Effective on January 1, 2020
This privacy policy is intended for all individuals who reside in California and outlines Digital River's obligations under the California Consumer Privacy Act of 2018 ("CCPA"), as of January 1, 2020, and other California privacy laws ("Privacy Policy"). Any capitalized terms used in this Privacy Policy shall either (i) have the same meaning as found within the CCPA, or (ii) be defined within the text of this policy. This Privacy Policy is intended to supplement the information contained in Digital River's general U.S. privacy policy so please refer here for additional information on the processing and protection of your Personal Information.
We may update this Privacy Policy to communicate changes in our data handling practices. When we make changes to this Privacy Policy, we will modify the Effective Date. Our changes will become effective immediately upon posting.
This Privacy Policy applies to each Website operated by Digital River where this Privacy Policy appears. If you are purchasing products through a Digital River subsidiary, please note that this Website is hosted and/or operated by Digital River under an agreement with the subsidiary who is listed as the seller of products in the terms of sale on this Website. The purpose of this Privacy Policy is to provide you with information as required under the CCPA.
This Privacy Policy only applies to the use of information we collect from you through this Website and any other website on which this Privacy Policy appears. Our Website may be co-branded with the information of the company whose product you are purchasing ("Partner"). However, this Privacy Policy does not apply to information collected directly by our Partners or any other third party as we do not control these other privacy policies. Please carefully review each privacy policy posted on each website you visit.
Digital River takes reasonable steps to provide a level of security appropriate to the sensitivity of the information we collect. We have implemented physical, technical and administrative security practices and safeguards reasonably designed to protect your Personal Information from unauthorized access and disclosure When we collect or transmit sensitive information such as a financial account number, we use industry standard methods to protect that information as required by applicable laws. Although we use reasonable measures to protect your information, we cannot guarantee the security of information provided over the Internet or stored in our databases. You are also responsible for taking reasonable steps to protect your information against unauthorized disclosure or misuse, for example, by protecting your password and signing off when finished using a shared computer or mobile device. We leverage industry best practices to mitigate potential compromises. If the Personal Information under the custody of Digital River is (or is likely to be) divulged, damaged or lost, we will immediately take remedial measures, inform the users in a timely manner and report to the competent government agencies as required by applicable laws.
We collect Personal Information from you when you use this Website such as:
The information we collect using cookies and similar technologies is not typically personally identifiable, but we may link it to Personal Information that you provide. We use cookies and other similar technologies to collect information and support certain features of this Website. As the Internet evolves, we may use different types of technologies for this purpose. For example, we may use these technologies to collect information about the ways visitors use this Website (such as which pages they visit, links they use). We analyze this information to better understand our visitors' interests needs and to improve the content and functionality of the Website. We also use the information to support Website features by not asking you to re-enter information already in our database. We also use this information to personalize your experiencewhen you use the Website and to improve our marketing efforts, including through use of targeted advertising.
If you do not wish to receive cookies, you may set your browser to reject cookies or to alert you when a cookie is placed on your computer. Although you are not required to accept cookies, you may be unable to use all of the Website functionality if your browser rejects our cookies.
Web technologies may also be placed on this Website by third party providers. Also, we or third-party providers may place web technologies on behalf of the Partner whose branding appears on this Website or its service providers. In this way, our Partner would be allowed to use the data collected. This information is used to enhance your experience with the Website, for marketing analysis, for targeted and display advertising, and for quality improvement. We may collect your IP address through web technologies.
We and our Partners use third party service providers in connection with this Website, which may include Alexa Metrics, Google Analytics and Omniture, and ClickTale. These and other service providers may collect information about your visits to websites, your interaction with that website, and the products and services offered by us, our Partners and our suppliers. Their collection and use of information is subject to their own privacy policies. Please visit the applicable third party service provider if you would like to opt-out
If you opt-out of having your information collected through cookies and other web technologies, your existing display advertising cookie(s) will be deleted and a new cookie will attempt to be placed that instructs service providers not to track your future activities when that cookie is detected (a "no-track" cookie). If your browsers are configured to reject cookies when you visit our opt-out page, a "no-track" cookie cannot be set on your computer. Also, if you subsequently erase "no-track" cookies, use a different computer or change web browsers, you will need to opt-out again. We currently do not respond to browser "no-track" signals.
We may also receive certain information about you from third parties such as through your use of a social network authentication to sign-in to this Website, or through other online data sources, according to the rules of the use and processing of such information established by the respective online data sources. If any information is freely available or accessible in the public domain, we will not have any obligations to you regarding the same.
Your Personal Information provided will be processed on our computer servers. In some cases (such as where it is necessary to fulfill our contractual obligations to you the information may also be made available to third parties providing services to Digital River.
We may use your Personal Information we collect for one or more of the following business purposes:
We may also use your Personal Information for the following purposes where you visit the Website to complete a transaction:
We will take reasonable steps to ensure any person or entity receiving Personal Information for the purposes described above, are obligated to keep the Personal Information secure. Our obligations will not, apply to information shared with any Government entity mandated under law to obtain such information or by an order under law for the time being in force.
We may use Anonymous Information collected by us. In this case, the following data elements will be anonymized such as first and last name, street address, phone number, email address and other data elements in accordance with applicable law. The Anonymous Information may be used as described here:
We may also use de-identified data for the purposes mentioned above, and related purposes as allowed by applicable law.
We will provide certain Personal Information, Anonymous Information or De-identified Data to our Partners to fulfill our obligations to you, and otherwise assist Digital River's use of Personal Information as described in the "How We Use Your Data" section:
We utilize other companies, including our corporate affiliates, to provide certain services to us or on our behalf to help us operate our business such as:
We will not share your Personal Information with our service providers in connection with their offering of services to us, unless it is required for the purposes of our Legitimate Interests and purposes of fulfilling our obligations as to delivery of our commerce solution to you. These service providers may be contractually required to use any information we share with them only to perform services to us or on our behalf and to protect the confidentiality of your Personal Information. We may also allow these companies to use Anonymous Information for their business purposes. We will not share your Personal Information with our affiliates or unrelated third parties to use for their own marketing purposes without your consent.
As permitted by applicable law, we may disclose Personal Information about you when we believe disclosure is appropriate to:
If one of our corporate affiliates or a third party has acquired our business, specific assets or the business of one of our operating divisions (such as part of a sale, merger, reorganization, or similar event), your Personal Information will become owned by that company, unless otherwise provided for by the local legislation. In that event, the acquiring company's use of your Personal Information will be subject to the governing Privacy Policy, any applicable supplemental privacy notices, and the privacy preferences you have expressed to the governing entity.
We respect your right to make choices about the ways we collect, use and share your Personal Information.
Digital River may disclose your personal information to a third party for a business purpose. Digital River will not sell your personal information as such term is defined under the CCPA. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except in performance of our contractual commitments.
We share your personal information for a business purpose with the following categories of third parties: service providers and data aggregators.
In the preceding twelve (12) months, Digital River has disclosed the following categories of personal information for a business purpose: Identifiers; Internet or other similar network activity; Geolocation data; Professional or employment-related information;
We disclose your personal information for a business purpose to the following categories of third parties: Service providers.
In the preceding twelve (12) months, Digital River has not sold your Personal Information and we do not sell your Personal Information today.
You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the last twelve (12) months. Once we receive a verifiable request, we will disclose the following information to you:
If you would like to request erasure of your Personal Information, please send us a request using the information in the "How to Contact Us" section of this Privacy Policy.
If you contact us we may ask you for additional information to verify your identity. We reserve the right to limit or deny your request if you have failed to provide sufficient information to verify your identity or to satisfy our legal and business requirements as noted in our data retention policy. When we delete your Personal Information, it will be disposed of in a manner that prevents loss, theft, misuse, or unauthorized access in-line with our data retention policy.
Please contact us directly as we are committed to working with you to help resolve any concerns about your privacy.
Digital River may retain your Personal Information for as long as you continue to use our Website, and thereafter as permitted or required by applicable law or to satisfy our business requirements.
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either: calling us at 1-866-585-3251 or emailing privacy@digitalriver.com. We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to [45/90] days), we will inform you of the reason and extension period in writing. We will deliver our response to the email we have on file.
Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
When you provide Personal Information, we may offer you a choice as to whether you would like to receive further marketing and related communications from us or our Partners. These communications could be in the form of direct mail, email or telephone and will contain information to inform you of our products and services. You may opt-out of receiving these communications by e-mailing us at remove@digitalriver.com, or by following any unsubscribe instructions in e-mail communications.
If you give us consent to add your contact information to our Partner's mailing list and later withdraw this permission, you must contact our Partner (or follow the unsubscribe instructions in the e-mails from our Partner) to have your name removed from our Partner's mailing lists.
This Website is not directed at nor targeted to children. If you have not reached the age of majority or are not able to enter into legally binding agreements in your country, you may not use this Website unless necessary parental consent has been obtained. If you believe that we have received information from a person protected under child protection laws where necessary parental consent was not obtained, please notify us immediately, and we will take reasonable steps to securely remove that information.
California's "Shine the Light" law (Civil Code Section §1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to privacy@digitalriver.com.