Last Revised: June 10, 2024
Here at Prizeout Corp. (“Prizeout”, “we”, “us”, “our”), we work hard to build and maintain a relationship of trust with you. This Privacy Policy (“Privacy Policy”) describes how we collect, use, and disclose information in connection with your access and use of all websites that link to this Privacy Policy, including www.prizeout.com (and all related subdomains) (the “Site”) and our products, services, and applications, both online and offline, including our widget or optional browser extension accessible via external sites and any services, transactions, or engagement you might have with us (collectively, the “Services”).
The Services allow consumers (“Consumers”) to withdraw funds that they have deposited, stored, earned, won or are otherwise entitled to collect or withdraw from companies, financial institutions, organizations, governmental entities, and other entities with whom Prizeout has partnered or to whom Prizeout offers its services (“Partners”), in the form of rewards or digital gift cards or other stored value mechanisms ( with digital gift cards, “Gift Cards”) offered by a variety of retailers and brands (“Merchants”), or gifted purchasing opportunities (“Prizeout Gifts”) offered or facilitated by Prizeout and purchase, track, and maintain such Gift Cards or Prizeout Gifts. This Privacy Policy also applies to recipients of Gift Cards or Prizeout Gifts and individuals who use the Services on behalf of a Partner or Merchant (“Partner or Merchant Users”) (collectively, with Consumers and visitors to the Site, “Users”).
ù
Please carefully read this Privacy Policy, which is part of our Terms of Use, before using our Services. If you do not agree with the Terms of Use and/or this Privacy Policy, you must refrain from using our Services. By accessing or using our Services, you agree to our use of your information consistent with the Terms of Use and this Privacy Policy. Minors (those under the age of 18 years) are not eligible to use our full suite of Services. Certain individuals 13 years of age or older are permitted to use limited portions of our Services in conjunction with specific Partners as detailed in our Terms of Use. If you are a Partner or Merchant User accessing our Partner or Merchant portals (“Portals”) pursuant to an agreement between you and Prizeout (such as a Partner Agreement or Merchant Terms of Use), then your use of the Portals and Services is also governed by such agreement(s).
Please note that we may process certain information about you on behalf of our Partners (“Partner End User Data”). This Privacy Policy does not cover how we treat Partner End User Data that we process as a data processor or service provider when you are accessing our Services through, or in relation to, certain Partners, including where we operate the CashBack+ Loyalty Program on behalf of a Partner as a processor. For more information about who is the controller of data and under what circumstances, refer to the “Data Protection Rights, Information, and Choices” section below.
PRIVACY POLICY CHANGES
This Privacy Policy is subject to change. We reserve the right to update or modify this Privacy Policy at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. We encourage you to review this Privacy Policy frequently for any revisions or amendments. Changes to this Privacy Policy will be made accessible through use of the Services with an updated “Last Revised” date. You will be deemed to have been made aware of and have accepted the changes by your continued use of our Services.
INFORMATION WE COLLECT
Information You Provide To Us
We collect information you choose to provide to us, including information you enter through the Services. For example, if you are a Consumer or visitor to the Site, when you:
- Create an account to use the Services or request further information about the Services, we may collect contact information (such as your name, email address, and phone number) and registration information (such as your username and password);
- Interact with the Services, we may collect information related to requesting, purchasing, and claiming a Gift Card (such as your contact information, location information, demographic information—including interests, gender, and year of birth—financial information, and authentication information) as well as other information you enter through the Services;
- Install or configure the optional CashBack+ Pay browser extension, from the moment you install the CashBack+ Pay browser extension, we may collect your IP address, internet browsing activity including, but not limited to, URL of the sites you are visiting and the contents of those website pages (“Internet Browsing Activity Data”), device data, IP address, browser data, and related data identified as Device and Usage Data in the Information We Collect Through Automated Means section below. If you configure, link, or otherwise connect the browser extension with your Partner account, we may also collect your contact information and other registration information associated with your Partner account (such as your name, email address, account or member ID, account balance, and other account identifiers), information associated with gift cards you are purchasing or have purchased, merchants you are engaging with, and the cart totals as you checkout at those merchants
- Contact us with questions or for customer service, we may collect contact information (such as your name, email address, and phone number) as well as any information you provide in connection with your outreach; and
- Participate in promotions, events, surveys, and sweepstakes, we may collect basic contact information and any other information you provide in connection with these activities.
If you are a Partner or Merchant User, work for a potential partner or merchant business, or visit the Site, when you:
- Create an account to use the Services or request further information about the Services, we may collect contact information (such as your name, email address, business address, and phone number), business information (such as job position, function, and title, and the size, location, and needs of your company), and registration information (such as your username and password);
- Interact with the Services, we may collect information related to creating Gift Card campaigns, verifying your account (such as contact information, business information, including government identifiers, and third-party authentication credentials), remitting and charging amounts owed (such as financial information, including bank account and ACH information), as well as other information you enter through the Services;
- Contact us with questions or for customer service, we may collect contact information (such as your name, email address, and phone number) as well as any information you provide in connection with your outreach;
- Participate in promotions, events, and surveys, we may collect basic contact information and any other information you provide in connection with these activities;
Information We Collect Through Automated Means
We may automatically collect, receive, and store certain information in connection with the actions you take on the Services and in connection with use of the Services (“Device and Usage Data”). As discussed further below in the “Cookies & Similar Technologies” section and the Cookie Policy, we and our vendors, may use a variety of technologies, including cookies, to assist in this information collection. For example, each time you use the Services, we automatically collect the type of web browser and operating system you use, the type of device you use, your IP address, Internet service provider, unique device identifiers, and other information in accordance with your device settings and permissions. We may also collect the pages you view, referring and exit pages, the date and time of your visit, the number of clicks to, from, and within the Services, time spent on each page, usage preferences, and search terms. We may also collect general location information (such as your city and state inferred from your IP address). As detailed above, when you install the CashBack+ Pay browser extension, in addition to Device and Usage Data, we may additionally collect Internet Browsing Activity Data. We may also track when and how frequently you access or use the CashBack+ Pay browser extension or other Services, including how you engage with or navigate those Services.
Information We Collect from Other Sources
When a Consumer uses the Services to view Gift Card options in contemplation of withdrawing funds from an account held with a Partner, the Partner may provide Prizeout with the Consumer’s contact information (such as name and email address), demographic information (such as gender and year of birth), location information and information about the Consumer’s account with the Partner (such as account balance).
Prizeout may allow users to send gifts using the Services. When a Consumer purchases a Gift Card or Prizeout Gift for a recipient, the Consumer may provide contact information about the recipient, such as name, email address, and phone number, to allow Prizeout to electronically deliver the Gift Card or Prizeout Gift to the recipient. By sending a Gift Card or Prizeout Gift to a recipient, you represent that you are authorized to provide their name, email address, phone number or other information with us. We will use that information to send the Gift Card or Prizeout Gift or an email inviting him or her to visit the site, will store that information to facilitate the redemption of the Gift Card or Prizeout Gift, and may send marketing emails.
We may collect information from other sources, such as payment vendors, Gift Card providers and merchants, analytics vendors, security service providers, survey providers. For example, we utilize certain analytics tools to improve the Services experience for Users, Partners, and Merchants. We may also receive information from Gift Card providers, Merchants, and vendors related to activities conducted on or through their sites and services, including past purchases and shopping activity. We may aggregate the characteristics and browsing habits of Users, on an anonymized basis, to provide products and services that are more tailored to our Merchants and Partners. We obtain contact and business information used to communicate with you about the Services from conferences, events, sales partners, and public records.
Additionally, as noted above, when you install optional CashBack+ Pay browser extension, we are able to access the URL of the sites you are visiting and the contents of those website pages as we seek to identify relevant checkout pages and help you purchase gift cards. When you configure, link, or otherwise connect the browser extension with your Partner account, we receive additional information from the Partner as detailed above.
HOW WE USE INFORMATION
We use your information to:
- Provide you with the Services and information you request;
- Manage, verify, and authenticate your account or configure, link, or otherwise connect your use of the Services with a Partner account;
- Display Gift Card purchase options;
- Engage in transactions, including contacting you about your account, billing, remitting, or charging you or your organization for Gift Cards or our Services, and processing payments;
- Fulfill, deliver, and apply Gift Card orders;
- Contact the recipient of a Gift Card or Prizeout Gift about the Services;
- Improve the Services, including customization and personalization;
- Provide you with effective customer service;
- Communicate with you about the Services and contact you with special offers, promotional information, content, publications, and other information we believe will be of interest to you (in accordance with any privacy preferences you have expressed to us) via mail, email, telephone, and/or text messaging;
- Analyze use of the Services and improve the content, functionality, and usability of the Services, enhance the User experience, and improve our business;
- Send emails or text messages in order to verify you in connection with your usage of the Services;
- Invite you to participate in promotions, sweepstakes, surveys and provide feedback to us;
- Secure the Services and investigate and help prevent fraud, security issues, and abuse;
- Understand, detect, and resolve problems with the Services and other issues being reported;
- Comply with any procedures, laws, and regulations where necessary for our legitimate interests or legitimate interests of others;
- Establish, exercise, or defend our legal rights where necessary for our legitimate interests or the legitimate interests of others, including the enforcement of our Terms of Use, other usage policies and agreements, and other legal terms or controls, or to engage in other legal matters; and
- Fulfill other requests with your consent and for any other purposes disclosed at the time you provide personal information.
Combined information.
For the purposes discussed in this Privacy Policy, we may combine the information that we collect through the Services with information that we receive from other sources, both online and offline, and use such combined information in accordance with this Privacy Policy.
Aggregate/De-identified Information.
We may aggregate and/or de-identify any information collected through the Services so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”). We may use Aggregate/De-Identified Information for any purpose, including without limitation for research and marketing purposes, and may also disclose such data with any third parties in our discretion.
LEGAL BASES FOR USE OF YOUR INFORMATION
The laws of some jurisdictions, including the European Economic Area (“EEA”) and the United Kingdom (“UK”) and the Kingdom of Bahrain (“Bahrain”), require that companies only process your “Personal Data” (as that term is defined in the applicable law, like the EU General Data Protection Regulation) if they have a “legal basis” (or justifiable need) for processing your Personal Data. To the extent those laws apply, our legal bases for processing Personal Data are as follows:
- To perform our obligations pursuant to a contract (or pending contract) with you. For example, we will process your Personal Data to comply with our Terms of Use to enter into a contract with you, and to honor our commitments in any contracts that we have with you.
- For our legitimate interests or the legitimate interests of others. For example, we will process your Personal Data to: operate our business and our Services; identify and fix any issues with our Services; secure the Services; learn more about how our customers use the Services; perform internal analytics; improve the Services and Users’ experiences; conduct marketing; provide you with certain information about new products, special offers or other information that we think you may find interesting using the email address which you have provided in accordance with applicable law; make and receive payments; comply with legal requirements and defend our legal rights; prevent fraud; engage in a business change (e.g., sale, merger); and to know the customer to whom we are providing Services.
- To comply with our legal obligations, such as our obligation to disclose data to tax authorities.
- With your consent. Where we rely on this basis, you have the right to withdraw your consent at any time as described in the “Data Protection Rights, Information, and Choices” section below.
COOKIES & SIMILAR TECHNOLOGIES
As further described in our Cookie Policy, we and our vendors may use cookies (a small text file placed on your device to identify your device and browser) and similar tracking technologies when you use our Services, or if you engage with our email communications. For example, on our Merchant and Partner Portals, we and our vendors may use cookies to improve the experience of the applicable Services, such as keeping track of your activities on the applicable Site, recognizing return visitors, and analyzing our promotions and Site traffic. Learn more about your choices and ways to opt out in our Cookie Policy. Please note, however, that if you do not accept cookies, you may not be able to access all portions or features of our Services.
HOW WE DISCLOSE INFORMATION
We will share your information collected from and about you in the following ways:
- Service Providers: We may provide access to or disclose your information with select third parties who perform services on our behalf, such as online hosting and maintenance, marketing and promotion design and management, management of e-commerce systems, payment processing, data storage and management, marketing and email delivery, analytics, customer service, security and fraud prevention, legal services, and identity and contact information validation.
- Partners: We disclose information with Partners about Gift Card fulfillment relating to Consumers who have a relationship with them, including when Consumers withdraw funds from an account held with the Partner, in order to facilitate the transaction, contractual obligations, or the Partner’s ability to provide support on customer transactions.
- Merchants: We disclose de-identified transactional history with Merchants in relation to transactions which we have facilitated for them.
- Business Transfers: As we continue to develop our business, we may buy, merge, or partner with other companies. In such transactions (including in contemplation of such transactions), information may be among the transferred assets. If a portion or all of our assets are sold or transferred to a third party, User information would likely be one of the transferred assets. If such transfer is subject to notifications or restrictions under applicable laws, we will comply with such requirements.
- Comply with Laws and Protect Our Rights and the Rights of Others: We may disclose your information when we, in good faith, believe disclosure is appropriate to comply with the law, a court order or a subpoena. We may also disclose your information to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of the Services; to enforce or apply our online Terms of Use or other agreements; or to protect our own rights or property or the rights, property, or safety of our Users or others.
- With Your Consent or At Your Direction: We may share disclose information to with third parties when you direct us to do so or if you have consented to additional sharing disclosure of your information (including as set out in this Privacy Policy). If you purchase a gift card using the CashBack+ Pay browser extension, you are instructing us to automatically insert gift card information into the webpage you are visiting.
SECURITY
We recognize the importance of implementing a variety of security safeguards designed to protect the confidentiality of your information. However, no data transmission over the Internet or other network is completely secure. As a result, while we strive to protect information you transmitted on or through our Services, you do so at your own risk.
When you create an account, you may be prompted to create a username or password. If you create an account with us, you are responsible for maintaining the confidentiality of your account password and for any activity that occurs under your account. Additionally, you are responsible for safeguarding any issued gift card code or information, including when stored within your email account. We are not responsible for any loss or damage arising from your failure to maintain the confidentiality of your password or issued gift card code. We urge you to change your passwords often, use a combination of letters and numbers, and make sure you are using a secure browser. If you have reason to believe that your interaction with us is no longer secure or if you suspect someone else is using your account, please let us know immediately by contacting us as indicated in the “Contact Us” section below.
THIRD PARTY LINKS AND FEATURES
Please be aware that third-party websites accessible or recommended through our Services may have their own privacy and data collection policies and practices. These links and features are provided for your reference and convenience only and do not imply any endorsement of information provided through these third-party links and features, nor any association with their operators. We are not responsible for any actions, content of websites, or privacy policies of such third parties. We urge you to read the privacy and security policies of these third parties.
HOW LONG WE RETAIN YOUR DATA
We will retain your information for as long as we have a business need for it or as needed to comply with applicable legal obligations. We also retain and use your information as necessary to resolve disputes, protect Prizeout, our Users, Partners, and Merchants, and enforce our agreements.
DATA PROTECTION RIGHTS, INFORMATION, AND CHOICES
You may have certain rights with respect to your personal information as further described in this section, in addition to any rights discussed elsewhere in this Privacy Policy. Please note your rights and choices vary depending upon your location.
Marketing Communications
You may instruct us not to use your information to contact you by email, postal mail, or phone regarding products, services, promotions and special events that might appeal to your interests by contacting us using the information in the “Contact Us” section below. In commercial email messages, you can opt out by following the instructions located at the bottom of such emails. Removing your name from the email list may take a reasonable amount of time. Please note that, regardless of your request, we may still use and disclose certain information as permitted by this Privacy Policy or as required by applicable law. For example, you may not opt out of certain operational emails, such as those reflecting our relationship or transactions with you.
Additional Choices
You can also make certain choices by using the options described in our Cookie Policy.
Rights with Respect to Your Information
Residents of certain jurisdictions, including the European Economic Area (“EEA”), United Kingdom (“UK”), Canada, Bahrain, and some U.S. states (such as Colorado), may have the right to make certain requests regarding your “personal information” or “personal data” (as such terms are defined under applicable law, and collectively referred to herein as “personal information”). Specifically, you may have the right to ask us to:
- Inform you about the categories of personal information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your personal information; and the categories of third parties with whom we disclose personal information.
- Provide you access to and/or a copy of certain personal information we hold about you.
- Correct or update personal information we hold about you.
- Delete certain personal information we have about you.
- Provide you with information about the financial incentives that we offer to you, if any.
- Opt you out of the processing of your personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects, if applicable.
As provided in applicable law, you also have the right to not be discriminated against for exercising your rights. Please note that certain information may be exempt from such requests under applicable law. For example, we need to retain certain information in order to provide our services to you. When we delete any information, it will be deleted from the active database, but may remain in our archives to be overwritten or deleted in the ordinary course. We may also retain your information for fraud or similar purposes. We also need to take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name and email address.
Depending on your jurisdiction, you may be permitted to designate an authorized agent to submit certain requests on your behalf. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorized agent’s request.
If you would like further information regarding your legal rights or would like to exercise any of them, please visit this link (if you are a resident of the of the EEA or UK), this link (if you are a U.S. resident), email us at [email protected], or contact our EU or UK GDPR representative identified in the “Contact Us” section below.
Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. If we deny your request, we will provide you with information on how to appeal the decision, if applicable, in our communications with you. To exercise such an appeal right, email us at [email protected] or use this link (if you are a U.S. resident). In addition, you may have the right to file a complaint with regulatory authorities with respect to our data processing, and our legal basis for processing.
With regard to Partner End User Data, Consumers should direct requests to exercise applicable rights to the Partner on whose behalf we handle the data. If we receive a request from a User directly in relation to Partner End User Data, we will either alert you to redirect your request to the applicable Partner or refer that request to the appropriate Partner and await the Partner’s instructions on how to handle it.
If you are a California resident, please see the “Privacy Information for California Residents” section below for information about your specific rights under California law.
Residents of Colorado
Residents of Colorado may click here to view more information regarding each category of personal information we process, the purposes for which we process each category, and the categories of entities to whom the personal information is disclosed. Please note that we do not engage in profiling that produces legal or similarly significant effects.
Notice of Right to Opt Out of Sales of Personal Information and Processing/Sharing of Personal Information for Targeted Advertising Purposes.
We have not “sold” or “processed for targeted advertising purposes” personal information in the last 12 months. However, as noted below, if you would like to request that we not sell information associated with your name/email address at any point in the future, you can visit this link.
In the future, we may disclose personal information to unaffiliated third parties we collaborate with or that provide offers that we think may be of value to you. We may also provide other personal information to third-party advertising providers for targeted advertising purposes or use advertising analytics partners to assist us in analyzing use of our services and our user/customer base. Under applicable law, the disclosure of your personal information to these third parties to assist us in providing these services may be considered a “sale” of personal information or the processing/sharing of personal information for targeted advertising purposes.
To the extent we engage in such activity in the future, if you would like to opt out of the disclosure of your personal information for purposes that could be considered “sales” for those third parties’ own commercial purposes, or “sharing” or processing for purposes of targeted advertising, please review the information and follow the instructions in the Cookie Policy. You must follow the instruction on each site/app on each browser/device you use to access the Services. You must also renew this choice if you clear your cookies or your browser is set to do that. You can also submit a request to opt out of the use of your email address and other personal information related to that email address for targeted advertising purposes by visiting this link. You may be permitted to designate an authorized agent to submit such requests on your behalf. Please note that we do not knowingly sell the personal information of minors under 16 years of age.
Notice of Financial Incentives
We may offer opportunities to receive certain services or benefits, including money to participate in surveys, sign up for communications, or other similar incentives, which may require the provision of personal information, such as registering for an account and answering surveys or providing additional feedback or information. Such opportunities could be considered a financial incentive under applicable law (each, an “Incentive Program”). Your participation in Incentive Programs is purely voluntary. When you participate in an Incentive Program, you agree to the terms of that Incentive Program, and we may revoke your participation depending on the Incentive Program.
Identifying the Data Controller and Processor
Data protection laws in certain jurisdictions differentiate between the “controller” and “processor” of information. In general, the Partner is the controller of Partner End User Data and Prizeout is the processor of Partner End User Data. This Privacy Policy does not cover information about Partner End User Data that Prizeout receives from a Partner, or otherwise processes on a Partner’s behalf, in connection with the Services provided by Prizeout to a Partner pursuant to an applicable services agreement. If you have any questions about a Partner’s privacy practices, please contact the applicable Partner who has provided your information to us for more information.
Privacy Information for California Residents
This section supplements our Privacy Policy with additional information for California residents about our information collection and use practices as required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”). In this section, the terms “personal information” and “sensitive personal information” have the meaning set forth in the CCPA.
Collection, Use, and Disclosure of Californian’s Personal Information
During the 12 months leading up to the effective date of this Privacy Policy, we collected (and continue to collect) all of the categories of information listed in the chart below and described in the “Information We Collect” section of our Privacy Policy. That section also explains the sources from which we collect information about you, including, for example, you, Partners, Gift Card providers, Merchants, service providers, analytics providers, cookies and tracking technologies, survey partners, and marketing partners, and users of the Services.
The “How We Use Information” section of this Privacy Policy explains how and why we use your personal information. Generally speaking, we use your information to provide our Services, manage and verify your account, offer Gift Cards and fulfill and deliver Gift Card transactions, bill, remit, charge, and process payments, send communications, personalize the Services, provide customer service, analyze, research, develop, and improve the Services, enforce legal terms and defend our rights, investigate and prevent security issues, fraud, and abuse, comply with laws, and as described when collecting your information.
We disclose certain information as set forth in “How We Disclose Information” section and in the chart below, and we may allow third parties to collect certain information about your activity, for example through cookies, as explained in the “Cookies & Similar Technologies” section and Cookie Policy.
In the 12 months since the effective date of this Privacy Policy, we made the following disclosures of personal information about California residents: