Rewardful Inc., registered in Alberta Canada (“us”, “we”, or “our”) committed to ensuring that your privacy is protected. This privacy policy explains how we process personal data when you use our website, services or otherwise interact with us, how long we will keep your data, and details on your rights related to data processing.
Depending on the context, Rewardful may act either as a Controller or as a Processor of personal data.
In connection with the information collected via our website and processing activities connected with our Managed Payout Services (MPS), we operate as the Controller of your personal data. For other processing carried out through the Rewardful Affiliate Marketing Platform on behalf of our customers, including where a customer determines the purposes and means of processing its affiliates' or purchasers' personal data, Rewardful acts as a Processor and processes that personal data in accordance with the customer's instructions and the applicable agreement.
How to Contact Us
For customer support, please email: hello@rewardful.com
For all data privacy matters, please contact our Data Protection Officer (DPO) at dpo@rewardful.com.
To contact us by mail:
Rewardful Inc.,
Suite 3810 Bankers Hall West,
888 3rd Street SW,
Calgary Alberta Canada
T2P 5C5
How We Collect Your Information
We may collect personal data under the following circumstances:
- directly from you when you inquire about our services and when you register to use our services
- from your device when you access our website
- from third parties that assist us in providing relevant services, such as from merchants, affiliates and other users of our services where necessary to provide and administer the services and from payment and commerce providers, including information required to administer subscriptions, merchant payments, affiliate payouts and sales attribution
Which Information We Collect About You
- Account Data such as your first name, last name, username and photo
- Contact Data such as your billing address, email address and telephone numbers
- Technical Data such as login data, internet protocol addresses, browser type and version, browser plug-in types and versions, time zone setting and location, operating system and platform and other technology on the devices you use to access our site as captured automatically by our hosting platform’s web servers
- Profile Data this may include your username and password, preferences, feedback, and survey responses
- Affiliate Data this may include sales records and commission earned
- Purchase Data this may purchaser name, amount paid, purchased item, sales records and information used to attribute sales and calculate affiliate commissions
- Payment and Payout Data such as bank account or payout information, payment status and other information required to administer merchant payments, subscriptions and affiliate payouts
- Usage Data this may include information about how you use our website, products, and services
- Marketing and Communications Data this may include your preferences in receiving marketing communications from us and our third parties and your other communication preferences.
Certain personal data is necessary for the performance of certain obligations, i.e. to enter into a contract with you and/or to fulfil contractual obligations we have to our customers. If you refuse to provide such information, we may not be able to perform our obligations and we may not be able to provide you with products or services or respond to your requests.
However, certain personal data collected for the purposes of direct marketing, feedback, surveys and the publication thereof is not mandatory and it is up to you whether or not to provide it.
How We Use Your Data
We use and collects data for various purposes:
- Onboard and administer merchants and affiliates using our services
- Administer subscriptions, billing, merchant payments and affiliate payouts where these activities form part of the services provided by Rewardful
- Process sales and transaction information to provide the service, including sales attribution and commission calculation
- Operate, maintain, improve, and provide to you the features and functionality of the website and our service
- Administer and provide services and customer support per your request
- Solicit feedback from customers
- Provide technical support
- Communicate with you about promotional offers, new features, our services, events and other news and information we think will be of interest to you
- Monitor and analyze trends, usage and activity in connection with our website and services
- Prevent misuse, troubleshoot issues, maintain service integrity and meet applicable legal, accounting and compliance requirements
- Enforce our website terms and conditions
How We Disclose Personal Data
Where Rewardful acts as a Controller, the disclosures described below are made for Rewardful's own processing purposes as described in this Privacy Policy. Where Rewardful acts as a Processor, disclosures are made only as permitted by the relevant customer agreement, the customer's instructions, and applicable law.
We may disclose personal data to third parties in the following circumstances:
- Service Providers. We may share your data with third party companies and individuals who provide services to us. They only process your personal data in accordance with our instructions, as per the GDPR. We ensure that all third party service providers maintain adequate data protection and security controls. These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. Some of the service providers mentioned above may be located abroad and, in this case, we adopt additional safeguards to guarantee an adequate level of protection for your personal data
- Corporate Transactions. In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as reorganization, merger, sale, joint venture, assignment, transfer, change of control, or other disposition of all or any portion of our business, assets, or stock, we may share Personal Data with third parties in connection with such transaction. Any other entity which buys us, or part of our business, will have the right to continue to use your Personal Data, subject to the terms of this Privacy Policy. We will ensure that in such an event you will be properly informed.
- Compliance & Harm Prevention. We share Personal Data as we believe necessary:
- (i) to comply with applicable laws such as GDPR, CCPA, and others;
- (ii) to enforce our contractual rights;
- (iii) to protect the Services, rights, privacy, safety, and property of Rewardful, you, or others; and
- (iv) to respond to a request from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include authorities outside your country of residence.
Transfer of Your Information
Rewardful will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.
In accordance with the GDPR, when we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring that we use specific controls approved by the European Commission which give personal data the same protection it has in Europe.
How We Protect Your Information
To ensure that your personal information is secure, we communicate our privacy and security guidelines to all Rewardful employees and business partners and strictly follow precautionary adequate measures regarding privacy within the company.
We strive to protect your personal information through physical, technical, and organizational measures aimed at reducing the risks of loss, misuse, unauthorized access, disclosure, and improper alteration of this data.
We make commercially reasonable efforts to ensure the security of our systems. However, please note that this is not a guarantee. If you have any questions about the security on our website, please see our Trust Center.
How Long We Retain Your Information
We have determined retention periods based on the purpose of the processing and the rules set forth within the GDPR as well as the legal and business requirements. For example, the GDPR requires us to remove data when it has served its purpose and is no longer of use. We review the personal data we collect regularly to ensure that the personal data we have is up-to-date and is not retained longer than needed or required by the regulation.
If you wish to have more detailed information about our retention times, please contact us at dpo@rewardful.com.
Opt Out of Sale of Personal Information or Sharing or Processing of Personal Information for Targeted Advertising
(California, Colorado, Connecticut, Utah and Virginia Residents Only).
If you live in California, Colorado, Connecticut, Utah, or Virginia, you have the right to opt-out of certain processing of your personal information, including selling of your data and targeted advertising, as per the applicable law. Targeted advertising is when we or our partners show you ads based on the personal information collected from different businesses.
Nevada Residents
If you are a Nevada consumer, you have the option to opt out of the sale of your "covered information" as per Nevada law. We don't engage in such practices, but if you have any queries regarding this, please feel free to email us at dpo@rewardful.com.
California Privacy Rights
This section applies only to California residents. The California Consumer Privacy Act (CCPA) is a data protection law that ensures you have certain rights regarding the Personal Information we collect or maintain about you. Please note these rights are not absolute, and there may be cases when we decline your request as permitted by law.
Right of Access: you have the right to request that we disclose what Personal Information we have collected, used, and disclosed about you in the past 12 months.
Right of Deletion: you have the right to request that we delete Personal Information collected or maintained by us, subject to certain exceptions.
Right to Non-Discrimination: You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA.
You also have the right to opt out of the sale of personal information. In the preceding 12 months, we have not disclosed your personal information to any third party in a manner that would be considered a sale under the CCPA.
For more details on the personal information collected in the preceding 12 months, see our sections above How We Collect Your Information and Which Information We Collect About You. We collect this information for business and commercial purposes as described above in the How We Use Your Data section. Information about which categories of third parties we share this information with is described above in How We Disclose Personal Data.
Your Rights Under the GDPR
(If You Are a Data Subject in the European Union)
Under the law, you are granted six fundamental rights when data about you is being processed. We will ensure to reach out without undue delay (no more than 30 days) when you submit a request related to exercising your data subject rights. If your request requires a high degree of complexity, we may get back to you in a maximum of three months, Although uncommon, when applicable for official or legal reasons we may be unable to address the specific request you make related to your rights.
Also, if a request is manifestly unfounded or excessive, in particular, because of its repetitive character, we may either:
charge a reasonable fee considering the administrative costs of providing the information or communication or taking the action requested; or refuse to act on the request.
In this scenario will we inform you of the reasons we believe your request is manifestly unfounded or excessive character of the request.
As a data subject, you have the right to:
a) The right to request confirmation of whether we process Personal Data relating to you and if so, to request a copy of that Personal Data;
b) The right to request that we rectify or updates your Personal Data that is inaccurate, incomplete, or outdated;
c) The right to request that we erase your Personal Data in certain circumstances provided unless otherwise provided by the applicable laws;
d) The right to request that we restrict the use of your Personal Data in certain circumstances, such as while we are analysing another request that you have submitted (including a request that we make an update to your Personal Data);
e) The right to request that we export the Personal Data that that you have provided to you to another company, where technically feasible;
Where the processing of your Personal Data is based on your previously given consent, you have the right to withdraw your consent at any time; and/or:
In some cases, you may also have the right to object to the processing of your Personal Data.
To exercise your data protection rights please contact our DPO at dpo@rewardful.com.
We will comply with your request to the extent required by applicable law. We will not be able to respond to a request if we no longer hold your Personal Data. If you feel that you have not received a satisfactory response from us, you may have the right under applicable laws to file a complaint to the competent supervisory authority in your country.
Modifications to This Privacy Policy
Rewardful reserves the right to change this Privacy Policy at any time by posting revisions on this web page. Such changes will be effective upon posting and the current version published on our website shall apply.
Please revisit this page to stay aware of any changes. If the Privacy Policy is part of an agreement with you, we will notify you by e-mail or other appropriate means in case of an amendment.
