Thank you for doing business with Xtended Space , Inc. (“Xtended Space ,” “Company,” “we,” “our,” or “us”). We welcome you and hope you find our websites, mobile and web applications, products, and our other subscription services and tools (collectively, the “Services”) helpful and useful. We have adopted this privacy policy (“Privacy Policy”) to help our website visitors, mobile application users, current and potential customers, clients, their employees, our employees, and other business partners (“you” or “your,”) understand what Data we collect, store, share, and use, how and why we do so, and what your rights are regarding that Data.
If a capitalized term is not specifically defined in this Privacy Policy, it has the meaning given to it in our Terms of Service.
We always seek to improve our Services to you, and that requires that we collect, store, share, and use information about you and your usage preferences. As we do so, we are absolutely committed to protecting your privacy and the security of your personal information.
In this Privacy Policy, we use the word “Data” to describe all the information we collect that relates to you and your use of our Services. “Data” is broken into different categories, which are defined in the “Data We Collect and How We Use It” section of this Privacy Policy. We may refer to the different categories separately, but when we use the word “Data,” we mean all the different categories described in this Privacy Policy. The term “Data” does not apply to de-identified, anonymized, and aggregated data that may be derived from Data, such as traffic patterns, search activity, and other information that cannot be reasonably connected with any individual (“De-identified Data”). We may use De-identified Data for our own purposes in any manner and without attribution or compensation to any person.
With that exception, this Privacy Policy applies to everybody who interacts with us online or otherwise. Since different portions of the Privacy Policy will apply differently to the various groups who interact with us, we have tried to clearly categorize the types of Data we process and how we do so. If you have any questions about this Privacy Policy or how we handle your Data, please email us at info@xtendedspace.com.
Many jurisdictions require that we disclose to you the lawful basis for our processing of your Data. We do that in the “Data We Collect and How We Use It” section and otherwise throughout this Privacy Policy. In general, our lawful basis for processing your Data is based on your specific consent or your contract with us.
By accessing or using any of the Services or by otherwise interacting with us online, you consent to our use of your Data as described in this Privacy Policy. If our processing of your Data is based on your consent, you may withdraw your consent at any time, and we will cease collecting your Data. However, in some cases, this may result in your inability to receive partial or full access to the Services, and your withdrawal of consent does not limit our ability to use the De-Identified Data for use by us in connection with our legitimate business efforts in the future.
In addition, your withdrawal of consent may not prevent us from retaining and processing Data if we have gathered such Data pursuant to a different lawful basis or to preserve legal claims. For example, if you give your consent for us to process your Data, but we are also required by law to keep your Data, that separate “lawful basis” will still apply, even if you withdraw your consent.
When you enter into an agreement with us, either by accessing the Services, by executing an agreement in hard copy or by clicking “I Accept” or similar language online, or through an app store, we will process your Data for the purposes of fulfilling the terms of our contract with you. In that case, our processing of your Data is based on the contract, so your withdrawal of consent will only be effective after the purposes for processing that Data have been fulfilled and after we no longer have a legal obligation to keep that Data.
In all cases, we will comply with applicable law and we will cease processing your Data after the legal right, obligation, or other lawful basis expires.
The Services are directed solely to persons 18 years of age or older or of children under 18 who are supervised by a parent, guardian, or other caregiver. Other than for Data collected for the specific purpose of providing the Services to users, we do not knowingly collect Data from users who are under 13. If we become aware that we have gathered Data from a person under 13, except to provide the Services to such person, and except to the extent allowed or required by law, then we will attempt to delete such Data as soon as possible, subject to our obligations under applicable law. If you believe that we have gathered Data from a person under 13 in contravention of this policy, please contact us at info@xtendedspace.com.
Listed below are the categories of Data we collect when you use our Services. We never sell your Data, and we always have a lawful basis for gathering the Data, but that lawful basis might be different for different categories, and we describe those uses below. Regardless, we never use the Data for any purpose other than the purpose for which we gathered the Data in the first place, unless we get your prior explicit consent.
Data Description: Registration Data consists of the name, email address, address, mobile number, identity-authentication information (such as that contained on a government-issued ID or passport), other contact information, listing details, item details, and other information you provide us using the Services, both when you register your account and thereafter. Registration Data also includes your username, client type, and other applicable registration information, if any. Further, Registration Data may include information collected when you link your account through Facebook, Google, or Apple, including registration and profile information. When you link third-party platforms to the Services, you authorize us to collect, store, and use any data the third-party platform may give us (i.e., email address, mobile number, username, address, etc.); all of such data is considered Registration Data. Please note that any third-party platform you link to the Services likely has its own privacy policy that governs its use and processing of your data. Please refer to any applicable third-party privacy policy for information regarding their use and processing of your information.
Lawful Basis for Processing: Our lawful basis for processing Registration Data is our contract with you and your consent. We can only provide certain of the Services to you if we have the Registration Data, so we need to store and access that Registration Data during the term of our contract. Even when the Registration Data is not critically necessary to the provision of the Services, we may still process that Registration Data to facilitate our contractual interactions with you.
How We Use It and Who We Share It With: Registration Data is accessible generally only to us and to you. In limited circumstances, we may share your Registration Data with our service providers, which parties help us provide the Services and are under obligations to protect the confidentiality of your Registration Data. We use it to provide the Services to you. At times, we will share the Registration Data with other third parties at your request or to fulfill requests that you make of us. We may also use your Registration Data to offer our own goods or services to you, either directly through emails or through third-party platforms, but you may opt out of those communications at any time. We will never share your username or password with any third party.
Data Description: Engagement Data consists of all the information you input or record using the Services, except as otherwise stated in this Privacy Policy. It also includes all information that is proprietary to you regarding your use of the Services (other than the data that qualifies as “Usage Data” below) that is collected or processed by the Services. For example, Engagement Data includes payroll information, personal information about employees, and internal company communications, among other things.
Lawful Basis for Processing: Our lawful basis for processing Engagement Data is (1) our contract with you, (2) our obligation to provide you with the Services and (3) our legitimate interest in improving our Services based on the Engagement Data we receive from you.
How We Use It and Who We Share It With: Your Engagement Data is accessible to us, to you, and to limited third parties that we use to provide and improve the Services. If we share your Engagement Data with a third Party, that party will be obligated to protect the confidentiality of your Engagement Data. We may also share Engagement Data with other third parties. We do not de-identify or aggregate Engagement Data for use for any purpose other than to provide the Services to you and to improve our knowledge of how our systems are used.
Data Description: Payment Data is only collected when your use of the Services is subject to the payment of a fee or other charge. Payment Data will vary depending on the payment method you use (e.g., direct via your mobile phone carrier or by invoice) but will include information such as:
Lawful Basis for Processing: Our lawful basis for processing Payment Data is (1) our contract with you and (2) our legitimate interest in improving our Services based on the Payment Data we receive from you.
How We Use It and Who We Share It With: We only use Payment Data to facilitate payment, and we only communicate it to those parties who are strictly necessary for that purpose.
Data Description: Where applicable to the Services, Supplemental Mobile Data consists of the following and similar information:
Lawful Basis for Processing: Our lawful basis for processing Supplemental Mobile Data is (1) our contract with you and (2) our legitimate interest in improving our Services based on the Supplemental Mobile Data we receive from you.
How We Use It and Who We Share It With: We only use Supplemental Mobile Data when you specifically authorize it, and we only share it with those parties who are strictly necessary for the purpose you have authorized.
Except where a specific limitation is noted above, we may share your Data as follows:
If we ever plan to use any Data in the future for any other purposes not identified above and we do not have a separate lawful basis for that new purpose for processing, we will only do so after obtaining your specific consent.
Further, we do not sell your Data for any purpose.
The technologies we use for automatic Data collection may include the following:
Your web browser(s) may offer a "Do Not Track" option, which allows the individual to signal to operators of websites and web applications and services (including behavioral advertising services) that they do not wish to be tracked over time and across different websites. Our Services do not support Do Not Track requests at this time, meaning we may collect information about your online activities both during and after your use of the Services.
Under applicable data protection, privacy, and other laws, you have certain rights related to your access and control over your Data. These rights may include the following:
We may use additional processes to verify your identity before revealing or deleting any Data, including two-factor or two-step authentication measures. This list may not include all of your rights under applicable laws. If you believe you have additional rights, please contact us using the methods in this Privacy Policy.
While we do not currently process Data without consent, if we do so in the future, you may opt-out or withdraw consent at any time.
Please note, exercising these rights may limit or eliminate our ability to provide the Services. If so, we may terminate the Services due to such requests.
We will try to comply with your requests as soon as reasonably practicable. Upon receipt of your request, we will provide you with a copy of your information, but in some cases, such as when information pertains to another user, we may not be able to provide all relevant details. We will provide reasons for any denial.
Even if you opt-out of receiving marketing-related emails, you may still receive administrative or service-related messages necessary for your use of the Services.
To exercise any of these rights, or if you have questions about our processing of your Data, please contact us at info@xtendedspace.com.
Please keep us informed of any changes, such as updated contact information. If you would like to access your information, have any questions, comments, or suggestions, or find errors in the information we hold about you, please contact us at info@xtendedspace.com.
If you have a complaint about our compliance with privacy laws, we will investigate and, if justified, take appropriate measures.
1. Data Description:
2. Lawful Basis for Processing: Our lawful basis for processing Usage Data is:
3. How We Use It and Who We Share It With: