By accessing and using one of our websites that we own and operate which offer surveys and/or other content (collectively, “Surveys”) to users (collectively, the “Websites” and individually, a “Website”), you understand and agree to our collection, use, disclosure and sale of your Information. If you do not understand and agree to how we collect and handle Information, please do not use or visit the Websites or participate in the Surveys. Please note if you are not a U.S. resident, you are not permitted to use the Websites, participate in the Surveys and/or otherwise access the other RewardZone offerings.
NOTICE OF COLLECTION OF PERSONAL INFORMATION
This Policy provides notice to users, including those who are California residents and fall within the definition of “consumers” as provided for in the California Consumer Privacy Act of 2018 (“CCPA”), that we collect Information. As required by the CCPA, the following sections of the Policy also details the categories and sources of Information collected and the business and commercial purposes for the collected Information. We also include a description of rights afforded to California consumers at “RIGHTS OF CALIFORNIA USERS WITH REGARD TO THEIR INFORMATION” including rights to know the Information we have collected and sold and the right to opt-out from the sale of Information and the right to deletion.
TYPES/CATEGORIES OF INFORMATION WE MAY COLLECT REGARDING USERS
Here are the types and categories of Information that we may collect regarding users (see below for additional descriptions of the categories of Information collected that are provided to California residents):
- Information that could reasonably identify a user, such as name, postal address, email address(es), mobile/landline phone number(s), date of birth and gender;
- Information collected from a user’s responses to survey questions, including preferences, products and services of interest, personal attributes such as marital status, home or auto ownership, political affiliation, views on various issues and responses to wellness questions, as further described below;
- Information collected from our web server log files, including device type(s), user agent data, referring URL(s), and IP address(es);
- Information collected from third parties or parties under common control (which includes our parent, subsidiaries and other entities under common control with us – collectively “Related Parties”) to validate and augment a user’s profile including a user’s email address, postal address, telephone number, device ID or other user Information;
- Information collected from our customer support department and fulfillment vendors, including customer support inquiries;
- Information relating to a user’s interaction with telemarketing calls, SMS messaging, push notifications, commercial email and other forms of communication; and
- Information collected from Cookies (as defined below), including whether a user has previously visited one of our Websites or has opened an email sent by one of our marketing partners.
HOW WE COLLECT INFORMATION – SOURCES
Here are ways we collect Information from and about users (see below for additional descriptions of the methods of Information collection that are provided to California residents):
- Registration forms and surveys;
- Emails, telephone calls, USPS mail and other contacts received from users as part of customer service;
- From publicly availably sources, such as Internet search engines; and
- From the use of “cookies” (small text files placed on a user’s browser by a website such as the Website that track online behavior), single-pixel GIF image files (also called “web beacons”) and other technological means (collectively, “Cookies”).
We also collect Information from our servers that host the Websites and combine that Information with Information on users that we have already collected via other means. Here are some sources of Information and the methods we use:
- Our hosting servers collect Information from users through various technological means when users access and interact with our Websites;
- Our systems access Information held by Related Parties and third parties and match it with user Information which enables us to augment and verify the Information we collect from users;
- From third parties including service providers who assist us in hosting the Websites;
- From third parties who drive users to our Websites and whose goods and services are advertised on our Websites; and
- From Related Parties and third parties who send emails, push notifications, SMS messages and make telemarketing calls to users.
HOW WE MAY USE INFORMATION
We may use Information in many ways and for many purposes including the following (see below for additional descriptions of Information uses that are provided to California residents):
- For Website operations, content improvements, testing, research, analysis and product development;
- To verify whether users are entitled to participate in Surveys;
- To provide users with customer service and to respond to inquiries from you;
- To provide users with e-mail, direct mail and telemarketing messages concerning certain of our products and/or services, as well as third-party products and/or services, that we believe may be of interest to you;
- To provide users with email alerts, text/SMS message alerts and other communications that users have requested or consented to receive or that we are required to send concerning users’ registrations, Surveys, our products or services or other information;
- To carry out our obligations and enforce our rights arising from any contracts entered into between users and us, including for purposes of our Arbitration Agreement and any inquiry specific to express written consent under the Telephone Consumer Protection Act (“TCPA”);
- To detect, investigate and respond to any fraudulent or malicious activity or any other activity we determine is or may be a violation of our Terms, Policy, existing laws, rules and regulations;
- As necessary or appropriate to protect our rights, property or safety and that of Related Parties, our clients, advertisers, service providers and others;
- As described to you when collecting Information or as otherwise set forth in any applicable consumer protection, state or federal privacy, or data security laws;
- To maintain suppression or opt-out lists so that we won’t contact who have asked not to be contacted;
- To augment Information by enhancing it with other data sources provided by third parties and Related Parties to enable us, for example, to gain deeper insights into our users;
- If we are sold, merge with a third party, are acquired or are the subject of bankruptcy proceedings, your Information may be shared with the applicable third party(ies); if we are involved in one of these transactions, users will be notified via email or a Policy update on our Website of any change in ownership or uses of your Information, as well as any choices that you may have regarding your Information; and
- To respond to subpoenas, court orders or legal process, or to establish or exercise our legal rights or defend against legal claims or when we determine it is necessary to comply with applicable laws or regulations.
HOW WE MAY DISCLOSE AND/OR SELL INFORMATION
We may share and/or sell Information that we have about users in many ways and for many purposes, for which we may be compensated, including the following (see below for a description of the augmented rights that California residents have with respect to opting-out of the sale of their Information):
- With our advertisers, marketing partners and service providers for marketing purposes;
- With our telemarketing partners where we have obtained your “prior express consent” (as defined by the TCPA) to be contacted by one or more of our advertisers;
- With our vendors and marketing partners that assist us with delivery of email messaging, telemarketing calls, text/SMS messaging and push notifications, both commercial and transactional in nature;
- With our interest-based advertising partners, as described further below, including to create anonymized sets of Information which are made available for use by third-party advertisers for programmatic advertising purposes;
- With our Related Entities to augment and verify the Information we collect and to develop and enhance their products and services;
- With one or more vendors who provide independent verification of consent, including verification of consent under the TCPA;
- To enable third parties, including our data and list management partners, to market products and services to you;
- To enable customer service vendors to perform their respective tasks;
- To enable our Information verification and fraud detection vendors to perform contracted for services; and
- To submit users’ contact information to comment and petition campaigns run by governmental agencies, elected officials or other parties where users have provided their express consent to endorse and be a part of the campaign including, in some instances, appending the user contact information with specific comment language.
When we share and/or sell Information, we enter into agreements that describe the purpose for which the Information is shared/sold, restrict its use to the agreement’s specified purpose and require that all Information remain confidential, and be protected from unauthorized disclosure.
MINORS AND NON-US RESIDENTS
The Websites are designed to comply with the Children’s Online Privacy Protection Act (“COPPA”). COPPA requires that website operators not knowingly collect PII from anyone under the age of 13 without prior verifiable parental consent. In compliance with COPPA, we do not knowingly collect or retain information from the Websites from children under the age of 13 and may only collect a limited amount of Information from users who are between the ages of 13 and 18.
The Websites are intended for use only by residents of the contiguous United States, Alaska and Hawaii.
COOKIES, INTEREST-BASED ADVERTISING AND THIRD-PARTY ANALYTICS
We may use Google Analytics and similar tools provided by our third-party partners to help analyze how users interact with the Website and to display customized ads and other content to our users during a current browsing session or in the future when the user is online. These analytics are performed by using the technological means described above to monitor a user’s interactions with the Website and do not involve the collection of any additional PII.
Most browsers are initially set up to accept Cookies, but users can reset their Internet browsers to refuse all Cookies or to indicate when a Cookie is being sent or to refuse online tracking. To disable and reject certain Cookies, follow the instructions associated with your Internet browser. In general, when a “do-not-track” setting is active, the user’s browser notifies other websites that the user does not want their personal information and online behavior to be tracked and used, for example, for interest-based advertising. As required under some State laws, we are required to inform users that, as is the case with most websites, we do not honor or alter our behavior when a user to one of the Website has activated the “do-not-track” setting on her/his browser.
Even where you reject a Cookie, you may still use the Website but your ability to use certain features or offerings may be impaired. For example, if you return to our Website, you may have to re-enter Information you previously supplied to us. We may retain Cookie data indefinitely.
Please note that opting out of interest-based advertising does not mean you will no longer see advertising online. Rather, it does mean that the company or companies from which you opt-out will no longer show ads that have been tailored to your interests.
OPTING-OUT FROM MARKETING
Users may opt-out from receiving future contact from us using the following methods:
- To opt-out from email marketing and to remove your anonymized data from programmatic advertising enabled by contacting customer service, click the “Unsubscribe” link on the bottom of every page or click here;
- To opt-out from telemarketing calls, please follow the prompts on the call or contact customer service;
- To opt-out from SMS/text messaging, reply STOP to the text/SMS message received;
- To opt-out of browser-based push notifications, please disable the notifications at the time you receive the notification or disable notifications through your browser’s settings; and
- To-opt out of cookies, interest-based advertising and/or third-party analytics, please see the section above.
In addition and as described below, residents of California (and, in certain circumstances, residents of Nevada) have the right to opt-out of the sale of their Information.
ACCESSING, CORRECTING AND DELETING YOUR INFORMATION
We ask individual users to identify themselves and the Information requested to be accessed, corrected or deleted (suppressed) before processing such requests and, to the extent permitted by applicable law, we may decline to process requests that we are unable to verify, are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others or would be extremely impractical (for instance, requests concerning Information residing on archive servers).
Our surveys may ask health-related questions which we may share with our third-party marketing partners who advertise health-related products and services on our Websites, or who otherwise promote health-related products or services. We will use this health information – with your consent – to display offers for health-related products and services or to provide Information to these providers so they can contact you.
MEDICARE SUPPLEMENT PLANS DISCLOSURE
Some of our third-party advertisers offer Medicare Supplement plans. Medicare Supplement plans are not connected with or endorsed by the U.S. Government or the Federal Medicare program and all related offers on our Websites comply with applicable Federal civil rights laws and do not discriminate on the basis of race, color, national origin, age, disability, or sex.
SECURITY OF YOUR INFORMATION
We use commercially reasonable efforts to prevent unauthorized access or disclosure, or accidental loss or destruction of your Information. Access to your Information is strictly limited and we take reasonable measures to ensure that your Information is not accessible to the public. We restrict access to our users’ Information to only those persons who need access to perform or provide their job or service, both internally and with our third-party service providers.
We don’t generally collect sensitive Information such as medical information, driver’s license/ID card number, health insurance information, data collected from an automated license plate recognition system, Social Security Number and credit card information. If and when we do collect, store and transmit sensitive information, that Information will be encrypted with advanced TLS (Transport Layer Security).
Given the nature of the Internet, your Information passes through entities that we are unable to control. Therefore, we cannot guarantee that our security measures or those of third parties who access or transmit your Information will prevent your Information from being improperly accessed, stolen or altered. In compliance with applicable federal and state laws, we shall notify you and any applicable regulatory agencies if we learn of an information security breach of your Information. You will be notified via e-mail in the event of such a breach. Please be advised that notice may be delayed in order to address the needs of law enforcement, determine the scope of network damage, and to engage in remedial measures.
CALIFORNIA NOTICE REGARDING CATEGORIES, SOURCES AND BUSINESS AND COMMERCIAL USES OF INFORMATION
The following chart contains the categories of information, as enumerated in CCPA Sec. 1798.140(o), of Information we collect, use, disclose and sell, the sources of the Information and our business and commercial uses of such Information:
|Category||Category Name/Description||1. Sources||2. Business Use||3. Commercial Use|
|A||Identifiers – name, postal, email and IP address, telephone number||User provided on registration, customer service inquiries and claim forms; related and 3rd party sources to verify and/or augment user supplied information||Operational purposes including determining survey questions, optional offers and deals to be displayed; customer service; fraud & security incidence detection; pre-population of user forms; website improvement||Sold to third parties for marketing purposes; shared with third parties to determine deals to be offered and pre-populate order forms|
|B||Personal information categories listed in the California Customer Records statute – Identifiers and education, employment medical and health information||As above, plus user responses to survey questions||Same as 2. A||Same as 3. A and to target sales of information to third parties|
|C||Protected classification characteristics under California or federal law – Age, marital status, medical condition, physical or mental disability, sex and related medical conditions||Same as 1. B||Same as 2. A||Same as 3. B|
|D||Commercial information – products or services purchased, obtained, or considered, or other purchasing data||User provided customer service inquiries and claim forms, from 3rd party advertisers and system collected website activity logs||Same as 2. A and to determine amounts owed by advertisers and data purchasers||Determine amounts owed by advertisers and data buyers and performance of data campaigns|
|E||Internet or similar network activity – browsing and search history, information on a consumer’s interaction with a website, application, or advertisement||System collected activity logs and cookies||Same as 2. A and to determine (i) whether user is a repeat visitor; (ii) performance of and amounts owed to paid media suppliers; and (iii) support proof of user consent for email marketing and TCPA purposes||Same as 3. D|
|F||Inferences drawn from other personal information – profile reflecting a person’s preferences, characteristics, psychological trends and attitudes||Same as 1. B and system algorithms||Same as 2. A||None|
RIGHTS OF CALIFORNIA USERS WITH REGARD TO THEIR INFORMATION
California users have several rights regarding the collection, use, disclosure and sale of their information under the CCPA. One of these rights, notice of collection of Information, is described above; the balance of these rights are described below and include the following rights:
- Disclosure of information collected and sold
- Opt-out from the sale of Information
- Deletion of Information
- Access and portability of Information collected
Exercising Your Rights, Verification and Timing. To prevent an unauthorized third party from accessing or making decisions regarding a user’s Information, we verify all requests to exercise these rights (a verifiable consumer request). We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, unfounded or abusive.
In general, we will verify a request by matching the identifying information supplied by the user with the Information we already have for the user. If we cannot verify the user using the foregoing method, we may request additional information which we will not retain or use for any other purpose.
For all verifiable consumer requests, we strive to respond within forty-five (45) days of receipt. If we require additional time, which can be up to ninety (90) days in the aggregate, we will provide written notice. Any disclosures we provide will cover only the 12-month period preceding the verifiable consumer request’s receipt and will be delivered electronically in a secure fashion. If, for some reason, we cannot fulfill or comply with your request, our response will explain that decision.
Disclosure of Information Collected and Sold. While users have the right to request different levels of disclosure regarding the collection, use, disclosure and sale of Information, we have elected to treat all requests from California residents as an exercise of expanded disclosure requests by businesses that sell Information. Once we receive and confirm your verifiable consumer request, we will disclose to you for the 12 months prior to your request:
- The categories and sources of Information collected;
- Our business and commercial purposes for collecting and selling that Information;
- The categories of third parties with whom we shared that Information;
- The specific pieces of Information collected;
- If we sold or disclosed your personal information for a business purpose, we will disclose:
- For sales – the Information categories for each category sold and the categories of third parties to whom the Information was sold; and
- For disclosures – the Information categories for each category disclosed and the categories of third parties to whom the Information was disclosed
Right to Opt-Out. Users have the right to opt-out from the sale of their Information. We provide a “Do Not Sell My Personal Info” link on each Website page where we collect Information that links to an online request form. We reserve the right to verify all opt-out requests using the methods described above.
While our agreements with third parties to whom we sell or disclose Information prohibit the further sale or use beyond the scope of our agreement with them, if a California user opts-out, we will notify all third parties to whom we have sold or disclosed the California user’s Information within the previous 90 days and remind them not to further sell the Information. We will not ask a California user who has opted out to re-opt-in for one year after the California user opts-out. If the user requests a transaction with us that requires the sale of their Information, we will inform them that they have opted out and if they want to proceed with the transaction, we will offer the opportunity to opt-in by completing a two-step process.
Deletion of Information. You have the right to request that we delete any of your Information that we collected from you, subject to certain exceptions. Once we receive and confirm your verifiable consumer request using the process set forth above, we will delete or deidentify (and direct our service providers, vendors and other applicable third parties to delete) your Information from our system other than from our archive servers (which we maintain for compliance purposes), unless there is an applicable exception.
We may decline to process your deletion request if the Information is necessary for us or our service providers, vendors or other applicable third parties for a number of reasons. The following are some of the reasons we may decline your deletion request:
- Complete the transaction for which we collected the Information or provide the goods or services you requested;
- Detect security incidents, protect, investigate and respond to malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
- Identify and correct errors that negatively impact intended functionality; and
- Comply with a legal obligation, including Federal and/or State tax liability and reporting.
If we do not comply with a deletion request, we will provide the grounds for our denial.
Access and Portability. California users have the right to access the Information we have collected about them in the previous twelve (12) months. Upon receipt of verified consumer request, we will provide the information in a readily usable format. You cannot request access more than twice in any 12-month period.
Nondiscrimination. We are committed not to discriminate against California users who exercise their CCPA rights. As such, unless otherwise permitted by the CCPA, we will not deny, charge you different prices or rates, or provide a different quality level of goods or services, including through granting discounts or other benefits, or imposing penalties, and/or suggest that you may receive a different price, rate, or quality level of goods or services. While we do not provide financial incentives for users who do not exercise their CCPA rights, please note that some of the functionality of our Website may be unavailable if consumers exercise their rights to have their personal information deleted.
Authorized Agent. The CCPA enables California users to appoint an authorized agent to act on their behalf to submit disclosure requests and or deletion requests under the CCPA. The authorized agent must register with the California Secretary of State. We will honor a request from an authorized agent provided you provide written authorization to the authorized agent to act on your behalf and we can verify your identity and the agent submits proof of authorization.
CCPA Metrics. We are required to compile certain annual metrics regarding the CPPA including the number of disclosure, deletion and opt-out requests we receive, the median number of days it takes us to respond and how many of each were denied. The metrics for the period of 1/1/2021 from 12/31/2021 are displayed here. Please note that the information outlined is compiled from various entities, which include our parent, subsidiaries, and other entities under common control with us.
CALIFORNIA ONLINE PRIVACY PROTECTION ACT
Shine the Light Rights. In addition to the CCPA-mandated disclosures described above, the California Online Privacy Protect Act (“CalOPPA”) contains a Shine the Light section that permits users who are California residents to request information regarding our disclosure of their Information to third parties, including the categories of Information shared and a list of the names and addresses of third parties with whom the Information was shared. If you are a California resident and would like to exercise your rights under the Shine the Light provision, please submit a request by emailing us at firstname.lastname@example.org. In your request, please specify that you want to exercise your rights to disclosure under the Shine the Light provision please specify the Website that you visited and the email address you registered with. Please allow thirty (30) days for a response.
Browser “Do Not Track” Signals. Most browsers contain a “do-not-track” setting. In general, when a “do-not-track” setting is active, the user’s browser notifies other websites that the user does not want their personal information and online behavior to be tracked and used, for example, for interest-based advertising. As required by CalOPPA, we are required to inform you that, as is the case with most websites, we do not honor or alter our behavior when a user to one of our Websites has activated the “do-not-track” setting on her/his browser.
NEVADA PRIVACY RIGHTS
Nevada State residents have the right to submit opt-out requests to website operators instructing those website operators not to sell any “covered information” that the website operators have collected about the Nevada State residents to any third party data broker(s). Covered information includes a consumer’s name, postal and email addresses, telephone number and Social Security Number, and includes the Information described above in the “TYPES/CATEGORIES OF INFORMATION WE MAY COLLECT REGARDING USERS” section. In your request, please specify that you want to exercise your rights to opt-out from the sale of covered information under the Nevada Privacy Law and specify the Website that you visited and the email address you registered with. Please allow thirty (30) days for a response.
CHANGES TO THIS POLICY
We reserve the right to revise and update this Policy at any time. If we make material changes to this Policy, we will post the updated Policy on our Website. Any such revisions will be effective thirty (30) days after posting to the Website and will apply to all Information collected by us both before and following the effective date. If we expand the way we use Information, we will notify users by: (a) sending the modified Policy to our users via email or (b) by any other reasonable means acceptable under applicable state and federal law. You will have a choice as to whether we use your Information in this different manner and we will only use your Information in this way where you opt-in to such use. Users should periodically access this Policy to review our current policies regarding the collection and use of Information.