Privacy Policy Extreme Deals Of The Day

Last Updated: October 22, 2025

1. What Information Do We Collect?

1.1 Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us (including support at support@extremedealsoftheday.com).

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use.

The personal information we collect may include the following:

Names
Phone Numbers
Email Addresses
Mailing/Billing/Shipping Addresses
Usernames
Contact Preferences
Contact or Authentication Data
Passwords
Debit/Credit Card Last Four Digits Only and chosen payment method (token references)

Sensitive Information. We do not process sensitive information.

1.2 Payment Data

We may collect data necessary to process your payment if you choose to make purchases (e.g., payment instrument type and token). All payment data is handled and stored by our payment processors. See their privacy notices:

Stripe: https://stripe.com/privacy
PayPal: https://www.paypal.com/us/legalhub/privacy-full
Google Pay: Google Pay Privacy Notice
Apple Pay: Apple Pay & Privacy

Please be aware that we do not retain your full payment information. It is transferred directly to the relevant service providers as outlined above. We retain only the last 4 digits of your card and your chosen payment method for verification and future order references.

We may provide you with the option to register with us using your existing social media account details (for Facebook or Google). If you choose to register in this way, we will receive certain profile information from the social media provider as described in Section 7 (How Do We Handle Your Social Logins?). You can withdraw such permissions at any time, see Section 12 (What Are Your Privacy Rights?).

1.4 Application Data

If you use our application(s), we may collect the following information if you choose to provide us with access or permission:

Geolocation Information. We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile application(s), to provide certain location-based services. You can change these permissions in your device settings.
Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version, browser type, Internet service provider and/or mobile carrier, IP address (or proxy), and application identifiers. If you are using our application(s), we may also collect information about the phone network associated with your device and which features of our app you access.

This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for internal analytics and reporting.

1.5 Information automatically collected

In Short: Some information, such as your Internet Protocol (IP) address and/or browser and device characteristics, is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information.

This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. Like many businesses, we also collect information through cookies and similar technologies. See our Section 6 (Cookies & Tracking) and Cookie Policy.

Log and Usage Data. Service-related, diagnostic, usage, and performance information (e.g., IP address, device information, browser type and settings, pages/files viewed, searches, features used, device event information, and hardware settings). We may also collect security logs (such as IP address and request metadata) to protect the Services and prevent fraud and abuse.
Device Data. Device information such as device and application identification numbers, browser type, hardware model, internet service provider and/or mobile carrier, operating system, and system configuration.
Location Data. Information about your device’s location, which can be precise or imprecise. You can disable location permissions in your device settings, but some features may not function properly without them.

1.6 Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

1.7 Information collected from other sources

In Short: We may collect limited data from public databases, marketing partners, social media platforms, affiliate programs, data providers, and other outside sources to enhance our ability to provide relevant offers and update our records. This may include mailing addresses, job titles, email addresses, phone numbers, IP addresses, social media profiles/URLs, and custom profiles for targeted advertising and event promotion. If you interact with us through a social media platform, we may receive certain profile information subject to your platform settings. You may withdraw consent where applicable—see Section 12.

1.8 Information collected when you use our Facebook application(s)

By default, we access basic account information such as your name, email address, current city, profile picture URL, and other information you choose to make public. We configure our Facebook integration to request only the minimum information needed for login (usually name, email, and profile picture), and we do not intentionally request or use Facebook fields that reveal sensitive categories such as date of birth, precise age, or gender. We may request access to additional permissions, and you may grant or deny each individually. For more information, refer to the Facebook Permissions Reference.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To facilitate account creation and authentication: We process your information so you can create and log in to your account, as well as keep your account in working order.
To deliver and facilitate delivery of services to the user: We process your information to provide you with requested services or features.
To respond to user inquiries and support requests: We use your information to respond to your inquiries, resolve potential issues, and provide customer care.
To send administrative information to you: Including order confirmations, invoices, policy updates, and other transactional notices.
To fulfill and manage your orders: Including payments, returns, and exchanges through the Services. Payment processing is performed securely by third-party processors (see below).
To enable user-to-user communications: When you choose to use features that allow communication or sharing with another user.
To request feedback: We may process your information to request feedback and to contact you about your use of our Services.
To send you marketing and promotional communications: If consistent with your marketing preferences or consent, and as permitted by law. You can opt out at any time (see Section 12: What Are Your Privacy Rights?).
To deliver targeted advertising to you: We may process your information to develop and display personalized advertising content tailored to your interests, location, and browsing behavior. For more information, see our Section 6 (Cookies & Tracking Technologies) and our Cookie Policy.
To protect our Services: We process your information to help keep our Services safe and secure, including for fraud monitoring and prevention.
To identify usage trends: We use data to better understand how our Services are used to improve user experience and functionality.
To determine marketing effectiveness: We analyze campaign performance and user engagement metrics to refine our promotional strategy.
To comply with our legal obligations: For example, maintaining records for bookkeeping and tax compliance (e.g., CRA, IRS, EU VAT obligations).
To save or protect an individual’s vital interest: Such as preventing harm or assisting authorities in safety-related matters.

2.1 Payment Processing

We use integrated and PCI-compliant payment processors, including Stripe, PayPal, Google Pay, and Apple Pay. Credit and debit card details are handled directly by those providers; Extreme Deals Of The Day never stores full payment information on its servers. Only the last 4 digits and tokenized references are retained for verification and compliance purposes.

2.2 Customer Support

We leverage contact data and order history to provide support, respond to inquiries, and resolve issues related to orders or Services. You may reach us anytime at support@extremedealsoftheday.com or via our Contact Us page.

2.3 Analytics and Website Performance

We use Google Analytics and other analytics tools to understand visitor behavior and website performance. Analytics data may include IP addresses, device type, session duration, pages visited, and referring URLs. You can opt out via the Google Analytics Opt-Out Browser Add-On. See our Section 6 (Cookies & Tracking Technologies) for more details.

2.4 Advertising & Affiliates

Google AdSense: Extreme Deals Of The Day participates in Google AdSense and other advertising programs. We use data to deliver personalized ads based on your browsing patterns. Learn more in Google’s Advertising Policy and our U.S. Privacy Rights Section 14 for opt-out rights.
Affiliate Programs: We may use affiliate tracking links for Amazon, eBay Partner Network, CJ Affiliate, ShareASale, SendShark, GotBackup, and others. Click-through data may include referral source and link interactions for commission attribution. See Section 5 (Third-Party Websites) for disclosure on third-party relationships.

2.5 Email Communication & Marketing

We send transactional and promotional emails using compliant email-delivery systems. Marketing communications are sent only with your consent or as permitted by law, and you can unsubscribe anytime using the link in each email or by contacting us at support@extremedealsoftheday.com.

2.6 Platform Improvement & Troubleshooting

We use diagnostic data, error logs, and session analytics to improve system stability and address bugs, crashes, or performance issues. This includes plugin-level troubleshooting (e.g., Elementor, WooCommerce, security extensions) strictly for operational integrity and not for profiling users.

2.7 Personalization & Shopping Experience

We process behavioral data to personalize your on-site experience, including product recommendations, recently viewed items, and language or currency preferences. This helps make your shopping experience more relevant and user-friendly.

2.8 Legal & Regulatory Compliance

We may process your data to meet obligations such as tax filings, bookkeeping, consumer protection laws, and fraud investigations. These records are retained under applicable regional requirements (see Section 9 – Data Retention).

3. What Legal Bases Do We Rely On To Process Your Information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (also known as a “legal basis”) to do so under applicable law, such as with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

3.1 If you are located in the EEA, UK, or Switzerland, this section applies to you.

The General Data Protection Regulation (GDPR), the UK GDPR, and Swiss data protection law require us to explain the valid legal bases we rely on in order to process your personal information. Accordingly, we may rely on the following legal bases to process your personal information:

Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
Performance of a Contract. We may process your information when it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request before entering into a contract.
Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not override your fundamental rights and freedoms. For example, we may process personal information for the following purposes:
- To send users information about special offers, sales, and discounts on our products and Services.
- To develop and display personalized and relevant advertising content for our users.
- To analyze how our Services are used to improve user engagement and retention.
- To support our marketing activities and customer communications.
- To diagnose problems and prevent fraudulent activities.
- To understand how users interact with our Services to improve the overall experience.
Legal Obligations. We may process your information when we believe it is necessary for compliance with our legal obligations, for example, to cooperate with law enforcement or regulatory agencies, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
Vital Interests. We may process your information when we believe it is necessary to protect your vital interests or the vital interests of a third party, such as in situations involving potential threats to the safety of any person.

3.2 If you are located in Canada, this section applies to you.

We may process your information under the following lawful bases according to the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec Law 25:

Express or Implied Consent. We process personal information when you have given consent for a specific purpose, or where your consent can be reasonably implied through your actions or relationship with us. You may withdraw consent at any time by contacting us at support@extremedealsoftheday.com.
Authorized Exceptions. In limited cases, we may process your information without consent as permitted under PIPEDA or provincial law, including:
- If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way.
- For investigations and fraud detection or prevention.
- For business transactions, provided certain conditions are met.
- If required to comply with a subpoena, court order, or similar legal process.
- For identifying an injured, ill, or deceased person and communicating with next of kin.
- For journalistic, artistic, or literary purposes.
- Where disclosure is required for insurance claim assessment, legal compliance, or contractual purposes.

3.3 If you are located in Australia, this section applies to you.

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We rely on the following lawful bases to collect and process your personal information:

With your consent (express or implied).
When required to perform a contract or provide you with requested services.
When necessary for our legitimate business interests (where such interests are not overridden by your rights).
To comply with our legal and regulatory obligations in Australia.

3.4 If you are located in the United States or Puerto Rico, this section applies to you.

We process your information under applicable U.S. federal, state, and territorial privacy laws. Depending on the state or territory, our processing may rely on consent, contract performance, legitimate business interests, or compliance with law. For more information on state-specific rights, see Section 14 (United States Residents’ Specific Privacy Rights).

4. When And With Whom Do We Share Personal Information?

In Short: We share information only when necessary to operate our Services, comply with the law, or support trusted partners who help us provide, secure, market, or improve the website.

We disclose limited data to service providers, contractors, and affiliate platforms that assist with payment processing, hosting, marketing, analytics, fulfillment and delivery, and advertising. Each partner is bound by confidentiality and data-protection obligations. We share information only where lawful under applicable privacy laws (for example, GDPR Art. 6(1)(a) to (f), PIPEDA s.7, CCPA §1798.140) and solely for the purposes described here.

Payment Processing: Stripe, PayPal, Apple Pay, and Google Pay (where enabled) process payments, help prevent fraud, and handle encrypted transactions.
Hosting & Infrastructure: NowLifestyle (GVO Hosting) provides web hosting and infrastructure services.
Backups & Storage: WP Time Capsule creates backups, and those backups are stored with Wasabi Cloud Storage.
Email Delivery (SMTP): Our NowLifestyle (GVO Hosting) processes outgoing emails we send to you (for example, order confirmations or support replies).
Security & Maintenance: BulletProof Security Pro helps protect our website within our hosting environment. Depending on our configuration, it may record security-related events (for example, blocked requests and certain HTTP error codes) in log files, which can include IP addresses. BulletProof Security logs are stored as plain text files and are not stored in our WordPress database. We can limit or disable IP address logging using BulletProof Security’s GDPR Compliance setting.
Performance: WP Rocket is used to improve performance through caching and optimization. We are not using a CDN through WP Rocket at this time.
Email Marketing & Autoresponder: SendShark (GVO) may be used to manage email subscriptions and send marketing or transactional emails (where enabled). SendShark may process subscriber details (such as name and email address) and email engagement data (such as opens and link clicks) to deliver and measure email communications.
Fulfillment & Shipping (order delivery): We share the information necessary to fulfill and deliver your order with our fulfillment partners (including dropshipping fulfillment partners and their suppliers) and shipping carriers. This may include your name, shipping address, email address, phone number (where required for delivery), and order details (such as items purchased and delivery instructions). These parties use this information only to ship, deliver, and handle returns or delivery issues, and not for their own marketing purposes.

We work with advertising, analytics, and affiliate partners that may use cookies, pixels, SDKs, and similar technologies to measure performance and serve relevant ads (where enabled). These technologies may collect data such as IP address, device identifiers, browser details, and interactions with ads, pages, or links.

Google Services (via Site Kit): Google Analytics and Google AdSense (and related Google services you enable) for analytics and advertising.
Affiliate Networks: Amazon Associates, eBay Partner Network, CJ Affiliate, ShareASale, and other affiliate partners we list in this policy. These partners may receive click and referral information for commission attribution.
Meta/Facebook (where enabled): Facebook for WooCommerce may enable Meta tracking (such as Meta Pixel) and product catalog features, which can involve cookies/pixels and event data.
Other advertising platforms (where enabled): If we add additional advertising or measurement partners in the future (for example, TikTok, Snapchat, Pinterest or similar providers), they may use similar tracking technologies for ad delivery, measurement, and attribution. We will update this notice as required.

We may disclose data to law-enforcement or regulatory authorities when required by law, court order, or to protect our rights, users, and property. Where partners are located outside your region (for example, in the United States), we rely on adequacy decisions, standard contractual clauses, or equivalent safeguards to help protect your data.

No Data Sales: We do not sell or rent personal information in the traditional sense (for example, we do not exchange customer lists for money). However, some of the disclosures described in Section 14 (such as cookie-based advertising and affiliate tracking) may be considered a “sale” or “sharing” of personal information under certain U.S. state privacy laws. Where this is the case, you have the right to opt out.

If you have questions about third-party data sharing, contact us at support@extremedealsoftheday.com. For opt-out details related to targeted advertising or affiliate tracking, see Section 14 (United States Residents’ Specific Privacy Rights).

5. What Is Our Stance on Third-Party Websites?

In Short: We are not responsible for the privacy or security of any information that you choose to share with third parties that we link to, or that advertise on our Services, and that are not affiliated with us.

Our Services may include links to, or integrations with, third-party websites, marketplaces, and affiliate platforms. These third parties operate independently from us, and your interactions with them are governed by their own privacy policies and terms. We encourage you to review those policies before engaging with, or providing information to, any third party.

5.1 Affiliate Links and Partner Programs

Extreme Deals Of The Day participates in affiliate programs. This means that when you click certain links or make qualifying purchases, we may earn a commission at no additional cost to you. This helps support the operation of our website.

Our affiliate relationships may include, but are not limited to, the following:

NowLifestyle - Web hosting and infrastructure (GVO network).
SendShark - Email marketing/autoresponder (where enabled).
GotBackup and GotBackup Tour - Cloud backup programs.
eBay Partner Network - Commission on qualifying purchases through affiliate links.
CJ Affiliate - Affiliate partnerships across retailers and service providers.
ShareASale - Affiliate marketplace partnerships for select offers and products.
VidUber — Video marketing and streaming tool (part of the GVO network).
Testimonial Generator — Review and testimonial automation platform.
Memory Place — Cloud storage and family digital preservation platform.

5.2 Amazon Associates Disclosure

Extreme Deals Of The Day is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com and its affiliated sites. As an Amazon Associate, we earn from qualifying purchases.

5.3 Affiliate Transparency Notice

We aim to be transparent in how we monetize links. Affiliate commissions do not influence our pricing or change what you pay. Where applicable, our affiliate practices are intended to align with the U.S. Federal Trade Commission (FTC) Endorsement Guidelines.

5.4 Third-Party Security and Compliance Tools

We use BulletProof Security Pro to help secure our website. It primarily operates within our hosting environment and may generate security-related log files depending on our configuration. For more details on security logging, see the relevant sections of this Privacy Policy.

For more on how we share and protect information, see Section 4 (When and With Whom We Share Personal Information).

6. Do We Use Cookies and Other Tracking Technologies?

In Short: Yes. We use cookies and similar technologies (such as pixels, tags, and similar technologies) to operate our Services, improve performance, remember preferences, measure traffic, support security, and deliver advertising (where enabled).

Cookies are small text files stored on your device. Similar technologies (such as pixels or tags) can collect information about your device and how you interact with pages, ads, and links.

We use the following categories of cookies/technologies:

Strictly Necessary: Required for core site functions such as login sessions, shopping cart/checkout, and security-related features.
Preferences: Remember settings such as language, region, or other choices you make.
Analytics: Help us understand site usage and improve performance (for example, Google Analytics where enabled).
Advertising and Measurement: Help deliver and measure ads, manage remarketing, and attribute referrals (for example, Google AdSense and Meta tools where enabled).

Your choices: Where required by law, we use a consent banner (for example, via our cookie consent tool) to request your choices for non-essential cookies. You can update your preferences at any time using the “Cookie Settings” link (if available on the site) or through your browser/device settings.

If you are located in a region that treats certain advertising or analytics disclosures as “selling” or “sharing” of personal information, you may opt out as described in Section 14 (United States Residents’ Specific Privacy Rights).

For more details, view our full Cookie Policy at https://extremedealsoftheday.com/cookie-policy/ .

6.1 Google Analytics

We use Google Analytics (where enabled) to track and analyze how visitors use our Services. Analytics data may include information such as IP address, device and browser characteristics, pages viewed, time spent on pages, referring URLs, and interactions with site features.

The Google Analytics Advertising Features that we may enable include remarketing, Google Display Network impressions reporting, and demographics and interests reporting. You can opt out of Google Analytics tracking by visiting https://tools.google.com/dlpage/gaoptout .

You can also manage ad personalization through Google Ads Settings and Ad Settings for mobile apps .

Other opt-out methods include the Network Advertising Initiative Opt-Out Tool and the NAI Mobile Choice Tool .

6.2 Advertising and Remarketing (where enabled)

Where enabled, we use advertising and measurement tools that may use cookies or similar technologies to deliver ads, measure performance, and support attribution and remarketing.

This can include:

Google AdSense (and related Google services you enable): Used for advertising and ad measurement.
Meta/Facebook tools (via Facebook for WooCommerce where enabled): May enable Meta tracking (such as Meta Pixel) and product catalog features, which can involve cookies/pixels and event data.
Other platforms (where enabled): If we add additional analytics, advertising, or measurement partners in the future (for example, TikTok, Snapchat, Pinterest, Microsoft Ads, or similar providers), they may use cookies, pixels, and similar technologies for ad delivery, measurement, and attribution. We will update this notice as required.

7. How Do We Handle Your Social Logins?

In Short: If you choose to register or log in to our Services using a social media account, we may access limited information about you from that account.

Our Services may allow you to sign in using third-party social media accounts such as Facebook or Google. When you choose to do so, we may receive profile data such as your name, email address, profile picture, as well as other information you make public on that platform. The data we receive depends on your privacy settings with the social platform.

We do not post on your social media feed or contact your friends without your permission.

If you use Facebook login, you can manage permissions at Facebook Settings → Apps and Websites. If you use Google, manage access via Google Account Security.

We only use the information provided to authenticate your identity, deliver your account experience, and enhance your use of the Services. We do not control, and are not responsible for, how these third parties collect, store, or share your information. For more on your rights, see Section 12 (What Are Your Privacy Rights?).

If you would like to disconnect a social media account from your account with us, you can usually do so in your account settings or by contacting us using the details in the Section 17 “How Can You Contact Us About This Notice?”.

8. Is Your Information Transferred Internationally?

In Short: Yes. We may transfer, store, and process your information in countries other than your own.

Extreme Deals Of The Day is operated from Canada and hosted by NowLifestyle (GVO Hosting), a provider based in the United States. We also use third-party cloud providers such as Wasabi Cloud Storage for secure off-site backups. As a result, your personal information may be transferred to, stored in, and processed in Canada, the United States, and other countries where our service providers maintain facilities. See Section 4 (When and With Whom We Share Personal Information) for categories of recipients.

To fulfill and deliver orders, we share information such as your name, shipping address, email address, phone number (where required for delivery), and order details with our dropshipping fulfillment partners, their suppliers, and shipping carriers. These parties may be located in, or process your information in, countries other than your own (including the United States).

8.1 European Commission Standard Contractual Clauses (SCCs)

For transfers from the EEA/UK/Switzerland to countries that do not provide an adequacy decision, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and UK/Swiss equivalents). These clauses require recipients to protect personal data consistent with EU/UK/Swiss law. Details can be provided on request via support@extremedealsoftheday.com.

8.2 Data Privacy Framework (DPF)

Some of our U.S.-based service providers and partners (for example, certain payment processors, analytics tools, or cloud providers) participate in the EU–U.S. Data Privacy Framework, the UK Extension to the EU–U.S. DPF, and/or the Swiss–U.S. DPF. When we transfer personal information from the EEA, UK, or Switzerland to one of these certified organizations in the United States, we may rely on that organization’s DPF certification as part of the transfer mechanism, together with our data-protection contracts with them.

You can learn more about the Data Privacy Framework and view the list of participating organizations at https://www.dataprivacyframework.gov/. For information about how a particular DPF-certified provider handles your personal information and how to raise a complaint with them or their independent dispute-resolution body, please refer to that provider’s privacy notice. If you have concerns about our own handling of international transfers, please contact us using the details in Section 17 (How Can You Contact Us About This Notice?); you also have the supervisory-authority and other rights described in Section 12 and Section 15.

8.3 Your Rights and Choices

Depending on your location, you may have rights to access, rectify, delete, or object to certain processing and transfers. See Section 12 (What Are Your Privacy Rights?) and Section 15 (Other Regions’ Specific Privacy Rights) for regional details and supervisory authority contacts. For how and why we collect and use data, see Section 1 and Section 2. To understand the recipients of your data, see Section 4. For cookie-based analytics and advertising, see Section 6 and opt-out options in Section 14 (including Global Privacy Control).

9. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

We retain personal information only for as long as needed for the purposes described in this Privacy Policy.

For example:

Order and payment-related records are kept to satisfy legal, tax, accounting, and bookkeeping requirements (for example, Canada Revenue Agency requirements and other applicable laws).
Accounts with no purchases may be deleted after a period of inactivity, upon account deletion, or as permitted by applicable data minimization requirements.
Marketing and analytics data are retained only while relevant for measurement, security, and improvement, and are deleted or anonymized when no longer needed.

Unless a longer retention period is required or permitted by law (for example, to comply with legal obligations, enforce agreements, resolve disputes, or prevent fraud and abuse), we will not keep personal information longer than seventy-two (72) months after account deletion or termination, or our last interaction with you, whichever occurs later.

When we no longer have a legitimate business need to process your information, we will delete or anonymize it. If immediate deletion is not possible (for example, in backup archives), we will securely store it and isolate it from active systems until it can be deleted as part of our normal backup rotation.

10. How Do We Keep Your Information Safe?

In Short: We protect your personal information through a combination of organizational, technical, and physical safeguards.

We implement appropriate and reasonable administrative, technical, and physical security measures designed to protect your information, including:

Encryption in transit (HTTPS/TLS) and at rest where applicable.
Access controls, secure authentication, and password protection.
Regular malware and intrusion detection monitoring through BulletProof Security Pro.
Server firewall configuration and redundant data storage to prevent unauthorized access or data loss.

While we use industry-recognized safeguards to protect your data, no system or electronic transmission over the Internet can be guaranteed 100% secure. By using our Services, you acknowledge and accept that data transmission to and from our website is at your own risk. You should only access our Services within a secure environment.

11. Do We Collect Information From Minors?

In Short: We do not knowingly collect, solicit, or market to individuals under 18 years of age.

Our Services are intended for adults aged 18 and older. By using the Services, you represent that you are at least 18 years of age or that you are the parent or legal guardian of a minor using the Services with your consent. We do not knowingly collect or solicit personal information from anyone under 18. If we learn that we have inadvertently collected data from a minor, we will deactivate the account and take reasonable steps to securely delete such data from our systems.

If you become aware of data collected from a minor under 18, please contact us immediately at datarequestedinfo@extremedealsoftheday.com.

12. What Are Your Privacy Rights?

In Short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us using the details provided in the section “How Can You Contact Us About This Notice?” below.

We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us using the contact details provided in the section “How Can You Contact Us About This Notice?” below or updating your preferences.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us using the details provided in the section “How Can You Contact Us About This Notice?” below. You will then be removed from the marketing lists. However, we may still communicate with you, for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

12.1 Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Cookies and similar technologies: Most web browsers and some mobile operating systems and mobile applications are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services. You may also opt out of interest-based advertising by advertisers on our Services. For further information, please see our Cookie Notice: https://extremedealsoftheday.com/cookie-policy/.

If you have questions or comments about your privacy rights, you may email us at support@extremedealsoftheday.com or submit a request at https://extremedealsoftheday.com/request-data-information/.

13. Controls For Do-Not-Track Features

Most browsers and some mobile operating systems include a “Do Not Track” (DNT) feature or setting. At this time, no uniform technology standard for recognizing and implementing DNT signals has been finalized. Therefore, we do not currently respond to DNT browser signals or other automatic mechanisms that communicate your choice not to be tracked online. If a standard for online tracking is adopted in the future, we will update this Privacy Policy accordingly.

14. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.

14.1 Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

Category	Examples	Collected
A. Identifiers	Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, Internet Protocol address, email address, and account name	YES
B. Personal information as defined in the California Customer Records statute	Name and contact information (for example billing and shipping address), and partial payment identifiers (for example last four digits of card number or payment token). We do not collect government identification numbers or full card details.	YES
C. Protected classification characteristics under state or federal law	Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data	NO
D. Commercial information	Transaction information, purchase history, financial details, and payment information	YES
E. Biometric information	Fingerprints and voiceprints	NO
F. Internet or other similar network activity	Browsing history, search history, online behaviour, interest data, and interactions with our and other websites, applications, systems, and advertisements	YES
G. Geolocation data	Device location	YES
H. Audio, electronic, sensory, or similar information	Images and audio, video or call recordings created in connection with our business activities	NO
I. Professional or employment-related information	Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us	NO
J. Education Information	Student records and directory information	NO
K. Inferences drawn from collected personal information	Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics	YES
L. Sensitive personal information	–	NO

We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of:

Receiving help through our customer support channels;
Participation in customer surveys or contests; and
Facilitation in the delivery of our Services and to respond to your inquiries.

We will use and retain the collected personal information as needed to provide the Services or for:

Category A: Extreme Deals Of The Day retains the personal information of our customers to comply with legal requirements and ensure efficient service. For paying customers, we retain their information for 72 months for tax and bookkeeping compliance. For non-purchasing account holders, information is retained 1 month after account deletion, then securely deleted or anonymized.
Category B: The same period as Category A, since these details form part of your customer and transaction records.
Category D: As long as the user has an account with us
Category F: As long as the user has an account with us
Category G: As long as the user has an account with us
Category K: As long as the user has an account with us

14.2 Sources of Personal Information

Learn more about the sources of personal information we collect in “WHAT INFORMATION DO WE COLLECT?”.

Learn about how we use your personal information in “HOW DO WE PROCESS YOUR INFORMATION?”.

We collect and share your personal information through:

Targeting cookies / Marketing cookies
Social media cookies
Beacons / Pixels / Tags
Click redirects: Amazon Affiliate Links, Google AdSense, eBay Partner Affiliate Links, CJ Affiliate Links, Nowlifestyle Affiliate Links, GotBackup Affiliate Links, Testimonial Generator Affiliate Links, SendShark Affiliate Links, VidUber Affiliate Links
Social media plugins: Facebook for WooCommerce, Site Kit by Google, and TikTok. These may process your IP address and which page you visit. See our Cookie Policy for details.

14.4 Will Your Information Be Shared With Anyone Else?

We may disclose your personal information with our service providers pursuant to a written contract. Learn more in “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?”.

We may use your personal information for our own business purposes, such as internal research for technological development and demonstration. This is not considered “selling” of your personal information.

We have disclosed the following categories of personal information to third parties for a business or commercial purpose in the preceding twelve (12) months:

Category A – Identifiers.
Category B – Personal information as defined in the California Customer Records statute.
Category D – Commercial information.
Category F – Internet or other similar network activity.
Category G – Geolocation data.
Category K – Inferences drawn from collected personal information.

The categories of third parties to whom we disclosed information can be found in “WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?”.

We have sold or shared the following categories of personal information to third parties in the preceding twelve (12) months:

The categories of third parties to whom we shared personal information with are Affiliate Marketing Programs: Amazon Affiliation, CJ Affiliate Program, eBay Partner Network, ShareASale, Nowlifestyle, Testimonial Generator, SendShark, and GotBackup.

14.5 Your Rights

You have rights under certain U.S. state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:

Right to know whether we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request the deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to non-discrimination for exercising your rights
Right to opt out of processing if used for targeted advertising / sharing / selling / profiling with legal effects

Depending on your state, you may also have rights to:

Obtain a list of categories or specific third parties to whom we have disclosed data (CA, DE, OR laws)
Limit use and disclosure of sensitive personal data (CA law)
Opt out of collection of sensitive data via voice / facial recognition features (FL law)

14.6 How to Exercise Your Rights

To exercise these rights, you can contact us by visiting https://extremedealsoftheday.com/request-data-information/, by emailing support@extremedealsoftheday.com, or via https://extremedealsoftheday.com/contact-us/.

You can opt out of selling or sharing your personal information or profiling by disabling cookies in your Cookie Preference Settings. We honour the Global Privacy Control (GPC) browser signal.

Under state laws, you may designate an authorised agent to act on your behalf; we may require proof of authorization before processing requests.

14.7 Request Verification

Upon receiving your request, we must verify your identity to confirm you are the person about whom we hold data. We only use this information for verification and security purposes. If you use an authorized agent, we may request additional evidence before processing.

14.8 Appeals

If we decline to act on your request, you may appeal our decision by emailing datarequestedinfo@extremedealsoftheday.com. We will respond in writing with reasons for the decision. If your appeal is denied, you may contact your state attorney general.

14.9 California “Shine The Light” Law

California Civil Code §1798.83 permits our users who are California residents to request and obtain information once per year about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names of those third parties. To submit a request, see “HOW CAN YOU CONTACT US ABOUT THIS NOTICE?”.

15. Other Regions’ Specific Privacy Rights

15.1 Canada (PIPEDA and Quebec Law 25)

Canadian users may withdraw consent or request access and correction of personal information at any time, subject to legal or contractual restrictions. Where applicable and permitted by law, you may also request deletion or anonymization, subject to record-retention requirements. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Law 25 regarding consent, breach notification, and data handling.

If you believe we have mishandled your personal information, you may contact the Office of the Privacy Commissioner of Canada (OPC) or your provincial privacy authority, such as the Commission d’accès à l’information du Québec.

15.2 European Union, United Kingdom, and Switzerland

Residents of the EEA, UK, and Switzerland are protected under the GDPR and equivalent laws. You have the right to lodge a complaint with your data protection authority.

European Economic Area (EEA): List of EU supervisory authorities.
United Kingdom: Information Commissioner’s Office (ICO).
Switzerland: Federal Data Protection and Information Commissioner (FDPIC).

15.3 Australia

We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). You may request access or correction to your data or make a complaint through our contact email.

If you believe we are unlawfully processing your personal information, you have the right to submit a complaint to the Office of the Australian Information Commissioner (OAIC).

15.4 Puerto Rico and other U.S. territories

If you are located in Puerto Rico or another U.S. territory, please see Section 14 (United States Residents’ Specific Privacy Rights) for applicable rights and opt-out options.

16. DO WE MAKE UPDATES TO THIS NOTICE?

Yes. We may update this Privacy Policy from time to time to reflect changes in laws, practices, or services. The “Last Updated” date at the top of this document indicates when it was last revised. Updates take effect when posted. If material changes occur, we may notify you via email or a notice on our website.

17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice or our data practices, you may contact us by email at support@extremedealsoftheday.com or by mail at:

Extreme Deals Of The Day
2318 Bur Oak Ave
Markham, Ontario L6E 1L7
Canada

18. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT?

You have the right to request review, update, or deletion of your personal data by contacting support@extremedealsoftheday.com or by using our Data Request Portal. We will verify your identity and respond according to applicable privacy laws.

Privacy Policy