1. Introduction
Xtrasize ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at buyxtrasize.com.
Xtrasize is a marketing and informational website that promotes the dietary supplement Member XXL through affiliate marketing. We do not operate an online shop, process transactions, or collect payment information. For full details about how our website operates, please see our Terms & Conditions.
By using our website, you acknowledge that you have read and understood this Privacy Policy. We encourage you to read it carefully before providing any personal information.
2. Information We Collect
2.1. Information Collected Automatically
When you visit our website, certain information is collected automatically through cookies and similar technologies. This may include:
- Device and browser information: such as your device type, operating system, browser type and version, and screen resolution.
- Usage data: including pages visited, time spent on pages, click patterns, referring URLs, and exit pages.
- Network information: such as your IP address, approximate geographical location (country or city level), and internet service provider.
- Cookie data: information stored and retrieved through cookies and similar tracking technologies, as described in our Cookies Policy.
2.2. Information You Provide Voluntarily
We may collect personal information that you voluntarily provide when you contact us via email or through our Contact page. This may include your name, email address, and any other information you choose to include in your correspondence.
2.3. Information We Do Not Collect
As an affiliate marketing website, we do not collect:
- Payment or financial information (credit card numbers, bank details).
- Order or transaction details.
- Shipping addresses or delivery information.
- Account registration data (we do not offer user accounts).
Any personal or transactional data you provide when making a purchase through our Partner's website is collected and processed solely by that Partner. We recommend reviewing the Partner's privacy policy for details on how they handle your information.
3. How We Collect Information
We collect information through the following methods:
- Cookies and tracking technologies: We use essential, analytical, and affiliate cookies to collect data about your browsing behaviour. For comprehensive information, please refer to our Cookies Policy.
- Server logs: Our web server automatically records certain information about each visit, including your IP address, the date and time of your visit, and the pages you accessed.
- Direct communication: When you contact us via email or our contact form, we collect the information you provide in your message.
- Third-party analytics: We use Google Analytics to collect and analyse aggregated usage data. Google Analytics uses cookies to gather information about website traffic and user interactions.
4. How We Use Your Information
We use the information we collect for the following purposes:
- Website operation and improvement: To ensure the proper functioning of our website, identify technical issues, and improve user experience.
- Analytics and performance: To analyse website traffic, understand user behaviour, and optimise our content and layout.
- Affiliate tracking: To track referrals to our commercial Partner's website and calculate commissions owed under our affiliate marketing arrangement.
- Communication: To respond to your enquiries, questions, or requests submitted through our Contact page or via email.
- Legal compliance: To comply with applicable legal obligations, enforce our Terms & Conditions, and protect our legal rights.
5. Legal Basis for Processing (GDPR)
For users located in the European Economic Area (EEA), the United Kingdom, or other jurisdictions where the General Data Protection Regulation (GDPR) applies, we process your personal data on the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as the use of analytics and affiliate cookies. You may withdraw your consent at any time.
- Legitimate interests: Where processing is necessary for our legitimate interests, such as operating and improving our website, provided these interests are not overridden by your fundamental rights and freedoms.
- Legal obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
6. Sharing Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:
- Analytics providers: We share anonymised and aggregated data with Google Analytics for the purpose of website analysis and performance monitoring. Google's use of this data is governed by their own privacy policy.
- Affiliate partners: Affiliate cookies may transmit a referral identifier to our commercial Partner when you are redirected to their website. This identifier is used solely to attribute the referral and does not include your personal details.
- Legal requirements: We may disclose your information if required to do so by law or in response to a valid legal request from a government authority, court order, or regulatory body.
- Protection of rights: We may disclose your information where we believe it is necessary to protect our rights, your safety, the safety of others, investigate fraud, or respond to a government request.
7. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website usage, and support our affiliate marketing operations. We use essential cookies that are necessary for the website to function, analytics cookies provided by Google Analytics, and affiliate cookies that track referrals to our Partner's website.
For detailed information about the specific cookies we use, their purposes, and how to manage your cookie preferences, please refer to our Cookies Policy.
8. Third-Party Services
8.1. Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, to collect and analyse data about website usage. Google Analytics uses cookies to gather information such as how often users visit our website, which pages they view, and what other websites they visited prior to arriving at ours. We use this information solely to improve our website and content. Google Analytics collects only the IP address assigned to you on the date you visit our website, rather than your name or other personally identifying information. For more information on how Google uses data, please visit Google's Privacy Policy.
8.2. Affiliate Partner
When you click on affiliate links on our website, you are redirected to the website of our commercial Partner. Once you leave our website, you are subject to the Partner's own privacy policy and terms. We have no control over and assume no responsibility for the privacy practices or content of any third-party websites.
9. Data Security
We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include the use of SSL/TLS encryption for data transmitted between your browser and our website, regular security assessments, and restricted access to personal data.
However, please be aware that no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
10. Data Retention
We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Specifically:
- Server logs: Retained for a maximum of 90 days before being automatically deleted.
- Analytics data: Retained in accordance with Google Analytics' data retention settings, which we have configured to 14 months.
- Communication records: Emails and contact form submissions are retained for as long as necessary to resolve your enquiry and for a reasonable period thereafter for record-keeping purposes.
- Cookie data: Retained in accordance with the expiry periods detailed in our Cookies Policy.
11. Your Rights
11.1. Rights Under the GDPR
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:
- Right of access: You have the right to request a copy of the personal data we hold about you.
- Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
- Right to erasure: You have the right to request the deletion of your personal data, subject to certain legal exceptions.
- Right to restrict processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
- Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis.
- Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
11.2. Rights Under the Australian Privacy Act
If you are located in Australia, you have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), including the right to access and correct personal information we hold about you. You also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.
11.3. Exercising Your Rights
To exercise any of these rights, please contact us at [email protected] or through our Contact page. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.
12. International Data Transfers
Our website may be accessed from various countries around the world. If you access our website from outside the country where our servers are located, your information may be transferred to, stored in, and processed in a different jurisdiction. By using our website, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.
Where we transfer personal data outside the EEA or the United Kingdom, we ensure that appropriate safeguards are in place in accordance with applicable data protection legislation.
13. Children's Privacy
Our website is not directed at individuals under the age of 18, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at [email protected]. If we become aware that we have inadvertently collected personal information from a child under 18, we will take prompt steps to delete such information from our records.
14. Changes to This Policy
We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically to remain informed about how we are protecting your information.
Your continued use of our website after any changes to this Privacy Policy constitutes your acceptance of the updated policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us:
- Email: [email protected]
- Address: 205 Archbishop Makarios Avenue, Limassol 3030, Cyprus
You may also reach us through our Contact page.