1. Introduction
Xtrasize (accessible at buyxtrasize.com) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect information when you visit our website.
Xtrasize is a marketing and informational website that promotes the dietary supplement Member XXL through an affiliate marketing model. We do not sell products directly, process payments, or manage customer accounts. Please refer to our Terms & Conditions for further details about the nature of our website.
By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices, please discontinue use of this website.
2. Information We Collect
2.1. Information Collected Automatically
When you visit our website, certain information is collected automatically through technical means. This may include:
- IP address (which may be anonymised depending on your analytics preferences).
- Browser type and version.
- Operating system.
- Device type (desktop, mobile, tablet).
- Referring website or URL.
- Pages visited on our website and the duration of each visit.
- Date and time of access.
- Language preferences.
2.2. Cookie Data
We use cookies and similar tracking technologies to collect certain information about your browsing activity. For comprehensive details on the cookies we use and how to manage them, please refer to our Cookies Policy.
2.3. Information We Do Not Collect
As a marketing website that does not sell products directly, we do not collect:
- Names, postal addresses, or telephone numbers.
- Payment or financial information (credit card numbers, bank details).
- Order or transaction data.
- Account registration details (we do not offer user accounts).
- Health-related personal data.
Any personal information you provide when making a purchase is collected by our commercial partner, not by Xtrasize. Please review the privacy policy of the partner's website for details on how they handle your data.
3. How We Collect Information
We collect information through the following methods:
- Server Logs: Our web server automatically records certain technical data when you visit our website. This information is used for security monitoring and website performance analysis.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect browsing data. Detailed information is available in our Cookies Policy.
- Third-Party Analytics: We use Google Analytics, which collects anonymised data about website usage patterns and visitor behaviour.
- Affiliate Tracking: Our affiliate partner may place cookies on your device to track referrals from our website for the purpose of commission calculation.
4. How We Use Your Information
The information we collect is used for the following purposes:
- Website Operation and Improvement: To ensure our website functions correctly, to identify and resolve technical issues, and to improve user experience.
- Analytics and Performance: To understand how visitors interact with our website, which pages are most popular, and how we can improve our content and layout.
- Security: To detect and prevent potential security threats, fraud, or abuse of our website.
- Affiliate Programme Administration: To track referrals to our commercial partner for the purpose of affiliate commission calculation.
- Legal Compliance: To comply with applicable laws, regulations, and legal obligations.
5. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR) and the Nigeria Data Protection Act (NDPA) 2023, we process personal data on the following legal bases:
- Consent: Where you have provided explicit consent for the use of non-essential cookies, such as analytics and affiliate cookies. You may withdraw your consent at any time by adjusting your cookie preferences.
- Legitimate Interests: We process certain data based on our legitimate interests in operating and improving our website, ensuring its security, and administering our affiliate programme. These interests are balanced against your rights and freedoms.
- Legal Obligation: We may process data where necessary to comply with a legal obligation to which we are subject.
6. Sharing Your Information
We do not sell, rent, or trade your personal information to third parties. We may share limited data with the following categories of recipients:
- Analytics Providers: We share anonymised usage data with Google Analytics for website performance analysis. Google processes this data in accordance with its own privacy policy.
- Affiliate Partners: Limited referral data may be shared with our commercial partner for the purpose of tracking affiliate commissions. This data typically includes referral source and click data, not personal identifying information.
- Hosting and Service Providers: Our website hosting provider may have access to server logs as part of their hosting services. Such providers are bound by data processing agreements.
- Legal Requirements: We may disclose information if required to do so by law, regulation, legal process, or governmental request.
7. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to provide functionality, analyse usage, and support our affiliate programme. We use three categories of cookies: essential cookies, analytics cookies, and affiliate cookies.
For complete details on the types of cookies we use, their purposes, and how to manage or disable them, please refer to our dedicated Cookies Policy.
8. Third-Party Services
8.1. Google Analytics
We use Google Analytics to analyse website traffic and usage patterns. Google Analytics collects information through cookies and generates statistical reports about website activity. The data collected is anonymised and aggregated. Google processes this data in accordance with its own privacy policy. You may opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.
8.2. Affiliate Partner
When you click on an affiliate link on our website, you are redirected to our commercial partner's website. At that point, the partner's own privacy policy governs the collection and processing of your data. Xtrasize has no control over and is not responsible for the data practices of our affiliate partner.
9. Data Security
We implement appropriate technical and organisational measures to protect the information collected through our website against unauthorised access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for all data transmitted between your browser and our website.
- Regular security updates and patches for our website software.
- Limited access to server logs and analytics data to authorised personnel only.
- Secure hosting infrastructure with appropriate physical and technical safeguards.
Whilst we take reasonable steps to protect your information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your data.
10. Data Retention
We retain the information we collect only for as long as necessary to fulfil the purposes described in this Privacy Policy. Specifically:
- Server Logs: Retained for up to 90 days for security monitoring and troubleshooting.
- Analytics Data: Google Analytics data is retained in accordance with Google's data retention settings, which we have configured to a maximum of 14 months.
- Cookie Data: Cookie lifespans vary by type and purpose. Please refer to our Cookies Policy for specific durations.
After the retention period expires, data is securely deleted or anonymised so that it can no longer be associated with you.
11. Your Rights
11.1. Rights Under GDPR and NDPA
If you are located in the European Economic Area (EEA), the United Kingdom, or Nigeria, you have certain rights regarding your personal data, including:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request deletion of your personal data, subject to certain legal exceptions.
- Right to Restriction of Processing: You have the right to request that we limit the processing of your personal data in certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
11.2. Rights Under CCPA
If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion of your personal information, and the right to non-discrimination for exercising your privacy rights.
11.3. Exercising Your Rights
To exercise any of these rights, please contact us through our Contact page or by emailing [email protected]. We will respond to your request within the time frame required by applicable law (typically 30 days). We may need to verify your identity before processing your request.
12. International Data Transfers
Our website may be accessed from various countries around the world. The data we collect may be processed in countries outside your country of residence, which may have different data protection laws. Where we transfer data internationally, we ensure that appropriate safeguards are in place to protect your information in compliance with applicable data protection regulations.
13. Children's Privacy
This website is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us through our Contact page, and we will take steps to delete such information promptly.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. Any changes will be posted on this page with an updated revision date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through our Contact page or at:
Xtrasize
205 Archbishop Makarios Avenue
Limassol 3030
Cyprus
Email: [email protected]