Personal Information (defined below) of our customers,
visitors, and users ("Users", "you", or "your") is important to us and we
recognise the responsibility you entrust us with when providing your
Personal Information. This Privacy Policy details how your Personal
Information is used by Extra both actively and passively, when you visit our
Website(s), use our Services or purchase Goods from us.
With this Privacy Policy we wish to outline the basis on which any Personal
Information is used by Extra, both actively and passively, including what
information we may collect from you, how we may use such information, how we
may disclose information provided by you to third parties and the use of
"cookies" when you visit our Website(s), use our Services or purchase Goods
from us.
Extra does not sell, trade, or rent users personal identification
information to others. We may share generic aggregated demographic
information not linked to any personal identification information regarding
visitors to our Website(s) and users with our business partners or trusted
affiliates.
Generally speaking, Extra receives information because:
- We require it for our Legitimate Interests in order to provide Services and/or Goods to you;
- You have provided it to us;
- We collect it from you;
- And/or third parties we engage (such as data analytics providers) collect it from you on our behalf. So where we describe below (Information You Provide to Us) the ways in which we collect information from you, you acknowledge that such collection may also be carried out by third parties. These third parties may have their own privacy policies that they also adhere to.
This Privacy Policy is a living document and subject to change from time to
time, please check our Website(s) regularly for the latest information.
When purchasing goods, using our Services or entering into contract or
agreement with Extra, you consent to the terms of our Data Policy.
QUESTIONS ABOUT THIS PRIVACY POLICY
If you have any questions or comments regarding privacy issues in regard to
our Website(s) and/or Services, please contact us by e-mail at info@extrauk.co.uk
TYPES OF INFORMATION WE MAY COLLECT
We collect both Personal Information and non-personal information, such as
Anonymous Information, about our Customers and Users. "Personal Information"
is information that can be used to contact or identify you, such as your
full name, email address and/or phone number as well as information that is
linked to such Personal Information. "Anonymous Information" is information
that is not linked to your Personal Information, cannot be used to contact
or identify you and is not linked to information that can be used to do so.
Anonymous Information includes passively collected information about your
activities on our Website(s) or on the Services or using our Software, such
as usage data.
LEGAL BASIS
We process the data you provide to us on the basis of the General Data
Protection Regulation (GDPR) as a rule under article 6 (Lawfulness of
processing), 6-1a (Consent), 6-1b (Contractual Relationships), 6-1c (Legal
Requirements) and 6-1f (Legitimate Interest).
"Legitimate Interests" provides a lawful basis for processing where:
"processing is necessary for the purposes of the legitimate interests
pursued by the controller or by a third party except where such interests
are overridden by the interests or fundamental rights and freedoms of the
data subject which require protection of personal data, in particular where
the data subject is a child." As Extra requires name, address, and/or
payment information, to perform our Legitimate Interests, we are not
required to obtain consent to process this information.
INFORMATION YOU PROVIDE TO US
In order to use certain Services, you may be required to create an account
("Company Account"), which will require you to provide Personal Information,
such as your name and email address.
Extra also receives information from Customers containing personal
information. In this circumstance the Customer is required to obtain consent
for the information provided to Extra. Please note that this Personal
Information is useable under Article 6-1f "Legitimate Interests" section of
GDPR.
We may also offer the option of creating a Company Account through
connecting via a third party account (for example, with a social media site
- a "Third Party Account"), in which case you will be required to approve
the connection as well as the types of information (which may include
Personal Information) that is made available to us and the types of
activities that we may perform in connection with that Third Party Account.
Even if you later disconnect your Company Account from the Third Party
Account, we still keep a copy of the Personal Information that we received
from the connection of the two accounts.
In either case, we may send you an email or other electronic message
confirming your Company Account creation (or otherwise instructing you how
to confirm it).
When accessing our Website(s) we automatically collect information such as
the IP address used to connect to the internet, browser type and version,
information about your visit including what you searched for or viewed. By
using our Website(s) you consent to our Privacy Policy.
By contacting Extra using any form of communication such as but not limited
to Telephone, Email, Text, Online Communication, Fax, Post, you voluntarily
give your consent to Extra to store, transfer, and process any information
that you provide.
If you make a purchase either via our online Services or directly with us,
you will be required to provide certain billing data to process and fulfil
the purchase. We may use the products and services of trusted third party
service providers to process and fulfil such purchases, in which case you
will be providing the information to such third party services providers as
well.
Our Websites may contain blog forums displaying information about us and
some of our products and services. The Site may also offer you the
opportunity to subscribe to newsletters and participate in surveys and other
promotional activities. Your interaction (such as responding on any blog
forum, subscribing to a newsletter, or participating in a survey) may
require you to provide certain Personal Information such as your name and
email address, together with any additional Personal Information you choose
to enter on the blog forum. You should read the separate terms and
conditions that govern these activities, if any.
When you participate in one or more activities through our Website(s) and
Services or directed at our official handles on various social media
platforms, we may collect additional information provided by you for such
participation. You should read the separate terms and conditions that govern
those social media platforms.
INFORMATION WE COLLECT FROM YOU
We collect information through server log files, but also by deploying
tracking technologies within our Website(s) and Services and we may also
associate this information with your Company Account. We do this to analyse
trends, track user movement around the Website(s) and Services, gather
demographic information, and to generally collect information that we may
find insightful or allow us to improve the services we offer.
The type of information collected may include (but is not limited to)
internet protocol (IP) addresses, MAC address, mobile network information
including phone number, device type and hardware model, browser type,
operating system type, type of browser, Internet Service Provider (ISP),
date/time stamp of Site or Service use, referring/exit pages, and clicked
pages.
For example, the Website(s) may use Google Analytics, more information on
which you can find here:
https://www.google.com/intl/en/policies/privacy/partners/
In the interest of giving our Website(s) an attractive appearance and in
order to allow the use of certain functions, we use cookies on various pages
of our Website(s). They consist of small text files that are stored on your
device. Most of these cookies used by us will be erased from your device
immediately after your browser session (so-called session cookies). Other
cookies may remain saved to your device and enable us to recognize your
computer in the event of a later visit to our Website(s) (so-called
persistent cookies). It is particularly these cookies that allow us to make
our Website(s) more user-friendly, effective and safe. Thanks to these
files, for example, it is possible to display information specifically
suited to your personal preferences on a certain webpage. These cookies will
be erased automatically once the retention period expires.
The legal grounds for processing the cookie information consists of the
execution of the agreement as well as of our rightful interest towards the
safe and user-friendly presentation of our Website(s).
DATA STORAGE
Extra will store your information for as long as it is necessary to provide
our services, deal with your queries, and as required to conform to the
minimum data retention requirements as dictated by law or regulatory bodies,
or for as long as you might legally bring claims against us. We adopt
appropriate data collection, storage, processing practices and security
measures to protect against unauthorized access, alteration, disclosure or
destruction of your personal information, username, password, transaction
information and data stored on secure servers provided by our trusted
affiliates.
SECURITY
We take what we consider to be appropriate measures to protect Personal
Information. Data is stored on secure servers with appropriate security
measures taken to aid in the protection of the data. All data files are
treated as confidential and employees who may see any data are bound and
subject to confidentiality agreements. However, no method of transmission
over the Internet, or method of electronic storage, is 100% secure.
Therefore, while we try to use reasonably acceptable means to protect your
Personal Information, we cannot guarantee its absolute security or
confidentiality. If you have any questions about security you can contact us
at info@extrauk.co.uk
TRANSFER TO AFFILIATES
Extra uses trusted third-parties and affiliates to render some services,
including but not limited to mailing and fulfilment, email marketing and
cloud storage. We provide name and address information to delivery service
providers to deliver goods as well as trusted accredited payment processing
providers for the processing of electronic payments.
We may transfer, store and/or process the personal data we collect from you
outside the European Economic Area ("EEA") which is known as a "Cross-Border
Data Transfer". In particular, this may happen as some of our trusted
third-parties, trusted third-parties data server, back up servers may be
located outside of the EEA. By submitting personal data, you agree to this
transfer storage and/or processing of data. You should be aware that
countries outside the EEA may not offer the same level of data protection as
the United Kingdom; however we take reasonable steps to ensure that your
data is treated securely and in accordance with our Privacy Policy.
INFORMATION RELEASE
We may also release your information when we believe release is appropriate
to comply with the law or to protect our rights, property or safety. It is
our policy to notify customers of requests for their data from law
enforcement unless we are prohibited from doing so by statute or court
order. Law enforcement officials who believe that notification would
jeopardise an investigation should obtain an appropriate court order or
other process that specifically prevents Customer notification.
YOUR RIGHT TO ACCESS DATA
We would like to maintain accurate Personal Information, and we endeavour to
comply with all rights you might have under data protection laws. If you
would like to delete, access or correct any of your Personal Information
that we may be storing, there may be tools that we make available via our
Website(s) or Services. Otherwise, please contact us at info@extrauk.co.uk
to make your request. A formal request for the data must be submitted in
writing using our "Data Access Request" form and furnished to our Data
Controller. We will comply with the request in accordance with the law and
endeavour to furnish the information within one month. Should we decide than
an extension is required you will be informed. No charge will be made for
complying with a request unless the request is manifestly unfounded,
excessive or repetitive, or unless a request is made for duplicate copies to
be provided to parties other than the person making the request. In these
circumstances, a reasonable charge will be applied.
OPTING OUT
You may choose not to receive future promotional, advertising or other
Services-related emails from us by selecting an unsubscribe link at the
bottom of each email that we send or by modifying your selections on our
Website(s) using the tools we may provide. Please note that even if you opt
out of receiving the foregoing emails, we may still respond to
communications initiated by you, as well as send administrative emails that
are necessary to facilitate your use of our Website(s) and/or Services (for
example, emails confirming updates to our policies).
If you have any questions about this Privacy Policy, the practices of this
site, or your dealings with this site, please contact us at:
Extra (UK) Ltd
Domino House,
Morris Close,
Park Farm Industrial Estate,
Wellingborough,
Northants,
NN8 6XF
Domino House,
Morris Close,
Park Farm Industrial Estate,
Wellingborough,
Northants,
NN8 6XF
Tel: 01933 672170
Email: info@extrauk.co.uk
Email: info@extrauk.co.uk