Sensitive Personal Information
We do not use or disclose Sensitive Personal Information for purposes other than the following:
- To detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information;
- To resist malicious, deceptive, fraudulent or illegal actions; and
- To provide Products and Services on behalf of our Business Customers, such as providing storage, or providing similar services on behalf of our Business Customers.
Your Privacy Rights
U.S. Privacy Laws grant you specific rights, subject to certain exceptions, including the following:
- Right to Access Personal Information. Upon a verifiable request, made through one of the methods provided in the Contact Information section below, we will disclose to you the items listed below:
- The categories of personal information we have collected about you;
- The categories of sources from which the personal information was collected;
- The business purpose behind collecting the personal information;
- The categories of third parties with whom we have shared the information; and
- The specific personal information we have collected about you.
- Right to Opt Out of Sale or Sharing. You have the right to opt out of any sales of your personal information (as sale is defined by U.S. Privacy Laws).
Online Selling or Sharing. Third-party digital businesses (Third-Party Digital Businesses) may associate cookies and other tracking technologies that collect personal information about you on our Sites, or otherwise collect and process personal information that we make available about you, including digital activity information. These Third-Party Digital Businesses use this information for several purposes, including to track activity across websites, to infer information about visitors, and to provide visitors with personalized content. The CCPA also allows California residents to opt-out of the use of personal information from different businesses or services to provide targeted advertisements, which the CCPA defines as sharing.
If you want to opt-out of the sale or sharing of such personal information, exercise a separate opt-out request on our consent management platform (CMP) here. Our CMP enables you to exercise such an opt-out request and enable certain cookie preferences on your device. You must exercise your preferences on each of our Sites you visit, from each browser you use, and on each device that you use. Because your browser opt-out is designated by a cookie, if you clear or block cookies, your preferences will no longer be effective and you will need to enable them again via our CMP. Please also refer to our Cookie Statement for other ways to exercise preferences regarding Third-Party Digital Businesses. Beware that if you use ad-blocking software, our cookie banner may not appear when you visit our Sites and you may have to use the link above to access the CMP.
Under the CCPA, opt-out preference signals (OOPS) are signals sent by a platform, technology, or mechanism, enabled by individuals on their devices or browsers, that communicate the individual’s choice to opt-out of the sale and sharing of personal information. To use an OOPS, you can download an internet browser or a plugin to use on your current internet browser and follow the settings to enable the OOPS. We have configured the settings of our CMP to receive and process OOPS on our Sites. We process OOPS with respect to sales and sharing that may occur in the context of collection of personal information by tracking technologies online by Third-Party Digital Businesses, discussed above, and apply it to the specific browser on which you enable OOPS. We currently do not, due to technical limitations, process OOPS for opt-outs from sales and sharing in other contexts (e.g., non-cookie personal information).
Offline Selling or Sharing. With respect to our sale or sharing of personal information other than that collected by cookies and other tracking technology, we will, upon a verifiable request made through one of the methods provided in the Contact Information section below, not allow your personal information to be sold or shared, as those terms are defined by applicable U.S. Privacy Laws.
- Right to Delete. Upon a verifiable request, made through one of the methods provided in the Contact Information section below, we will delete personal information we have collected from you and direct our service providers and processors to delete your personal information from their records. Note that California residents only have the right to request that we delete personal information that we have collected directly from the consumer.
- Right to Correct. Upon a verifiable request, made through one of the methods provided in the Contact Information section below, we will correct inaccurate personal information that we maintain about you.
We will not discriminate against you for exercising any of your privacy rights.
How to Exercise Your Privacy Rights
You may exercise your privacy rights by any of the methods described below in Contact Information. You may also designate an authorized agent to exercise these rights on your behalf by following the process described in Authorized Agents, below.
You may request access to your personal information twice in any 12-month period, measured from the date we receive your first request. If you submit a request to obtain your personal information more than twice in any 12-month period, we will either: (i) proceed with honoring your request; or (ii) deny your request in writing.
Consistent with applicable U.S. Privacy Laws and our interest in the security of your personal information, we will not deliver to you your Social Security number or other government-issued ID number, financial account number, biometric information, or an account password together with security questions or answers in response to a privacy rights request.
Verification
In order for you to exercise your privacy rights, we will need to obtain certain information from you to verify your identity.
For a report of the specific personal information we have collected about you, you must provide us with three of the following pieces of information in order for us to verify your identity:
- full name;
- email address;
- loyalty club number with our Business Customer;
- zip code; or
- mobile telephone number.
You also must provide us with a signed declaration, under penalty of perjury, that you are who you say you are.
For a report of the categories of personal information we have collected about you, for a request to delete your personal information, or for a request to opt out of the sale of your personal information, you must provide us with two of the above-referenced pieces of information in order for us to verify your identity.
Where necessary, we may request additional information about you so that we can verify your identity. Where we did not already hold that information, we will use it only for the purpose of verifying your identity and to process your request.
Authorized Agents
You may use an authorized agent to exercise your privacy rights on your behalf. Authorized agents may demonstrate that the agent has authority to exercise rights on the requesting consumer’s behalf by submitting supporting documentation to privacy@partech.com. At a minimum, we will require evidence of the agent’s identity (via passport or driver’s license submission), and at least one of the following evidencing proof of your legal authority to act on the behalf of the individual who is the subject of this request:
- Written authorization signed by the consumer;
- Certified copy of a Power of Attorney; or
- Evidence of parental responsibility.
Whenever you interact with us on behalf of another individual or entity, such as by providing or accessing personal information about another individual, you represent that your interactions and exchanges comply with applicable laws. You shall have sole responsibility for any violation of applicable laws as a result of a failure to obtain any necessary consent from such individual.
Timing
We will respond to requests to delete and requests to access your personal information within 45 calendar days, unless we need more time, in which case we will notify you and may take up to 90 calendar days total to respond to your request. We will respond to requests to opt out of the sale of your personal information within 15 business days.
Appeals
Residents of Virginia and Colorado may appeal our decision regarding a request by contacting us using one of the methods described in Contact Information below.
California Shine the Light Law
Under California’s Shine the Light law, California residents who provide personal information in obtaining products/services for personal, family, or household use are entitled to request and obtain from us once a calendar year information about the consumer information we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of consumer information and the names and addresses of those businesses with which we shared consumer information for the immediately prior calendar year (e.g., requests made in 2024 will receive information regarding 2023 sharing activities).
To obtain this information please send an email message to privacy@partech.com with Request for California Privacy Information on the subject line and in the body of your message. We will provide the requested applicable information to you at your e-mail address in response subject to any need to verify whether these rights apply to you.
Please be aware that not all information sharing is covered by the Shine the Light requirements and only information on covered sharing will be included in our response.
Additional Information for Nevada Residents
Nevada residents have the right to instruct us not to sell covered information as those terms are defined by Chapter 603A of the Nevada Revised Statutes. Although we do not currently sell covered information of Nevada residents, as those terms are defined under that law, you may contact us at privacy@partech.com and provide your name, Nevada address, and email address to be verified and exercise your opt-out rights in the event we do sell covered information under that law in the future. If you change your email address or other contact information, contact us in the same manner to update your contact information to help facilitate your opt-out. Changing your contact information elsewhere (e.g., informational requests, account information, etc.) will not update your Nevada opt-out information and we will only use the information provided to our opt-out program for managing opt-outs. It is your responsibility to keep your opt-out information current. If after opting-out you direct us to share your covered information with others, we will do so regardless of your prior opt-out.