Qualpay, Inc. California Privacy Notice

Information for California Residents

We collect Personal Information from California Residents  and comply with the California resident Act and related laws and regulations (“California privacy laws”). In addition to our general Privacy Notice available at https://www.qualpay.com/privacy, this California Privacy Notice applies to California residents (“users,” “you,” or “your”).

For the purposes of this California Privacy Notice, “Personal Information” means information that is linked or reasonably linkable to a particular individual or household. However, the following categories of information are not Personal Information:

This Privacy Notice provides the following information to California residents:

Categories of Non-Sensitive Personal Information

The table below outlines the non-sensitive categories of Personal Information Qualpay, Inc.collects about California residents and whether and how they are disclosed to third parties.

We collect Non-Sensitive Personal Information from the following sources:

Category of Personal Information: Identifiers

Examples

Identifiers may contain the following: Real name, alias, postal address, Internet Protocol address, email address, account name, social security number, driver's license number, passport number, birthdate, or other similar identifiers.

Purpose(s) for Collection

To comply with laws, regulations, and system rules, as well as better understand businesses and their owners and operators who are applying for merchant accounts and assess their risk profile, improve services, and provide targeted advertising.

Identifiers may also be collected from owners and employees of business partners to further the intent of the business relationship.

Targeted Advertising

We do not engage in targeted advertising or disclose this for targeted advertising purposes.

Sale

This information is not sold to third parties.

Other Disclosures

This information may be disclosed to Processors. We disclose Identifiers to Processors for data validation, authentication, and screening of individuals representing businesses seeking merchant services or vendor relationships.

Retention Period

7 years after the merchant account is closed or 3 years after the business relationship is terminated for non-merchants.

Category of Personal Information: Personal Characteristics

Examples

Personal Characteristics may contain the following: Name, social security number, address, telephone number, passport number, driver's license number, employment history, education history, financial information, bank account number, or other similar characteristics.

Purpose(s) for Collection

To comply with laws, regulations, and system rules, as well as better understand businesses and their owners and operators who are applying for merchant accounts and assess their risk profile.

Targeted Advertising

We do not engage in targeted advertising or share Personal Information for targeted advertising purposes.

Sale

We do not sell Personal Information to anyone.

Other Disclosures

This information may be disclosed to Processors. We disclose Identifiers to Processors for data validation, authentication, and screening of individuals representing businesses seeking merchant services or vendor relationships.

Retention Period

7 years after the merchant account is closed or 3 years after a business relationship is terminated for non-merchants.

Category of Personal Information: Commercial Information

Examples

Commercial Information may contain the following: Records of personal property or other purchasing or consuming histories or tendencies contained in a credit report.

Purpose(s) for Collection

To comply with laws, regulations, and system rules, as well as better understand businesses and their owners and operators who are applying for merchant accounts and assess their risk profile.

Targeted Advertising

We do not engage in targeted advertising or disclose this  information for targeted advertising purposes.

Sale

This information is not sold to third parties.

Other Disclosures

This information may be disclosed to Processors. We disclose Identifiers to Processors for data validation, authentication, and screening of individuals representing businesses seeking merchant services.

Retention Period

7 years after the merchant account is closed

Category of Personal Information: Internet/Electronic Activity

Examples

Internet/Electronic Activity may contain the following: Internet/Electronic Activity: Name, device ID, cookies.

Purpose(s) for Collection

To comply with laws and regulations, for the use of electronic documents and signatures.

Cookies are tracked to enable our systems to recognize your browser and capture as well as remember certain information. We also use cookies to compile aggregate data about site traffic and site interactions in order to offer better site experiences and tools in the future. We may also use trusted Third-Party services that track this information on our behalf. We also send a "session cookie" to your computer when you sign up for and log in to your account. This type of cookie helps us to recognize you if you visit multiple pages on our site during the same session so that we don't need to ask users for a password on each page.

Targeted Advertising

We do not engage in targeted advertising or disclose this information for targeted advertising purposes.

Sale

This information is not sold to third parties.

Other Disclosures

This information is not disclosed to third parties.

Retention Period

7 years after the merchant account is closed or 3 years after the business relationship is terminated for non-merchants.

Category of Personal Information: Imprecise Geolocational

Examples

Imprecise Geolocational may contain the following: Internet Protocol Address.

Purpose(s)

As a personal identifier for electronically signed agreements.

Targeted Advertising

We do not engage in targeted advertising or share Personal Information for targeted advertising purposes.

Sale

This information is not sold to third parties.

Other Disclosures

This information is not disclosed to third parties.

Retention Period

7 years after the merchant account is closed, or 3 years after the business relationship is terminated for non-merchants.

Category of Personal Information: Professional Information

Examples

Professional Information may contain the following: Employment and business ownership history.

Purpose(s) for Collection

To comply with laws, regulations, and system rules, as well as better understand businesses and their owners and operators who are applying for merchant accounts and assess their risk profile.

Targeted Advertising

We do not engage in targeted advertising or share Personal Information for targeted advertising purposes.

Sale

This information is not sold to third parties.

Other Disclosures

This information is not disclosed to third parties.

Retention Period

7 years after the merchant account is closed.

Category of Personal Information: Educational Information

Examples

Educational Information may contain the following: College or degree information.

Purpose(s) for Collection

To comply with laws, regulations, and system rules, as well as better understand businesses and their owners and operators who are applying for merchant accounts and assess their risk profile.

Targeted Advertising

We do not engage in targeted advertising or disclose this information for targeted advertising purposes.

Sale

This information is not sold to third parties.

Other Disclosures

This information is not disclosed to third parties.

Retention Period

7 years after the merchant account is closed.

Category of Personal Information: Educational Information

Examples

Educational Information may contain the following: College or degree information.

Purpose(s) for Collection

To comply with laws, regulations, and system rules, as well as better understand businesses and their owners and operators who are applying for merchant accounts and assess their risk profile.

Targeted Advertising

We do not engage in targeted advertising or disclose this information for targeted advertising purposes.

Sale

This information is not sold to third parties.

Other Disclosures

This information is not disclosed to third parties.

Retention Period

7 years after the merchant account is closed.

Categories of Sensitive Personal Information

The table below outlines the categories of Sensitive Personal Information Qualpay, Inc, collects about California Residents whether they are disclosed to third parties.

We collect Sensitive Personal Information from the following sources:

Category of Sensitive Personal Information: Government ID Information

Examples

Government ID information may contain the following: Driver's License, Passport, Social Security Number, or State issued ID.

Purpose(s) for Collection

Complying with legal and regulatory obligations, and to follow best practices for identity verification for owners and operators of businesses seeking merchant services.

Targeted Advertising

We do not engage in targeted advertising or disclose this information for targeted advertising purposes.

Sale

This information is not sold to third parties.

Other Disclosures

This information may be disclosed to Processors. We disclose Government ID information to processors for data validation, identity verification, and authentication of individuals representing businesses seeking merchant services.

Retention Period

7 years after the termination of an account or contract or 3 years after the termination of a non-merchant business relationship.

Category of Sensitive Personal Information: Sensitive Category Information

Examples

Sensitive Category information may contain the following: Social Security number, Driver's License number, Passport number, state identification card, financial account information, and credit history.

Purpose(s) for Collection

Complying with legal and regulatory obligations, and to follow best practices for identity verification for owners and operators applying for merchant services for their business.

Targeted Advertising

We do not engage in targeted advertising or disclose this information for targeted advertising purposes.

Sale

This information is not sold to third parties.

Other Disclosures

This information may be disclosed to Processors. We disclose Sensitive Category information to processors for data validation, identity verification and evaluation of individuals representing business seeking merchant services.

Retention Period

7 years after the termination of a merchant account.

Category of Sensitive Personal Information: Financial Information

Examples

Financial information may contain the following: Financial information may include a California resident’s financial account information or credit history.

Purpose(s) for Collection

Complying with legal and regulatory obligations, and to follow best practices for underwriting for merchant services.

Targeted Advertising

We do not engage in targeted advertising or disclose this information for targeted advertising purposes.

Sale

This information is not sold to third parties.

Other Disclosures

This information is not disclosed to third parties.

Retention Period

7 years after the termination of a merchant account.

Use of Personal Data Information

We use Personal Information for the purposes described in our general Privacy Notice (see https://www.qualpay.com/privacy). Personal Information may also be used or disclosed as otherwise permitted or required by applicable law.

Disclosing Personal Information

We disclose Personal Information to the following categories of third parties:

See the tables above for more details about how different categories of Personal Information are shared.

We do not sell Personal Information to anyone. We do not share Personal Information for advertising purposes.

Exercising Your Personal Information Rights

California Residents have the following rights under California privacy laws:

If you are a California resident, you can submit a request to exercise your personal information rights under California Privacy Laws by sending an email to privacy@qualpay.com with the subject line "Privacy Rights Request".

To protect your privacy, we may need to authenticate your identity before we respond to your rights request. We will verify your identity by confirming the email address on file matches the email address of the request. If the email address cannot be confirmed, we will verify your identity through government issued identification. We may ask you for additional information as part of this process, including the answer to a security question, government identification, or by other means. If you do not complete the verification process, we may be unable to process your request. Any information you provide to authenticate your identity will only be used to process your rights request and not for any other purpose.  Please be aware that we do not accept or process rights requests submitted through other means (e.g., via fax or social media).

We will respond to your rights request within 45 days (or 15 days for requests to opt-out of the sale of Personal Information, requests to opt-out of targeted advertising, and requests to limit the use of Sensitive Personal information),though in certain cases we may inform you that we will need up to another 45 days to act on your request. If we suspect fraudulent or malicious activity on or from your account, we will delay taking action on your request until we can appropriately verify your identity and the request as authentic. Also note that each of the rights are subject to certain exceptions.

We reserve the right to decline to process, or charge a reasonable fee for, requests from a California resident that are manifestly unfounded, excessive, or repetitive.

Notice of Right to Limit the Use of Sensitive Personal Information

You have the right to limit some uses of Sensitive Personal Information. In general, you may direct companies not to use Sensitive Personal Information except as necessary to provide goods or services you have requested or other exempt purposes.

However, we only use Sensitive Personal Information for purposes that are exempt from this right, such as to provide you with goods or services you have requested, to detect and prevent security incidents, or verifying the quality of our goods and services. The full list of these exempt purposes are specified in California Code of Regulations, Title 11, Section 7027(m).

Children’s Data

We do not knowingly collect or use the Personal Information of children under 16. If you believe that we have collected the Personal Information of a child under 16, please contact us at legal@qualpay.com.

Authorized Agent Requests

California Privacy Law allows you to designate an authorized agent to make a rights request on your behalf. Your authorized agent may submit such a request by following the same method described above in the section titled Exercising Your Personal Information Rights. We may require verification of your authorized agent’s authority in addition to the information we require for verification of your identity.

Contact Us

If you have any questions or concerns regarding this California Privacy Notice, contact us at privacy@qualpay.com.


Qualpay, Inc

4 West 4th Avenue, 6th floor
San Mateo, CA 94402
privacy@qualpay.com

Last updated: September 27, 2024
Version 1.2