PRIVACY POLICY - YOUR PRIVACY RIGHTS

Last Updated: June 20, 2023

SCOPE

This Privacy Policy (“Policy”) describes how National Payment Card Association dba ZipLine (“ZipLine,” “we,” or “us”), a PDI Technologies company, treats personal information we collect about you through our websites, applications, and platforms where the Policy is located (the “Platform”).

Please note that this Policy applies only to ZipLine enrollment data as described here. It does not apply to other loyalty program data or personal information that you have provided to one of our customers or a third party. For more information on how our customers (including those who operate a payment program in which you are participating) (the “Customer”) may treat the personal information that you provide to them, please review the respective Customer’s privacy policy.

This Platform is operated in the United States and intended for use by individuals who are located in the United States. By using our Platform or by choosing to give us personal information, you signify your consent to this Privacy Policy. If you do not agree with any terms of this Privacy Policy, please do not use the Platform, and do not give us any personal information. If you are a resident of California, click here to view our California Privacy Notice.


TYPES OF PERSONAL INFORMATION WE COLLECT

ZipLine collects personal information from you and about you. Here are some examples of the personal information we may collect:

HOW WE COLLECT YOUR PERSONAL INFORMATION

ZipLine collects your personal information in different ways. Below are some examples of how we may collect your personal information.

HOW WE USE YOUR PERSONAL INFORMATION

Examples of how we may use your personal information include:

HOW WE SHARE YOUR PERSONAL INFORMATION

We may share your personal information in the following ways:

CHILDREN UNDER 18

The Platform where this Policy is located is meant for adults. We do not knowingly collect personally identifiable data from persons under the age of 18, and strive to comply with the provisions of COPPA (the Children’s Online Privacy Protection Act). If you are a parent or legal guardian and think your child under 18 has provided us with personal information, please contact us at paymentmembersupport@pditechnologies.com. You can also write to us at the address listed at the end of this website Policy. Please mark your inquiries “COPPA Information Request.” Parents, you can learn more about how to protect children’s privacy on-line here.


CALIFORNIA PRIVACY NOTICE

Last Updated: June 20, 2023

The California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), requires us to make specific disclosures about how we collect, use, disclose the personal information (“PI”) of California residents who are subject to CCPA. CCPA also grants such California residents certain rights related to their PI. This section describes our PI practices offline and online, and contains these required disclosures and instructions for California residents who wish to exercise their rights under CCPA.

The chart below provides a description of the types of PI we collect. It also describes the business or commercial purpose(s) for which we collect, use and disclose PI, and the categories of third parties with whom we have shared or sold each type of PI in the past twelve (12) months. Below the chart, we have outlined the criteria we use to determine how long such PI will be retained. We may collect the categories of PI described in the chart as described in the “HOW DO WE COLLECT YOUR INFORMATION” section of our Policy. We may share PI we collect as described in the “HOW DO WE SHARE YOUR INFORMATION?” section of this Policy.

CCPA contains specific definitions for “sharing” PI and “selling” PI. These definitions only apply to this California Privacy Notice, and do not apply to the rest of our Privacy Policy. “Share” or “sharing” means, in short, sharing PI for cross-contextual advertising purposes. “Sale” or “selling” is defined very broadly and includes the disclosure of PI for monetary or valuable consideration. Note that as of the date of the Policy, we do not knowingly “share” PI and we do not “sell” or “share” PI of consumers under the age of 16 years. This statement is based on our understanding of how these terms are defined under CCPA.

Category of PI Purposes for Collection, Use and Disclosure Third Parties to Whom We Have Sold or Shared PI in Past 12 Months
Identifiers, such as name, mailing or billing address, unique personal identifier, online identifier, IP address, email address, phone number, signature, physical characteristics or description, etc.
  • Provide, maintain and improve our Platform
  • Provide and deliver the products and services you request
  • Process transactions and send you related information
  • Send you technical notices, updates, security alerts and support and administrative messages
  • Respond to your comments, questions and requests and provide customer service
  • Communicate with you about products, services, offers, promotions, and rewards
  • Provide news and information we think will be of interest to you
  • Monitor and analyze trends, usage and activities in connection with our Platform
  • Fulfill our legal obligations, detect, investigate and prevent fraudulent transactions and other illegal activities, and protect the rights and property of ZipLine, PDI, and others
  • Personalize and improve the Platform
  • Facilitate and moderate customer surveys
  • Provide advertisements, content or features that match user profiles or interests
  • Link or combine with information we get from others to help understand your needs and provide you with better service
  • Carry out any other purpose as permitted by law or as described to you at the time the information was collected
  • The retailer sponsoring a payments program in which you have enrolled.
  • The retailer sponsoring a loyalty program in which you have enrolled.
Government identification numbers, such as Social Security number, driver’s license or state identification number, passport number, military identification number, tribal identification number, etc.
  • Provide, maintain and improve our Platform
  • To create and validate your account
  • Provide and deliver the products and services you request
  • Respond to your comments, questions and requests and provide customer service
  • Communicate with you about products, services, offers, promotions, and rewards
  • Fulfill our legal obligations, detect, investigate and prevent fraudulent transactions and other illegal activities, and protect the rights and property of ZipLine, PDI, and others
  • Carry out any other purpose as permitted by law or as described to you at the time the information was collected
  • The retailer sponsoring a payments program in which you have enrolled
  • The retailer sponsoring a loyalty program in which you have enrolled.
Financial information, such as credit or debit card number, checking or savings routing or account number, etc.
  • Provide, maintain and improve our Platform
  • Provide and deliver the products and services you request, including linking your financial accounts with your ZipLine account
  • Respond to your comments, questions and requests and provide customer service
  • Fulfill our legal obligations, detect, investigate and prevent fraudulent transactions and other illegal activities, and protect the rights and property of ZipLine, PDI, and others
  • Provide advertisements, content or features that match user profiles or interests
  • Link loyalty cards and provide payment services
  • Carry out any other purpose as permitted by law or as described to you at the time the information was collected
  • N/A
Transaction Data, such as credit card number used to make a purchase, the amount of a transaction, the time and location of a transaction, etc.
  • Provide, maintain and improve our Platform
  • Process transactions and send you related information
  • Fulfill our legal obligations, detect, investigate and prevent fraudulent transactions and other illegal activities, and protect the rights and property of ZipLine, PDI, and others
  • Carry out any other purpose as permitted by law or as described to you at the time the information was collected
  • Retailers with whom you have enrolled in a payments program.
  • Retailer with whom you have enrolled in a loyalty program.
Protected classification characteristics under California or federal law (e.g., age)
  • Provide and deliver the products and services you request
  • Process transactions and send you related information
  • Verify your eligibility for our products and services
  • Fulfill our legal obligations, detect, investigate and prevent fraudulent transactions and other illegal activities, and protect the rights and property of ZipLine, PDI, and others
  • Personalize and improve the Platform
  • Provide advertisements, content or features that match user profiles or interests
  • Link or combine with information we get from others to help understand your needs and provide you with better service
  • Carry out any other purpose as permitted by law or as described to you at the time the information was collected
  • N/A
Commercial information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies)
  • Provide, maintain and improve our Platform
  • Provide and deliver the products and services you request
  • Respond to your comments, questions and requests and provide customer service
  • Fulfill our legal obligations, detect, investigate and prevent fraudulent transactions and other illegal activities, and protect the rights and property of ZipLine, PDI, and others
  • Provide advertisements, content or features that match user profiles or interests
  • Carry out any other purpose as permitted by law or as described to you at the time the information was collected
  • N/A
Biometric information (e.g., imagery of the iris, retina, face, , and voice recordings from which an identifier template can be extracted)
  • Provide and deliver the products and services you request
  • Process transactions and send you related information
  • Verify your identity and your eligibility for our products and services
  • Fulfill our legal obligations, detect, investigate and prevent fraudulent transactions and other illegal activities, and protect the rights and property of ZipLine, PDI, and others
  • Personalize and improve the Platform
  • Provide advertisements, content or features that match user profiles or interests
  • Link or combine with information we get from others to help understand your needs and provide you with better service
  • Carry out any other purpose as permitted by law or as described to you at the time the information was collected
  • N/A
Internet or other similar network activity (e.g., browsing history, search history, and information regarding interaction with an Internet website, application, or advertisement)
  • Provide, maintain and improve our Platform
  • Monitor and analyze trends, usage and activities in connection with our Platform
  • Fulfill our legal obligations, detect, investigate and prevent fraudulent transactions and other illegal activities, and protect the rights and property of ZipLine, PDI, and others
  • Provide advertisements, content or features that match user profiles or interests
  • Link or combine with information we get from others to help understand your needs and provide you with better service
  • Carry out any other purpose as permitted by law or as described to you at the time the information was collected
  • N/A
Geolocation data (e.g., physical location or movements)
  • Provide and deliver the products and services you request
  • Process transactions and send you related information
  • Fulfill our legal obligations, detect, investigate and prevent fraudulent transactions and other illegal activities, and protect the rights and property of ZipLine, PDI, and others
  • Personalize and improve the Platform
  • Link or combine with information we get from others to help understand your needs and provide you with better service
  • Carry out any other purpose as permitted by law or as described to you at the time the information was collected
  • N/A
Sensory data (e.g., audio recordings or similar information)
  • Provide and deliver the products and services you request
  • Process transactions and send you related information
  • Perform customer service
  • Fulfill our legal obligations, detect, investigate and prevent fraudulent transactions and other illegal activities, and protect the rights and property of ZipLine, PDI, and others
  • Personalize and improve the Platform
  • Link or combine with information we get from others to help understand your needs and provide you with better service
  • Carry out any other purpose as permitted by law or as described to you at the time the information was collected
  • N/A
Inferences drawn from other personal information (e.g., a profile relating to a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitude)
  • Provide, maintain and improve our Platform
  • Communicate with you about products, services, offers, promotions, and rewards
  • Provide news and information we think will be of interest to you
  • Monitor and analyze trends, usage and activities in connection with our Platform
  • Fulfill our legal obligations, detect, investigate and prevent fraudulent transactions and other illegal activities, and protect the rights and property of ZipLine, PDI, and others
  • Provide advertisements, content or features that match user profiles or interests
  • Link or combine with information we get from others to help understand your needs and provide you with better service
  • Carry out any other purpose as permitted by law or as described to you at the time the information was collected
  • N/A

Our PI retention criteria: CCPA requires that we disclose the criteria we use to determine how long we will retain each category of PI in the chart above. Oftentimes, our records contain several of these categories of PI combined together and therefore we consider, on a case-by-case basis, a number of factors to assess how long PI is retained. These factors include what PI is reasonably necessary to (i) provide our products and services or administer our relationship with a consumer; (ii) protect our business, employees, organization and others; (iii) fulfill our legal and regulatory obligations; and (iv) investigate and address issues which may include safety concerns, potential security incidents or policy violations.

Disclosures for Business Purposes: In the past twelve (12) months, we have disclosed each of the categories of PI identified in the chart above for “business purposes,” as defined in CCPA. Other than has described in the chart above, we have not disclosed this information to third parties (e.g., non-service providers) in the past 12 months other than as directed by you or with your consent.

California resident rights under CCPA. Subject to certain exclusions included in CCPA, and as relevant to our operations, California residents have the rights listed below with respect to the PI that we maintain about them. We may take steps to verify your identity, as permitted or required under CCPA, before we process your request. Verification may include asking you to provide information about yourself that we can match against information already in our possession.
California residents who wish to exercise their rights under this section can contact us at paymentmembersupport@pditechnologies.com. Please include your name, email address and address and indicate you are a California resident making a “CCPA” request.
Agents. Agents that you have authorized to act on your behalf may also submit CCPA requests as instructed above. The agent must also provide evidence that they have your written permission to submit a request on your behalf. If we are unable to verify the authenticity of a request, we may ask you for more information or may deny the request.

Additional Information about your California Rights. If you reside in California, you have the right to ask us one time each year if we have shared PI with third parties for their direct marketing purposes. To make a request, please send us an email at paymentmembersupport@pditechnologies.com. Indicate in your email or letter that you are a California resident making a “California Shine the Light” inquiry.


CHOICES REGARDING YOUR INFORMATION

You have certain choices about how we use your personal information. Certain choices you make are browser and device specific.

Marketing Communications:

You can opt out of receiving our marketing communications. Note that you may still receive transactional messages from us, including information about your account and responses to your inquiries. To opt out of receiving our marketing communications, you can follow the instructions contained in the communication.

Cookies & Other Tracking Technologies: Our Do Not Track Policy: Virginia Privacy Rights:

If you are a Virginia resident, you may have the right under the Virginia Consumer Data Protection Act (“VCDPA”) to request that we:
Nevada Privacy Rights:

If you are a Nevada resident, under Privacy and Security of Personal Information Chapter of the Nevada Revised Statutes Section 603A (“603A”), you have the right to submit a verified request to us, directing us not to make any sale of certain “personal information” as defined under this law that we have collected or will collect about you. Note that we may “sell” personal information to retailers sponsoring a payments program and / or loyalty program in which you have enrolled for the purpose of permitting the retailer to market its products or services or to allow them to reconcile payment obligations and administer their loyalty programs. As of the date of this policy, we do not, and for the past 12-months have not, otherwise “sold” personal information as this term is defined under 603A.

If you wish to exercise your Virginia or Nevada rights under this section, you can contact us at paymentmembersupport@pditechnologies.com. Please include your name, email address, and state of residence and indicate you “Privacy Rights” request. We will take commercially reasonable efforts to authenticate any requests that you submit. If we deny your privacy request and you wish to appeal our decision, you may contact us at paymentmembersupport@pditechnologies.com.


SECURITY

The Internet is not 100% secure. We cannot promise that your use of our Platform will be completely safe. We encourage you to use caution when using the Internet. We use physical, technical, and organizational means to help safeguard personal information under our control. A username and password are needed to access certain areas of the Platform. It is your responsibility to protect your username and password. Personal Information may be accessed by persons within our organization, or our third-party service providers, who require such access to carry out the purposes described in this Privacy Policy, or otherwise permitted or required by applicable law.


LINKS

Our Platform may contain links to other third-party sites that are not governed by this Policy. This includes third-party sites that offer resources and content which you can access through our Platform. If you click on a link to a third-party site, you will be taken to a site we do not control. We are not responsible for the privacy practices used by third-party sites. We suggest that you read the privacy policies of those sites carefully.


HOW TO CONTACT US

If you have any questions, comments or concerns with respect to our privacy practices or this Policy, or wish to update your information, please feel free to contact us at paymentmembersupport@pditechnologies.com. You may also write to us at the following address:

          ZipLine
          Attn: Customer Service
          300 Lock Road, Suite 202
          Deerfield Beach, FL 33442


CHANGES IN POLICY

From time to time, we may change this Privacy Policy. We will notify you of any material changes to this policy as required by law. We will also post an updated copy on our Platform. Please check our Platform periodically for updates. Your continued access to and/or use of our Platform after any such changes constitutes your acceptance of, and agreement to this Privacy Policy, as revised.