MineralTree Privacy Notice
MineralTree, Inc., a Global Payments company (“MineralTree,” “we,” “us”), respects your concerns about privacy. In this Privacy Notice, we describe how we collect and process personal information about users of our websites, blogs, social media pages, and other online media. We also describe how we collect and process personal information about our prospects and customers, about the end users of our solutions, and about internet users and other individuals for cybersecurity and threat assessment purposes.
Please note that if you do not fall within any of those categories, this Notice does not apply to you. For example, MineralTree provides solutions that improve and automate key financial processes for businesses, and our business customers use those solutions to collect and process personal information about their own contacts, such as the individuals to whom they owe payments for services. If you are an individual whose personal information was collected and processed by one of our business customers using one of our solutions, and you have questions about that business’s privacy practices, you should refer to that business’s privacy notice or contact that business directly.
This Notice covers the following topics:
- Personal Information We Collect
- Data Anonymization and Aggregation
- Sources of Personal Information
- How We Use the Personal Information We Obtain
- Our Processing of Sensitive Personal Information
- How We Share the Personal Information We Collect
- Cookies and Other Tracking Technologies
- External Links
- Our Relationship with Affiliate Companies (Including Sharing and Cross-Border Transfers)
- Our Commitment to Data Security
- Login Details and Your Responsibility
- Managing Your Preferences
- Your Legal Rights
- UK & EU Resident Rights
- Information for California Residents
- Changes & Updates
- Choice of Law
- Contact Us
Personal Information We Collect
We will only collect, use, and share your personal information where we are satisfied that we have an appropriate legal basis to do so. Subject to your consent if required by law, we may collect the following categories of personal information:
- Identifiers, including your name and contact details such as telephone number, employment information, and email address;
- Sensitive Personal Information, limited to any username and password you may use to log in to our website or our solutions (see “Login Details and Your Responsibility” below) and any payment information you may provide to us in connection with your use of our solutions;
- Commercial Information, including information about your business and about your preferences regarding our solutions and related services, or our partners’ and affiliates’ solutions and related services, which may be of interest to you (see “Managing Your Preferences” below);
- Geolocation Information, including your physical address (if you provide it to us), as well as location information derived from other data, such as IP address; and
- Records of Communications we have with you, including any information that you provide to us through web forms, through our solutions, through email, or otherwise, as well as recorded calls, subject to your consent if required by law.
Data Anonymization and Aggregation
Subject to your consent if required by law, we may anonymize or aggregate your personal information in such a way as to ensure that you are not identified or identifiable from it, in order to use the anonymized or aggregated data, for example, for statistical analysis (including analysis of trends), to carry out actuarial work, to tailor products and services, and to conduct risk assessments and analyses of costs and charges in relation to our products and services. We may share anonymized or aggregated data with our global affiliates and with other third parties., and this Notice does not restrict our use or sharing of any non-personal, summarized, derived, anonymized or aggregated information.
Sources of Personal Information
Information that you provide to us: We collect personal information that you provide to us when you contact us, set up an account with us, use our solutions, or otherwise interact with us. For example, if you use a web form to request information from us, we may ask for your name, contact information, and information about your business. Providing us with personal information about yourself is voluntary, and you can always choose not to provide certain information, but then you may not be able to take advantage of or participate in some of our solutions and services.
Information collected from third parties: We collect personal information about you from third parties in the course of providing our services to you. For example, we may collect Identifiers and Commercial Information from a referral partner or other third-party in order to contact you about the services we provide. We may also receive business-related information about you from third-party companies that supplement our business customer records with firmographic and professional information.
Information collected through technology: When you visit our websites, use our solutions, or interact with an email we send to you, we may collect certain information automatically, including your account or device identifier and usage information such as the pages that you visit, the links you click, the types of content you interact with, the frequency and duration of your activities, and other information about how you use our services. You have the ability to express your preference regarding some of the ways we collect information through technology in some of our services (see “Cookies and Other Tracking Technologies” for more information).
How We Use the Personal Information We Obtain
Subject to your consent if required by law, we may use your personal information for the following business and commercial purposes:
- To provide services to you;
- To contact you regarding any inquiry you make or to fulfill a request, such as, for example, a request for information about our solutions and services;
- To contact you if you have signed up for e-newsletters or any other updates, communications or publications;
- To verify or maintain the quality and safety of our solutions and services and to improve, upgrade, or enhance our services;
- To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute individuals responsible for that activity;
- To enable internal record keeping and administration of records;
- To personalize your experience when you use our website, solutions or services;
- To track information about our interactions with you, including, but not limited to, counting advertising impressions to unique visitors and verifying positioning and quality of advertising impressions;
- To send you direct marketing material, subject to your consent if required by applicable law (see “Managing Your Preferences” below); and
- To comply with applicable laws and regulations.
We retain personal information in an identifiable format only for as long as is necessary to complete the legitimate business or legal purposes for which we collected it. The specific retention period can therefore vary depending on the nature of your relationship with us. In many cases, the retention period will correspond to the period for which you have an account or other type of business relationship with us, plus a defined period after that relationship ends, determined by our regulatory requirements.
Our Processing of Sensitive Personal Information
“Sensitive Personal Information” includes personal information defined as sensitive under any applicable privacy and data protection laws. It can include account log-in information, as well as payment account information. When we collect Sensitive Personal Information about you, we will limit our use and disclosure of that information to what is necessary to provide the information, offer the solution, or perform the service requested by you, unless we are required to do otherwise under applicable laws. In addition, we may process Sensitive Personal Information to detect and prevent security incidents or fraud, to ensure the physical safety of natural persons, for short-term transient uses (when consistent with the purpose for which the information was collected), and to verify or maintain the quality or safety of any solutions that we offer or services that we perform.
Under some privacy and data protection laws, you may have the right to limit the processing of your sensitive personal information. You can find more information about your rights in other sections of this Notice including any applicable section directed at residents of the state or country in which you reside.
How We Share the Personal Information We Collect
We are a Global Payments company, meaning we are a part of a multinational family of businesses headquartered in the United States, with affiliates in countries around the world. Your personal information may therefore be disclosed to recipients within our organization who are located outside of your country, including to our affiliates (see “Our Relationship with Affiliate Companies” below).
For each category of personal information we collect, we may share such information in the manner and for the purposes described below:
- With companies engaged to help us run our business, subject to your consent if required by law. These types of companies may include resellers and distributors of our solutions; service providers retained to perform functions on our behalf or to provide services to us, including (without limitation) legal, accounting, audit, consulting and other professional service providers; and providers of other services related to our business. Portions of our services may be provided by organizations with which MineralTree has a contractual relationship, including subcontractors, and, accordingly, your personal information may be disclosed to them. We take steps aimed at ensuring that all such persons process your personal information as disclosed by us only as necessary for their service delivery and for no other purpose;
- With third parties with whom you have a relationship, such as a financial institution or independent sales organization who referred you to MineralTree for services;
- With logistics service providers to enable the delivery of packages to individuals;
- With other third parties with whom you direct us to your personal information, subject to your specific consent for such data sharing;
- With regulators including state and federal agencies, card payment networks, issuing banks and other parties required to enable compliance with laws, regulations and industry standards related to transaction processing and in order to obtain commercial and credit information to establish, maintain or renew a customer’s contract(s), as may be required to provide any of the services for which a customer has subscribed, or to comply with the rules and regulations of any credit or debit card payment network or otherwise in accordance with this Notice;
- In response to a court order or a request for cooperation from a regulatory, law enforcement or other government agency; to establish or exercise our legal rights; to defend legal claims; or as otherwise required or permitted by applicable laws and/or regulations;
- When we believe that disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing; to protect and defend the rights, property or safety of MineralTree, its customers, staff, suppliers or others; and
- To purchasers and, subject to local legal requirements, prospective purchasers in the event that MineralTree and/or its global affiliate companies (as applicable) disposes of, or considers the disposition of, any of its/their business or assets.
We do not sell your personal information to third parties for monetary compensation, and we do not share your personal information with third parties for cross-context behavioral advertising.
Cookies and Other Tracking Technologies
The cookies and tracking technologies that we may use within our websites fall into the following categories:
Strictly Necessary. These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions taken by you, such as logging in or filling in forms. You can set your browser to block or alert you about these cookies, but blocking them may impede the functionality of the websites.
Performance. These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our websites. They help us to know which pages are the most and least popular and to see how visitors move around the websites. All information these cookies collect is aggregated. If you do not allow these cookies we will not know when you have visited our website, and we will not be able to monitor its performance.
Functionality. These cookies enable the websites to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies, then some of these services may not function properly.
Targeting. These cookies may be set through our websites by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other websites. They work by uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
How to Delete or Block Cookies and Other Tracking Technologies
On some websites, when technically feasible, we will enable tools to help you make choices about cookies and other tracking technologies. You may also delete or block cookies at any time by changing your browser settings. You can click “Help” in the toolbar of your browser for instruction or review the cookie management guide produced by the Interactive Advertising Bureau available at www.allaboutcookies.org. If you delete or block cookies, some features of the websites may not function properly.
MineralTree may provide links on our websites and within our solutions to other websites that are not under our control. We do not endorse or make any warranty of any type regarding the content contained on such websites or the products and services offered on those websites. We make no representation regarding your use of such websites. Please be aware that we are not responsible for the privacy practices of the operators of other websites. We encourage our users to be aware when they leave our websites and to read the privacy statements of each and every website that collects personal information. This Notice applies solely to information collected by us. You should read any other applicable privacy and cookies notices carefully before accessing and using such other websites.
Our Relationship with Affiliate Companies (Including Sharing and Cross-Border Transfers)
Subject to your consent if required by applicable law, we may appoint an affiliate company to process personal information in a service provider role. We will remain responsible for that company’s processing of your personal information pursuant to applicable data privacy laws.
Because our affiliate companies are located around the globe, your personal information may be transferred to and stored in the United States or in another country outside of the country in which you reside, which may be subject to different standards of data protection than your country of residence.
We take appropriate steps to ensure that transfers of personal information are in accordance with applicable law, are carefully managed to protect your privacy rights and interests and limited to countries which are recognized as providing an adequate level of legal protection or where alternative adequate arrangements are in place to protect your privacy rights.
Our Commitment to Data Security
We maintain administrative, technical and physical safeguards designed to protect your personal information against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. Any suspected attempt to breach our policies and procedures, or to engage in any type of unauthorized action involving our information systems, is regarded as potential criminal activity. Suspected computer mischief may be reported to the appropriate authorities.
Please remember that communications over the internet, such as emails, are not secure. We seek to keep secure all confidential information and personal information submitted to us. However, like all website operators, we cannot guarantee the security of any data transmitted through the internet.
Login Details and Your Responsibility
If you use our solutions, we will collect and process your personal information as necessary to set up and administer an account for you. It is your responsibility to protect the login credentials that we provide to you from compromise, and you are required to adhere to the security procedures we establish in the documentation we provide you as part of the services.
Managing Your Preferences
Subject to your consent if required by applicable law, we may use your personal information to provide you with direct marketing information about our products and services as well as those of our global affiliates and third parties. Our direct marketing may be by email, telephone, post or SMS or such other method(s) as may become relevant. In addition, we may provide direct marketing information and permit others to do that as allowed by our customers’ respective contracts.
We will take steps to ensure that any direct marketing from us will provide a simple means for you to stop further communications, in accordance with applicable law. For example, in email, we may provide you with an “unsubscribe” link, or an email address to which you can send an opt-out request. In addition, if we need your consent for direct marketing communications under applicable law, and if you provide your consent, you will be able to change your mind at any time.
Your Legal Rights
Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you have the right to:
- Know whether we process your personal information;
- Know how your personal information is used;
- Access, request and receive the personal information we have collected in a portable manner;
- Object to having your personal information sold or shared; and
- Request that we delete your personal data.
For some users, we have additional disclosures in the sections of this Notice directed at users based on where they reside. You may contact us using the information in the “Contact Us” section of this Notice for additional information about how to exercise your rights.
UK and EU resident rights
|What does this mean?|
|Right to be informed||You have the right to be provided with clear and easy-to-understand information about how we use your personal information. This is why we are providing you this Notice and we may provide other forms of notice, as appropriate or required by law, in the services.|
|Right to access personal information||You have the right to access and receive a copy of personal information we hold about you.|
|Right to data portability||In some circumstances, you have the right to receive the personal information you request from us in a format that is user-friendly and enables you to transfer it to another provider.|
|Right to rectification||You have the right to correct or update your personal information if it is outdated, incorrect or incomplete.|
|Right of erasure (“right to be forgotten”)||In some circumstances, you have the right to have your personal information erased or deleted.|
|Right to restrict/suspend processing of personal information||You may object to processing of personal information that is based on legitimate interest. You may withdraw consent for processing that is based on consent (this includes the right to opt out of direct marketing).|
|Right to information about information transfers||You have the right to obtain a copy of documents related to the safeguards under which your personal information is transferred outside the EU.|
|Right to complain to a supervisory authority||You have the right to contact the data protection authority in your country to complain about our data protection and privacy practices.|
Information for California Residents
If you are a California resident, this section applies to you, in addition to the rest of the Notice.
California Shine the Light
If you are a resident of California, you may request information concerning the categories of personal information (if any) we share with third parties or affiliates for their direct marketing purposes. If you would like more information, please submit a written request to us using the information provided in the “Contact Us” section of this Notice.
Categories of Personal Information We Collect and Our Purposes for Collection and Use
You can find a list of the categories of personal information that we collect in the “Personal Information We Collect” section above. For details regarding the sources from which we obtain personal information, please see the “Sources of Personal Information” section above. We collect and use personal information for the business or commercial purposes described in the “How We Use the Personal Information We Obtain” section above.
Categories of Personal Information Disclosed and Categories of Recipients
Our disclosures of personal information are described in the “How We Share the Personal Information We Collect” section above. To further clarify the content of that section, we disclose the following categories of personal information for business or commercial purposes to the categories of recipients listed below:
We share Identifiers with: service providers, affiliates, and third-party partners.
- We share Commercial Information with: service providers, affiliates, and third-party partners.
- We share Geolocation Information with: service providers, affiliates, and third-party partners.
- We share Payment Information with: service providers who enable the processing of payments and third party partners such as the applicable card schemes.
- We share Internet/Electronic Activity Information with: service providers and third-party partners.
As a California resident, you have rights with regard to your personal information. You can contact us using the information provide in the “Contact Us” section of this Notice with regard to the following rights:
|Right to know about personal information collected, disclosed, and sold||You have the right to request, twice in a 12-month period, the following information about the personal information we have collected about you during the past 12 months:|
|Right to opt-out of the sale of personal information||You may request that we do not sell your personal information to third parties. You may also request that we do not share your personal information for cross-context behavioral advertising.|
|Right to request deletion||In some circumstances, you have the right to have your personal information erased or deleted.|
|Right to equal service and prices (“non-discrimination”)||Your choice to exercise your privacy rights will not be used as a basis to discriminate against you in services offered or pricing.|
|Right to request correction||You have the right to request that we correct any inaccuracies in your personal information.|
|Right to limit the use and disclosure of sensitive personal information||In some circumstances, you may request that we limit the use and disclosure of your sensitive personal information.|
Our websites and solutions are not intended for use by children. We do not solicit or knowingly accept any personal information from persons under the age of 18 and we do not sell or share personal information of consumers under age 18. Please do not use our websites or solutions if you are under the age of 18.
Changes and Updates
We reserve the right, in our sole discretion, to modify, update, add to, discontinue, remove or otherwise change any portion of this Notice, in whole or in part, at any time. When we amend this Notice, we will revise the “Last Updated” date located at the top of the document. We will also take reasonable steps to ensure you are made aware of any material updates including providing you direct communication about such changes or providing a notification through the services, as appropriate. If you provide personal information to us or access or use our Sites after this Notice has been changed, you will be deemed to have unconditionally consented and agreed to such changes. The most current version of this Notice will be available on the Sites and Apps and will supersede all previous versions of this Notice.
Choice of Law
Except where prohibited by law, by using our Sites, you unconditionally consent and agree that: (1) any claim, dispute, or controversy (whether in contract, tort, or otherwise) you may have against MineralTree and/or its parent, subsidiaries, affiliates and each of their respective members, officers, directors and employees (all such individuals and entities collectively referred to herein as the “Global Payments Entities”) arising out of, relating to, or connected in any way with the services or the determination of the scope or applicability of this agreement to arbitrate, will be resolved exclusively by final and binding arbitration administered by JAMS and conducted before a sole arbitrator in accordance with the rules of JAMS; (2) this arbitration agreement is made pursuant to a transaction involving interstate commerce, and shall be governed by the Federal Arbitration Act (“FAA”), 9 U.S.C. §§ 1-16; (3) the arbitration shall be held in Atlanta, Georgia; (4) the arbitrator’s decision shall be controlled by the terms and conditions of this Notice and any of the other agreements referenced herein that the applicable user may have entered into in connection with the services; (5) the arbitrator shall apply Georgia law consistent with the FAA and applicable statutes of limitations, and shall honor claims of privilege recognized at law; (6) there shall be no authority for any claims to be arbitrated on a class or representative basis, arbitration can decide only your and/or the applicable Global Payments Entity’s individual claims; the arbitrator may not consolidate or join the claims of other persons or parties who may be similarly situated; (7) the arbitrator shall not have the power to award punitive damages against you or any Global Payments Entity; (8) in the event that the administrative fees and deposits that must be paid to initiate arbitration against any Global Payments Entity exceed $125 USD, and you are unable (or not required under the rules of JAMS) to pay any fees and deposits that exceed this amount, Global Payments agrees to pay them and/or forward them on your behalf, subject to ultimate allocation by the arbitrator. In addition, if you are able to demonstrate that the costs of arbitration will be prohibitive as compared to the costs of litigation, Global Payments will pay as much of your filing and hearing fees in connection with the arbitration as the arbitrator deems necessary to prevent the arbitration from being cost-prohibitive; and (9) with the exception of subpart (6) above, if any part of this arbitration provision is deemed to be invalid, unenforceable or illegal, or otherwise conflicts with the rules of JAMS, then the balance of this arbitration provision shall remain in effect and shall be construed in accordance with its terms as if the invalid, unenforceable, illegal or conflicting provision were not contained herein. If, however, subpart (6) is found to be invalid, unenforceable or illegal, then the entirety of this Arbitration Provision shall be null and void, and neither you nor Global Payments shall be entitled to arbitrate their dispute. For more information on JAMS and/or the rules of JAMS, visit their website at www.jamsadr.com.
If you have questions about this Notice, or if you want to exercise your rights as described in this Notice, you can submit a request by completing this form or you may contact us as follows:
101 Arch Street
Boston, MA, 02110
In order to honor any access or deletion request, we will require you to provide enough information for us to verify your identity. For example, we may ask you for information associated with your account, including your contact information or other identifying information. If you designate an authorized agent to make a rights request on your behalf, we may require proper proof of that authorization as well as direct verification of your identity from you.
Reviewed November 2022