EFFECTIVE DATE: January 1, 2020
EFFECTIVE DATE: January 1, 2020
This “Privacy Notice” describes the practices of SBM Technology Corp. and its subsidiaries and affiliates (collectively, “SBM”, “we”, “us”, or “our”) and the rights and choices available to individuals, regarding personal data. Personal data means any information that relates to an identifiable individual.
SBM may provide additional or supplemental privacy notices to individuals at the time we collect their data, which will govern how we may process the information provided at that time. We may alter this Privacy Statement as needed to abide by local laws or regulations around the world, such as by providing supplemental information in certain countries. This Privacy Notice does not apply to SBM’s processing of the personal data of its personnel, such as employees and contractors.
We collect personal data about individuals from various sources described below. Where applicable, we indicate whether and why individuals must provide us with personal data, as well as the consequences of failing to do so.
A. Information that we collect when a merchant’s customer interacts with SBM POS
(i) Information that we collect when individuals make a payment
When you make a payment at a merchant using a SBM Point of Sale system (“SBM POS”), we collect information about the transaction, which may include personal data. Information about transactions includes the payment card used, name associated with the payment card, electronic signature, name and location of the merchant at which the transaction occurred, date and time of the transaction, transaction amount, and information about the goods or services purchased in the transaction.
(ii) Additional information merchants’ customers may provide through the SBM POS
We may collect additional information, depending on how a merchant configures its SBM POS. This information may include:
B. Information that we collect from merchants about their customers
Our merchants may provide us with information about their customers. This information may include uploaded email addresses, phone numbers, and purchase history, for instance when we manage promotions or marketing communications or perform other services on behalf of a merchant.
C. Information that we collect about merchants and their personnel
We may collect personal data directly from merchants (including prospective customers) about themselves and their personnel. We may collect information from these parties in a variety of contexts, such as when completing one of our online forms, making an application for one of our products or services, interacting with us on social media, or corresponding with us. The types of information we obtain in these contexts include:
D. Information collected via third-party applications
E. Information that we collect about job applicants to SBM POS
We collect information about job applicants, such as name and contact information, professional credentials and skills, educational and work history, and other information of the type included on a resume or curriculum vitae. We may collect this information when an individual provides it to us directly or when another party, such as a recruiter, provides it.
F. Information that we collect from private and publicly accessible sources
We and our service providers may collect information about individuals that is publicly available, including by searching publicly accessible government lists of restricted or sanctioned persons (such as the Specially Designated Nationals And Blocked Persons List), public records databases (such as company registries and regulatory filings), and by searching media and the internet. We and or our third party verification providers may also collect information from private or commercially available sources, such as by requesting reports or information from credit reference and fraud prevention agencies, to the extent permitted under applicable law.
G. Information collected via automated means
When you access our websites or use our mobile applications, we, our service providers, and our partners may automatically collect information about you, your computer or mobile device, and activity on our websites or mobile applications. Typically, this information includes your computer or mobile device operating system type and version number, manufacturer and model, device identifier (such as the Google Advertising ID or Apple ID for Advertising), browser type, screen resolution, IP address, the website you visited before browsing to our website, general location information such as city, state or geographic area; and information about your use of and actions on or in our websites or mobile applications, such as pages or screens you accessed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and length of access. Certain products or services that we provide or which merchants may incorporate into their websites or mobile applications may automatically collect additional information, as may be further described in a separate privacy notice.
Our service providers and business partners may collect this type of information over time and across third-party websites. This information is collected via various mechanisms, such as via cookies, web beacons, embedded scripts, through our mobile applications, and similar technologies. This type of information may also be collected when you read our HTML-enabled emails. Please refer to our Cookies Disclosure for more details. You can choose to disable cookies or to opt out of the use of your browsing behaviour for purposes of targeted advertising. For opt out instructions, please review the “Targeted online advertising” portion of the “Your Choices” section of this Privacy Notice.
H. Sensitive personal data
In limited circumstances and when permitted by law, we may collect a merchant’s and/or their employee’s biometric data to confirm a merchant’s and/or their employee’s identity, such as when they authenticate a payment or sign into their SBM POS device using their fingerprint. In some circumstances, we may collect information that may reveal health or medical information, such as when we process transactions at health or medical facilities or pharmacies. In the context of processing employment applications, we may also request sensitive information, such as racial or ethnic origin, where required or permitted by law of the country in which you are applying for employment.
Outside of these contexts or otherwise as we specifically request, we ask that you not provide us with any sensitive personal data (meaning information revealing racial or ethnic origin, political opinions, religion or philosophical beliefs, trade union membership, genetic, health, or biometric information, information about sex life or sexual orientation, or criminal convictions or offenses) through our websites or mobile applications, or otherwise to us.
We use your personal data for the purposes of:
A. Providing our products and services, which includes:
B. For research and development
We use the information we collect for our own research and development purposes, which include:
We may use your personal data to form a view on what products or services we think you may want or need, or what may be of interest to you.
We may present opportunities when you use a SBM POS to provide your personal data to SBM POS and merchants to facilitate marketing communications between you and the merchant, and we will send such marketing communication if you agree to receive them.
We may contact merchants and merchant’s personnel with marketing communications using the personal data that the merchant provided to us if the merchant actively expresses interest in making a purchase of Clover products or services or have made a purchase from us and, in any case, have not opted out of receiving that marketing, to the extent permitted by applicable law.
Where required by law, we will get your express opt-in consent before we share your personal data with any company outside the First Data group for marketing purposes.
You can ask us to stop sending you marketing messages at any time by contacting us using the details at Contact us section or clicking on the opt-out link included in each marketing message.
Should you choose to opt out of receiving our marketing messages, we will continue to carry out our other relevant activities using your personal data, including sending non-marketing messages.
D. Managing our recruiting and processing employment applications
We process personal data, such as information submitted to us in a job application, to facilitate our recruitment activities and process employment applications, such as evaluating a job candidate for an employment activity, and monitoring recruitment statistics.
E. Complying with law
We use your personal data as we believe necessary or appropriate to comply with applicable laws, lawful requests and legal processes, such as to respond to subpoenas or requests from government authorities.
F. Compliance, fraud prevention and safety
We use your personal data as we believe necessary or appropriate to (a) enforce the terms and conditions that govern our products and services; (b) protect our rights, privacy, safety or property, and/or that of you or others; and (c) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.
G. With your consent
In some jurisdictions, applicable law may require us to request your consent to use your personal data in certain contexts, such as when we use certain cookies or similar technologies or would like to send you certain marketing messages. If we request your consent to use your personal data, you have the right to withdraw your consent any time in the manner indicated when we requested the consent or by contacting us. If you have consented to receive marketing communications from our third party partners, you may withdraw your consent by contacting those partners directly.
H. To create anonymous data
We may create anonymous data from your personal data and from other individuals whose personal data we collect. We make personal data into anonymous data by excluding information that makes the data personally identifiable to you, and use that anonymous data for our lawful business purposes.
I. Not Sales Your Data
We will not sell and has not in the last 12 months sold any user data.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We maintain annual compliance with global Payment Card Industry Data Security Standard (PCI DSS) adopted by the payment card brands for all companies that process, store or transmit cardholder data.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We reserve the right to modify this Privacy Notice at any time. We encourage you to periodically review this page for the latest information on our privacy practices. If we make material changes to this Privacy Notice, we will notify you by updating the date of this Privacy Notice and posting it on our website and in app stores where our mobile applications covered by this Privacy Notice are available for download. We may (and, where required by law, will) also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via e-mail (if you have an account where we have your contact information) or another manner through our website or mobile applications.
Any modifications to this Privacy Notice will be effective upon our posting of the new terms and/or upon implementation of the new changes (or as otherwise indicated at the time of posting). In all cases, your continued use of our products or services after the posting of any modified Privacy Notice indicates your acceptance of the terms of the modified Privacy Notice.
We does not knowingly collect personally identifiable information from children under the age of thirteen. If you are under the age of thirteen, you must ask your parent or guardian for permission to use SBM website. SBM will not collect data from minors.
If you have any questions, concerns, or complaints about this Privacy Notice or our privacy practices, or to request access to your personal data, you may contact us at firstname.lastname@example.org.