California Privacy Policy

If you are a California resident, as defined in Section 17014 of Title 18 of the California Code of Regulations, you have certain rights under the California Consumer Privacy Act of 2018 (the “CCPA") and other California privacy laws. Below, we provide a description of our practices and your rights in accordance with California law.

Our practices:

We collect and share personal information for our operational purposes (business purposes), at your request, and pursuant to exceptions recognized under CCPA.
We do not sell the personal information we collect about you to third parties, nor do we share it with them for their marketing purposes without your consent. For more information about how we share personal information in the context of marketing and advertising, please see our Cookie Policy.
California law requires us to outline for you our collection and sharing practices (described in detail in our Privacy Notice) following the format below.

Collection practices (last 12 months):

CCPA Categories of personal information collected.	Sources from which we collect it	We collect this information for the following purposes: (See detailed description for each purpose below)
Identifiers (e.g., a real name, alias, postal address, online identifiers, IP address, email address, and other similar identifiers)	We collect this information from you, from the administrator (your employer), and from other third parties (e.g., participants in our program who send awards using our services and social networks you may use to sign into our systems).	Provide services to you Auditing Security
Commercial information (e.g., records of products or services purchased, obtained, or considered, and other purchasing or consuming histories, tendencies or preferences)	We collect this information from you when you use our services (e.g., when you use Cashback).	Provide services to you Auditing Security Repairing errors Research Quality and safety maintenance Short-term use
Internet/Electronic network activity information (e.g., browsing history, search history, and information regarding your interaction with an internet website, application, or advertisement)	We collect this information from you when you use our services and from service providers (e.g., vendors that help us ensure your security by providing a “proxy denylist” which we use to help verify your credentials during log-in)	Auditing Security Repairing errors Research Quality and safety maintenance
Geolocation data (i.e., approximate location of a device or equipment based on geographical coordinates and measurements).	We collect this information from you when you use our services and from vendors that enable us to identify your approximate location based on the IP Address.	Auditing Security Short-term use Provide services to you Research
Professional/employment-related data (e.g., office location, company email or telephone number, start date, etc.)	We collect this information from you, from the administrator (your employer). Additionally, in some circumstances, use of our platform may reveal to us professional information about you (e.g., whether you are the recipient of the employee of the month award)	Provide services to you Security
Characteristics of protected classifications under California or federal law (i.e., race, color, ancestry, national origin, religion, sex, disability, age, genetic information, marital status, sexual orientation, gender, identity or gender expression, medical condition, political activities or affiliations, military or veteran status, status as a victim of domestic violence, assault or stalking)	From this category, we only collect your date of birth (and therefore your age) and your gender at registration from you and/or from the administrator (your employer)	Research
Other Customer Records (Other information that identifies, relates to, describes, or is capable of being associated with you)	We collect this information from you (e.g., supporting documents to verify your identity after too many failed log-in attempts or information you provide when completing a survey), from the administrator (your employer), and from third parties.	Provide services to you Auditing Security Quality and safety maintenance
Audio, electronic, visual, thermal, olfactory, or similar information)	We collect this information from you (e.g., when you contact our customer services the call may be recorded)	Provide services to you Quality/safety maintenance
Inferences drawn from the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	We may derive insights from the information you provide to us (e.g., we use the information recorded when you use our website and shop to make suggestions and recommendations about goods or services that may interest you).	Auditing Security Research Quality and safety maintenance
Biometric information (i.e. an individual’s physiological, biological, or behavioral characteristics that can be used to establish individual identity.)	We do not collect personal information in this category	N/A
Educational records	We do not collect personal information in this category	N/A

Description of purposes:

(a) Auditing: Auditing related to interactions with consumers/transactions (e.g., counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards).

(b) Security: Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity).

(d) Short term use: short term use without disclosing to third parties, using to create profiles, or using for contextual customization of ads.

(e) Providing services: Providing the services that we offer to you, including maintaining or servicing of accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services.

(f) Research: Research purposes, including internal research for technological development and demonstration.

(g) Quality/safety maintenance: Maintaining the quality and safety of our services, including undertaking activities to verify or maintain the quality or safety of a service or device and to improve, upgrade, or enhance the service or device.

Sharing practices (last 12 months):

CCPA Category of personal information:	Persons or organizations receiving the data	Purpose for sharing
Identifiers (e.g., a real name, alias, postal address, online identifiers, IP address, email address, and other similar identifiers)	We may share this information with: Vendors (service providers, affiliated advertising networks, etc.), Partners (e.g., operating systems and platforms), The administrator of the program (i.e., your employer), Other employees (e.g., other employees who you share your profile with), and Governmental entities (under a duty to disclose or as required to protect our rights or the rights of others).	We may share information in this category: For the business purpose we collected it for, or for other purposes compatible with the context in which we collected the information, At your request, or Pursuant to an exception recognized by the law.
Commercial information (e.g., records of products or services purchased, obtained, or considered, and other purchasing or consuming histories, tendencies or preferences)	We may share this information with: Vendors (service providers, data analytics providers, etc.), Partners (e.g., operating systems and platforms, merchants, our bank), The administrator of the program (i.e., your employer), and Governmental entities (under a duty to disclose or as required to protect our rights or the rights of others).	We may share information in this category: For the business purpose we collected it for, or for other purposes compatible with the context in which we collected the information, At your request, or Pursuant to an exception recognized by the law.
Internet/Electronic network activity information (e.g., browsing history, search history, and information regarding your interaction with an internet website, application, or advertisement)	We may share this information with: Vendors (service providers, data analytics providers, etc.) Partners (e.g., internet service providers, operating systems and platforms) The administrator of the program (i.e., your employer), and Governmental entities (under a duty to disclose or as required to protect our rights or the rights of others).	We may share information in this category: For the business purpose we collected it for, or for other purposes compatible with the context in which we collected the information, At your request, or Pursuant to an exception recognized by the law.
Geolocation data (i.e., approximate location of a device or equipment based on geographical coordinates and measurements).	We may share this information with: Vendors (service providers) Partners (operating systems and platforms), and Governmental entities (under a duty to disclose or as required to protect our rights or the rights of others).	We may share information in this category: For the business purpose we collected it for, or for other purposes compatible with the context in which we collected the information, At your request, or Pursuant to an exception recognized by the law.
Professional/employment-related data (e.g., office location, company email or telephone number, start date, etc.)	We may share this information with: The administrator of the program (i.e., your employer), and Other employees	We may share information in this category: For the business purpose we collected it for, or for other purposes compatible with the context in which we collected the information, At your request, or Pursuant to an exception recognized by the law.
Characteristics of protected classifications under California or federal law: (i.e., race, color, ancestry, national origin, religion, sex, disability, age, genetic information, marital status, sexual orientation, gender, identity or gender expression, medical condition, political activities or affiliations, military or veteran status, status as a victim of domestic violence, assault or stalking)	We may share this information with: The administrator of the program (i.e., your employer) to provide the administrator with an aggregate demographic breakdown (e.g., utilization of our services by age group), and Governmental entities (under a duty to disclose or as required to protect our rights or the rights of others).	We may share information in this category: For the business purpose we collected it for, or for other purposes compatible with the context in which we collected the information, or Pursuant to an exception recognized by the law.
Other Customer Records (Other information that identifies, relates to, describes, or is capable of being associated with you)	We may share this information with: Vendors (service providers, data analytics providers, etc.), Partners (operating systems and platforms, merchants), The administrator of the program (i.e., your employer), and Governmental entities (under a duty to disclose or as required to protect our rights or the rights of others).	We may share information in this category: For the business purpose we collected it for, or for other purposes compatible with the context in which we collected the information, At your request, or Pursuant to an exception recognized by the law.
Other: Audio, electronic, visual, thermal, olfactory, or similar information	We may share this information with: The administrator of the program (i.e., your employer), Other employees, and Governmental entities (under a duty to disclose or as required to protect our rights or the rights of others).	We may share information in this category: For the business purpose we collected it for, or for other purposes compatible with the context in which we collected the information, At your request, or Pursuant to an exception recognized by the law.
Inferences drawn from the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	We may share this information with: Vendors (service providers) Governmental entities (under a duty to disclose or as required to protect our rights or the rights of others).	We may share information in this category: For the business purpose we collected it for, or for other purposes compatible with the context in which we collected the information, At your request, or Pursuant to an exception recognized by the law.
Biometric information (i.e. an individual’s physiological, biological or behavioral characteristics that can be used to establish individual identity.)	We do not collect personal information in this category	N/A
Educational records	We do not collect personal information in this category	N/A

Your rights:

If you are a resident of the State of California, you have the following rights under California law:

Right to know: You have the right to request that we disclose to you: (1) the specific pieces of personal information we have collected about you; (2) the categories of personal information collected or shared; (3) the purposes for which we collected or shared your personal information; and, (4) the categories of third parties to whom we have disclosed personal information about you. Prior to disclosing the information, we are required to verify that the individual making the request is indeed the individual to whom the information relates. Once we receive a verifiable request, we must disclose to you the information requested for the twelve months preceding your request. The law gives us 45 days to provide you the information but the period may be extended by 45 additional days in certain circumstances. Please see below for an explanation of how to submit a request.
Right to delete: You have the right to request the deletion of your personal information that we may have received from you. Prior to deleting the information, we are required to verify that the individual making the request is indeed the individual to whom the information relates. Once we receive a verifiable request, the law gives us 45 days to respond to it, but the period may be extended by 45 additional days in certain circumstances. As a general rule, we must delete the information at your request and require our vendors to do so as well. However, the law provides certain exceptions that allow us to retain the information even if you have requested that it be deleted. If we do not erase the information pursuant to one of those exceptions we must inform you of that fact and of any rights you may have to appeal our decision. Please see below for an explanation of how to submit a request to us.
Right to opt-out of sales (opt-in for minors): You have the right to direct a business to not sell personal information about you. For minors under sixteen years of age, businesses are legally prohibited from selling their information unless the minor or the parents of the minor (if under 14) consent to the sale. Because we do not sell your personal information, there is no need for you to request to opt-out of sales. For more information about how we share personal information in the context of marketing and advertising please see our Cookie Policy
Right against discrimination: You have the right not to be discriminated against because you have exercised any of your above rights. Discrimination includes, but is not limited to, denying goods or services, charging different prices or rates for goods or services, providing a different level or quality of goods or services. Businesses, however, are allowed to charge you a different price or rate, provide a different level or quality of goods or services, or offer financial incentives if the difference is reasonably related to the value provided to the business by your data and the financial incentive practices are not unjust, unreasonable, coercive, or usurious in nature.

How to submit a request:

To exercise your right to know or right to delete, please log in to your account and visit the Security Center, where you can:

Download your Data: you will be given an option to download your data in a JSON format (machine-readable) or HTML format, which provides you an easy way to read through all the data we may have.
Deactivate your Account: Deactivating your account will permanently delete all your personal data from our systems.

Your request to complete either of these actions will need to be acknowledged by the administrator. The administrator will confirm with you that your request is legitimate before we take any action.

If you are not able to log in and place this request, or are acting as an authorized agent on behalf of a consumer, or have not yet registered, please contact the administrator (“”) for assistance in fulfilling your requests.

Please contact us via email or by mail to the address below if you would like to request that we disclose to you: (1) the categories of personal information collected or shared; (2) the purposes for which we collected or shared your personal information; and, (3) the categories of third parties to whom we have disclosed personal information about you. We will provide you an individualized response, unless the response would be identical to the disclosures above, in which case we will direct you to our general practices described in this notice.

As a general rule, we are not allowed to charge you a fee when you exercise your rights, but if your requests are manifestly unfounded or excessive, we are allowed to charge a reasonable fee, or refuse to act on the request.

How to contact us:

If you have any questions, comments, or requests regarding this Statement, or you would like to exercise any of your rights set out above, or contact our Data Protection Team, you may contact us in the following ways:

Via e-mail sent to privacy-requests@rewardgateway.net or;
By mail addressed to Reward Gateway, Inc., 141 Tremont Street, Boston, MA 02111.