Privacy Policy | extendedIDEA

Last updated: 15 August 2025
Who we are: extendedIDEA (“we”, “us”, “our”) is a web, SEO, branding, and content services company.
Website: https://extendedidea.com

1) Scope

This policy explains how we collect, use, share, and protect personal information when you visit our website, contact us, or use our services. It applies to visitors and clients globally, with additional notices for Australia and the United Arab Emirates (UAE).

2) Information we collect

Information you provide

Name, email address, phone number
Company name, role, website URL
Project details/messages you submit in forms
Files you choose to upload or share

Information collected automatically

Device and browser details, IP address, language, timezone
Pages viewed, links clicked, time on page, referrer/UTM parameters
Advertising identifiers (e.g., gclid) and first/last-touch landing pages
Cookies, localStorage entries (e.g., UTMs), and similar tracking data

Information from third parties

Lead source data from ad platforms (e.g., Google Ads), analytics (GA4), and CRM enrichment tools (e.g., HubSpot properties if enabled)

3) How we use your information

We use personal information to:

Respond to enquiries and provide proposals
Deliver, manage, and improve our services
Personalize content and measure campaign performance
Run analytics (GA4) and advertising (Google Ads, remarketing)
Prevent spam and abuse (reCAPTCHA), and secure our site
Meet legal, regulatory, and contractual obligations

Legal bases (where applicable):

Consent (e.g., marketing communications, cookies)
Contract (to provide requested services or proposals)
Legitimate interests (running a secure, effective business; improving services; basic analytics)
Legal obligations (record-keeping, compliance)

4) Cookies & similar technologies

We use:

Strictly necessary cookies (security, form delivery)
Analytics cookies (Google Analytics 4 via Google Tag Manager)
Advertising cookies (Google Ads; remarketing)
Functional storage (localStorage for UTM parameters, first/last-touch pages)

You can control cookies in your browser settings. You may also opt out of Google Ads personalized ads via Google’s Ad Settings. Disabling certain cookies may impact site functionality.

reCAPTCHA v3: Our forms may be protected by Google reCAPTCHA; Google’s Privacy Policy and Terms of Service apply.

Enhanced Conversions (Google Ads): When you submit a form, we may send hashed identifiers (e.g., email/phone) to Google to improve conversion measurement. Hashing is performed before transmission.

5) Forms, CRM, and communications

Contact forms: We use Contact Form 7 (WordPress).
CRM: We use HubSpot’s “Non-HubSpot Forms” capture to store leads in our CRM, manage follow-ups, and measure performance.
Email delivery: We send system emails via trusted providers (e.g., Amazon SES, SendGrid, or similar).
WhatsApp/Chat: If you click our WhatsApp/chat links, your use is governed by the respective provider’s terms.

We do not send marketing SMS/WhatsApp by default. We keep communications relevant to your enquiry.

6) Sharing your information

We share information with:

Service providers/processors who help us operate (hosting, CRM, analytics, email delivery, security/CDN, form handling, error monitoring, payment or invoicing if used). Examples include: HubSpot, Google (Analytics, Ads, reCAPTCHA), Amazon SES/SendGrid/Mailgun, Cloud hosting/CDN providers, and WordPress plugins we rely on.
Ad/analytics partners to measure and optimize campaigns (aggregated or pseudonymized where possible).
Professional advisors (legal, accounting) and authorities when required by law or to protect our rights, users, or the public.

We do not sell your personal information.

7) International transfers

We operate globally. Your information may be processed in countries that may have different data-protection laws than yours (for example, the United States or European Union where our vendors host data). We take appropriate measures (e.g., contractual safeguards) to protect your information during transfers.

8) Data retention

We keep personal information only as long as needed for the purposes described here, including:

Enquiry records and proposals: typically 24 months
Client/project and invoicing records: as required by tax and accounting laws (usually 7 years)
Analytics/advertising data: per vendor defaults or for 24 months, whichever is shorter, unless you request deletion where applicable

When retention periods end, we securely delete or anonymize data.

9) Security

We use technical and organizational measures to protect information (TLS encryption, hardened hosting, access controls, least-privilege accounts, regular updates, spam and bot protection). No method of transmission or storage is 100% secure, but we work to continuously improve our security posture.

10) Your privacy choices & rights

Depending on your location, you may have rights to:

Access the personal information we hold about you
Correct inaccurate or incomplete data
Delete your personal information (subject to legal exceptions)
Restrict or object to certain processing
Withdraw consent where processing is based on consent
Data portability (receive your data in a structured, commonly used format)
Opt out of direct marketing at any time

To exercise rights, contact us at hello@extendedidea.com. We may need to verify your identity before completing your request.

11) Australia notice (Privacy Act 1988 & APPs)

If you’re in Australia:

We handle personal information in line with the Australian Privacy Principles (APPs).
You can request access or correction at any time.
If you have a complaint, contact us first. If unresolved, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

12) UAE notice (PDPL)

If you’re in the UAE:

We handle personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
You may request access, correction, deletion, restriction, and to stop processing in certain cases.
You can withdraw consent where consent is the basis for processing.
If you have concerns, contact us. You may also raise complaints with the UAE Data Office in accordance with applicable procedures.

13) India notice (Digital Personal Data Protection Act, 2023)

If you are in India:

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable rules.
You may request access, correction, updating, and erasure of your personal data, and you may withdraw consent where processing is based on consent.
You may raise concerns with our Grievance Officer at hello@extendedidea.com. We will acknowledge and resolve complaints within timelines prescribed by law.

Grievance Officer:
Name: [Salim Hariz]
Email: info@extendedidea.com
Address:

14) EU/EEA & UK notice (GDPR / UK GDPR)

If you are in the EU/EEA or the UK:

Controller: extendedIDEA is the data controller for website lead data.
Purposes & legal bases: We process your data to respond to enquiries and deliver our services (contract), run security and basic analytics (legitimate interests), and—where required—send marketing or drop non-essential cookies (consent).
Your rights: access, rectification, erasure, restriction, objection (including to direct marketing), and data portability. Where processing is based on consent, you may withdraw consent at any time.
Transfers: Your data may be processed outside your country. When we transfer personal data internationally, we use appropriate safeguards (e.g., Standard Contractual Clauses) or rely on adequacy decisions where available.
Complaints: You may lodge a complaint with your local supervisory authority; we encourage you to contact us first at info@extendedidea.com.

If you regularly target EU/UK customers: consider appointing an EU/UK representative and adding their contact details here.

15) United States notice — California (CPRA)

If you are a California resident:

We collect the categories of personal information described in this policy (identifiers, internet activity, professional info, and in some cases inferences for advertising/analytics).
Uses: to provide services, measure site activity, secure our services, and run advertising/remarketing.
Sale/Share: We do not “sell” personal information for money. We may “share” personal information for cross-context behavioral advertising (e.g., through Google Ads remarketing). You can opt out as described below.
Your rights: to know (request specific pieces/categories), delete, correct, opt out of sale/share, and not be discriminated against for exercising rights.
How to exercise rights / opt-out: email info@extendedidea.com or use the “Do Not Sell or Share My Personal Information” link (when available on our site). For Ads opt-outs, you can also adjust Google Ad Settings or your browser’s privacy settings.

16) Canada notice (PIPEDA) — add if you market to Canada

If you are in Canada:

We comply with the principles in PIPEDA for personal information under our control.
You may request access to and correction of your personal information, and lodge complaints with the Office of the Privacy Commissioner of Canada.
Contact us at info@extendedidea.com to exercise your rights.

17) Singapore notice (PDPA) — add if you market to Singapore

If you are in Singapore:

We handle personal data in accordance with Singapore’s PDPA.
You may access, correct, and withdraw consent at any time, subject to legal and contractual restrictions.
To exercise your rights, contact info@extendedidea.com.

18) Children’s privacy

Our website and services are intended for business users and are not directed to children. We do not knowingly collect personal information from children.

19) Third-party links

Our site may link to third-party websites or services. Their privacy practices are their own. Review their policies before providing personal information.

20) Changes to this policy

We may update this policy to reflect changes to our practices or legal requirements. We’ll post the new date at the top and, if material changes are made, we’ll provide a prominent notice.

21) Contact us

extendedIDEA
Email: info@extendedidea.com
If you prefer, you can also use the contact form on our website.