Privacy Policy

How Are We Collecting Data?

Effective Date: July 6, 2026 ● Update Date: July 6, 2026

Scope and Acceptance

Extra Point respects your privacy and is committed to handling personal information responsibly, transparently and securely. This Privacy Policy explains how Extra Point ("Extra Point", "Extra Point Team", "we", "us" or "our") processes personal information when you visit www.extrapoint.ma, use pages or features made available through the website, interact with embedded content, schedule a meeting, or communicate with us by e-mail, telephone, WhatsApp, social media or another channel.

By using our website, you acknowledge that you have read this Privacy Policy. When you browse in our websites or our spaces, you are thereby giving your consent. You may withdraw your consent by contacting us as described below.

When Extra Point processes personal information on behalf of a client while delivering consulting, development, design or support services, the client may be the data controller and Extra Point may act as a processor or service provider. In that situation, the relevant contract, data processing agreement and the client's privacy notice govern that processing.

Personal Information We Collect

Depending on how you interact with us, we may collect the following categories:

• Identity and contact information: first name, last name, business name, job title, e-mail address, telephone or mobile number, country and preferred contact method.
• Business and project information: the organization you represent, your needs, project context, requested services, meeting details, budget or timing information you choose to provide, and related professional communications.
• Communications: messages, enquiries, feedback, attachments and records of communications with Extra Point.
• Scheduling information: meeting date and time, time zone, invitee details, answers entered in a scheduling form and related calendar information.
• Technical and usage information: IP address, device and browser information, operating system, referring pages, pages viewed, approximate location, timestamps, interactions, cookie identifiers and diagnostic or security logs.
• Marketing preferences: your choices about communications, cookies and similar technologies, where such choices are offered.
• Other information you voluntarily provide: including information sent in an e-mail, document, proposal request, application or other communication.

We do not intentionally request sensitive personal information through the public website. Please avoid sending sensitive or confidential information unless it is necessary and an appropriate secure channel has been agreed with Extra Point.

Sources of Personal Information

We may obtain personal information:

• Directly from you when you contact us, request information or schedule a meeting;
• Automatically from your browser or device when you use the website;
• From service providers that support website operation, analytics, scheduling, communications, security or hosting;
• From the organization you represent, a mutual contact, a partner or a client where appropriate;
• From publicly available professional sources, where permitted by applicable law.

How We Use Personal Information

We may use personal information to:

• Respond to enquiries and communicate with you;
• Understand your needs and prepare, discuss or perform requested services;
• Schedule meetings and manage professional relationships;
• Operate, maintain, personalize and improve the website and our services;
• Measure website performance and understand how visitors use our content;
• Send service updates or relevant business communications where permitted;
• Protect the website, systems, users and Extra Point against fraud, abuse, security incidents and unlawful activity;
• Establish, exercise or defend legal claims and enforce agreements;
• Comply with applicable laws, regulatory requirements and lawful requests from authorities;
• Support a business reorganization, merger, financing, acquisition or transfer, subject to appropriate safeguards.

Extra Point does not use personal information collected through the website to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

Legal Bases for Processing

The legal basis depends on the information, purpose and law that applies. Where the GDPR or a similar legal framework applies, we generally rely on the following bases:

Purpose	Typical legal basis
Responding to enquiries and taking steps before a contract	Pre-contractual steps, contract performance and/or legitimate interests
Providing and managing services	Contract performance and legal obligations
Website operation, improvement, security and fraud prevention	Legitimate interests and legal obligations
Non-essential analytics, advertising or social-media cookies	Consent, where required
Marketing communications	Consent or legitimate interests, where permitted by law
Compliance, disputes and legal claims	Legal obligations and legitimate interests

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

How We Disclose Personal Information

We do not disclose personal information except as reasonably necessary for the purposes described in this Privacy Policy. Recipients may include:

• Service providers and processors that provide hosting, security, analytics, scheduling, communication, productivity, technical support or related services.
• Professional advisers such as legal, accounting, audit, insurance or information-security advisers where necessary.
• Business partners, subcontractors or specialists where needed to evaluate or deliver a requested service and subject to appropriate obligations.
• Public authorities or other parties where disclosure is required by law, legal process, a lawful request, or to protect rights, safety and security.
• Transaction parties in connection with a potential or completed merger, acquisition, financing, reorganization or transfer of all or part of a business, subject to confidentiality and legal safeguards.

Extra Point does not sell your contact details or business enquiry information for monetary consideration. Third-party analytics, advertising, social-media and embedded content providers may independently receive technical or online activity information when their services are enabled, as described below and in their own privacy notices.

Third-Party Services and Embedded Tools

The website may use or link to third-party services. Depending on the website's current configuration and your choices, these providers may process information under their own terms and privacy policies.

Service category	Examples used or linked by Extra Point	Typical purpose and information
Analytics and tag management	Google Analytics and Google Tag Manager	Traffic measurement, performance and interactions; may include IP address, device, browser and cookie identifiers.
Advertising	Google AdSense	Advertising delivery and measurement; may use online identifiers and browsing information when enabled and permitted.
Social and measurement tools	Meta/Facebook technologies and links to social networks	Social functionality, audience measurement and platform interactions; data may be received by the relevant platform.
Meeting scheduling	Calendly	Meeting booking, invitee details, time zone, answers and calendar-related information.
Video content	YouTube	Embedded video playback and related technical or interaction information when a video is loaded or played.
Communications	E-mail, telephone and WhatsApp	Communications and related identifiers, content and metadata.

When you leave our website or interact with a third-party platform, that platform's Privacy Policy applies. Extra Point is not responsible for the privacy, security or content practices of independent third-party websites or services.

Cookies and Similar Technologies

Cookies are small files or similar identifiers stored on or accessed from your device. The website may use:

• Strictly necessary technologies required for core operation, security or requested functionality;
• Preference technologies that remember choices and improve usability;
• Analytics technologies that help us understand traffic and performance;
• Advertising or social-media technologies that support advertising, measurement or social features when enabled.

Where applicable law requires consent, non-essential cookies and similar technologies should be activated only after you make a choice. You can also control or delete cookies through your browser settings. Blocking certain technologies may affect website functionality. Cookie choices apply to the browser and device on which they are made and may need to be renewed after cookies are deleted or the applicable preference period expires.

International Data Transfers

Extra Point operates from Morocco and works internationally. Some service providers or recipients may process information outside Morocco or outside the country where you are located, including in jurisdictions whose data-protection laws may differ.

Where required, Extra Point uses appropriate legal and contractual safeguards for international transfers and follows applicable authorization or notification requirements, including requirements under Moroccan Law No. 09-08 and, where relevant, GDPR transfer mechanisms. You may contact us for additional information about safeguards relevant to your personal information.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy. Retention is determined by factors such as the nature of the information, the duration of our relationship or discussions, contractual requirements, consent status, legal and accounting obligations, applicable limitation periods, security needs and the need to establish, exercise or defend legal claims.

When information is no longer required, we take reasonable steps to delete, anonymize or securely isolate it, subject to lawful backup and record-retention requirements.

Security of Personal Information

We use reasonable administrative, organizational and technical measures designed to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. Measures are selected according to the nature of the information and the associated risk.

No website, transmission method or storage system can be guaranteed to be completely secure. You should use appropriate care when sending information online and contact us promptly if you believe your interaction with Extra Point is no longer secure.

Your Privacy Rights

Depending on your location and the law that applies, you may have the right to:

• Be informed about how your personal information is processed;
• Request access to personal information held about you;
• Request correction of inaccurate or incomplete information;
• Request deletion or erasure, where legally available;
• Object to or request restriction of certain processing;
• Withdraw consent at any time where processing is based on consent;
• Request data portability, where applicable;
• Opt out of certain marketing communications;
• Lodge a complaint with the competent data-protection authority.

To exercise a right, e-mail [email protected] and describe your request. We may ask for information reasonably necessary to verify your identity and protect your information. Authorized agents may be required to provide proof of authority. Rights may be subject to legal exceptions, and we will explain any lawful limitation that applies.

Regional Privacy Notices

Morocco — Law No. 09-08 and the CNDP

Where Moroccan data-protection law applies, processing is governed by Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data and supervised by the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP). Subject to applicable conditions, individuals may exercise rights including information, access, rectification and opposition and may submit a complaint to the CNDP.

European Economic Area — GDPR

Where the General Data Protection Regulation applies, you may have rights of access, rectification, erasure, restriction, objection and portability, the right to withdraw consent, and the right to complain to the supervisory authority in your country. You may also object at any time to direct marketing. Extra Point will not discriminate against you for exercising applicable rights.

California — CCPA, as amended

If the California Consumer Privacy Act applies to Extra Point's processing of your information, you may have the right to know and access, correct, delete, opt out of the sale or sharing of personal information, limit certain uses of sensitive personal information, and receive equal service and pricing when exercising your rights. Extra Point does not sell contact details or business enquiry information for money. You may submit an applicable request using the contact details below.

Canada — PIPEDA

Where Canada's Personal Information Protection and Electronic Documents Act applies, you may request access to personal information held about you, challenge its accuracy, request appropriate correction and withdraw consent, subject to legal or contractual restrictions and reasonable notice.

Australia — Privacy Act 1988

Where Australia's Privacy Act 1988 and the Australian Privacy Principles apply, you may request access to and correction of personal information and may make a privacy complaint. We will review and respond to applicable requests in accordance with the law.

Children's Privacy

The website and Extra Point's business services are intended for organizations and professional users, not children. We do not knowingly collect personal information from children under 16 through the website. If you are a parent or guardian and believe that a child has provided personal information to us, please contact us so that we can take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, services, technologies or legal obligations. The revised version will be posted on this page and the effective date will be updated. Material changes may also be communicated through an additional notice where appropriate. We encourage you to review this page periodically.

How to Contact Us

For questions, concerns or requests relating to this Privacy Policy or personal information handled by Extra Point, contact us using the details below.

E-mail: [email protected]

WhatsApp: +212 6 67 78 50 06

Thank you for trusting Extra Point. We are committed to handling personal information with care and to providing a secure, transparent experience.