MineralTree Privacy Notice
Last Updated: December 19, 2023
MineralTree, Inc., a Global Payments company (“MineralTree,” “we,” “us”), respects your concerns about privacy. In this Privacy Notice (the “Notice”), we describe how we collect and process personal information about users of our websites, blogs, social media pages, and other online media. We also describe how we collect and process personal information about our prospects and customers, about the end users of our solutions, and about internet users and other individuals for cybersecurity and threat assessment purposes.
Please note that if you do not fall within any of those categories, this Notice does not apply to you. For example, MineralTree provides solutions that improve and automate key financial processes for businesses, and our business customers (“Customers”) use those solutions to collect and process personal information about their own contacts, such as the individuals to whom they owe payments for services. If you are an individual whose personal information was collected and processed by one of our business Customers using one of our solutions, and you have questions about that Customer’s privacy practices, you should refer to that Customer’s privacy notice or contact that Customer directly. Additionally, MineralTree maintains specific privacy notices for job applicants, employees, and contractors through Global Payments. If you are a job applicant, employee, or contractor and need a copy of the applicable privacy notice, please contact us at [email protected].
Please read this Notice carefully. If you have any questions, you may contact us at [email protected] or by the methods provided in the Contact Us section below.
This Notice covers the following topics:
- Personal Information We Collect
- Data Anonymization and Aggregation
- Sources of Personal Information
- How We Use the Personal Information We Collect
- How We Disclose the Personal Information We Collect
- Cookies and Other Tracking Technologies
- External Links
- Our Relationship with Affiliate Companies (Including Disclosures and Cross-Border Transfers)
- Data Security and Data Retention
- Login Details and Your Responsibility
- Managing Your Preferences
- Your Legal Rights
- Children
- Changes and Updates
- Contact Us
- Region-Specific Information
Personal Information We Collect
“Personal information” is information that identifies you as an individual or relates to an identifiable individual. Subject to your consent if required by law, we may collect the following categories of personal information:
- Basic Identifying Information, including your full name, postal address, e-mail address, phone number, username, or other similar identifiers.
- Demographic Data, including age, gender, and primary language.
- Device Information and Other Unique Identifiers, including device identifier, internet protocol (IP) address, cookies, pixel tags, or similar unique identifiers.
- Internet or Other Network Activity, including browsing or search history and information regarding your interactions with our solutions and services.
- Geolocation Data, including your physical address (if you provide it to us), as well as location information derived from other data, such as IP address.
- Payment Information, including credit or debit card numbers or other payment information you may provide to us in connection with your use of our solutions.
- Commercial Information, including information about your business, the solutions you obtain from us, your commercial transactions with us, and your preferences regarding products and related services which are of interest to you (see “Managing Your Preferences” below).
- Professional and Employment-Related Information, including your role or status with the organization with which you are affiliated.
- Information You Provide, including your communications with us and any other content you provide through web forms, our solutions, email, or otherwise (such as if you report a problem with our solutions and services).
- Audio and Visual Information, including photographs, images, videos, and recordings of your voice (such as when we record calls or videos for quality assurance or other business activities).
- Inferences drawn from or created based on any of the information identified above.
Data Anonymization and Aggregation
Subject to your consent if required by law, we may anonymize or aggregate personal information about you so that you are not identified or identifiable from it, in order to use the anonymized or aggregated data, for example, for statistical analysis (including analysis of trends), to carry out actuarial work, to tailor products and services, and to conduct risk assessments and analyses of costs and charges in relation to our products and services. We may share anonymized or aggregated data with our global affiliates and with other third parties, and this Notice does not restrict our use or disclosure of any anonymized or aggregated information.
Where we maintain or use de-identified information, we will continue to maintain and use the de-identified information only in a de-identified fashion and will not attempt to re-identify the information.
Sources of Personal Information
Information that you provide to us: We collect personal information that you provide to us when you contact us, set up an account with us, use our solutions, or otherwise interact with us. For example, if you use a web form to request information from us, we may ask for your name, contact information, and information about your business. Providing us with personal information is voluntary, and you can always choose not to provide certain information, but then you may not be able to take advantage of or participate in some of our solutions and services.
Information collected from third parties: We collect personal information about you from third parties in the course of providing our services. For example, we may collect Basic Identifying Information and Commercial Information from a referral partner or other third party in order to contact you about the services and solutions we provide. We may also receive business-related information about you from third-party companies that supplement our business customer records with, for example, professional information.
Information collected through technology: When you visit our websites, use our solutions, or interact with an email we send to you, we may collect certain information automatically, including your account or device identifier and usage information such as the pages that you visit, the links you click, the types of content you interact with, the frequency and duration of your activities, and other information about how you use our services. You have the ability to express your preference regarding some of the ways we collect information through technology in some of our services (see “Cookies and Other Tracking Technologies” for more information). When you download and use our Apps, we and our service providers may track and collect App usage data, such as the date and time the App on your device accesses our servers and what information and files have been downloaded to the App based on your device number.
How We Use the Personal Information We Collect
Subject to your consent if required by law, we may use your personal information for the following business and commercial purposes:
- To provide services to you;
- To contact you regarding any inquiry you make or to fulfill a request, such as, for example, a request for information about our solutions and services or to provide customer support;
- To contact you if you have signed up for e-newsletters or any other updates, communications or publications;
- To verify or maintain the quality and safety of our solutions and services and to repair, improve, upgrade, or enhance our services and solutions;
- To conduct our operations and for other general business purposes;
- To detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute individuals responsible for that activity;
- To conduct audits and enable internal record keeping and administration of records;
- To personalize your experience when you use our website, solutions or services;
- To track information about our interactions with you, including, but not limited to, counting advertising impressions to unique visitors and verifying positioning and quality of advertising impressions;
- To send you direct marketing material, subject to your consent if required by applicable law (see “Managing Your Preferences” below); and
- To comply with applicable laws and regulations.
How We Disclose the Personal Information We Collect
We are a Global Payments company, meaning we are a part of a multinational family of businesses headquartered in the United States, with affiliates in countries around the world. Your personal information may therefore be disclosed to recipients within our organization who are located outside of your country, including to our affiliates (see “Our Relationship with Affiliate Companies” below).
For each category of personal information we collect, we may disclose such information in the manner and for the purposes described below:
- With companies engaged to help us run our business, subject to your consent if required by law. These types of companies may include resellers and distributors of our solutions; service providers retained to perform functions on our behalf or to provide services to us, including (without limitation) legal, accounting, audit, consulting and other professional service providers; and providers of other services related to our business. Portions of our services may be provided by organizations with which MineralTree has a contractual relationship, including subcontractors, and, accordingly, your personal information may be disclosed to them;
- With third parties with whom you have a relationship, such as a financial institution or independent sales organization who referred you to MineralTree for services;
- With logistics service providers to enable the delivery of packages to individuals;
- With other third parties to whom you direct us disclose to personal information;
- With regulators including state and federal agencies, card brands, financial networks, issuing banks and other parties required to enable compliance with laws, regulations and industry standards related to transaction processing and in order to obtain commercial and credit information to establish, maintain or renew a customer’s contract(s), as may be required to provide any of the services for which a customer has subscribed, or to comply with the rules and regulations of any credit or debit card payment network or otherwise in accordance with this Notice;
- In response to a court order or a request for cooperation from a regulatory, law enforcement or other government agency; to establish or exercise our legal rights; to defend legal claims; or as otherwise required or permitted by applicable laws and/or regulations;
- When we believe that disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing; to protect and defend the rights, property or safety of MineralTree, its customers, staff, suppliers or others; and
- To third parties in connection with any proposed or actual reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our assets or stock (including in connection with any bankruptcy or similar proceedings).
External Links
MineralTree may provide links on our websites and within our solutions to third-party websites or services that are not under our control. We do not endorse or make any warranty of any type regarding the content contained on such third-party websites or services or regarding the products and services they offer. We make no representation regarding your use of such websites or services. Please be aware that we are not responsible for the privacy practices of the operators of other websites or services. We encourage our users to be aware when they leave our websites and solutions. You should read any other applicable privacy and cookies notices carefully before accessing and using third-party websites and services.
Our Relationship with Affiliate Companies (Including Disclosures and Cross-Border Transfers)
Subject to your consent if required by applicable law, we may appoint an affiliate company to process personal information in a service provider role. We will remain responsible for that company’s processing of personal information pursuant to applicable data privacy laws.
Because our affiliate companies are located around the globe, personal information about you may be transferred to and stored in the United States or in another country outside of the country in which you reside, which may be subject to different standards of data protection than your country of residence.
We take appropriate steps to transfer personal information in accordance with applicable law, such as transferring personal information to countries which are recognized as providing an adequate level of legal protection or where alternative adequate arrangements are in place to protect your privacy rights.
Data Security and Data Retention
We maintain administrative, technical and physical safeguards designed to protect your personal information against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.
We retain the personal information we collect for different periods of time depending on what it is and how we use it. In some contexts, we will provide additional information about retention as you use the solutions and services. When we collect personal information, we will retain it only for as long as is necessary to complete the legitimate business or legal purposes for which we collected it. The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you and provide services to you, for example, for as long as you have an account with us or continue to use our services, and the length of time thereafter during which we may have a legitimate need to reference personal information to address issues that may arise;
- Whether there is a contractual obligation to which we are subject, for example, our contracts with our Customers may specify a certain period of time during which we are required to maintain the information on behalf of our Customers;
- Whether there is a legal obligation to which we are subject, for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them; and
- Whether retention is advisable in light of our legal position, such as in regard to applicable statutes of limitations, litigation or regulatory investigations.
Login Details and Your Responsibility
If you use our solutions, we will collect and process personal information about you as necessary to set up and administer an account for you. It is your responsibility to protect the login credentials that you set up and/or we provide to you from compromise, and you are required to adhere to the security procedures we establish in any documentation we provide you as part of the services.
Managing Your Preferences
Subject to your consent if required by applicable law, we may use personal information to provide you with direct marketing information about our products and services as well as those of our global affiliates and third parties. Our direct marketing may occur through email, telephone, post or SMS or such other method(s) as may become relevant.
We will take steps to ensure that any direct marketing from us will provide a simple means for you to stop further communications, in accordance with applicable law. For example, in email, we may provide you with an “unsubscribe” link, or an email address to which you can send an opt-out request. In addition, if we need your consent for direct marketing communications under applicable law, and if you provide your consent, you will be able to change your mind at any time. Please note that if you opt out of receiving marketing-related communications from us, we may still send you administrative, transactional, or information messages, from which you cannot opt out.
Your Legal Rights
If you are an end user or other individual who interacts with our services and solutions for the purpose of engaging with our Customers and have questions about legal rights you may have with respect to personal information collected by our Customer, please consult the Customer with whom you have a relationship.
If you interact with our services and solutions for the purpose of engaging in a direct relationship with us, subject to certain exceptions, and in some cases dependent upon the processing activity we are undertaking, you may have the right to:
- Know whether we process personal information about you;
- Know how the personal information is used;
- Access, request and receive the personal information we have collected in a portable manner;
- Opt out of having personal information sold, “shared,” or used for certain profiling activities;
- Request that we correct inaccuracies in personal information about you; and
- Request that we delete personal information about you.
You may contact us using the information in the Contact Us section of this Notice for additional information about how to exercise your rights. In addition, if you are a resident of California, Colorado, or other jurisdiction with similar laws, please see the Region-Specific Information section below for further details on how to exercise your privacy rights.
Children
Our websites and solutions are not directed to children or intended for use by children. We do not solicit or knowingly accept any personal information from persons under the age of 18. Please do not use our websites, services, or solutions if you are under the age of 18.
Changes and Updates
We reserve the right, in our sole discretion, to modify, update, or otherwise change this Notice. The “Last Updated” legend at the top of this Notice indicates when this Notice was last revised. Any changes will become effective when we post the revised Notice on our services and solutions.
Contact Us
If you have questions about this Notice, or if you want to exercise your rights as described in this Notice, you can submit a request by completing this form or you may contact us as follows:
MineralTree, Inc.
3550 Lenox Road NE, Suite 3000
Atlanta, GA 30326
[email protected]
617-299-3399
If you make a request to exercise a privacy right, we will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the personal information subject to the request. We may decline to honor your request where an exception applies. In order to honor any access, deletion, or similar request, we will require you to provide enough information for us to verify your identity. For example, we may ask you for information associated with your account, including your contact information or other identifying information. If you would like your agent to make a request on your behalf, if permitted under applicable law, the agent may exercise those rights as noted above. We will process the agent’s request consistent with applicable law. As part of our verification process, we may request that the agent provide, as applicable, proof concerning their status as an authorized agent. In addition, we may require that you verify your identity as described in this section or confirm that you provided the agent permission to submit the request.
Region-Specific Information
Information for Residents of California, Colorado, and Other Similar Jurisdictions
This section supplements the above Notice and further describes how we collect, use, and disclose the personal information we collect about residents of California, Colorado, and other similar jurisdictions.
Categories of Personal Information We Collect and Our Purposes for Collection, Use, and Disclosure
The following chart details which categories of personal information we collect and process, as well as which categories of personal information we disclose to third parties for our operational business purposes, including within the preceding 12 months.
| Categories of Personal Information (See the Personal Information We Collect section for a description of each category of Personal Information) | Disclosed to Which Categories of Third Parties for Operational Business Purposes | Processing Purposes |
|---|---|---|
| Basic Identifying Information; Demographic Data; Device Information and Other Unique Identifiers; Internet or Other Network Activity; Commercial Information; Professional and Employment-Related Information; Information You Provide; Inferences | Please see the How We Disclose the Personal Information We Collect section for a list of the categories of third parties to whom we may disclose these categories of personal information. | Please see the How We Use the Personal Information We Collect section for a list and description of the applicable processing purposes for these categories of personal information. |
| Geolocation Data | Affiliates; distributors of our solutions and services; service providers; marketing partners; legal authorities and other third parties in order to comply with laws, regulations, and standards; other parties in litigation | • Provide our services and customer support • Operations and general business purposes • Marketing, promotions, and personalization • Improve and develop new products and services • Fraud prevention and security • Legal and compliance |
| Payment Information | Affiliates; third parties with whom you have a relationship (i.e. our Customers); regulators; legal authorities and other third parties in order to comply with laws, regulations, and standards including card brands and issuing banks | • Provide our services and customer support • Operations and general business purposes • Fraud prevention and security • Legal and compliance |
| Audio and Visual Information | Affiliates; distributors of our solutions and services; service providers; regulators; legal authorities and other third parties in order to comply with laws, regulations, and standards; other parties in litigation | • Provide our services and customer support • Operations and general business purposes • Improve and develop new products and services • Fraud prevention and security • Legal and compliance |
Do Not Sell or Share My Personal Information
Unless otherwise disclosed in a specific notice, and subject to your consent where required by applicable law, we do not sell your personal information to third parties for monetary compensation. We do not knowingly sell or “share” (for purposes of cross-context behavioral advertising) the personal information, including the sensitive personal information, of minors under 16 years of age.
The websites and solutions use cookies, including some cookies that are created by other companies and placed on your browser when you visit our website. We use those cookies to improve your experience and to gather information about our customers and the performance of our website. However, the companies who provide those cookies to us also have access to the data collected through them, and they may use that data for targeted advertising purposes. Our use of those third-party cookies could therefore be considered a “share” of your personal information under California law or processing for targeted advertising under other privacy laws. If you are a resident of California or another jurisdiction with similar laws, that means you have the right to opt out. If you have not done so already, you can opt out of the placement of all non-necessary cookies by adjusting your Cookie Settings.
Collection, Use, and Disclosure of Sensitive Personal Information
Subject to your consent where required by applicable law, we collect, process, and disclose sensitive personal information for purposes of: providing goods or services as requested; ensuring safety, security, and integrity; countering wrongful or unlawful actions; short term transient use such as displaying first party, non-personalized advertising; performing services for our business, including maintaining and servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of our business; activities relating to quality and safety control or product improvement; and other collection and processing that is not for the purpose of inferring characteristics about an individual. We do not use sensitive personal information beyond these purposes.
Rights and Requests
| Right to know about personal information collected, used, disclosed, “shared,” and sold | You have the right to know whether we process personal information about you, and to access such personal information. If you are a California resident, you may also request that we disclose to you: • the categories of personal information we have collected about you and the categories of sources from which we collected such personal information; |
|---|---|
| Right to receive a copy of personal information | You have the right to request that we provide the specific pieces of personal information, including a copy of such personal information in a portable format. |
| Right to opt-out of the sale of personal information | You may request that we do not sell personal information about you to third parties. |
| Right to opt-out of targeted advertising, including the “sharing” of personal information for cross-context behavioral advertising | You may request that we opt you out of targeted advertising, including that we stop “sharing” personal information about you for purposes of cross-context behavioral advertising. See the “Do Not Sell or Share My Personal Information” section for more information on opting out of certain cookies on the solutions. |
| Right to request deletion | In some circumstances, you have the right to have personal information about you deleted. |
| Right to equal service and prices (“non-discrimination”) | Your choice to exercise your privacy rights will not be used as a basis to discriminate against you in services offered or pricing. |
| Right to request correction | You have the right to request that we correct inaccuracies in personal information about you. |
| Right to limit the use and disclosure of sensitive personal information | In some circumstances, you may request that we limit the use and disclosure of your sensitive personal information. |
| Right to appeal | Depending on your state of residence, if we refuse to take action on your request, you may appeal this refusal within a reasonable period after you have received notice of the refusal. To appeal, you can contact us at [email protected] or complete this form and select “Appeal a decision about a previous request” under “Type of Request.” |
California Shine the Light
If you are a resident of California, you may request information concerning the categories of personal information (if any) we share with third parties or affiliates for their direct marketing purposes. If you would like more information, please submit a written request to us using the information provided in the “Contact Us” section of this Notice.