Updated December 2020
Introduction
Privacy and online safety are important to Corpay One, Inc. (hereby known as “Corpay One”). We offer a software platform and services for bill management and payment. We collect data about individuals and businesses, when they use the platform, services and our websites (collectively known as "Services"). This privacy policy describes how we collect, use and share data. This privacy policy is separate to our Terms of Services and other important information available on our Services, and does not replace them.
In this privacy policy, the following terms shall have the following meanings:
"You" means a visitor to one of our websites or a user of one or more of our Services ("User").
“User” means a user of our Services.
“Personal Data” means any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier.
"Other Data" means other data besides Personal Data.
This policy does not apply to third-party websites, products, or services even if they link to our Services. We are not responsible for third parties’ content or information practices. You are strongly encouraged to consider the privacy practices of those third-parties carefully.
If You disagree with the practices described in this policy, You should (a) take the necessary steps to remove cookies from your computer after leaving our website, and (b) discontinue your use of our Services.
We have a Cookie Policy that describes in detail how we use cookies and similar technologies. Please see below regarding our usage of cookies.
Corpay One ApS is the data controller of your personal information collected and processed through our Services.
Corpay One ApS
Sølvgade 38F, 1. sal
1307 København K
E-mail: support@corpayone.com
Telephone: +45 71 99 31 94
CVR no.: 37231525
You are welcome to contact us via mail or by telephone, in the event that You have any questions regarding the treatment of your data.
The collection and use of data from a variety of sources is essential to our ability to provide our Services – and to help keep the Services safe. Data is critical in helping us to increase the safety of your online payments, and reduce the risk of fraud, money laundering and other harmful activity.
The Data we collect depends on how our Services are used.
We collect the following information:
We collect the following information:
Personal Data does not include Data that has been aggregated or made anonymous such that it can no longer be reasonably associated with a specific person.
We do not collect nor store personal data in the form of credit or debit card numbers. This information is collected through our partner Stripe. When using our Dwolla integration to connect your bank account to Corpay One and route ACH payments, Corpay One may store and transmit routing and account information.
b. Other Data
Other Data is collected through a variety of sources such as:
a. Personal Data.
We and our service providers use Personal Data to: (i) provide the Services; (ii) detect and prevent fraud; (iii) mitigate financial loss or other harm to Users, Customers, and Corpay One; and (iv) promote, analyze and improve our products, systems, and tools. Examples of how we may use Personal Data include:
b. Other Data
We may use Other Data for a range of different purposes, provided we comply with applicable law and our contractual commitments. In some countries (e.g., European Economic Area countries), local legal regimes may require us to treat some or all of Other Data as "personal data" under applicable data protection laws. Where this is the case, we will process Other Data only for the same purposes as Personal Data under this privacy policy.
Corpay One does not sell or rent Personal Data to marketers or unaffiliated third parties. We share your Personal Data with trusted third parties, including:
a. Corpay One Affiliates. We share Data with entities worldwide that we control, are controlled by us, or are under our common control, to provide our Services. Corpay One, Inc. is the party responsible for overall management and use of the Data by these affiliated parties.
b. Corpay One Service Providers and Payment Service Providers. We share Data with service providers and payment service providers who help us provide the Services. Service providers help with things like payment processing (i.e., banks, credit bureaus, payment method providers), website hosting, data analysis, information technology and related infrastructure, customer service, email delivery, and auditing.
c. Authorized Third Parties. We may share data with parties directly authorized by a User to receive Data, such as when a User authorizes a third party application provider to access the User's Corpay One account using Corpay One Integrations. The primary example is integrations to Accounting Systems or ERP products, where the User grants authorization to a 3rd party application to access the User's Corpay One data. The use of Data by an authorized third party is subject to the third party's privacy policy.
d. Third Parties. We may share Data with third parties in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings).
e. Safety, Legal Purposes and Law Enforcement. We use and disclose Data as we believe necessary: (i) under applicable law, or payment method rules; (ii) to enforce our terms and conditions; (iii) to protect our rights, privacy, safety or property, and/or that of our affiliates, You or others; and (iv) to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include authorities outside your country of residence.
We use reasonable organizational, technical and administrative measures to protect Personal Data within our organization (including education and training of relevant personnel).
When You log onto our services, all transactions and communications via our Services are encrypted using Secure Socket Layer (“SSL”) technology. If You are using a public computer accessible by others besides yourself, please ensure that You log out of our Services and close the session completely.
If You have reason to believe that your interaction with us is no longer secure (e.g., if You feel that the security of your account has been compromised), please contact us immediately.
You have choices regarding our use and disclosure of your Personal Data. You may opt out of receiving electronic communications from us and no longer want to receive marketing-related emails from us on a going-forward basis. You may opt-out via the unsubscribe link included in such emails. We will try to comply with your request(s) as soon as reasonably practicable. Please note that even if You opt-out from receiving marketing-related emails from us, we may still send You important administrative messages that are required to provide You with our Services.
You have the right to ask us at any time to:
You are not required to pay any charge for exercising any of these rights, unless your request is unfounded or excessive. If You wish to exercise any of these rights, please contact us. We endeavour to respond to requests as soon as reasonably practicable. If your request is particularly complex, it may take us longer to respond. In this case, we will notify and keep You informed. You may not have a right to information if we have responded to a request, and You have made a repeat request without a reasonable period of time passing between the requests.
When contacting us by email, kindly specify clearly what Personal Data is to be amended. We may need to request specific information from You to help us confirm your identity and ensure your right to access your Personal Data, or to exercise any of your other rights. This is a security measure to ensure that your Personal Data is not disclosed to any one who has no right to receive it. We may also contact You for further information in relation to your request to speed up our response. We endeavour to comply with your request as soon as reasonably practicable.
With regards to deletion of your Personal Data held by us, we will try to comply with your request as soon as possible with commercially reasonable efforts. Please note that we may be required to keep such information and not delete it (or to keep it until such time we have fulfilled such requirements). Further explanations of data retention can be found below under XX. Retention Period.
We will retain Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Please note that we have a variety of obligations to retain the Data that You provide to us, including to ensure that transactions can be appropriately processed, settled, refunded or charged-back, to help identify fraud and to comply with anti-money laundering and other laws and rules that apply to us and to our financial service providers. Accordingly, even if You close your Corpay One Account, we will retain certain Data to meet our obligations. There may also be residual Data that will remain within our databases and other records, which will not be removed.
We will retain your Personal Data for a maximum of five (5) years from the date of termination of your contractual relationship with Corpay One, as per Danish Bogføringsloven, Chapter 5, §10.
Our Services are not directed to individuals under the age of eighteen (18). We request that they not provide Personal Data through the Services. We do not knowingly collect nor solicit personal information from individuals under the age of eighteen. If we are notified (by contacting us at support@corpayone.com) or if we learn that such personal information was collected, we will delete such information as soon as possible.
Our Services are global. Data (including Personal Data) may be collected, processed and stored in any country where we have operations or where we engage service providers. Where we may transfer Data to countries outside the European Economic Area (“EEA”), we will ensure that it is protected and transferred in a manner consistent and comply with applicable data protection laws and that your Data remains protected to the standards described in this privacy policy. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your Personal Data.
In situations where your Personal Data may be transferred out of the EEA, we will endeavor to ensure that it is given a similar degree of protection as when it is transferred inside the EEA, by ensuring at least one of the following safeguards is implemented:
We may change this Privacy Policy from time to time. This may be necessary, e.g. if the law changes or if the business changes in a way that affects personal data protection. The "Last updated" legend at the top of this Privacy Policy, indicates when was the last revision. Any changes are effective when we post the revised Privacy Policy on the Services.
We may provide You with disclosures and alerts regarding the Privacy Policy or Personal Data collected by posting them on our website and, if You are a User, by contacting You through your Corpay One Dashboard, email address and/or the physical address listed in your Corpay One account. You agree that electronic disclosures and notices have the same meaning and effect, as if we had provided hard copy disclosures to You. Disclosures and notices in relation to this Privacy Policy or Personal Data shall be considered to be received by You within 24 hours of the time they are posted to our website or, in the case of Users, sent to through one of means listed in this paragraph. Furthermore, your continued usage of this after any changes in the Privacy Policy will constitute your acceptance of changes.
Cookies play an important role in helping us provide personal, effective and safe Services. We use Cookies to facilitate and improve your experience, and to provide and improve our products and/or services. Furthermore, we use analytics services, which use Cookies to collect and analyse usage statistics, enabling us to better understand how people use our Services. For more details, please refer to our Cookie policy.
You have the right to gain access to the Data processed about You. You have the right to object to your Personal Data being used at any time. You can also retract your permission to use your Personal Data at any time. If the retained Data is incorrect, you have a right to request a correction or deletion. You can request this via support@corpayone.com.
Furthermore, if you have any complaints about Corpay One’s processing of your Data, you may contact the Danish Data Protection Agency at
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
If You have any questions about this Privacy Policy, please contact us at support@corpayone.com or at:
Corpay One ApS
Sølvgade 38
1103 København K.