Privacy Policy

1. Who we are

Extreme Savers (referred to in this policy as "Extreme Savers", "the Platform", "we", "us" or "our") is a rewards website that lets members earn points by completing offers, surveys, missions, tasks and games, and redeem those points for PayPal cash or gift cards. Extreme Savers is owned and operated by:

Company name

Maple & Moor Media Group Ltd

Company number

16059597

Incorporated

4 November 2024

Nature of business (SIC)

73110 – Advertising agencies

Registered office

Office 6B, The Barns, Farm Road, Caddsdown Industrial Park, Bideford, EX39 3BT

Maple & Moor Media Group Ltd is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Any questions about this policy or how your data is handled can be sent to our data protection contact, dpo@maplexmoor.co.uk.

2. Scope of this policy

This policy applies to anyone who visits extremesavers.co.uk, and to registered members using our dashboard, offers, missions, tasks, games, offer walls, deals, referral programme and reward redemption features. It does not cover third-party websites you may reach by clicking an offer, survey, or deal link — please read the privacy policy of any external site before providing your data to it.

3. Information we collect

We collect the following categories of personal data:

We do not ask you for a government-issued ID, proof of address, or a "selfie" holding your ID in order to process a reward redemption.

4. How we use your data

• To create, secure and administer your account, including 2FA if you enable it
• To track your progress on offers, missions, tasks, games and surveys, and credit the correct points/XP to your wallet
• To process reward redemptions (PayPal cash-outs and gift cards) and keep records for accounting and dispute resolution
• To run our Refer-a-Friend programme, including checks to confirm a referral is genuine before crediting a bonus
• To detect, investigate and prevent fraud, multi-accounting and abuse of our reward system
• To send you service emails (account verification, password resets, redemption updates) and, only where you've consented, marketing emails about new offers and features
• To moderate community content on the Deals section
• To maintain security logs that protect the Platform and its members
• To meet our legal, tax and regulatory obligations

5. Legal basis for processing

Under UK GDPR, we rely on the following legal bases:

6. Who we share your data with

We only share personal data where it's needed to run the Platform, and we never sell it. This includes:

• PayPal – to pay out cash rewards you request.
• Offer, survey and offer-wall partners (including our TheoremReach survey integration) – when you choose to complete an offer or survey, that partner needs enough information, typically your Platform user ID and IP address, to verify completion and report it back to us so we can credit your reward. We do not share your email address, password, or payout details with these partners.
• Email delivery services – to deliver account emails and, where you've consented, marketing emails.
• Hosting & database providers – who store data on our behalf, under contract, solely to run the Platform.
• Professional advisers & regulators – such as our accountants, or bodies like HMRC or the ICO, where required by law or a valid legal request.

7. Cookies

We keep cookie use to a minimum:

• Essential session cookie – keeps you securely signed in. The Platform cannot function without this.
• Referral cookie – if you arrive via a friend's referral link, we store their referral code in a cookie for 30 days so the referral can be credited correctly if you go on to register.

We do not currently use third-party advertising or analytics cookies. If that changes in future, we'll update this section and our Cookie Policy accordingly.

8. International transfers

Some of the partners we work with, including PayPal and certain survey/offer-wall providers, may process data outside the UK (most commonly in the United States). Where this happens, we make sure an appropriate safeguard is in place, such as:

• The destination country being subject to UK "adequacy" regulations, or
• Standard contractual clauses, including the ICO's International Data Transfer Agreement or the UK Addendum, or
• The receiving organisation being certified under the UK Extension to the EU-U.S. Data Privacy Framework.

9. Your rights

Under UK GDPR, you have the right to:

You can delete your Extreme Savers account yourself under Profile → Delete account. To exercise any other rights, contact our data protection team at dpo@maplexmoor.co.uk. We will respond within one month, as required by law.

10. Data retention

• Active accounts – we keep your data for as long as your account remains open.
• Closed or deleted accounts – we delete or anonymise personal data within a reasonable period after closure, except where we're required to keep certain records for longer.
• Financial records – ledger, redemption and payout records are kept for our statutory accounting and tax retention period (currently six years), as required by HMRC.
• Security & fraud records – login and abuse-related records may be retained for longer where needed to prevent repeat abuse of the Platform.
• Verification tokens – email verification and password reset tokens are short-lived and expire automatically.

11. Data security

We take a number of steps to keep your data secure, including:

• Passwords are stored as one-way cryptographic hashes, never in plain text
• Optional two-factor authentication (2FA) for your account
• All data is transmitted over encrypted HTTPS/TLS connections
• Automated login-attempt monitoring and rate limiting to slow down attackers
• IP and device-based fraud checks, with payouts held for manual review when something looks suspicious
• Restricted, need-to-know access to personal data for our team

No method of transmitting or storing data online is 100% secure, so we also encourage you to use a strong, unique password for your Extreme Savers account.

12. Age requirement

Extreme Savers is intended for use by people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that we've collected data from a minor, we will delete it promptly. If you believe a minor has provided us with personal data, please contact dpo@maplexmoor.co.uk.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. We'll update the "Last updated" date at the top of this page, and for significant changes we'll notify you by email or an in-app notification. Continuing to use Extreme Savers after a change takes effect means you accept the updated policy.

14. Contact us

If you have any questions about this policy or how we handle your data, please get in touch:

Thank you for trusting Extreme Savers with your data.