Privacy Policy – 10/01/2021
Effective Date: 10/01/2021 (view archived versions).
This Privacy Policy explains how we (Prepaid Expense Card Solutions, Inc. d/b/a PEX, collectively described as "PEX", "we", "us", or "our") may collect and use the data you provide to us when you visit websites hosted or operated by PEX (the “Site”) or apply for and/or use PEX products and services.
Please read this Privacy Policy closely. By visiting the Site and/or providing your Personal Information to PEX and/or using our products and services and/or the prepaid card that was provided to you, you agree that PEX may collect, use, and disclose your Personal Information as described in this Privacy Policy.
We collect Personal Information and Aggregate Information. We use the term "Personal Information" to refer to information that can be used to identify an individual, and the term "Aggregate Information" to refer to information that does not allow for such identification (e.g., aggregated demographic information, areas visited on the Site, duration of page views, what browser was used to access the Site, and similar information). The collection, use and storage of Personal Information is described in this policy. The collection of Aggregate Information is also described in this policy. Because Aggregate Information does not personally identify who it pertains to, such information may be used and/or shared by PEX for any purpose.
We may remove identifiers from Personal Information to make it anonymous. After Personal Information has been anonymized, we will treat and use such information as Aggregate Information.
Our Site may contain advertisements and links to other websites. PEX is not responsible for the content, privacy policies, and/or practices of any advertisers or linked websites. Before providing Personal Information to third parties, such parties' privacy policies should be reviewed as they will govern how information disclosed directly to such third party may be used.
Our products and services and the Site are intended for use by adults only. They are not directed to children (as defined by applicable federal or state law or regulation), and PEX will not knowingly collect or use information from children, and we request that such individuals, or any third party acting on their behalf, not use or access the Site or provide any Personal Information through the Site.
Table of Contents
Why We Collect Personal Information
How We Collect Personal Information
Types of Personal Information We Collect
Where We Store Personal Information
Disclosure of Personal Information
Confidentiality and Security of Personal Information
Access, Corrections or Removal of Personal Information
Customer's Choice About Receiving Promotional Materials
Retention of Personal Information
Collection of Aggregate Information via Cookies and Other Methods
Rights Under the California Consumer Privacy Act (For California Residents Only)
Why We Collect Personal Information
To help the government fight the funding of terrorism and money laundering activities, the USA PATRIOT Act, a federal law that requires all financial institutions operating in the United States to obtain, verify, and record information that identifies each business that opens an account with them. This includes Personal Information regarding business owners, representatives, administrators, and/or cardholders. PEX collects and verifies Personal Information on behalf of its partner financial institutions to comply with this and other applicable local, state, and federal laws and regulations.
The Personal Information we collect also enables us to:
- Grant access to our products and services;
- Verify identity and detect fraud;
- Maintain our products and services;
- Process fund transfers and transactions;
- Provide services requested through use of the Site;
- Personalize our service;
- Provide customer support;
- Resolve disputes or errors;
- Collect fees;
- Troubleshoot problems or bugs;
- Prevent prohibited or illegal activities, and comply with applicable legal and regulatory requirements;
- Maintain operational support for PEX general business, accounting, recordkeeping, and legal functions;
- Measure and improve our services, content, and advertising.
How We Collect Personal Information
We collect Personal Information from you during enrollment and during the use of our products and services. This may include, but is not limited to:
The PEX account application
- Business name, Employer Identification Number (EIN), operating address, corporate and registration documents
- Name, address, date of birth, Social Security Number (SSN), title, government identification for an individual with significant responsibility for managing the business (“Control Person”)
- Name, address, date of birth, Social Security Number (SSN) for individuals with ownership interest in the business (“Beneficial Owner”)
Use of the services
- Business bank account information
- Name, address, phone number, email, date of birth for any individual authorized to use our products and services (“Administrator”)
- Name, address, phone number, email, date of birth for any individual assigned a prepaid card (“Cardholder”)
- Username and password
- Browser and device information
Use of prepaid cards
- Purchase amount, date, and location
- Purchase type (merchant terminal, online, digital wallet)
- Notes or receipts added to the system by administrators or cardholders
Interaction with Sales, Customer Service, or Customer Success team
- Name
- Contact information
- Communication record (email, phone/webinar recording, survey response, chat history)
Types of Personal Information We Collect
Personally identifiable information that PEX may collect includes, but is not limited to:
- Name
- Address
- Date of birth
- Phone Number
- Email Address
- Social Security Number
- Government ID
Where We Store Personal Information
PEX is located and based in the United States of America. The provision of the PEX products and services, and processing and use of the data you provide to us, is done in the United States. Upon providing us with Personal Information, and/or by accessing and using the Site or the PEX products and services, you consent to the processing, transfer, and storage of such information on, in, and to our servers located within the United States.
Disclosure of Personal Information
Personal Information we collect may be shared with authorized third-party service providers. Such disclosure is often necessary to enable parties to provide us with their services, such as processing such information on our behalf, providing Site maintenance and security, and in connection with providing, improving, or developing certain services. These parties are not permitted to release or utilize Personal Information other than for the purpose(s) of providing their service(s).
Personal data may be disclosed that we believe, in good faith, is appropriate or necessary to:
(i) our partner banks for servicing the products;
(ii) government agencies and authorities when it is required by applicable laws or regulations;
(iii) enforce the terms of this Privacy Policy;
(iv) detect, prevent, or address issues relating to fraud, security breaches, Site integrity, or other technical issues;
(v) to investigate and defend ourselves against third-party claims or allegations; and/or
(vi) to protect against liability or imminent harm to the rights, property, or safety of PEX or other parties as may be required or permitted by applicable laws or regulations.
In addition, you may opt in to sharing their information with expense partners who have an integration with PEX.
Confidentiality and Security of Personal Information
Keeping Personal Information secure is very important to us. All of our employees, data processors, and co-hosting facilities with access to unencrypted personal data are bound to the terms of the Privacy Policy, applicable laws and regulations, and such other confidentiality and security measures as we deem necessary. The physical, process-based, and technological safeguards and measures we take to protect Personal Information from accidental loss and unauthorized access, use, alteration, and disclosure are designed to be appropriate for the nature of the information, up to date, and satisfy applicable laws and regulations. This being said, no data transmission over the internet can be guaranteed as entirely secure. We cannot, therefore, ensure or warrant the security of any information sent to us over the internet. If there is reason to believe that an interaction with us is no longer secure, please notify us immediately.
We never ask for Personal Information in our emails. We also never include links to non-secure sites which ask for such information. To determine whether an email that was sent by PEX is legitimate, please contact us by another means. The safety and security of your information requires your active participation, including without limitation protecting and not sharing your access credentials, using strong passwords, and similar.
PEX will never sell your Personal Information.
Access, Corrections, or Removal of Personal Information
You may request, correct, or amend your Personal Information at any time. Such requests can be made using the methods listed below under the heading "Contact Us". PEX will update its system to reflect any requested changes within thirty (30) days after receipt of your request with complete information. You can verify that the change has been made by contacting us. If you have previously requested changes, there is no need to contact PEX again, as we will honor those changes unless you submit a subsequent change.
You may request to close your prepaid card. By doing so, you eliminate any future access to your Personal Information on our systems. Your Personal Information may be fully or partially maintained on our systems to fulfill regulatory compliance or contractual obligations we have and/or to maintain legitimate business functions.
You may request to close your business account. By doing so, any future access to your Personal Information on our systems will be removed. Your Personal Information or other information related to the business may be fully or partially maintained on our systems to fulfill regulatory compliance or contractual obligations we have and/or to maintain legitimate business functions.
Customer's Choice About Receiving Promotional Materials
In the event you enter Personal Information into a field whose function it is to request additional information or offers (and is clearly labelled as such), or otherwise affirmatively elects to receive additional information or offers, you authorize the delivery of such materials from PEX and/or authorized third parties. You may opt out using the contact methods listed below under the heading "Contact Us". Due to processing time on the part of PEX and such third parties, please note that it can take several weeks for an opt-out request to be effective.
Retention of Personal Information
PEX will retain your Personal Information for as long as your account is active or as needed to provide you services and up to a period of no longer than five (5) years, unless the period is required to be different under applicable law. To the extent permitted by applicable law, we may also further retain and use your Personal Information only as necessary to comply with our legal obligations, resolve disputes, maintain appropriate business records, and enforce our agreements. Because Aggregate Information does not personally identify who it pertains to, such information may be retained by PEX indefinitely.
Indemnification
You are responsible for maintaining the confidentiality of their username(s), password(s), account(s), and all activities occurring under your account(s). You hereby agree to indemnify, defend, and hold us, our agents, representatives and other authorized users, and each of the foregoing entities' respective officers, directors, owners, employees, agents, representatives and assigns (collectively the "Indemnified Parties") harmless from and against any and all losses, damages, liabilities, and costs (including without limitation reasonable attorneys’ fees and costs) incurred in connection with any claim arising out of any breach by the user of this Privacy Policy.
You agree to use your best efforts to cooperate with us in the defense of any claim. We reserve the right, at our own expense, to employ separate counsel and assume the exclusive defense and control of any matter otherwise subject to indemnification by you.
Collection of Aggregate Information via Cookies and Other Methods
As described in the next section, we may gather and store Aggregate Information about Site visitors. The collection of this Aggregate Information enables us to:
- Measure the number of visitors to various portions of the Site;
- Diagnose problems with the Site;
- Administer the Site;
- Track visitor activity;
- Learn more about what visitors and our customers expect; and
- Improve the Site.
PEX servers record Aggregate Information automatically sent by visitor and user browsers. One way this is accomplished is through the use of Cookies. "Cookies" are small pieces of information regarding visits to and use of websites that are stored by the browser on a computer's hard drive. Additionally, Cookies allow us to identify and link users to PEX Accounts. PEX uses both session Cookies and persistent Cookies. A persistent Cookie remains after you close your browser and may be used by your browser on subsequent visits to the Sites.
These persistent Cookies can be removed, but each web browser is a little different. Please review your browser’s “Help” file to learn the correct way to modify your Cookies setup.
Without acceptance of our Cookie by the user, we would be unable to store session data or other information for subsequent log-ins or future use.
We also automatically record certain data using technology, including without limitation “clear gifs” or “web beacons,” Cookies (discussed above), IP addresses, unique “device IDs” (similar to IP addresses), and similar, including without limitation data such as web browser type, the website that referred you to us (if any), the web pages you viewed on the Site, the dates and times that you visited the Site.
Contact Us
For requests or questions related to Aggregate Information and Personal Information, you may contact us using the methods detailed below.
By Mail
PEX Customer Service
P.O. Box 549 Midtown Station
New York, NY 10018
Cardholder:
1-866-685-0898
[email protected]
Administrator:
1-866-685-1898
[email protected]
FAQS
| Facts | WHAT DOES PEX DO WITH PERSONAL INFORMATION? |
| Why? | In order to provide the products and services we offer; we must share information with our third party service providers. Please read this notice carefully to understand what we do. |
| What? | The types of Personal Information we collect from the Control Person, Beneficial Owners(s), Administrator(s), and Cardholder(s) to open and service a business PEX account or prepaid card can include:
|
| Reasons we can share the Personal Information of the Control Person, Beneficial Owner(s), Administrator(s), and Cardholders(s) | Does PEX Share? |
| For our everyday business purposes - such as to approve your application, maintain your business accounts or cards, comply with applicable legal, and regulatory requirements and respond to court orders and legal investigations. | YES |
| For our marketing purposes - to offer our products and services to your business | YES |
| For our expense partner's everyday business purposes - to open an account with our expense partner for a shared experience | NO |
| For our expense partners to market to you | NO |
| For other companies to market to you | NO |
| Questions? | Call 1-866-685-1898 |
| Who we are | |
| Who is providing this notice? | Prepaid Expense Card Solutions, Inc. d/b/a PEX |
| What we do | |
| How does PEX protect personal information? | To protect your information from unauthorized access and use, we use physical, process-based, and technological security measures that are appropriate, up to date, and satisfy applicable laws and regulations. For example, these measures include computer safeguards and secured files and buildings. |
| When does PEX collect personal information? |
The instances at which we collect Personal Information include when you:
|
| Definitions | |
| Expense Partners
Expense companies who integrate their system with PEX to provide expanded services to joint customers. |
Rights Under the California Consumer Privacy Act (For California Residents Only)
Please see the above Privacy Policy for a detailed description of the types of Personal Information collected from California residents; what is shared and how it is shared with third parties; how it is collected; how it is used; how PEX handles “do not track” settings; and other relevant information.
Under the California Consumer Privacy Act (CCPA), California residents who are customers, visitors, or users of PEX products and services have the right to request that PEX disclose the following information to you:
- Categories of Personal Information that PEX has collected about you in the past twelve (12) months;
- Categories of sources from which your Personal Information has been collected;
- Business or commercial purpose(s) for which your Personal Information was collected;
- Categories of third parties with whom PEX shares your Personal Information;
- Specific pieces of Personal Information that PEX has collected about you; and
- Whether or not your Personal Information has been sold to a third party.
In addition, you have the right to request that we delete your Personal Information that we have collected from you and retained, subject to certain exceptions as provided by the CCPA.
Please be aware that, due to legal, regulatory, and compliance requirements applicable to the PEX products and services, your request to delete your Personal Information may mean that you no longer will be eligible to access or use the Site or some or all of our products and services. However, we will not discriminate against you in providing our products and services as a result of you exercising any of your rights under the CCPA.
Any disclosure that we provide to you will cover any Personal Information that PEX has collected from you during the twelve (12) month period immediately preceding the date that PEX actually receives your request. PEX will use its commercially reasonable efforts to provide you a response to your request within forty-five (45) days, either by email or U.S. mail. Should we need an extension to complete your request, PEX will instead notify you of our need for an extension and the expected time for our response (which may be up to an additional forty-five (45) days). We will not typically charge a fee to fully respond to your requests, but we reserve the right to charge a reasonable fee, or to refuse to act on your request, if we reasonably determine that your request is excessive, repetitive, unfounded, or overly burdensome, and we will provide you with notice explaining the basis of our decision. In such case, our notice will also provide you with the amount of the fee, and we will proceed only after receiving your authorization to proceed and payment of the fee.
Please complete and submit the following request form in order to exercise your rights under the CCPA. Call PEX at 1-866-685-1898 if you have any questions.
|
Title |
|||
|
First Name |
Middle Name |
Last Name |
Suffix |
|
Mailing Address |
|||
|
Mailing Address |
|||
|
City |
State |
Zip Code |
|
|
Phone Number |
Email Address |
||
|
Request Type [Provide/Delete…] |
|||
|
Requester Name and Relationship (if different) |
By submitting this request form, I hereby certify that I am a California resident and am the person making this request or the authorized representative of such individual. By submitting this request form, I hereby authorize PEX to contact me at the information above by phone, email, or mail to verify the information submitted is true, accurate, and complete, and to confirm that the submitted request is valid.