LAST UPDATE: May 24, 2018
Consent to Data Collection and Processing
You hereby agree with and consent to the collection and processing of your personal information as described in this Policy.
Consent to International Data Transfers
Your personal information may be collected, processed and stored by Company or its services providers in the United States and other countries where our servers reside. Please be aware that the privacy protections and legal requirements, including the rights of authorities to access your personal information, in some of these countries may not be equivalent to those in your country. You hereby agree with and consent to the transfer of your personal data to the United States and other countries where Company operates.
Withdrawal of Consent
You have the right, at any time, to withdraw your consent to Company’s collection and processing of your information, or to the transfer of your personal data to the United States and other countries where Company operates. You may withdraw your consent by emailing Company at email@example.com.
COLLECTION AND USE OF PERSONAL INFORMATION
As you interact with Company, there may be opportunities for you to provide us with your information. Additionally, we may collect certain information about you or your Company products as further described below.
The types of information that Company collects about you may include, but are not limited to:
- Contact information (such as name, address, city, state and ZIP code, age or date of birth, occupation, social security number, email address and telephone number);
- Information related to your creditworthiness, assets, income, or liabilities;
- Information about your Company product;
- Information about your connected Devices and how you interact with our Site (such as IP address, browser type, unique device identifier, cookie data, and associated identifying and usage information);
- Demographic information (such as gender, date of birth, marital status, and household composition);
- Marketing profile information (such as when you plan to purchase a Company product);
- Photographs and videos such as those that you may submit for contests, sweepstakes and social sharing;
- Relationships you have with Company in addition to the purchase and servicing of your Company product (such as through a rewards card, etc.);
- Incentive eligibility verification information (such as college name, branch of service, or credit union name for Company product purchase programs);
- Investor information (name, address, phone number, and email address);
- The kind of Company product you purchased; and
- The kind of service provided to you.
Communications with you in connection with these uses may be via mail, telephone, e-mail, text message, social medial, or other electronic messages, or via our websites and applications.
Personal Information You Provide
The privacy and security of the personal information that Company collects from you is a priority for Company.
- When you visit this Site you may choose to provide personal information that could reasonably be used to contact you or to identify you personally including, but not limited to: your name, address, telephone number, company, and email address.
- You may choose to receive certain communications from Company via your email address upon interaction with the Site. From time to time Company may include surveys, information requests, or other features on the Site which ask you to provide personal information such as your name, telephone number, email address or mailing address. Any information you may provide will be used by Company to allow you to participate in the particular feature being offered. Company may also retain any information you provide in order to send you information about Company’ products and services that may be of interest to you. Company will provide you with the opportunity to opt-out of receiving such communications. We may use one or more service providers to administer these messages, but we do not share your email address with spammers or any other third parties without your permission.
You will be informed what personal information is required and what information is optional when asked to submit personal information to us. By submitting personal information to Company at this Site, you hereby consent to Company’s collection, use and disclosure of such personal information.
We may combine the personal information you submit directly through this Site with other personal information we have collected from you, whether on- or offline. We may also combine it with information we receive about you from other sources, such as other companies, publicly available information sources (including information from your publicly available social media profiles), and other third parties.
Passive Information Collection and Use
As you navigate around this Site, certain information can be passively collected (that is, gathered without you actively providing the information), using various technologies. We passively collect and use information in a variety of ways, including:
- Through your browser: Certain information is collected by most browsers, such as your Media Access Control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system version, and Internet browser type and version. We may collect similar information, such as your device type and identifier, if you access this Site through a mobile Device.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. If you would prefer not to accept cookies, most browsers will allow you to: (i) change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; (ii) to disable existing cookies; or (iii) to set your browser to automatically reject any cookies. If you set your browser to reject cookies, part of the Site may not work for you.
- Pixel tags, web beacons, clear GIFs, or other similar technologies: These may be used in connection with some Site pages to, among other things, track the actions of Site users and compile statistics about Site usage and response rates.
- IP Address: Your IP Address is a number that is automatically assigned to the computer that you are using by your Internet Service Provider. An IP Address is identified and logged automatically in our server log files whenever a user visits this Site, along with the time of the visit and the page(s) that were visited. Collecting IP Addresses is standard practice on the Internet and is done automatically by many web sites. We use IP Addresses for purposes such as calculating Site usage levels, helping diagnose server problems, and administering this Site.
- Device Information: We may collect information about your Device, such as a unique device identifier.
- Do Not Track Requests: Your selection of the “Do Not Track” option provided by your browser may not have any effect on our collection of cookie information for analytic and internal purposes. The only way to completely opt out of the collection of any information through cookies or other tracking technology is to actively management the settings on your browser or Device to delete and disable cookies and other tracking/recording tools. Please note, depending on your type of Device or browser, it may not be possible to delete or disable all tracking mechanisms on your Device.
We, along with third-party vendors such as Google use first-party cookies (such as the Google Analytics cookies) and third-party cookies to compile data regarding user interactions with ad impressions and other ad service functions as they relate to our website. Users can set preferences for how Google advertises to you using the Google Ad Settings page. Alternatively, you can opt out by visiting the Network Advertising Initiative Opt Out page or by using the Google Analytics Opt Out Browser add on.
Integrated Accounts and Social Media Information
We may implement applications or “widgets” from third party providers (e.g., Facebook, Twitter, Instagram, LinkedIn, etc.) that allow interaction, integration or content sharing with third party services. These widgets or applications may be visible on a page you visit on our Site or may require log-in through the third party provider’s service. The third party providing the widget or integration may offer controls for you to manage your interactions. Any interaction with a third party widget or application typically allows the third party to collect some information about you (whether through cookies, registration information or otherwise). These third parties may even track you when you do not interact with the widget. If you have engaged any of these third party service providers, their respective privacy policies will govern their tracking and collection of information. You should review these third party policies to understand these practices.
How We Use and Disclose Information
We use and disclose personal information you provide to us as described to you at the point of collection, such as when you (1) submit payment or credit card information, and (2) submit your name and e-mail address to receive product updates and marketing information. We also use and transfer personal information from or about you:
- to respond to your inquiries and fulfill your requests, such as to send you documents you request or e-mail;
- to send you important information regarding our relationship with you or regarding this Site, changes to our terms, conditions, and policies and/or other administrative information;
- for our business purposes, such as marketing new products and services, data analysis, audits, developing new products or services, operating or enhancing our Site, improving our products and services, identifying Site usage trends, providing products and services, maintaining customer relationships, improving the quality, safety, and security of our products and services, administering your account(s), troubleshooting, supporting electronic signature, customizing and improving communication content, evaluating product performance, providing customer support and product support, warranty administration, and determining the effectiveness of our Site;
- to our third party service providers who provide services such as website hosting and moderating, mobile application hosting, data analysis, infrastructure provision, credit card processing, IT services, e-mail services, marketing services, auditing services, and other services, in order to enable them to provide services;
- to verify your information and authenticate payments and process orders, such as disclosing certain financial and other information you provide to Company to third parties that provide credit reporting, payment or order fulfillment services;
- to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings); and
- when we otherwise have your consent.
We also use and disclose information that is not in personally identifiable form (such as anonymized, masked or de-identified information) for any purpose. If we combine information that is not in personally identifiable form with information that is (such as combining your name with your geographical location), we will treat the combined information as personal information as long as it is combined.
Use of Information for Marketing Purposes
Company and our affiliates may send you regular promotional communications about our products, services, events and promotions. Such promotional materials may use the “Company” brand and may be sent to you via different channels, such as: email, phone, SMS text messages, postal mailings, and third party social networks.
In order to provide you with the best personalized experience, sometimes these communications may be tailored to your preferences (for example, as you indicate these to us, as we may have inferred from your Site visits, or based on the links you click in our emails). When required by applicable law, we will obtain your consent before starting these activities. In addition, you may withdraw your consent (opt-out) at any time.
In particular, you can opt-out from receiving marketing-related emails by following the unsubscribe instructions provided in each email. You can also contact us using the contact details provided below to opt-out from receiving marketing-related communications.
Please note that even if you opt-out from receiving marketing communications, you might still receive administrative communications from us, such as technical updates of our products, order confirmations, notifications about your account activities, and other important notices.
THIRD PARTY SITES AND SERVICES
This Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any site or web property (including, without limitation, any application) that is available through this Site or to which this Site contains a link. The availability of, or inclusion of a link to, any such site or property on this Site does not imply endorsement of it by us or by our affiliates.
CHOICES AND ACCESS
We give you choices regarding our use and disclosure of your personal information. Company provides you with the opportunity to receive information by email, regular mail or telephone calls from Company, or third parties which may be of interest to you, including information relating to new products and services offered on the Site by Company, or other third parties. If you do not want to receive any information by email, regular mail or telephone calls, you may opt-out of further communications provided by Company at any time by: (i) sending Company an email at firstname.lastname@example.org; or (ii) writing to Company at 1000 Arlington Circle, Akron, OH 44306-3973 USA, Attention: Webmaster. Please note that Company can only comply with requests relating to email, regular mail or telephone communications provided by Company. If you no longer wish to receive further information by email, regular mail or telephone from any third party, you will need to contact such third party directly to opt-out of further communications being provided to you. We will seek to comply with your request(s) as soon as reasonably practicable.
If applicable, and you would like to review, correct, update, or delete the personal information that you have provided via this Site, please contact us. We will try to comply with your request as soon as reasonably practicable.
It is your responsibility to provide Company with accurate personal information. Except as otherwise set forth in this Policy, Company shall only use personal information in ways that are compatible with the purposes for which it was collected or subsequently authorized by you. To the extent necessary for these purposes, Company shall take reasonable steps to ensure that personal information is accurate, complete, current and relevant to its intended use.
YOUR CALIFORNIA PRIVACY RIGHTS
Under California’s “Shine the Light Law”, California residents who provide personal information in obtaining products or services for personal, family, or household use are entitled to request and obtain from us once a calendar year information about the customer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information and the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year.
To obtain this information on behalf of Company, please send an email message to email@example.com with “Request for California Privacy Information” on the subject line and in the body of your message. We will provide the requested information to you at your email address in the response. Please be aware that not all information is covered by the “Shine the Light “requirements and only information on covered sharing will be included in our response.
We retain your personal information for the period necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or allowed by law or to otherwise fulfill a legal obligation.
Company has implemented security measures designed to protect personal information provided by you against unauthorized access and use. Company also uses commercially reasonable efforts to establish secure connections with your web browser for any transactions conducted online using a credit card or other financial information you may provide to Company. Please be aware, however, that no data transmission over the Internet is 100% secure and any information disclosed online can potentially be collected and used by parties other than the intended recipient. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us of the problem by contacting us in accordance with the CONTACTING US section below.
We do not intentionally collect information from individuals under the age of 13. The Site is not directed to individuals under the age of 13 and we request that these individuals not provide personal information through this Site.
This Policy is meant to guide Company with respect to personal information collected from or about you at this Site. While this Policy applies to personal information generally, the local laws, rules and regulations of jurisdictions that are applicable to Company (“Local Laws”) may require standards which are stricter than this Policy and, in such event, Company will comply with applicable Local Laws. Specific privacy policies may be adopted to address the specific privacy requirements of particular jurisdictions. All the information you provide may be transferred or accessed by entities around the world as described in this Policy. Your personal information may be stored and processed in any country where we have facilities or service providers, and by using our Site or by providing consent to us (where required by law), you specifically acknowledge and agree to the transfer of information to countries outside of your country of residence, including to the United States, which may provide for different data protection rules, and a lower standard of required protection, than in your country. Irrespective of which country your personal data is transferred, we would only share your personal data under a ‘need to know’ basis. In these circumstances we will, as required by applicable law, ensure that your privacy rights are adequately protected by organizational, technical, contractual and/or other lawful means.
EU Data Subjects
In the European Economic Area and Switzerland (“EU”), “Personal Data” is defined very broadly and includes any information about a natural person, who can be identified, directly or indirectly, from data that we hold about them or from data that is combined with other information. EU data protection law requires us to have a legal basis before processing any Personal Data about you. The legal basis’ for us processing your Personal Data for the above purposes may be because: (i) you have provided your consent; (ii) it is necessary to for the performance of a contract with you; (iii) the processing is necessary for our compliance with a legal obligation; or (iv) the processing is in our legitimate interests. Personal Data regarding individuals who reside in a member state of the EU is controlled by a wholly owned subsidiary of Company and processed on its behalf by Company. To the extent provided by applicable law, you may withdraw any consent you previously provided to us, or object at any time on legitimate grounds, to the processing of your Personal Data. In some circumstances, withdrawing your consent to Company’s use or disclosure of your Personal Data will mean that you cannot take advantage of certain Company products or services.
We may transfer your personal information outside the EU to the United States or any country that we or our service providers may have operations. Such countries do not have the same data protection laws as the EU. While the European Commission has not given a formal decision that such countries provide an adequate level of data protection similar to those which apply in the EU, any transfer of your personal information will be subject to a European Commission approved contract (as permitted under the General Data Protection Regulation) that are designed to help safeguard your privacy rights and give you remedies in the unlikely event of a misuse of your personal information. To obtain a copy of such safeguards please contact us.
Under the General Data Protection Regulation you have a number of important rights free of charge. In summary, those include rights to:
- Fair processing of information and transparency over how we use your use personal information
- Access to your personal information and to certain other supplementary information that this Policy is already designed to address
- Require us to correct any mistakes in your information which we hold
- Require the erasure of personal information concerning you in certain situations
- Receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
- Object at any time to processing of personal information concerning you for direct marketing
- Object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
- Object in certain other situations to our continued processing of your personal information
- Otherwise restrict our processing of your personal information in certain circumstances
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the General Data Protection Regulation.
If you would like to exercise any of those rights, please:
- Email, call, or write to us
- Let us have enough information to identify you
- Let us have proof of your identity and address
- Let us know the information to which your request relates
If you would like to unsubscribe from any email newsletter you can also click on the unsubscribe button at the bottom of the email newsletter. It may take a few days for this to take place.
How to Complain
We hope that we can resolve any query or concern you raise about our use of your information. However, the General Data Protection Regulation also gives you right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live, or where any alleged infringement of data protection laws occurred.
We may change this Policy. Please review the LAST UPDATE legend at the top of this page to see when this Policy was last revised. Any changes to this Policy will become effective when we post the revised Policy on this Site. Your use of this Site following these changes means that you accept the revised Policy.
Company will use a self-assessment approach to verify compliance with this Policy and periodically verify that the Policy is accurate, comprehensive for the information intended to be covered, prominently displayed, implemented and accessible.
If you believe that your personal information has been processed or disclosed in violation of this Policy, Company encourages you to raise any concerns using the contact information provided in this Policy. Company will investigate and attempt to resolve any complaints and disputes regarding use and disclosure of personal information.
If you have any questions about this Policy, please contact Company directly at:
- In writing by sending an email to firstname.lastname@example.org;
- In writing by sending a letter to 1000 Arlington Circle, Akron, OH 44306-3973; or
- Orally by directly contacting (330) 786-3000.