- We will disclose the types of information we collect and how we use it;
- Unless we need to use your information to provide our services to you or to comply with a legal or regulatory requirement:
- We will give you an opportunity to restrict our use of the information; and
- We will give you an opportunity to tell us not to give the information to others; and
- We will give you an opportunity to correct the information in our records when it has been erroneously recorded.
YapStone collects data directly from you or from third party partners that work with YapStone or use YapStone’s services (“Partners”).
INFORMATION WE MAY COLLECT FROM YOU
We collect personal information as necessary to comply with applicable law and to provide contracted for processing services (on behalf of Merchants) to facilitate payment by users of online platforms or online marketplaces to Merchants to whom the users owe a payment obligation.
We may collect and process the following information about you:
- Information that you provide to us or to one of our Partners or Merchants (such as by filling in webforms, applications, or as part of our customer due diligence procedures), including, for example: information you provide (1) at the time of registering to use our services or services of one of our Partners who provides such data to us; (2) in connection with contracting for or subscribing to the service of one of our Partners or Merchants, content you post on, to or through a Partner or Merchant; (3) in connection with requesting further services from us or any Partner or Merchant; or (4) information you provide when you report a problem to us or any Partner or Merchant in connection with our or their services. Such information may include, for example, your name, email address, property ownership data, bank or credit card account information, address, telephone number, device identification or other sign-on information, geolocation data, and transaction information.
- Information that is automatically collected using technology that allows electronic tracking of technical information; this is further explained below in the section titled IP ADDRESSES, COOKIES AND CLICK-THOUGH URLS;
- If or when you contact us; we may keep a record of that correspondence regardless of the means;
- All responses to optional surveys that you complete;
- Details of the entire lifecycle of transactions you carry out through our services or those of our Partners or Merchants;
- The resources that you access on our Websites or those of our Partners or Merchants, as well as details of your visits to our Websites including, but not limited to, traffic data, location data, weblogs, and other communication data, whether such details are required for our own billing purposes or otherwise;
- Financial information you provide when you initiate a payment transaction, such as credit card, debit card, or bank account details.
- Personal information which we are legally required to report to the authorities for certain payment transactions, such as when the payment transaction(s) volumes reaches a certain limit;
- Information necessary to perform due diligence on our customers, such as name, date of birth, and current address of individuals and/or beneficial owners of property, photo identification, utility bill copies or similar documents;
- Credit information from credit reporting agencies;
- Proof of your identity which we may request from you for identity verification purposes and to comply with applicable law. This may include collecting copies of your passport, driver’s license, utility bill, company information, or other documents we deem necessary to establish your identity, residence, or place of business. Such proofs of identification may be stored electronically on our servers in order to comply with our legal and regulatory obligations;
- Proof of property ownership, verification of bank account, or information that can identify you or verify your identity or location, including your first and last name, telephone number, postal and email addresses, fax number, method of payment information (such as credit card), or the current physical location of you and any device you use to access a Website in connection with the use of our services or those of our Partners or Merchants. Such proof may be stored electronically on our servers in order to comply with our legal and regulatory obligations;
- Your IP address, computer information, and the times of each access to our services or Websites, which may be tracked against your records with us for purposes of preventing fraud, establishing your identity, creating an audit trail when using the services of YapStone, and to comply with applicable laws;
- Data necessary to detect and prevent fraud; we will either do this directly or in conjunction with a third-party who use this data to detect and protect against fraud (“third-party experts”). These third-party experts are subject to privacy and confidentiality obligations.
- Information which you provide in response to competitions which may be made available on our Website from time to time. You do not have to participate in these; however, if you choose to you may be asked to disclose some personal information. At the time of entering the competition it will be made clear to you who will have access to your personal information and why. You are not obliged to continue with your competition entry; however, if you do so you accept that you may receive a prize.
IP ADDRESSES, COOKIES AND CLICK-THROUGH URLS
We may collect technical information about your computer, including for example, where available, your IP address, operating system, and browser type, for system administration and to report aggregate information to our Partners. This is aggregate statistical data about our users’ browsing actions and patterns.
For the same reasons, we may obtain information about your general Internet usage by using a cookie. A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser, and stored by the browser. Cookies contain information that is transferred to your computer’s hard drive. The identifier is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser. Cookies help us to improve our Website and to deliver a better and more personalised service. Cookies enable us:
- To estimate our audience size and usage pattern;
- To store information about your preferences, and to allow us to customise our Website according to your individual interests;
- To prevent fraud;
- To speed up the delivery of pages you commonly use; and
- To recognise you when you return to one of our Websites.
We may occasionally use a “click-through URL”. When you click one of these URLs, you pass through our web server before arriving at your final destination. We track click-throughs to help us improve the user experience, determine your interest in particular topics and measure the effectiveness of our customer communications.
You can learn more about cookies at the following third-party websites:
Network Advertising Initiative: http://www.networkadvertising.org/
DO NOT TRACK
Some web browsers permit you to set Do Not Track (DNT) signals which would prevent websites from tracking your behaviour online. The applicable standards are still being developed and as a result, we cannot respond to the DNT signal. This means our service providers are able to compile analytics about your movements on our Website and remarket YapStone services to you.
WHERE WE STORE YOUR PERSONAL INFORMATION
Your data (including personal information) may be processed by staff operating outside of Canada who work for us or one of our Partners, Merchants or affiliated companies, or one of our third-party suppliers or service providers. Such staff maybe engaged in, among other things, verifying your identity, your location or payment information, the fulfilment of your transaction, the processing of your payment details, improving our Websites and services, technical support, fraud review, and the provision of other support services or in order to comply with our legal and regulatory obligations, as well as for group administration and management purposes. Your data (including personal information) may be processed, transferred and stored in the United States, India, Ireland, Switzerland, India, and the Philippines and Ireland. By submitting your personal information, you agree to the transfer, storing, or processing in destinations inside or outside of Canada. YapStone complies with applicable data transfer laws.
YapStone will use reasonable technical, administrative and physical measures to protect information contained in our system against misuse, loss or alteration. All information you provide to us is stored on our secure servers or secured servers licensed for use by us. YapStone complies with the Payment Card Industry Data Security Standard (PCI-DSS).
Where we have given you (or where you have chosen) a password that enables you to access certain parts of our service or engage with our customer service team, you are responsible for keeping this password confidential and adequately complex. We ask you not to share a password with anyone and change your password every 90 days. If we receive instructions using your log-in information we will consider that you have authorized the instructions.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your data transmitted to our Website; any transmission is at your own risk.
USES MADE OF YOUR INFORMATION
We use information held about you in the following ways:
- To ensure that content from our Websites is presented in the most effective manner for you and for your electronic device;
- To allow smooth interaction between you and customer support;
- To allow us to contact you by phone, email, text, or otherwise, about promotions offered by YapStone, or to provide you with information about our products or services or about products or services of the third parties or Partners which may be of interest to you.;
- To provide you with information, products or services (whether ours or a third party’s) where you have requested this or where you have separate agreed to this;
- To carry out our and your obligations arising from any contracts entered into between you and us;
- To allow us to carry out our contractual obligations to our Partners or our Merchants in connection with providing Processing Services to facilitate payment by users of online platforms or online marketplaces to Merchants to whom the users owe a payment obligation;
- To allow you to participate in interactive features of our service, when you choose to do so;
- To notify you about changes to our services;
- To perform the necessary due diligence on our customers including, for example, information necessary to meet legal Customer Due Diligence, Know Your Customer and Anti-Money Laundering obligations;
- To detect, investigate, prevent, protect against, remediate and reduce the risks of chargebacks and fraud in our system, unauthorized transactions, or activity we think is suspicious or may be potentially illegal, unlawful or harmful, to build fraud and credit risk models to assist in the screening of users for the purposes of identifying fraudsters, preventing fraud and minimising associated credit risk, which may include credit checks under the conditions of local law, sharing of relevant data with vendors to improve our system and services, or sharing such data in order to comply with our legal, regulatory or compliance obligations or assist law enforcement with respect to criminal or suspected criminal acts, including responding to a valid request by a law enforcement agency or regulatory or governmental authority, and use or disclosure of such data or information in connection with actual or proposed litigation, or to protect our or our affiliates’ or Partners’ property, people and other rights or interests; and
DISCLOSURE OF YOUR INFORMATION
We may disclose your personal information to any affiliate of YapStone, including, Yapstone Holdings, Inc. and the subsidiaries of Yapstone Holdings, Inc. who perform services on our behalf for the purposes described in the Uses Made of Your Information section above.
We may disclose your data to Partners and third parties:
- ● In the event that we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets;
- If YapStone, Inc., or Yapstone Holdings, Inc. or any of its affiliates, have substantially all of their assets are acquired by a third party, personal information held by it about you may be one of the transferred assets;
- For the purposes of fraud protection, credit risk reduction, and the prevention and reporting of money laundering or other criminal or suspected criminal activity, including the building of fraud and credit risk models to assist in the screening of users for the purposes of identifying fraudsters, preventing fraud and minimising associated credit risk for YapStone, its Partners, Merchants and other users of its Services;
- Where such third parties provide services to us that facilitate the provision of our services to you, including for example, credit card issuers, software providers and our financial services partners;
- Pursuant to a valid request or subpoena from law enforcement, regulators, court, or other government body in Canada or outside of Canada;
- With your permission.
REMARKETING OF YAPSTONE’S SERVICES
YapStone may partner with third parties to provide you with promotions and advertisements of YapStone’s services on YapStone’s behalf. This service is called “remarketing”. The service will allow third parties to display YapStone ads or promotions to you if you have previously visited one of YapStone’s Websites based upon the cookies placed on your computer.
You can prevent remarketing by deleting your cookies or blocking cookies, though certain websites operate more effectively with cookies enabled.
We abide by the following principals with respect to remarketing:
- We will not use or associate targeting information, such as location, with any personally identifiable information collected from an ad or its landing page;
- We will not share any personally identifiable information with any partner ad network through our remarketing tag or any ad-associated product data feeds;
- We do not send precise location information without obtaining your consent;
- We abide by Google’s policies for identified Sensitive Categories; and
- We will not modify or obscure any notices an ad network may display to users about the remarketing lists they’re on, along with the corresponding domain name.
ACCESS TO YOUR INFORMATION AND YOUR CHOICES
You can request access to or correction of your personal information in our custody or control by contacting us at the address below. You may also be able to access and update certain information by logging into your account.
You can choose not to receive emails from us by “unsubscribing” using the instructions in any email you receive from us. This will not stop us from sending emails about your account or your transactions with us.
You can choose to delete or block cookies by setting your browser to either reject all cookies or to allow cookies only from selected sites. If you block cookies performance of the Website may be impaired and certain features may not function at all.
If you do not want to your cookies to be used for marketing, please visit the Network Advertising Initiative for opting out of interest-based advertising by participating companies. This does not mean you will not receive any online advertising – it merely means that the companies from which you opted out will no longer deliver ads tailored to your web preferences and patterns.
YOUR RIGHTS RELATED TO OTHER WEBSITES
When you download or use our mobile applications, we may receive information about your location and your mobile device, including a unique identifier for your device. We may use this information to provide you with location-based services, such as advertising, search results, and other personalized content. Most mobile devices allow you to turn off location services. If you have questions about how to disable your device’s location services, we recommend you contact your mobile service carrier or your device manufacturer.
PHISHING OR FALSE EMAILS
If you receive an unsolicited email that appears to be from us or one of our Partners or third parties that requests your personal information (such as your personal information, credit card number, YapStone login, or password), or that asks you to verify or confirm your account or other personal information by clicking on a link, that email was likely to have been sent by someone trying to unlawfully obtain your information. This is sometimes referred to as a “phishing” or “spoofing.” We do not ask for this type of information in an email. Do not provide the information or click on the link. If you receive any suspected phishing or spoofing emails, please report it to firstname.lastname@example.org.
Promotions, incentives, or giveaways may be made available through YapStone, our Partners, or third parties from time to time. You do not have to participate in these. However, if you choose to participate, you may be asked to disclose some personal information. Additionally, at the time of entering the promotion, we will disclose in its specific terms and conditions regarding how your personal information will be used. Please do not participate in any promotion if you do not agree to such usage.
Yapstone Canada ULC
2121 N. California Blvd., Suite 400
Walnut Creek, CA 94596
Effective Date: April 2, 2019