Privacy Notice

CMS Payments Intelligence, Inc., including its affiliated companies and subsidiaries (“CMSPI” "we", "us", or "our”), is committed to protecting your privacy. This Privacy Notice (“Notice”) supplements the terms of our Privacy Policy and applies to visitors, users, and others who are residents of the State of California (“consumer” or “you”) and explain additional rights that apply to consumers.

What does this Privacy Notice do?

This Notice explains CMSPI’s information processing practices and applies to any Personal Information, as defined further below, you provide to us and any Personal Information we collect from other sources or automatically. This Notice is a statement of our information practices and of your rights regarding your Personal Information.

This Notice does not apply to your use of a third party site linked to or from this website.

If you have a disability and require an alternative format to this Notice, please email us at: info@cmspi.com or call +1 (470) 582-0100 so that we may provide you with a more suitable format.

Information We Collect

CMSPI collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("Personal Information"). In particular, CMSPI has collected the following categories of Personal Information from consumers within the last twelve (12) months:

Personal Information does not include:

• Publicly available information from government records.
• Deidentified or aggregated consumer information.
• Information excluded from the CCPA's scope, like:
  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
  • Personal Information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

CMSPI obtains each of the categories of Personal Information listed in the table above from the following categories of sources:

• Directly from you For example:
  • From forms you complete or products and services you request or purchase;
  • When you register for or attend an CMSPI site or event;
  • When you apply for a position at CMSPI;
  • If you contact us with a complaint or query; or
  • When you engage with us over social media.

• From our clients or other third parties. For example:
  • When we provide services for our clients, when Personal Information is strictly relevant to the services we provide. Our services are focused on optimizing merchants’ payment acceptance arrangements. In the course of those services, your Personal Information may be provided to us by our clients, or advisors or service providers acting on behalf of our clients. Sometimes our clients may ask us to contact you directly.
  • From third parties such as third=party hiring firms and publicly available sources. 
  • In relation to benefit or compensation programs offered or sponsored by your employer. 

• Indirectly from you. For example, we and our service providers may:
  • observe your actions on our website;
  • use automated technologies, such as cookies, pixels, third party tags, scripts, log files and other means to automatically collect information about the use of our Sites including (but not limited to): device information such as your hardware model, operating system and unique device identifiers, IP address; collection date; web pages viewed; and email clicks or other actions taken. We may also use pixels to automatically collect information about how individuals interact with our sites or read the emails we send to them. Further information about our use of cookies can be found in our Cookie Policy. 
  • Social media. We may collect, receive and retain certain information if you interact with us through social media websites or features. You may also choose to link your account with us to third party social media sites. If you link your account or engage with us on or through third party social media sites or applications, you may allow us to have ongoing access to certain information from your social media account (e.g., name, e-mail address, photo, gender, birthday, the posts or the 'likes' you make).
  • Content you post. If you post content to our website, such as reviews, ratings or comments (“User Content”), we maintain a record of such User Content.
  • Mobile devices. If you access our websites on your mobile device, we may also collect your unique device identifier and mobile device IP address, as well as information about your device's operating system, mobile carrier and your precise geolocation information.

Use of Personal Information

We may use or disclose each of the categories of Personal Information we collect for each of the following purposes:

• When you request services, we ask that you provide Personal Information that enables us to respond to your request or inquiry. When you provide Personal Information to us, we generally use it for the purposes as described in this Notice further below.
• In order to perform our professional consultancy services. This may impact you, for example, where you are the employee of our client, or one of our client’s advisors or service providers. The precise purposes for which your Personal Information is processed will be determined by the scope and specification of our client engagement, and by applicable laws, regulatory guidance and professional standards.
• To administer our client engagements. We process Personal Information about our clients and the individual representatives of our corporate clients in order to: carry out client communication, service, billing and administration
• To contact our clients in relation to current, future and proposed engagements.
• To send our clients newsletters, know-how, promotional material and other marketing communications.
• To invite our clients to events (and arrange and administer those events).
• To provide, support, personalize, and develop our website, products, and services.
• To create, maintain, customize, and secure your account with us.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To help maintain the safety, security, and integrity of our website, products and services, databases and other technology assets, and business.
• For testing, research, analysis, and product development, including to develop and improve our website, products, and services.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• To protect our business operations, secure our network and information technology, assets and services; to prevent and detect fraud, unauthorized activities, unauthorized access and other misconduct; where we believe necessary to investigate, prevent or take action regarding suspected violations of this Notice, as well as fraud, illegal activities, cheating, misconduct and other situations involving potential threats to the rights or safety of any person or third party.
• As described to you when collecting your Personal Information.

CMSPI will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Disclosing Personal Information

CMSPI may disclose your Personal Information to third parties as set out below.

We share each of the categories of Personal Information we collect (as stated above) with each of the following categories of parties:

• Within CMSPI. We may share your Personal Information with other CMSPI entities, brands, divisions, and subsidiaries to serve you, including for the activities listed above.
• Third Parties. We may share your Personal Information with third parties, however, we do not rent, sell or otherwise disclose Personal Information with unaffiliated third parties for their own direct marketing use.
• Business Partners. We disclose Personal Information to business partners who provide certain specialized services to us, or who cooperate with us on projects. These business partners operate as separate businesses, and are responsible for their own compliance with data protection laws. You should refer to their privacy notices for more information about their practices.
• Authorized Service Providers. We may disclose your information to service providers we have retained to perform services on our behalf (either in relation to services performed for our clients, or information which we use for our own purposes, such as marketing). Examples include:
  • IT service providers who manage our IT and back office systems and telecommunications networks;
  • Marketing automation providers; and
  • Contact center providers.
• Other Users. If you interact with our websites and post User Content or engage with a plug-ins or other applications, depending on your privacy settings, this information may become public on the Internet and may be shared with other website users and third parties. You can control what information you share through privacy settings available on some social media sites. For more information about how you can customize your privacy settings and how third party social media sites handle your Personal Information, please refer to their privacy help guides, privacy notices and terms of use.
• Legal Obligation and Business Transfers. We may disclose Personal Information (i) if we are required to do so by law, legal process, statute, rule, regulation, or professional standard, or to respond to a subpoena, search warrant, or other legal request. (ii) in response to law enforcement authority or other government official requests, (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or (iv) in connection with an investigation of suspected or actual illegal activity. Disclosure may also be required for company audits or to investigate a complaint or security threat.

Disclosures of Personal Information for a Business Purpose

In the preceding twelve (12) months, CMSPI has disclosed the following categories of Personal Information for a business purpose:

Category A: Identifiers.
Category B: California Customer Records Personal Information categories.
Category C: Protected classification characteristics under California or federal law.
Category D: Internet or other similar network activity.
Category E: Professional or employment-related information.
Category F: Non-public education information.
Category G: Inferences drawn from other Personal Information.

Your Rights and Choices

The CCPA provides consumers (California residents) with specific rights regarding their Personal Information and imposes restrictions on particular business practices as set forth below, and prohibits us from discriminating against individuals for exercising their privacy rights under the law. If you are a California resident, this section describes your CCPA rights and explains how to exercise those rights.

Initial Notice: to be notified at or before the point of collection of the categories of Personal Information collected and the purposes for which such categories are used.

Do-Not-Sell: the right to opt-out of our sale of your Personal Information.

Verifiable Requests to Delete and Requests to Know. Subject to certain exceptions, consumers have the right to make the following requests, at no charge:

Request to Know

California residents have the right to request and, subject to certain exemptions, receive a copy of the specific pieces of Personal Information that we have collected about them in the prior 12 months and to have this delivered, free of charge, either (a) by mail or (b) electronically in a portable and, to the extent technically feasible, readily useable format that allows the individual to transmit this information to another entity without hindrance. California residents also have the right to request that we provide them certain information about how we have handled their Personal Information in the prior 12 months, including the:

• categories of Personal Information collected;
• categories of sources of Personal Information;
• business and/or commercial purposes for collecting and selling their Personal Information;
• categories of third parties/with whom we have disclosed or shared their Personal Information;
• categories of Personal Information that we have disclosed or shared with a third party for a business purpose;
• categories of Personal Information collected; and
• categories of third parties to whom the residents’ Personal Information has been sold and the specific categories of Personal Information sold to each category of third party.

California residents may make Requests to Know up to twice every 12 months.

Deletion Request Rights

You have the right to request that CMSPI delete your Personal Information that we collected from you, subject to certain exceptions as set out by law. Once we receive and verify your consumer request, we will delete your Personal Information from our records, unless an exception applies.

Non-Discrimination

The CCPA prohibits discrimination against those who exercise their rights under the CCPA and imposes requirements on any financial incentives offered to California residents related to their Personal Information. Unless permitted by the CCPA, we will not:

• Deny you or your business/employer/customer goods or services.
• Charge you or your business/employer/customer different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you or your business/employer/customer a different level or quality of goods or services.
• Suggest that you or your business/employer/customer may receive a different price or rate for goods or services or a different level or quality of goods or services.

Submitting a Verifiable Request

To submit a verifiable Delete, Copy or Right to Know request, please email us at info@cmspi.com, or call +1 (470) 582-0100.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

Making a verifiable consumer request does not require you to create an account with us. However, we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Information associated with that specific account.

We will only use Personal Information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Changes to Our Privacy Notice

CMSPI reserves the right to amend this Notice at our discretion and at any time. When we make changes to this Notice, we will post the updated Notice on our website and update the Notice's effective date. If the changes materially affect you, we will attempt to notify you in advance of such change, such as via a notice on our website and via email to the email address we have on file for you. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions about this Notice, the ways in which CMSPI collects and uses your Personal Information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Calling us at +1 (470) 582-0100

Contacting us at info@cmspi.com 

Postal Address:

CMS Payments Intelligence, Inc.
55 Allen Plaza, Suite 500
55 Ivan Allen Jr. Boulevard
Atlanta, GA 30308