سياسة الخصوصية

This Privacy Policy explains how eXtra (“we”, “us”) collects, uses, and protects personal data when you use this shopping-preference survey and related offer pages in the Kingdom of Saudi Arabia. We handle personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulation, under the supervision of the Saudi Data and Artificial Intelligence Authority (SDAIA), and in line with data-minimization, purpose-limitation, and transparency principles.

This survey asks about shopping preferences and product interest only. We do not request or collect age, gender, nationality, National ID / Iqama numbers, religious or political beliefs, health data, or any other sensitive personal data as defined under the PDPL.

1. Data controller

The controller for this promotional page is eXtra. For questions and data-subject requests: customersupport@extrashop.sa.

2. Information we collect — and what we do not collect

• Shopping-preference answers. Optional answers to general questions (for example shopping categories, whether you have shopped with us before, product interest, and whether delivery is within Saudi Arabia). These are not sensitive personal data and are not used to profile your age or gender.
• Contact and shipping data (only if you claim the offer). First name, last name, email, Saudi mobile number, city, street, district, and postal code, used to fulfill the order with our payment and delivery partners.
• Limited technical data. Browser and device type, timestamps, and approximate region derived from IP address, used for security, fraud prevention, and operating the page.
• Cookies and ad measurement (with your consent). We may use the TikTok pixel and limited advertising identifiers to measure ad performance and prevent fraud after you consent via the cookie bar. You may choose necessary cookies only.

We do not knowingly collect: date of birth or age range, gender, National ID or Iqama numbers, biometric data, health data, religious or political beliefs, or precise geolocation beyond the shipping address you provide yourself.

3. Purposes and lawful bases

We process data only for these purposes:

• Running the shopping-preference survey and determining promotional eligibility (limited legitimate interest / performing the program you requested).
• Fulfilling a claim and completing shipping and payment when you submit the shipping form (contract / order performance).
• Complying with legal and accounting obligations.
• Ad measurement and fraud prevention when cookie consent is granted.

We do not use data for undisclosed purposes, we do not sell personal information, and we do not share personal information for cross-context behavioral advertising without required disclosures and opt-out rights.

4. Sharing

We share information only with service providers needed to host this page, process payment, deliver within Saudi Arabia, and prevent fraud, under contracts that require confidentiality and lawful use. We may disclose information if required by law or to protect rights and safety.

5. Retention

Preference answers are kept only as long as needed to run the offer, then deleted or aggregated. Order data is kept as long as needed for fulfillment and legal retention duties, then deleted or access-restricted. We do not retain sensitive personal data because we do not collect it.

6. Your rights under the KSA PDPL

Under the Personal Data Protection Law you may, as applicable, be informed about processing, access your personal data, request correction, completion, or update, request destruction, withdraw consent where consent is the basis, and lodge a complaint with SDAIA. To exercise rights, contact customersupport@extrashop.sa. We will not discriminate against you for exercising privacy rights.

7. Security and transfers

We use reasonable administrative, technical, and organizational measures to protect personal data. If data is transferred outside the Kingdom, we follow PDPL cross-border transfer rules.

8. Children

This program is for adults (18+). We do not knowingly collect personal data from children. Confirming eligibility is not collection of age or date of birth.

9. Changes

We may update this policy. The “Last updated” date will change when we do. Continued use of this page after an update is notice where the law allows.

Questions: customersupport@extrashop.sa