EXTRAPRO | EXTRAPRO.COM

Privacy Policy

Effective date and last updated 11 November 2026

ExtraPRO Entertainment Limited respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit extrapro.com, contact us, schedule a meeting, receive business communications, apply for a role, become a customer or supplier, or otherwise interact with ExtraPRO.

Unless another entity is identified at the point of collection, ExtraPRO Entertainment Limited is responsible for the personal information described in this Policy. ExtraPRO Entertainment Limited is registered in Hong Kong at 2103, Futura Plaza, 111 How Ming Street, Kwun Tong, Hong Kong.

This Policy is designed for an international audience. Your rights and our obligations may vary depending on where you live and which ExtraPRO operation you interact with. Regional information is included below.

SECTION 01 Who this Policy covers

This Policy applies to personal information relating to:

  • visitors to extrapro.com and people who use our contact, scheduling, or inquiry forms;
  • prospective and current customers, their employees, and project stakeholders;
  • prospects and other business contacts who receive B2B newsletters or outbound sales communications;
  • suppliers, consultants, project partners, and other professional contacts; and
  • job applicants and people who express interest in working with ExtraPRO.

This Policy does not apply to a third-party website, platform, or service that publishes its own privacy policy, even when we link to it.

SECTION 02 Personal information we collect

Information you provide directly

  • Contact and identity information, such as your name, business email address, telephone number, company, role, and location.
  • Inquiry and project information, including the solutions you are interested in, your message, project requirements, proposal history, meeting details, and communications with us.
  • Commercial information associated with a customer, supplier, or project relationship, including contracts, billing or transaction records, and service history.
  • Communication preferences, newsletter subscriptions, opt-out choices, and any optional SMS consent selection. We do not currently use SMS for marketing.
  • Recruitment information, such as a resume, employment history, qualifications, portfolio, references, and other information submitted with a job application.
  • Any other information you choose to provide in an email, form, meeting, event, call, or business conversation.

Information collected automatically

  • Technical information, such as internet protocol address, browser, operating system, device type, approximate location derived from an IP address, and network information.
  • Website activity, including pages viewed, referring pages, links or buttons used, session timing, interactions, and cookie or consent preferences.
  • Email delivery and engagement information, such as whether a business email was delivered, opened, or clicked, where permitted by law and your settings.
  • Organization-level visitor insights that may associate a business network or website visit with a company or organization.

Information from other sources

We may receive professional and business contact information from ZoomInfo and ZoomInfo WebSights, public websites, LinkedIn, trade shows and events, referrals and partners, existing business contact lists, job applications, and customer or supplier contacts. We may combine this information with information already held in our customer relationship management systems.

Sensitive personal information

We do not ask website visitors or ordinary business contacts to provide sensitive personal information. Please do not send government identifiers, financial account credentials, health information, biometric information, or other highly sensitive information unless we specifically request it for a legitimate employment, payment, contracting, security, or legal purpose.

SECTION 03 How we use personal information

  • Respond to inquiries, schedule meetings, prepare proposals, and communicate about projects or services.
  • Manage customer, prospect, supplier, and project relationships, including design, delivery, support, training, maintenance, and account administration.
  • Maintain our customer relationship management, contact, and project systems.
  • Send B2B newsletters and outbound sales communications that may be relevant to your role or organization, subject to applicable law and your right to opt out.
  • Operate, secure, troubleshoot, analyze, and improve our website, forms, email delivery, services, and user experience.
  • Understand website performance, business interest, and organization-level engagement.
  • Recruit and evaluate applicants and manage the hiring process.
  • Protect ExtraPRO, our customers, and others; prevent misuse or fraud; enforce agreements; and establish, exercise, or defend legal claims.
  • Comply with legal, regulatory, tax, accounting, reporting, and recordkeeping requirements.
  • Support corporate transactions, audits, financing, insurance, and internal business administration.

SECTION 04 Legal bases for processing

Where European Union, United Kingdom, or similar privacy law requires a legal basis, we rely on one or more of the following:

LEGAL BASIS WHEN IT MAY APPLY
Contract and pre-contract steps To respond to a request, prepare or perform an agreement, provide services, or manage a customer, supplier, applicant, or project relationship.
Legitimate interests To operate and secure our business, manage professional relationships, improve our website and services, analyze organization-level interest, and carry out proportionate B2B marketing, provided those interests are not overridden by your rights.
Consent When consent is required for a cookie, newsletter, optional communication channel, or another specific activity. You may withdraw consent at any time.
Legal obligation To meet applicable legal, regulatory, accounting, tax, employment, security, or recordkeeping duties.

If we rely on legitimate interests, you may ask for information about the balancing assessment relevant to your personal information.

SECTION 05 Cookies analytics and website technologies

Our website and related communications may use cookies, pixels, scripts, and similar technologies to operate forms and scheduling, remember consent choices, secure the website, understand performance, and measure engagement.

The services currently used in connection with the website and related business operations include:

SERVICE PURPOSE
HubSpot Forms, scheduling, customer relationship management, contact management, and sales or marketing communications.
Google Analytics 4 Website measurement and analytics using Google Consent Mode.
Google Workspace Business email, files, documents, and collaboration.
Ahrefs Website performance, search, and traffic analysis.
ZoomInfo WebSights Organization-level website visitor insights and B2B prospecting context.
Resend Email delivery and email engagement tracking.
GoDaddy Website security services.
ClickUp Internal project and operational management. ClickUp is not directly integrated into the public website, but business contact information may be used in internal project workflows.

Where a cookie preference tool is available, you can use it to manage non-essential technologies. You can also adjust your browser settings to block or delete cookies. Blocking some cookies may affect website functionality. Consent choices apply to the browser and device on which they are made and may need to be renewed after cookies are cleared.

SECTION 06 B2B marketing and communication choices

ExtraPRO uses email newsletters and outbound sales sequences to communicate with business contacts. We may select recipients based on their role, company, public professional information, prior interaction with ExtraPRO, or information obtained from the sources described above.

You may unsubscribe by using the link in a marketing email or by contacting richelle@extrapro.com. We may keep limited suppression information so that we can honor your request. Opting out of marketing does not prevent service, project, contractual, security, or other non-promotional communications.

ExtraPRO does not sell personal information. ExtraPRO also does not provide personal information to advertising platforms for cross-context behavioral advertising or targeted advertising based on activity across unrelated businesses or services.

SECTION 07 How we disclose personal information

We may disclose personal information only as reasonably necessary for the purposes in this Policy, including to:

  • service providers that host, secure, analyze, support, or operate our website, CRM, email, cloud files, collaboration, recruitment, and project systems;
  • ExtraPRO affiliates, personnel, consultants, and project partners who need the information to manage an inquiry, relationship, project, or internal operation;
  • professional advisers, insurers, auditors, banks, and other advisers subject to appropriate duties of confidentiality;
  • government authorities, regulators, courts, law enforcement, or other parties when required by law or reasonably necessary to protect rights, safety, or security; and
  • a buyer, investor, lender, or successor in connection with a proposed or completed merger, financing, reorganization, asset sale, or similar transaction, subject to appropriate confidentiality protections.

When a provider processes information on ExtraPRO’s behalf, that processing is subject to the applicable agreement and privacy law. A provider may separately process information under its own privacy policy when it acts independently, such as when you maintain your own account with that provider.

SECTION 08 International access and transfers

ExtraPRO is registered in Hong Kong, operates internationally, and uses cloud and business service providers that may store or process information in more than one country. Personnel, affiliates, service providers, or project partners may therefore access personal information outside the country where it was collected, including in Hong Kong, the United States, the Philippines, and other locations in which our providers operate.

Privacy protections and government access rules may differ between countries. Where applicable law requires a transfer mechanism or other protection, we will use an appropriate lawful basis for the transfer and take reasonable steps designed to protect the information. You may contact us for more information about the safeguards relevant to a particular transfer.

SECTION 09 How long we keep personal information

We retain personal information only as long as reasonably necessary for the purpose for which it was collected, the relationship involved, and applicable legal, accounting, tax, employment, contractual, security, and dispute-resolution requirements. Our starting retention periods are:

CATEGORY STARTING RETENTION PERIOD
Contact-form and unqualified inquiries 24 months after the last interaction
Prospect and B2B marketing contacts 24 months after the last meaningful interaction, unless the person opts out earlier
Customer and project records 7 years after the relationship or project ends, or longer when legally required
Supplier and business contact records 7 years after the business relationship ends, or longer when legally required
Google Analytics event data 14 months
Job applicant records 12 months after the role is filled, unless the applicant agrees to a longer talent-pool period
Consent and opt-out records As long as reasonably necessary to demonstrate and honor the preference

We may shorten a period when information is no longer needed, or extend it when required by law, a litigation hold, an investigation, a contractual obligation, or a legitimate unresolved dispute. When information is no longer required, we will delete, anonymize, or securely isolate it as appropriate.

SECTION 10 Security

We use administrative, technical, and organizational measures designed to protect personal information against accidental or unlawful loss, misuse, alteration, unauthorized access, disclosure, or destruction. These measures include limiting access according to business need and using providers that support website, cloud, and security operations, including GoDaddy for website security.

No method of transmission or storage is completely secure. If you believe information provided to ExtraPRO has been compromised, contact us promptly using the details below.

SECTION 11 Automated tools and decision making

We may use organization-level visitor insights, CRM tools, analytics, and business information to help identify organizations, understand interest, prioritize follow-up, or personalize B2B communications. These tools support human business decisions.

ExtraPRO does not use a fully automated system to make a decision about an individual that has a legal or similarly significant effect without meaningful human involvement.

SECTION 12 Your privacy rights

Depending on where you live and the law that applies, you may have the right to request access to personal information, correct inaccurate information, obtain a copy, request deletion, restrict or object to certain processing, withdraw consent, opt out of direct marketing, or complain to a privacy regulator. Some rights are subject to legal exceptions and verification requirements.

To make a request, email richelle@extrapro.com with your name, contact details, relationship with ExtraPRO, and the right you want to exercise. We may ask for information reasonably necessary to verify your identity and locate the relevant records. An authorized representative may submit a request where permitted by law, subject to proof of authority and identity verification.

We will respond within the period required by applicable law. We will not discriminate against you for exercising a privacy right. If a request is denied, we will explain the basis when the law requires us to do so and provide information about any available appeal or complaint process.

European Union and United Kingdom

If European Union or United Kingdom data protection law applies, rights may include access, rectification, erasure, restriction, objection, data portability, withdrawal of consent, and the right to complain to the supervisory authority where you live, work, or believe an infringement occurred. You may object at any time to processing for direct marketing. You may also object to processing based on legitimate interests, subject to the grounds available under applicable law.

Hong Kong

If the Hong Kong Personal Data Privacy Ordinance applies, you may request access to and correction of personal data held by us, subject to the Ordinance. We may charge a reasonable fee for a data access request where permitted by law.

Philippines

If the Philippine Data Privacy Act applies, rights may include the rights to be informed, object, access, correct, erase or block, obtain data portability where applicable, claim damages, and file a complaint with the National Privacy Commission. We will provide the contact details of the applicable Data Protection Officer or responsible privacy contact when required for a specific Philippine processing activity.

California and other United States states

If a United States state privacy law applies to ExtraPRO and your information, you may have rights to know or access, correct, delete, or obtain a portable copy of certain personal information, and to opt out of certain sales, sharing, or targeted advertising. ExtraPRO does not sell personal information and does not share it for cross-context behavioral advertising. We do not knowingly use or disclose sensitive personal information for purposes that require a right to limit under California law. You may also have the right to appeal a denied request where applicable.

During the preceding 12 months, the categories we may have collected include identifiers and contact details, commercial and project information, internet or electronic activity, professional or employment information, approximate location derived from an IP address, and inferences about business interest. The sources, purposes, and recipient categories are described in this Policy.

SECTION 13 Children

The website and ExtraPRO’s services are intended for adults and business users aged 18 or older. They are not directed to children, and we do not knowingly collect personal information from anyone under 18 through the website. If we learn that a person under 18 submitted personal information, a parent or guardian may contact us and we will take reasonable steps to delete it when required.

SECTION 14 Third party links and services

Our website or communications may link to third-party websites, social networks, video platforms, or services. Their privacy practices are controlled by their own policies. Review those policies before providing personal information to a third party.

SECTION 15 Changes to this Policy

We may update this Policy to reflect changes in our services, technologies, providers, business practices, or legal obligations. We will post the updated version on extrapro.com and revise the “last updated” date. If a change materially affects how we use personal information, we will provide additional notice where required by law.

SECTION 16 Contact us

Questions, privacy requests, complaints, and marketing opt-outs may be sent to:

Company ExtraPRO Entertainment Limited
Privacy contact Richelle Sia, Senior Business Manager
Email richelle@extrapro.com
Address 2103, Futura Plaza, 111 How Ming Street, Kwun Tong, Hong Kong

You may also contact the privacy or data protection regulator in your jurisdiction if you believe your rights have not been respected.

contact us

Reach Out Today