Last Revised: June 10, 2024

Here at Prizeout Corp. (“Prizeout”, “we”, “us”, “our”), we work hard to build and maintain a relationship of trust with you. This Privacy Policy (“Privacy Policy”) describes how we collect, use, and disclose information in connection with your access and use of all websites that link to this Privacy Policy, including www.prizeout.com (and all related subdomains) (the “Site”) and our products, services, and applications, both online and offline, including our widget or optional browser extension accessible via external sites and any services, transactions, or engagement you might have with us (collectively, the “Services”).

The Services allow consumers (“Consumers”) to withdraw funds that they have deposited, stored, earned, won or are otherwise entitled to collect or withdraw from companies, financial institutions, organizations, governmental entities, and other entities with whom Prizeout has partnered or to whom Prizeout offers its services (“Partners”), in the form of rewards or digital gift cards or other stored value mechanisms ( with digital gift cards, “Gift Cards”) offered by a variety of retailers and brands (“Merchants”), or gifted purchasing opportunities (“Prizeout Gifts”) offered or facilitated by Prizeout and purchase, track, and maintain such Gift Cards or Prizeout Gifts. This Privacy Policy also applies to recipients of Gift Cards or Prizeout Gifts and individuals who use the Services on behalf of a Partner or Merchant (“Partner or Merchant Users”) (collectively, with Consumers and visitors to the Site, “Users”).

Please carefully read this Privacy Policy, which is part of our Terms of Use, before using our Services. If you do not agree with the Terms of Use and/or this Privacy Policy, you must refrain from using our Services. By accessing or using our Services, you agree to our use of your information consistent with the Terms of Use and this Privacy Policy. Minors (those under the age of 18 years) are not eligible to use our full suite of Services. Certain individuals 13 years of age or older are permitted to use limited portions of our Services in conjunction with specific Partners as detailed in our Terms of Use. If you are a Partner or Merchant User accessing our Partner or Merchant portals (“Portals”) pursuant to an agreement between you and Prizeout (such as a Partner Agreement or Merchant Terms of Use), then your use of the Portals and Services is also governed by such agreement(s).

Please note that we may process certain information about you on behalf of our Partners (“Partner End User Data”). This Privacy Policy does not cover how we treat Partner End User Data that we process as a data processor or service provider when you are accessing our Services through, or in relation to, certain Partners, including where we operate the CashBack+ Loyalty Program on behalf of a Partner as a processor. For more information about who is the controller of data and under what circumstances, refer to the “Data Protection Rights, Information, and Choices” section below.

PRIVACY POLICY CHANGES

This Privacy Policy is subject to change. We reserve the right to update or modify this Privacy Policy at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. We encourage you to review this Privacy Policy frequently for any revisions or amendments. Changes to this Privacy Policy will be made accessible through use of the Services with an updated “Last Revised” date. You will be deemed to have been made aware of and have accepted the changes by your continued use of our Services.

INFORMATION WE COLLECT

Information You Provide To Us

We collect information you choose to provide to us, including information you enter through the Services. For example, if you are a Consumer or visitor to the Site, when you:

  • Create an account to use the Services or request further information about the Services, we may collect contact information (such as your name, email address, and phone number) and registration information (such as your username and password);
  • Interact with the Services, we may collect information related to requesting, purchasing, and claiming a Gift Card (such as your contact information, location information, demographic information—including interests, gender, and year of birth—financial information, and authentication information) as well as other information you enter through the Services;
  • Install or configure the optional CashBack+ Pay browser extension, from the moment you install the CashBack+ Pay browser extension, we may collect your IP address, internet browsing activity including, but not limited to, URL of the sites you are visiting and the contents of those website pages (“Internet Browsing Activity Data”), device data, IP address, browser data, and related data identified as Device and Usage Data in the Information We Collect Through Automated Means section below. If you configure, link, or otherwise connect the browser extension with your Partner account, we may also collect your contact information and other registration information associated with your Partner account (such as your name, email address, account or member ID, account balance, and other account identifiers), information associated with gift cards you are purchasing or have purchased, merchants you are engaging with, and the cart totals as you checkout at those merchants
  • Contact us with questions or for customer service, we may collect contact information (such as your name, email address, and phone number) as well as any information you provide in connection with your outreach; and
  • Participate in promotions, events, surveys, and sweepstakes, we may collect basic contact information and any other information you provide in connection with these activities.

If you are a Partner or Merchant User, work for a potential partner or merchant business, or visit the Site, when you:

  • Create an account to use the Services or request further information about the Services, we may collect contact information (such as your name, email address, business address, and phone number), business information (such as job position, function, and title, and the size, location, and needs of your company), and registration information (such as your username and password);
  • Interact with the Services, we may collect information related to creating Gift Card campaigns, verifying your account (such as contact information, business information, including government identifiers, and third-party authentication credentials), remitting and charging amounts owed (such as financial information, including bank account and ACH information), as well as other information you enter through the Services;
  • Contact us with questions or for customer service, we may collect contact information (such as your name, email address, and phone number) as well as any information you provide in connection with your outreach;
  • Participate in promotions, events, and surveys, we may collect basic contact information and any other information you provide in connection with these activities;

Information We Collect Through Automated Means

We may automatically collect, receive, and store certain information in connection with the actions you take on the Services and in connection with use of the Services (“Device and Usage Data”). As discussed further below in the “Cookies & Similar Technologies” section and the Cookie Policy, we and our vendors, may use a variety of technologies, including cookies, to assist in this information collection. For example, each time you use the Services, we automatically collect the type of web browser and operating system you use, the type of device you use, your IP address, Internet service provider, unique device identifiers, and other information in accordance with your device settings and permissions. We may also collect the pages you view, referring and exit pages, the date and time of your visit, the number of clicks to, from, and within the Services, time spent on each page, usage preferences, and search terms. We may also collect general location information (such as your city and state inferred from your IP address). As detailed above, when you install the CashBack+ Pay browser extension, in addition to Device and Usage Data, we may additionally collect Internet Browsing Activity Data. We may also track when and how frequently you access or use the CashBack+ Pay browser extension or other Services, including how you engage with or navigate those Services.

Information We Collect from Other Sources

When a Consumer uses the Services to view Gift Card options in contemplation of withdrawing funds from an account held with a Partner, the Partner may provide Prizeout with the Consumer’s contact information (such as name and email address), demographic information (such as gender and year of birth), location information and information about the Consumer’s account with the Partner (such as account balance).

Prizeout may allow users to send gifts using the Services. When a Consumer purchases a Gift Card or Prizeout Gift for a recipient, the Consumer may provide contact information about the recipient, such as name, email address, and phone number, to allow Prizeout to electronically deliver the Gift Card or Prizeout Gift to the recipient. By sending a Gift Card or Prizeout Gift to a recipient, you represent that you are authorized to provide their name, email address, phone number or other information with us. We will use that information to send the Gift Card or Prizeout Gift or an email inviting him or her to visit the site, will store that information to facilitate the redemption of the Gift Card or Prizeout Gift, and may send marketing emails.

We may collect information from other sources, such as payment vendors, Gift Card providers and merchants, analytics vendors, security service providers, survey providers. For example, we utilize certain analytics tools to improve the Services experience for Users, Partners, and Merchants. We may also receive information from Gift Card providers, Merchants, and vendors related to activities conducted on or through their sites and services, including past purchases and shopping activity. We may aggregate the characteristics and browsing habits of Users, on an anonymized basis, to provide products and services that are more tailored to our Merchants and Partners. We obtain contact and business information used to communicate with you about the Services from conferences, events, sales partners, and public records.

Additionally, as noted above, when you install optional CashBack+ Pay browser extension, we are able to access the URL of the sites you are visiting and the contents of those website pages as we seek to identify relevant checkout pages and help you purchase gift cards. When you configure, link, or otherwise connect the browser extension with your Partner account, we receive additional information from the Partner as detailed above.

HOW WE USE INFORMATION

We use your information to:

  • Provide you with the Services and information you request;
  • Manage, verify, and authenticate your account or configure, link, or otherwise connect your use of the Services with a Partner account;
  • Display Gift Card purchase options;
  • Engage in transactions, including contacting you about your account, billing, remitting, or charging you or your organization for Gift Cards or our Services, and processing payments;
  • Fulfill, deliver, and apply Gift Card orders;
  • Contact the recipient of a Gift Card or Prizeout Gift about the Services;
  • Improve the Services, including customization and personalization;
  • Provide you with effective customer service;
  • Communicate with you about the Services and contact you with special offers, promotional information, content, publications, and other information we believe will be of interest to you (in accordance with any privacy preferences you have expressed to us) via mail, email, telephone, and/or text messaging;
  • Analyze use of the Services and improve the content, functionality, and usability of the Services, enhance the User experience, and improve our business;
  • Send emails or text messages in order to verify you in connection with your usage of the Services;
  • Invite you to participate in promotions, sweepstakes, surveys and provide feedback to us;
  • Secure the Services and investigate and help prevent fraud, security issues, and abuse;
  • Understand, detect, and resolve problems with the Services and other issues being reported;
  • Comply with any procedures, laws, and regulations where necessary for our legitimate interests or legitimate interests of others;
  • Establish, exercise, or defend our legal rights where necessary for our legitimate interests or the legitimate interests of others, including the enforcement of our Terms of Use, other usage policies and agreements, and other legal terms or controls, or to engage in other legal matters; and
  • Fulfill other requests with your consent and for any other purposes disclosed at the time you provide personal information.

Combined information.

For the purposes discussed in this Privacy Policy, we may combine the information that we collect through the Services with information that we receive from other sources, both online and offline, and use such combined information in accordance with this Privacy Policy.

Aggregate/De-identified Information.

We may aggregate and/or de-identify any information collected through the Services so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”). We may use Aggregate/De-Identified Information for any purpose, including without limitation for research and marketing purposes, and may also disclose such data with any third parties in our discretion.

LEGAL BASES FOR USE OF YOUR INFORMATION

The laws of some jurisdictions, including the European Economic Area (“EEA”) and the United Kingdom (“UK”) and the Kingdom of Bahrain (“Bahrain”), require that companies only process your “Personal Data” (as that term is defined in the applicable law, like the EU General Data Protection Regulation) if they have a “legal basis” (or justifiable need) for processing your Personal Data. To the extent those laws apply, our legal bases for processing Personal Data are as follows:

  • To perform our obligations pursuant to a contract (or pending contract) with you. For example, we will process your Personal Data to comply with our Terms of Use to enter into a contract with you, and to honor our commitments in any contracts that we have with you.
  • For our legitimate interests or the legitimate interests of others. For example, we will process your Personal Data to: operate our business and our Services; identify and fix any issues with our Services; secure the Services; learn more about how our customers use the Services; perform internal analytics; improve the Services and Users’ experiences; conduct marketing; provide you with certain information about new products, special offers or other information that we think you may find interesting using the email address which you have provided in accordance with applicable law; make and receive payments; comply with legal requirements and defend our legal rights; prevent fraud; engage in a business change (e.g., sale, merger); and to know the customer to whom we are providing Services.
  • To comply with our legal obligations, such as our obligation to disclose data to tax authorities.
  • With your consent. Where we rely on this basis, you have the right to withdraw your consent at any time as described in the “Data Protection Rights, Information, and Choices” section below.

COOKIES & SIMILAR TECHNOLOGIES

As further described in our Cookie Policy, we and our vendors may use cookies (a small text file placed on your device to identify your device and browser) and similar tracking technologies when you use our Services, or if you engage with our email communications. For example, on our Merchant and Partner Portals, we and our vendors may use cookies to improve the experience of the applicable Services, such as keeping track of your activities on the applicable Site, recognizing return visitors, and analyzing our promotions and Site traffic. Learn more about your choices and ways to opt out in our Cookie Policy. Please note, however, that if you do not accept cookies, you may not be able to access all portions or features of our Services.

HOW WE DISCLOSE INFORMATION

We will share your information collected from and about you in the following ways:

  • Service Providers: We may provide access to or disclose your information with select third parties who perform services on our behalf, such as online hosting and maintenance, marketing and promotion design and management, management of e-commerce systems, payment processing, data storage and management, marketing and email delivery, analytics, customer service, security and fraud prevention, legal services, and identity and contact information validation.
  • Partners: We disclose information with Partners about Gift Card fulfillment relating to Consumers who have a relationship with them, including when Consumers withdraw funds from an account held with the Partner, in order to facilitate the transaction, contractual obligations, or the Partner’s ability to provide support on customer transactions.
  • Merchants: We disclose de-identified transactional history with Merchants in relation to transactions which we have facilitated for them.
  • Business Transfers: As we continue to develop our business, we may buy, merge, or partner with other companies. In such transactions (including in contemplation of such transactions), information may be among the transferred assets. If a portion or all of our assets are sold or transferred to a third party, User information would likely be one of the transferred assets. If such transfer is subject to notifications or restrictions under applicable laws, we will comply with such requirements.
  • Comply with Laws and Protect Our Rights and the Rights of Others: We may disclose your information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order or a subpoena. We may also disclose your information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of the Services; to enforce or apply our online Terms of Use or other agreements; or to protect our own rights or property or the rights, property, or safety of our Users or others.
  • With Your Consent or At Your Direction: We may share disclose information to with third parties when you direct us to do so or if you have consented to additional sharing disclosure of your information (including as set out in this Privacy Policy). If you purchase a gift card using the CashBack+ Pay browser extension, you are instructing us to automatically insert gift card information into the webpage you are visiting.

SECURITY

We recognize the importance of implementing a variety of security safeguards designed to protect the confidentiality of your information. However, no data transmission over the Internet or other network is completely secure. As a result, while we strive to protect information you transmitted on or through our Services, you do so at your own risk.

When you create an account, you may be prompted to create a username or password. If you create an account with us, you are responsible for maintaining the confidentiality of your account password and for any activity that occurs under your account. Additionally, you are responsible for safeguarding any issued gift card code or information, including when stored within your email account. We are not responsible for any loss or damage arising from your failure to maintain the confidentiality of your password or issued gift card code. We urge you to change your passwords often, use a combination of letters and numbers, and make sure you are using a secure browser. If you have reason to believe that your interaction with us is no longer secure or if you suspect someone else is using your account, please let us know immediately by contacting us as indicated in the “Contact Us” section below.

THIRD PARTY LINKS AND FEATURES

Please be aware that third-party websites accessible or recommended through our Services may have their own privacy and data collection policies and practices. These links and features are provided for your reference and convenience only and do not imply any endorsement of information provided through these third-party links and features, nor any association with their operators. We are not responsible for any actions, content of websites, or privacy policies of such third parties. We urge you to read the privacy and security policies of these third parties.

HOW LONG WE RETAIN YOUR DATA

We will retain your information for as long as we have a business need for it or as needed to comply with applicable legal obligations. We also retain and use your information as necessary to resolve disputes, protect Prizeout, our Users, Partners, and Merchants, and enforce our agreements.

DATA PROTECTION RIGHTS, INFORMATION, AND CHOICES

You may have certain rights with respect to your personal information as further described in this section, in addition to any rights discussed elsewhere in this Privacy Policy. Please note your rights and choices vary depending upon your location.

Marketing Communications

You may instruct us not to use your information to contact you by email, postal mail, or phone regarding products, services, promotions and special events that might appeal to your interests by contacting us using the information in the “Contact Us” section below. In commercial email messages, you can opt out by following the instructions located at the bottom of such emails. Removing your name from the email list may take a reasonable amount of time. Please note that, regardless of your request, we may still use and disclose certain information as permitted by this Privacy Policy or as required by applicable law. For example, you may not opt out of certain operational emails, such as those reflecting our relationship or transactions with you.

Additional Choices

You can also make certain choices by using the options described in our Cookie Policy.

Rights with Respect to Your Information

Residents of certain jurisdictions, including the European Economic Area (“EEA”), United Kingdom (“UK”), Canada, Bahrain, and some U.S. states (such as Colorado), may have the right to make certain requests regarding your “personal information” or “personal data” (as such terms are defined under applicable law, and collectively referred to herein as “personal information”). Specifically, you may have the right to ask us to:

  • Inform you about the categories of personal information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your personal information; and the categories of third parties with whom we disclose personal information.
  • Provide you access to and/or a copy of certain personal information we hold about you.
  • Correct or update personal information we hold about you.
  • Delete certain personal information we have about you.
  • Provide you with information about the financial incentives that we offer to you, if any.
  • Opt you out of the processing of your personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects, if applicable.

As provided in applicable law, you also have the right to not be discriminated against for exercising your rights. Please note that certain information may be exempt from such requests under applicable law. For example, we need to retain certain information in order to provide our services to you. When we delete any information, it will be deleted from the active database, but may remain in our archives to be overwritten or deleted in the ordinary course. We may also retain your information for fraud or similar purposes. We also need to take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name and email address.

Depending on your jurisdiction, you may be permitted to designate an authorized agent to submit certain requests on your behalf. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorized agent’s request.

If you would like further information regarding your legal rights or would like to exercise any of them, please visit this link (if you are a resident of the of the EEA or UK), this link (if you are a U.S. resident), email us at infosec@prizeout.com, or contact our EU or UK GDPR representative identified in the “Contact Us” section below.

Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. If we deny your request, we will provide you with information on how to appeal the decision, if applicable, in our communications with you. To exercise such an appeal right, email us at infosec@prizeout.com or use this link (if you are a U.S. resident). In addition, you may have the right to file a complaint with regulatory authorities with respect to our data processing, and our legal basis for processing.

With regard to Partner End User Data, Consumers should direct requests to exercise applicable rights to the Partner on whose behalf we handle the data. If we receive a request from a User directly in relation to Partner End User Data, we will either alert you to redirect your request to the applicable Partner or refer that request to the appropriate Partner and await the Partner’s instructions on how to handle it.

If you are a California resident, please see the “Privacy Information for California Residents” section below for information about your specific rights under California law.

Residents of Colorado

Residents of Colorado may click here to view more information regarding each category of personal information we process, the purposes for which we process each category, and the categories of entities to whom the personal information is disclosed. Please note that we do not engage in profiling that produces legal or similarly significant effects.

Notice of Right to Opt Out of Sales of Personal Information and Processing/Sharing of Personal Information for Targeted Advertising Purposes.

We have not “sold” or “processed for targeted advertising purposes” personal information in the last 12 months. However, as noted below, if you would like to request that we not sell information associated with your name/email address at any point in the future, you can visit this link.

In the future, we may disclose personal information to unaffiliated third parties we collaborate with or that provide offers that we think may be of value to you. We may also provide other personal information to third-party advertising providers for targeted advertising purposes or use advertising analytics partners to assist us in analyzing use of our services and our user/customer base. Under applicable law, the disclosure of your personal information to these third parties to assist us in providing these services may be considered a “sale” of personal information or the processing/sharing of personal information for targeted advertising purposes.

To the extent we engage in such activity in the future, if you would like to opt out of the disclosure of your personal information for purposes that could be considered “sales” for those third parties’ own commercial purposes, or “sharing” or processing for purposes of targeted advertising, please review the information and follow the instructions in the Cookie Policy. You must follow the instruction on each site/app on each browser/device you use to access the Services. You must also renew this choice if you clear your cookies or your browser is set to do that. You can also submit a request to opt out of the use of your email address and other personal information related to that email address for targeted advertising purposes by visiting this link. You may be permitted to designate an authorized agent to submit such requests on your behalf. Please note that we do not knowingly sell the personal information of minors under 16 years of age.

Notice of Financial Incentives

We may offer opportunities to receive certain services or benefits, including money to participate in surveys, sign up for communications, or other similar incentives, which may require the provision of personal information, such as registering for an account and answering surveys or providing additional feedback or information. Such opportunities could be considered a financial incentive under applicable law (each, an “Incentive Program”). Your participation in Incentive Programs is purely voluntary. When you participate in an Incentive Program, you agree to the terms of that Incentive Program, and we may revoke your participation depending on the Incentive Program.

Identifying the Data Controller and Processor

Data protection laws in certain jurisdictions differentiate between the “controller” and “processor” of information. In general, the Partner is the controller of Partner End User Data and Prizeout is the processor of Partner End User Data. This Privacy Policy does not cover information about Partner End User Data that Prizeout receives from a Partner, or otherwise processes on a Partner’s behalf, in connection with the Services provided by Prizeout to a Partner pursuant to an applicable services agreement. If you have any questions about a Partner’s privacy practices, please contact the applicable Partner who has provided your information to us for more information.

Privacy Information for California Residents

This section supplements our Privacy Policy with additional information for California residents about our information collection and use practices as required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”). In this section, the terms “personal information” and “sensitive personal information” have the meaning set forth in the CCPA.

Collection, Use, and Disclosure of Californian’s Personal Information

During the 12 months leading up to the effective date of this Privacy Policy, we collected (and continue to collect) all of the categories of information listed in the chart below and described in the “Information We Collect” section of our Privacy Policy. That section also explains the sources from which we collect information about you, including, for example, you, Partners, Gift Card providers, Merchants, service providers, analytics providers, cookies and tracking technologies, survey partners, and marketing partners, and users of the Services.

The “How We Use Information” section of this Privacy Policy explains how and why we use your personal information. Generally speaking, we use your information to provide our Services, manage and verify your account, offer Gift Cards and fulfill and deliver Gift Card transactions, bill, remit, charge, and process payments, send communications, personalize the Services, provide customer service, analyze, research, develop, and improve the Services, enforce legal terms and defend our rights, investigate and prevent security issues, fraud, and abuse, comply with laws, and as described when collecting your information.

We disclose certain information as set forth in “How We Disclose Information” section and in the chart below, and we may allow third parties to collect certain information about your activity, for example through cookies, as explained in the “Cookies & Similar Technologies” section and Cookie Policy.

In the 12 months since the effective date of this Privacy Policy, we made the following disclosures of personal information about California residents:

Category of personal information collected by Prizeout 

Categories of third parties to which the information was disclosed for a business purpose

Identifiers, such as name, username, or other similar identifiers.

· Service providers who perform functions on our behalf, such as data storage and hosting providers, account verification providers, email and notification providers, network and system management providers, communication tools, IT support providers, CRM providers, payment providers (“Service Providers”) 

· Partners

· Data analytics providers

· Other individuals, services, and partners at your request or with your consent

· Entities involved in actual or potential significant corporate transactions

· Third parties for legal purposes 

Contact and account registration information, such as telephone number, email address, or other contact information.

· Service Providers 

· Partners

· Data analytics providers

· Other individuals, services, and partners at your request or with your consent

· Entities involved in actual or potential significant corporate transactions

· Third parties for legal purposes 

Demographic information, such as interests, gender, and year of birth.

· Service Providers 

· Data analytics providers

· Other individuals, services, and partners at your request or with your consent

· Entities involved in actual or potential significant corporate transactions

· Third parties for legal purposes

Customer service information, such as questions and other messages you address to us and summaries or voice recordings of your interactions with customer care.

· Service Providers 

· Data analytics providers

· Other individuals, services, and partners at your request or with your consent

· Entities involved in actual or potential significant corporate transactions

· Third parties for legal purposes 

Business and commercial information,such as position, title, business address, business email address, phone number, size, location, and needs of your company.

· Service Providers 

· Data analytics providers

· Entities involved in actual or potential significant corporate transactions

· Third parties for legal purposes

Inferences about your preferences and characteristics, such as your age, location, and interests.

· Service Providers 

· Data analytics providers

· Entities involved in actual or potential significant corporate transactions

· Third parties for legal purposes

Financial and transactional information, such as billing information, financial account information (including credit card, bank account, and ACH information), unique financial institution account identified, and information about your transactions, purchases, and shopping activity with us and others, including the name of the Merchant from whom a Gift Card is purchased.

· Service Providers

· Partners

· Entities involved in actual or potential significant corporate transactions

· Third parties for legal purposes

Device information and identifiers, such as IP address, browser type and language, operating system, platform type, device type, and software and hardware attribute.

· Service Providers 

· Data analytics providers

· Entities involved in actual or potential significant corporate transactions

· Third parties for legal purposes

Connection and usage data, such as landing pages, browsing activity (including, but not limited to, URL visited), content or ads viewed and clicked, dates and times of access, pages viewed, time spent on each page, search terms, and information about network web traffic (including traffic from a specific user).

· Service Providers 

· Data analytics providers

· Entities involved in actual or potential significant corporate transactions

· Third parties for legal purposes 

Geolocation data, such as city, state, country, and ZIP code associated with your IP address.

· Service Providers 

· Data analytics providers

· Entities involved in actual or potential significant corporate transactions

· Third parties for legal purposes 

Information provided via research, surveys, sweepstakes, and/or other marketing research efforts

· Service Providers 

· Data analytics providers

· Other individuals, services, and partners at your request or with your consent

· Entities involved in actual or potential significant corporate transactions

· Third parties for legal purposes 

Other information, such as any other information you choose to directly provide to us in connection with your use of the Services.

· Service Providers 

· Data analytics providers

· Other individuals, services, and partners at your request or with your consent

· Entities involved in actual or potential significant corporate transactions

· Third parties for legal purposes

Retention

We retain personal information as described in the “How Long We Retain Data” section above.

Other CCPA Rights

Please see the “Rights with Respect to Your Information” sub-section above for information about the additional rights you have with respect to your personal information under California law and how to exercise them. We also provide information about financial incentives above in the “Notice of Financial Incentives” sub-section.

Sale and Sharing of Personal Information

We have not “sold” or “shared” personal information in the last 12 months. However, as noted below, if you would like to request that we not sell information associated with your name/email address at any point in the future, you can visit this link.

In the future, we may disclose personal information to unaffiliated third parties we collaborate with or that provide offers that we think may be of value to you. We may also provide other personal information to third-party advertising providers for targeted advertising purposes or use advertising analytics partners to assist us in analyzing use of our services and our user/customer base. Under applicable law, the disclosure of your personal information to these third parties to assist us in providing these services may be considered a “sale” or “share” of personal information.

To the extent we engage in such activity in the future, if you would like to opt out of the disclosure of your personal information for purposes that could be considered “sales” for those third parties’ own commercial purposes, or “sharing”, please review the information and follow the instructions in the Cookie Policy. You must follow the instruction on each site/app on each browser/device you use to access the Services. You must also renew this choice if you clear your cookies or your browser is set to do that. You can also submit a request to opt out of the use of your email address and other personal information related to that email address for targeted advertising purposes by visiting this link. You may be permitted to designate an authorized agent to submit such requests on your behalf. Please note that we do not knowingly sell the personal information of minors under 16 years of age.

California “Shine the Light” Disclosure

The California “Shine the Light” law gives residents of California the right under certain circumstances to opt out of the sharing of certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We do not share your personal information with third parties for their own direct marketing purposes within the meaning of that law.

Privacy Rights for Nevada Residents

Under Nevada law, certain Nevada residents may opt out of the “sale” of “covered information” (as such term is defined under Nevada law) for monetary consideration to a person for that person to license or sell such information to additional persons. We do not engage in such activity as of the effective date of this Privacy Policy.

Privacy Information for Bahrain Residents

Bahrain Privacy Rights

If you are a resident in Bahrain, in certain circumstances, you may have the following additional data protection right:

  • The right to object to your personal data being processed where we are processing such data for such purpose or in that manner which cases substantial and unwarranted harm or distress to you or others and/or ther are reasonable grounds to believe that it is likely that the processing for such purpose or in that manner will cause substantial and unwarranted harm or distress to you and others.

International Transfers

With reference to the “International Transfers” section below, we may transfer your personal information outside the Kingdom of Bahrain. We will only do this where:

  1. the recipient country has been deemed to provide an adequatelevel of protection by the Personal Data Protection Authority in Bahrain (“PDPA”);
  2. the transfer is authorized by the PDPA;
  3. you have consented to the transfer; or
  4. the transfer is otherwise permitted by law.

INTERNATIONAL TRANSFERS

Your personal information may be transferred to, stored in, accessed from, or processed in the United States or other jurisdictions in which we or our service providers maintain facilities. You understand that these jurisdictions may have different data protection regimes than in the country in which you are located.

Where legally required, we will use an adequate transfer method. For example, whenever we transfer your personal information from the EEA and UK to the United States, we use standard contractual clauses approved by the European Commission which give personal information the same protection it has in Europe. Where applicable, you are entitled, upon request, to receive a copy of the relevant safeguard (e.g., EC standard contractual clauses) that have been taken to protect personal information during such transfer. For a copy of the relevant safeguard please email us at infosec@prizeout.com.

CONTACT US

If you have any questions about our Services or this Privacy Policy, or to contact our data privacy officer, please email us at infosec@prizeout.com.

If you are in the EEA, you can alternatively contact our EU GDPR representative at:

PrizeoutGDPRrepresentative@mhc.ie

MHC EU GDPR Representative

Mason Hayes and Curran Professional Services Limited

South Bank House

Barrow Street

Dublin 4

Ireland

If you are in the UK, you can alternatively contact our UK GDPR representative at:

PrizeoutGDPRrepresentative@mhcldn.com

MHC UK GDPR Representative

Mason Hayes and Curran LLP

1 Cornhill

London

EC3V 3ND

England

U.S. Federal Privacy Notice

This section describes how we collect, use and disclose information in connection with products and Services that we jointly offer or market with certain Partners.

Rev. January 2023

FACTS

WHAT DOES PRIZEOUT CORP DO WITH YOUR PERSONAL INFORMATION?

Why?

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.

What?

The types of personal information we collect and share depend on the product or service you have with us. This information can include:

  • Identifiers (such as name or username) and contact information (such as email address and telephone number)
  • Checking account information and account balances
  • Transaction history and account transactions

When you are no longer our customer, we continue to share your information as described in this notice.

How?

All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons Prizeout Corp. chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information

Does Prizeout Corp. share?

Can you limit this sharing?

For our everyday business purposes—

such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus

Yes

No

For our marketing purposes—

to offer our products and services to you

Yes

No

For joint marketing with other financial companies

Yes

No

For our affiliates' everyday business purposes—

information about your transactions and experiences

No

We don't share

For our affiliates' everyday business purposes—

information about your creditworthiness

No

We don't share

For our affiliates to market to you

No

We don't share

For nonaffiliates to market to you

No

We don't share

Questions?

Who we are

Who is providing this notice?

Prizeout Corp.

What we do

How does Prizeout Corp. protect my personal information?

To protect your personal information from unauthorized access and use, we use security measures that comply with federal laws. These measures include computer safeguards and secured files and buildings.

How does Prizeout Corp. collect my personal information?

We collect your personal information, for example, when you

  • Choose to withdraw funds via a gift card or when you choose to send a gift card through Prizeout
  • Choose to withdraw funds via a gift card or when you choose to send a gift card through Prizeout
  • Complete a gift card transaction through Prizeout
  • Open a Prizeout account or give us your contact information
  • Provide account information
  • Tell us who receives a gift card

We also collect your personal information from others, such as financial institutions that we partner with.

Why can't I limit all sharing?

Federal law gives you the right to limit only

  • sharing for affiliates' everyday business purposes—information about your creditworthiness
  • affiliates from using your information to market to you
  • sharing for nonaffiliates to market to you

State laws and individual companies may give you additional rights to limit sharing.

Definitions

Affiliates

Companies related by common ownership or control. They can be financial and nonfinancial companies.

  • We do not have affiliates.

Nonaffiliates

Companies not related by common ownership or control. They can be financial and nonfinancial companies.

  • We do not share with nonaffiliates so they can market to you.

Joint marketing

A formal agreement between nonaffiliated financial companies that together market financial products or services to you.

  • Our joint marketing partners include credit unions and banks.

 

California: Under California law, we will not share information we collect about you with companies outside of Prizeout Corp., unless the law allows. For example, we may share information with your consent, to service your accounts, or to provide rewards or benefits you are entitled to. We will limit sharing among our companies to the extent required by California law.