Verifone California Privacy Policy

PURPOSE AND INTENT

Verifone, Inc. and its direct and indirect parent and subsidiary companies listed here (collectively, "Verifone", "Company", or "We") are committed to safeguarding your Personal Information's privacy and security. This California privacy policy ("Privacy Policy") describes our practices around Personal Information - what we collect, why we collect it, and your rights.

This Privacy Policy supplements our main Privacy Policy located here, and is intended to comply with the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (together, the "CPRA") and its implementing regulations (Cal. Code Regs., tit. 11, §§ 7000–7102).

This Privacy Policy applies to individuals residing in California who visit Verifone Websites (as defined below), merchants, or retailers of Verifone, and prospective customers.

The CCPA only applies to information about residents of California. If you are a resident of a U.S. state other than California, you may submit a request and we may process it, as described in this Privacy Policy, even though the CCPA does not require us to do so. In accepting, processing, and responding to requests by individuals who are not California residents, we will apply all the same limitations and exceptions under the CCPA to those requests as apply to requests made by California residents. We reserve the right to change or stop the practice of accepting requests from U.S. residents of states other than California, except as otherwise required by law.

Under the CCPA, "personal information" is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. This information is referred to in this Policy as "Personal Information".

If you have any questions about this Privacy Policy or our Information Practices, please contact us at: privacy@verifone.com.

If you wish to access this California Privacy Policy in an alternate format or require an accommodation to access this Privacy Policy, please contact us at: privacy@verifone.com.

CATEGORIES OF PERSONAL INFORMATION WE COLLECT

The categories of Personal Information we have collected, received, used, and retained during the previous twelve months include:

• Unique Personal Identifiers - such as full name, address, unique personal identifier, online identifier, internet protocol address, email address, account name, federal or state-issued identification numbers (including Social Security number, driver’s license number, and passport number), or other similar identifiers.
• Personal Information - personal information, including contact details (e.g., postal address, email address, name, billing address, and phone/mobile number), birthdate, financial details (e.g., bank account number);
• Professional or employment-related information - such as job title, business address, and business email address;
• Audio and Visual Information - audio, electronic, visual, thermal, olfactory, or similar information, such as call and video recordings;
• Commercial Information - including shipping address, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
• Internet or other electronic network activity information - such as browsing history, search history, and information regarding your interactions with an internet website, social media site, advertisements, or applications, messaging “metadata” such as timestamps, delivery status, and carrier information;
• Communications content - including communication preferences and consent records (opt-in/opt-out timestamps and method);
• Inferences drawn from Personal Information collected; and
• Sensitive Personal Information - Social Security number, driver’s license, state identification card, or passport number, precise geolocation, online identifiers (including login credentials and username).

If you choose to participate in one of our online surveys, which we conduct to better understand the needs of our customers, we may request additional categories of Personal Information from you.

SOURCES OF PERSONAL INFORMATION

The sources from which we collect Personal Information depend on, among other things, our relationship or interaction with a specific California resident. The information below lists the categories of sources from which we collect Personal Information in different contexts:

• From California residents directly, or other individuals acting on their behalf, through, for example, physical (e.g., paper application), audible (e.g., phone), and electronic (e.g., website, social media) sources.
• Public records or widely available sources, including information from the media, and information that is made available by federal, state, and local government entities.
• Third parties that provide data to support activities such as fraud prevention and marketing. Examples may include internet service providers, social networks, data brokers, advertising networks, and data analytics providers.
• Third parties, including resellers, distributors, and other third parties, that sell or service Verifone products or solutions, but only where these third parties are legally permitted or required to disclose your Personal Information to us.

PURPOSES FOR COLLECTING PERSONAL INFORMATION

The purposes for which we collect, use, and disclose Personal Information depend on, among other things, our relationship or interaction with a specific California resident. The purposes for which we collect, use, and disclose Personal Information in different contexts:

• Provide and promote and manage our products and services;
• Manage our business relationships;
• Perform accounting and other internal business functions;
• Comply with applicable laws;
• Detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity;
• Exercise and defend our legal rights;
• Perform quality controls; and
• Other short-term, transient uses.

HOW WE SHARE PERSONAL INFORMATION

The categories of third parties to whom we disclose or share Personal Information depend on, among other things, our relationship or interaction with a specific California resident. The categories of recipients we disclosed your Personal Information to during the previous twelve months include:

• Our affiliate companies;
• Third parties, including service providers, to whom we disclose Personal Information as part of providing products and services, completing transactions, supporting our everyday operations, or business management and development. Examples may include internet service providers, social networks, operating systems and platforms, advertising networks, CPaaS/SMS aggregators, wireless carriers, contact center/IVR/IVA and CRM/support-ticketing platforms, cloud hosting/IT operations, and security/fraud-prevention compliance/record-keeping providers, and data analytics providers; other parties, partners, and financial institutions; and parties involved with mergers, acquisitions, and other transactions involving transfers of all or part of a business, or a set of assets.
• Competent law enforcement agencies, courts, government agencies, and professional advisors (e.g., legal counsels, auditors), to comply with our legal obligations and exercise our legal rights;
• Appropriate entities in connection with any proposed purchase, merger, or acquisition;
• Companies or individuals that represent California residents such as an accountant, financial advisor, or person holding power of attorney on behalf of a California resident;
• Payment networks, acquiring banks, tax or financial regulators, and auditors, where we are required to comply with card-network rules, financial regulations, tax obligations, or other legal processes;
• Third-party marketing and advertising technology providers, advertising partners, and social media platforms, in connection with our cross-context behavioral advertising activities; and
• Other persons and entities with your consent to the disclosure.

The table below lists, for each category of Personal Information we collected during that period (i) the categories of third parties to whom we disclosed the information for our business purposes and (ii) the categories of third parties with whom we share Personal Information for cross-context behavioral advertising as of the Effective Date. T

DATA RETENTION

We will keep Personal Information, including Sensitive Personal Information, as long as necessary to fulfill the purposes for the collection. Generally, Personal Information is retained for the duration of our relationship with you, plus any legally required record or data retention period and/or any period of time necessary to exercise our legal rights

YOUR PRIVACY RIGHTS

Verifone does not sell and has not, within the previous twelve months, sold Personal Information, including Sensitive Personal Information. Furthermore, we have no actual knowledge that we sell or share (for purposes of cross-context behavioral advertising) Personal Information, including Sensitive Personal Information, of minors under 16 years of age.

As a California resident, you have the following privacy rights regarding your Personal Information:

• The right to know and right to access the Personal Information we have collected about you, including the categories of Personal Information; the categories of sources from which the Personal Information is collected; the business or commercial purpose for collecting, selling, or sharing Personal Information; the categories of third parties to whom the business discloses Personal Information; and the specific pieces of Personal Information the business has collected about the consumer;
• The right to delete Personal Information that we have collected from you, subject to certain exceptions;
• The right to correct inaccurate Personal Information that we maintain about you;
• The right to opt you out of "sharing", for purposes of cross-context behavioral advertising ("Request to Opt-Out of Sharing").
• The right of portability, or right to have us transfer your Personal Information to other persons or entities upon your request; and
• The right not to be discriminated against for exercising your privacy rights.

You can exercise your right to know, delete, or correct your Personal Information by submitting a request to us by using the webform by clicking this "Personal Information Rights Request Form" link or emailing us at: privacy@verifone.com. To protect the security of your Personal Information, we will require you to verify your identity by providing us with identifying information such as your personal email address, personal telephone number, home address, and/or other information that we can match with the Personal Information we have already collected about you to verify your identity.

To make a Request to Opt-Out of Sharing your Personal Information with third parties for advertising purposes, you may view and change your current cookie preferences by clicking here. For more information, see our Cookies Policy, and Cookie Declaration.

We also process opt-out preference signals, such as required by the CCPA. These signals set the opt-out of sharing preferences for the specific browser or device you are using. View our record-keeping details in our Annual Disclosure.

You may use an authorized agent to exercise your right to know, delete, or correct your Personal Information. We will require your authorized agent to provide us with either (1) a power of attorney authorizing the authorized agent to act on your behalf or (2) your written authorization permitting the authorized agent to request access to your Personal Information on your behalf. Further, we will require you or your authorized agent to provide us with identifying information to verify your identity. We may also require you to either verify your own identity directly with us or directly confirm with us that you provided the authorized agent permission to submit the request.

CUSTOMER CARE SMS COMMUNICATIONS
Petroleum & Fuel Station customer support, U.S only.

If you request Petroleum and Fuel Station text messages (SMS) based customer care, we may send a one-time SMS or, where you later engage via SMS, recurring messages from +1.754.282.0045 related to your support inquiry. Message frequency varies. Message and data rates may apply.

For the SMS-based customer care, we do not sell or share mobile numbers, SMS originator opt-in data, or consent/opt-out records for marketing or promotional purposes. We may disclose this information only to service providers acting on our behalf to operate the SMS-based customer care and under contracts prohibiting marketing use.

Text HELP for assistance or STOP to opt out at any time. See our Customer Care SMS Terms for details.

CHANGES TO THIS PRIVACY POLICY

As we strive to improve our practices, we may revise this Privacy Policy from time to time. This Privacy Policy is not a contract, and we reserve the right to change this Privacy Policy at any time and to notify you of those changes by posting an updated version of this Privacy Policy. It is your responsibility to check this Privacy Policy from time to time for any changes.

QUESTIONS AND FURTHER INFORMATION

If you have any questions or would like further information regarding this Privacy Policy or our privacy practices, please contact us at: privacy@verifone.com.