If you are a consumer located in California, we process your personal information in accordance with California law (e.g. the "CCPA").
Your Rights and Choices
As a California consumer and subject to certain limitations under the CCPA, you have choices regarding our use and disclosure of your personal information.Please note these California-specific rights:
Exercising the right to know: You have a right to request additional information about the categories of personal information collected, sold, disclosed, or shared; purposes for which this personal information was collected, sold, or shared; categories of sources of personal information; and categories of third parties with whom we disclosed or shared this personal information.
Exercising the right to opt-out from a sale: We do not sell “Personal Information” as defined by the CCPA and have not done so in the past 12 months. Learn more.
Exercising the right to limit the use or sharing of Sensitive Personal Information: we do not sell or share Sensitive Personal Information as defined by the CCPA and have not done so in the past 12 months. Learn more about our collection and use of Sensitive Personal Information here.
Right to opt-out of sharing of cross-context behavioral advertising.
To submit a request to exercise any of the rights described above, please contact us using the methods described in the Contact Us section 13 above. We will verify your request by asking you to send it from the email address associated with your account or requiring you to provide information necessary to verify your identity, including name, address, transaction history, photo identification, and other information associated with your account.
You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Your agent may submit a request on your behalf by contacting us using the methods described in the Contact Us section 13 above. We may still require you to directly verify your identity and confirm that you provided the authorized agent permission to submit the request.
Sale of personal information
Pay.com does not sell personal information. As such, Pay.com does not sell personal information of minors under 16 years of age. For California residents, the California Consumer Privacy Act (“CCPA”) defines “selling” personal information to include providing it to a third party in exchange for money or valuable consideration.
Disclosure to third parties
For Shine the Light law (Cal. Civ Code § 1798.83) purposes, pay.com does not share personal data of California customers to third parties for their direct marketing purposes, as defined by this law.
The table below discloses the categories of personal information about California consumers that we collect and disclose for a business purpose.
17(a) Category of personal information collected
Identifiers (for example, a device identifier)
17(a) To whom the information may be disclosed
We may disclose the data, pursuant to applicable law, to: service enablers (like service providers and financial partners servicing the financial product), the Business User you do business with, an entity engaged in a business transfer/merger, law enforcement, courts, governments and regulatory agencies.
17(b) Category of personal information collected
Characteristics of protected classifications under California or federal law (for example, gender and age noted in ID documents that you submit so that Pay.com can verify your identity on behalf of a Business User
17(b) To whom the information may be disclosed
We may disclose the data, pursuant to applicable law, to: service enablers (like service providers and financial partners servicing the financial product), the Business User, an entity engaged in a business transfer/merger, law enforcement, courts, governments and regulatory agencies.
17(c) Category of personal information collected
Commercial information (for example, the Business User may receive your transaction data)
17(c) To whom the information may be disclosed
We may disclose the data, pursuant to applicable law, to: service enablers (like service providers and financial partners servicing the financial product), the Business User, an entity engaged in a business transfer/merger, law enforcement, courts, governments and regulatory agencies.
17(d) Category of personal information collected
Biometric information (for example, biometric identifiers from photo IDs used to confirm your identity)
17(d) To whom the information may be disclosed
We may disclose the data, pursuant to applicable law, to: a service provider - i.e., Amazon Web Services ("AWS"), an entity engaged in a business transfer/merger, law enforcement, courts, governments and regulatory agencies.
17(e) Category of personal information collected
Online activity information (for example, information about devices and browsers across certain Business User sites that use Pay.com and IP addresses associated with those devices and browsers, and usage data)
17(e) To whom the information may be disclosed
We may disclose the data, pursuant to applicable law, to: service enablers (like service providers and financial partners servicing the financial product), the Business User, an entity engaged in a business transfer/merger, law enforcement, courts, governments and regulatory agencies.
17(f) Category of personal information collected
Geolocation Data (for example, IP addresses)
17(f) To whom the information may be disclosed
We may disclose the data, pursuant to applicable law, to: service enablers (like service providers and financial partners servicing the financial product), the Business User, an entity engaged in a business transfer/merger, law enforcement, courts, governments and regulatory agencies.
17(g) Category of personal information collected
Audiovisual (for example, visual, audio, or similar information, like photos you submit so that Stripe can verify your identity on behalf of your Business User
17(g) To whom the information may be disclosed
We may disclose the data, pursuant to applicable law, to: service providers, the Business User, an entity engaged in a business transfer/merger, law enforcement, courts, governments and regulatory agencies.
17(h) Category of personal information collected
Professional or Employment-Related Information
17(h) To whom the information may be disclosed
We may disclose the data, pursuant to applicable law, to: Service Providers, an entity engaged in a business transfer/merger, law enforcement, courts, governments and regulatory agencies.
17(i) Category of personal information collected
Categories of personal information described in Cal. Civ. Code 1798.80(e)(such as name, address, telephone number, credit card or debit card number)
17(i) To whom the information may be disclosed
We may disclose the data, pursuant to applicable law, to: service enablers (like service providers and financial partners servicing the financial product), the Business User, an entity engaged in a business transfer/merger, law enforcement, courts, governments and regulatory agencies.
Sensitive personal information
Pay.com only processes sensitive personal information for the purposes specified in section 7027(m) of the California Consumer Privacy Act Regulations, or without the purpose of inferring characteristics about a consumer:
- Identification card, including driver’s license, passport, and social security (including any underlying sensitive information in the identity card, such as racial or ethnic origin): Purposes include Identity verification, fraud prevention and security, to provide the services, and to comply with legal obligations.
- Biometric information: Purposes include Identity verification, fraud prevention and security, and for other purposes consistent with your consent and applicable law, such as to improve our verification systems
- Location data: Purposes include Fraud detection and security, in furtherance of compliance with legal obligations, and to provide the services including to market our products.
- Account log-in, financial account in combination with any required security access code, password, or credentials allowing access to an account: Purposes include To provide you the service that you requested from your Business User verify your account, facilitate the processing of your requested payments, provide customer support, comply with law, enforce our terms of services, and for other purposes consistent with your consent and applicable law.
