Privacy

Updated 12/9/2022

Kard Privacy Policy

Kard Financial, Inc. (“Kard”, “we”, “us”,and “our”) is committed to protecting your privacy.  We have prepared this Privacy Policy to describe to you our practices regarding the Personal Data (as defined below) we collect from users of our website, located at https://getkard.com/ (“Site”) and reward services (“Services”).

Questions/Contacting Us/Reporting Violations.  If you have any questions or concerns or complaints about our Privacy Policy or our data collection or processing practices, or if you want to report any security violations to us, please contact us at the following address or email:

Kard Financial, Inc.

228 Park Ave S PMB 59450

New York, New York 10003-1502

hello@getkard.com

User Consent.  By submitting Personal Data through our Site or Services, you agree to the terms of this Privacy Policy and you expressly consent to the collection, use and disclosure of your Personal Data in accordance with this Privacy Policy.

A Note About Children.  We do not intentionally gather Personal Data from visitors who are under the age of 13.  If a child under 13 submits Personal Data to us and we learn that the Personal Data is the information of a child under 13, we will attempt to delete the information as soon as possible.  If you believe that we might have any Personal Data from a child under 13, please contact us at hello@getkard.com.

Types of Data We Collect. “Personal Data” means data that allows someone to identify or contact you, including, for example, your name, e-mail address, payment card or financial account number, as well as any other non-public information about you that is associated with or linked to any of the foregoing data.  “Anonymous Data” means data that is not associated with or linked to your Personal Data; Anonymous Data does not, by itself, permit the identification of individual persons.  We collect Personal Data and Anonymous Data, as described below.

A. Information You Provide to Us

• We may collect Personal Data from you, such as your first and last name, e-mail address, and zip code when your card issuer creates an (“Account”) on your behalf.

• If you use our Services on your mobile device, your card issuer may share your unique device id number.

• If you tell us where you are (e.g., by allowing your mobile device to send us your location), we may store and use that information to provide you with location-based information and advertising. If you want to deactivate this feature, you can turn off location services on your mobile device.

• Our mobile homepage lets you store preferences like your location, safe search settings, and favorite widgets.  We may associate these choices with your ID or the mobile device, and you can edit these preferences at any time on our mobile homepage.

• When connecting to our Services via a service provider that uniquely identifies your mobile device, we may receive this identification and use it to offer extended services and/or functionality.

• We retain information on your behalf, such as files and messages that you store using your Account.

• If you provide us feedback or contact us via e-mail, we will collect your name and e-mail address, as well as any other content included in the e-mail, in order to send you a reply.

• When you participate in one of our surveys, we may collect additional profile information.

• We also collect other types of Personal Data that you provide to us voluntarily, such as your operating system and version, product registration number, and other requested information if you contact us via e-mail regarding support for the Services.

• If you participate in a sweepstakes, contest or giveaway on our Site, we may ask you for your e-mail address and/or home number (to notify you if you win or not).  We may also ask for first and last names, and sometimes post office addresses to verify your identity.  In some situations we may need additional information as a part of the entry process, such as a prize selection choice.  These sweepstakes and contests are voluntary.  We recommend that you read the rules for each sweepstakes and contest that you enter.

• We may also collect Personal Data at other points in our Site that state that Personal Data is being collected.

B. Payment Card Transaction Data. Notwithstanding anything to the contrary in the Terms of Use or this Privacy Policy, Kard and its third party service providers will use and disclose your payment card transaction data as follows:

• To confirm a qualifying purchase or return to match transactions to confirm whether you qualify for a statement credit or an offer;

• To share transaction data with the participating merchants where a transaction occurred as needed for the merchant to confirm a specific transaction occurred or points should be awarded; for example, the date and amount of your purchase and the last 4 digits of your card number so the merchant can verify your purchase with its records if there is a missing or disputed transaction;

• To provide participating merchants or third party service providers aggregated and anonymized information relating specifically to registered card activity solely to allow participating merchants and third party service providers to assess the results of their campaign;

• To create a record of the transaction data and maintain and use data in connection with operating the Services;

• To calculate your points;

• To redeem your rewards;

• To enable card-linked offer(s);

• To provide you with target offers that may be of interest to you;

• For internal research and Services development; and

• To provide information in order to respond to a request from government authority or a payment organization involved in a transaction with you or a merchant.You authorize the sharing, exchange and use of transaction data described above and herein by and among Kard and Kard’s third party service providers, applicable payment card networks and applicable merchants.By agreeing to our Terms of Use and Privacy Policy, you agree to our collection and use of your payment card transaction data.

C. Information Collected via Technology.

• Information Collected by Our Servers.  To make our Site and Services more useful to you, our servers (which may be hosted by a third party service provider) collect information from you, including your browser type, operating system, Internet Protocol (“IP”) address (a number that is automatically assigned to your computer when you use the Internet, which may vary from session to session), domain name, and/or a date/time stamp for your visit.

• Log Files.  As is true of most websites, we gather certain information automatically and store it in log files.  This information includes IP addresses, browser type, Internet service provider (“ISP”), referring/exit pages, operating system, date/time stamp, and clickstream data.  We use this information to analyze trends, administer the Site, track users’ movements around the Site, gather demographic information about our user base as a whole, and better tailor our Services to our users’ needs.  For example, some of the information may be collected so that when you visit the Site or the Services again, it will recognize you and the information could then be used to serve advertisements and other information appropriate to your interests.  Except as noted in this Privacy Policy, we do not link this automatically-collected data to Personal Data.

• Cookies.  Like many online services, we use cookies to collect information.  “Cookies” are small pieces of information that a website sends to your computer’s hard drive while you are viewing the website.  We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Site.    This type of information is collected to make the Site more useful to you and to tailor the experience with us to meet your special interests and needs. We also place Cookies on our retail partners’ websites so that we can keep track of your rewards and points with the applicable retail partners, and in some cases monetize said cookies.

• Collection of Data by Advertisers.  We may also use third parties to serve ads on the Site.  Certain third parties may automatically collect information about your visits to this and other websites, your IP address, your ISP, the browser you use to visit our Site (but not your name, address, e-mail address or telephone number).  They do this by using Cookies, Pixel Tags, or other technologies.  Information collected may be used, among other things, to deliver advertising targeted to your interests and to better understand the usage and visitation of our Site and the other sites tracked by these third parties.  This policy does not apply to, and we are not responsible for, Cookies or Pixel Tags in third party ads, and we encourage you to check the privacy policies of advertisers and/or ad services to learn about their use of Cookies and other technologies.  You may opt out of receiving interest-based advertising from some of our partners by visiting http://www.networkadvertising.org/choices/.  If you would like more information about this practice and to know your choices about not having this information used by these companies, click here or here.  We do not currently respond to “do not track” signals from web browsers.

• Flash LSOs.  When we post videos, third parties may use local shared objects, known as “Flash Cookies,” to store your preferences for volume control or to personalize certain video features.  Flash Cookies are different from browser Cookies because of the amount and type of data and how the data is stored.  Cookie management tools provided by your browser will not remove Flash Cookies.  To learn how to manage privacy and storage settings for Flash Cookies, click here.

• Google Analytics.  We use Google Analytics to help analyze how users use the Site.  Google Analytics uses Cookies to collect information such as how often users visit the Site, what pages they visit, and what other sites they used prior to coming to the Site. We use the information we get from Google Analytics only to improve our Site and Services. Google Analytics collects only the IP address assigned to you on the date you visit the Site, rather than your name or other personally identifying information.  We do not combine the information generated through the use of Google Analytics with your Personal Data. Although Google Analytics plants a persistent Cookie on your web browser to identify you as a unique user the next time you visit the Site, the Cookie cannot be used by anyone but Google.  Google’s ability to use and share information collected by Google Analytics about your visits to the Site is restricted by the Google Analytics Terms of Use and the Google Privacy Policy.

D. Information Collected from Third Party Companies. We may receive Personal and/or Anonymous Data about you from companies that provide our Services by way of a co-branded or private-labeled website or companies that offer their products and/or services on our Site.  These third party companies may supply us with Personal Data.  We may add this information to the information we have already collected from you via our Site in order to improve the Services we provide.

E. Location Information. If you have enabled location services on your phone, we collect, store, and use information about your location to recommend credit cards based on where you are currently shopping.   This information is not shared with third parties. If you do not want us to collect this information, you can disable location services on your phone.

Use of Your Personal Data.

A. General Use. In general, Personal Data you submit to us is used either to respond to requests that you make, or to aid us in serving you better. We use your Personal Data to:

• facilitate the creation of and secure your Account on our network;

• identify you as a user in our system;

• provide improved administration of our Site and Services;

• provide the Services you request;

• improve the quality of experience when you interact with our Site and Services;

• send you a welcome e-mail to verify ownership of the e-mail address provided when your Account was created;

• send you administrative e-mail notifications, such as security or support and maintenance advisories;

• respond to your inquiries related to employment opportunities or other requests; and

• send newsletters, surveys, offers, and other promotional materials related to our Services and for other marketing purposes of Kard.

B. User Testimonials and Feedback. We often receive testimonials and comments from users who have had positive experiences with our Services.  We occasionally publish such content.  When we publish this content, we may identify our users by their first and last name and may also indicate their home city.  We obtain the user’s consent prior to posting his or her name along with the testimonial.  We may post user feedback on the Site from time to time.  We will share your feedback with your first name and last initial only.  If we choose to post your first and last name along with your feedback, we will obtain your consent prior to posting you name with your feedback.  If you make any comments on a blog or forum associated with your Site, you should be aware that any Personal Data you submit there can be read, collected, or used by other users of these forums, and could be used to send you unsolicited messages.  We are not responsible for the personally identifiable information you choose to submit in these blogs and forums.

C. Creation of Anonymous Data. We may create Anonymous Data records from Personal Data by excluding information (such as your name) that makes the data personally identifiable to you.  We use this Anonymous Data to analyze request and usage patterns so that we may enhance the content of our Services and improve Site navigation.  We reserve the right to use Anonymous Data for any purpose and disclose Anonymous Data to third parties in our sole discretion.

Disclosure of Your Personal Data.  We may disclose your Personal Data as described below and as described elsewhere in this Privacy Policy:

A. Third Party Service Providers. We may share your Personal Data with third party service providers to: provide you with the Services that we offer you through our Site; to conduct quality assurance testing; to facilitate creation of accounts; to provide technical support; and/or to provide other services to the company. These third party service providers are required not to use your Personal Data other than to provide the services requested by Kard.

B. Affiliates. We may share some or all of your Personal Data with our parent company, subsidiaries, joint ventures, or other companies under a common control (“Affiliates”), in which case we will require our Affiliates to honor this Privacy Policy.

C. Corporate Restructuring. We may share some or all of your Personal Data in connection with or during negotiation of any merger, financing, acquisition or dissolution transaction or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets. In the event of an insolvency, bankruptcy, or receivership, Personal Data may also be transferred as a business asset. If another company acquires our company, business, or assets, that company will possess the Personal Data collected by us and will assume the rights and obligations regarding your Personal Data as described in this Privacy Policy.

D. Social Networking Sites. Our Services may enable you to post content to social networking sites (e.g., Facebook) (each, a “SNS”). If you choose to do this, we will provide information to such SNSs in accordance with your elections. You acknowledge and agree that you are solely responsible for your use of those websites and that it is your responsibility to review the terms of use and privacy policy of the third party provider of such SNSs. We will not be responsible or liable for: (i) the availability or accuracy of such SNSs; (ii) the content, products or services on or availability of such SNSs; or (iii) your use of any such SNSs.

E. Third Party Companies. We may enter into agreements with companies that provide our Services by way of a co-branded or private-labeled website or companies that offer their products and/or services on our website or to companies to which we provide Services (“Third Party Companies”). A Third Party Company may want access to Personal Data that we collect from its customers. As a result, we may disclose your Personal Data to a Third Party Company; however, we will not disclose your Personal Data to any Third Party Company for the Third Party Company’s own direct marketing purposes, unless you have “opted-in” by following the instructions we provide to allow such disclosure. If you have opted-in to receive e-mail communications from a Third Party Company and later wish to discontinue receipt of these e-mails, please contact the Third Party Company directly to update your preferences. The privacy policies of these Third Party Companies may apply to the use and disclosure of your Personal Data that we collect and disclose to such Third Party Companies. Because we do not control the privacy practices of Third Party Companies, you should read and understand their privacy policies.

F. Payment Card Networks. We may share your Personal Data with payment card networks in order to calculate points, redeem rewards, and otherwise facilitate participation in the Kard program.

NOTICE TO CALIFORNIA RESIDENTS – YOUR CALIFORNIA PRIVACY RIGHTS

(AS PROVIDED BY CALIFORNIA CIVIL CODE SECTION 1798.83)A CALIFORNIA RESIDENT WHO HAS PROVIDED PERSONAL DATA TO A BUSINESS WITH WHOM HE/SHE HAS ESTABLISHED A BUSINESS RELATIONSHIP FOR PERSONAL, FAMILY, OR HOUSEHOLD PURPOSES (A “CALIFORNIA CUSTOMER”) MAY REQUEST INFORMATION ABOUT WHETHER THE BUSINESS HAS DISCLOSED PERSONAL INFORMATION TO ANY THIRD PARTIES FOR THE THIRD PARTIES’ DIRECT MARKETING PURPOSES.  IN GENERAL, IF THE BUSINESS HAS MADE SUCH A DISCLOSURE OF PERSONAL DATA, UPON RECEIPT OF A REQUEST BY A CALIFORNIA CUSTOMER, THE BUSINESS IS REQUIRED TO PROVIDE A LIST OF ALL THIRD PARTIES TO WHOM PERSONAL DATA WAS DISCLOSED IN THE PRECEDING CALENDAR YEAR, AS WELL AS A LIST OF THE CATEGORIES OF PERSONAL DATA THAT WERE DISCLOSED.  CALIFORNIA CUSTOMERS MAY REQUEST FURTHER INFORMATION ABOUT OUR COMPLIANCE WITH THIS LAW BY E-MAILING HELLO@GETKARD.COM.  PLEASE NOTE THAT WE ARE REQUIRED TO RESPOND TO ONE REQUEST PER CALIFORNIA CUSTOMER EACH YEAR AND WE ARE NOT REQUIRED TO RESPOND TO REQUESTS MADE BY MEANS OTHER THAN THROUGH THIS E-MAIL ADDRESS.

F. Other Disclosures. Regardless of any choices you make regarding your Personal Data (as described below), Kard may disclose Personal Data if it believes in good faith that such disclosure is necessary (a) in connection with any legal investigation; (b) to comply with relevant laws or to respond to subpoenas or warrants served on Kard; (c) to protect or defend the rights or property of Kard or users of the Site or Services; and/or (d) to investigate or assist in preventing any violation or potential violation of the law, this Privacy Policy, or our Terms of Use.

Third Party Websites.  Our Site may contain links to third party websites.  When you click on a link to any other website or location, you will leave our Site and go to another site, and another entity may collect Personal Data or Anonymous Data from you.  We have no control over, do not review, and cannot be responsible for, these outside websites or their content.  Please be aware that the terms of this Privacy Policy do not apply to these outside websites or content, or to any collection of your Personal Data after you click on links to such outside websites.  We encourage you to read the privacy policies of every website you visit.  The links to third party websites or locations are for your convenience and do not signify our endorsement of such third parties or their products, content or websites.

Your Choices Regarding Information. You have several choices regarding the use of information on our Service:

A. Unlinking Your Card. To opt out of the Services and unlink your card, please reach out to your card issuer.

B. Email Communications. We will periodically send you free newsletters and e-mails that directly promote the use of our Site or Services. When you receive newsletters or promotional communications from us, you may indicate a preference to stop receiving further communications from us and you will have the opportunity to “opt-out” by following the unsubscribe instructions provided in the e-mail you receive or by contacting us directly (please see contact information below). Despite your indicated e-mail preferences, we may send you service related communications, including notices of any updates to our Terms of Use or Privacy Policy.

C. Cookies. If you decide at any time that you no longer wish to accept Cookies from our Service for any of the purposes described above, then you can instruct your browser, by changing its settings, to stop accepting Cookies or to prompt you before accepting a Cookie from the websites you visit. Consult your browser’s technical information. If you do not accept Cookies, however, you may not be able to use all portions of the Service or all functionality of the Service. If you have any questions about how to disable or modify Cookies, please let us know at the contact information provided in Section 1.

D. Changing or Deleting Your Personal Data. You may change any of your Personal Data in your Account by editing your profile within your Account. You may request deletion of your Personal Data by us, and we will use commercially reasonable efforts to honor your request, but please note that we may be required to keep such information and not delete it (or to keep this information for a certain time, in which case we will comply with your deletion request only after we have fulfilled such requirements). When we delete any information, it will be deleted from the active database, but may remain in our archives. We may also retain your information for fraud or similar purposes.

Security of Your Personal Data.  Kard is committed to protecting the security of your Personal Data.  We use a variety of industry-standard security technologies and procedures to help protect your Personal Data from unauthorized access, use, or disclosure.  No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we use reasonable efforts to protect your Personal Data, we cannot guarantee its absolute security.

Changes to This Privacy Policy.  This Privacy Policy is subject to occasional revision, and if we make any material changes in the way we use your Personal Data, we will notify you by sending you an e-mail to the last e-mail address you provided to us and/or by prominently posting notice of the changes on our Site.  Any changes to this Privacy Policy will be effective upon the earlier of thirty (30) calendar days following our dispatch of an e-mail notice to you or thirty (30) calendar days following our posting of notice of the changes on our Site.  These changes will be effective immediately for new users of our Service.  Please note that at all times you are responsible for updating your Personal Data to provide us with your most current e-mail address.  In the event that the last e-mail address that you have provided us is not valid, or for any reason is not capable of delivering to you the notice described above, our dispatch of the e-mail containing such notice will nonetheless constitute effective notice of the changes described in the notice.  If you do not wish to permit changes in our use of your Personal Data, you must notify us prior to the effective date of the changes that you wish to deactivate your Account with us.  Continued use of our Site or Services, following notice of such changes shall indicate your acknowledgement of such changes and agreement to be bound by the terms and conditions of such changes.