Tango Card, Inc. Privacy Notice

This Privacy Notice describes how Tango Card, Inc. and affiliates (collectively, “Tango,” “we,” “us,” or “our”) collect, use, disclose, and safeguard personal information. This Privacy Notice applies to Tango and Tango’s online properties (including our websites and websites or mobile applications that link to it “Sites”), our social media pages or handles, our products and services, and our interactions with you such as through customer service requests (the “Services”). This Privacy Notice also tells you about your rights and choices with respect to your personal information, and how you can reach us to get answers to your questions. Tango provides Services to support our enterprise Clients’ (“Clients”) rewards and incentives programs. Please note that this Privacy Notice does not apply to the personal information we collect from our Clients’ end users when we are acting as a data processor – our collection and use of information in such purposes is governed by the Tango Terms and Conditions and our data processing agreements with Clients. When we receive or process information on behalf of one of our Clients, the privacy practices that apply to the processing of that information are also governed by our Client’s privacy notice, and you should direct any data processing questions to the Client.

When we receive information for our own purposes as a data controller, such as the contact or billing information of our Clients, the processing of that information is covered by this Privacy Notice.

You can jump to particular topics by going to the headings below:

Types Of Information We Collect
Use And Processing Of Information
Sharing Of Information
Your Choices
Information for Authorized Agents
How We Protect Personal Information
Cookie Policy

Special Information for Job Applicants

Other Important Information

Privacy Disclosures for Specific Jurisdictions

Contact Information

Types of information we collect

We provide Services and products to support enterprise Clients’ rewards, loyalty and incentive programs. In that capacity we receive personal information from our Clients or collect it directly from you, and we process that information on behalf of our Clients. In other situations, we receive personal information for our own use. The following provides examples of the type of information that we collect from you.

Information you give us

You may provide the following information to us directly:

  • Contact information, including name and email address.
  • Content you may include in survey responses.
  • Information contained in your communications to us, including call recordings of customer service calls or transcripts of online chat interactions.
  • Information you provide when you sign up for or download content from the Services (e.g, when you request a demo or sign up for a webinar), or when you fill out an online form (in which case, you may provide us with information such as your name, email address, phone number, company name, and any other information you choose to provide in the firm).
  • Information you make available to us via a social media platform.
  • Information you submit to inquire about or apply for a job with us.
  • Any other information you submit to us.
Information we collect automatically

We and partners working on our behalf may use log files, cookies, or other digital tracking technologies to collect the following information from the device you use to interact with our Services:

  • Device information, including IP address, device identifiers, and details about your web browser. Please note that from your IP address, we are also able to determine your general geolocation.
  • Analytical information, including details about your interaction with our website, app, and electronic newsletters.
  • Diagnostic information, including web traffic logs.
  • Advertising information, including special advertising and other unique identifiers that enable us or third parties working on our behalf to target advertisements to you. Please be aware that our advertising partners may collect information about you when you visit third-party websites or use third-party apps. They may use that information to better target advertisements to you on our behalf.
  • Business record information, including records of your purchases of products and Services.

We may also create records using the above information when you interact with the Services.

The following is a list of our primary partners who collect information. Please follow the links to find out more information about the partner’s privacy practices.

To learn more about how we use cookies, including for our analytics and marketing purposes, and how to manage cookies, please see our “Cookies Policy” below.

Information we collect from other sources

In addition to the information that we collect from you or from our Clients, we may also receive information about you from other sources, including third parties, business partners, our affiliates, or publicly available sources.

We may collect the following information about you from third-party sources:

  • Contact or identity verification information, including names and email addresses, for the purposes of fraud prevention or compliance with regulatory obligations.
  • Information about your interaction with advertisements on our Services, or ads that we place on third party websites, from online advertising companies.
  • If you decide to invite others to the Services, we will collect your and the other person’s names, email addresses, and/or phone numbers to send an email or text message and follow up with the other person. You agree that you have obtained the other person’s consent before giving us his or her contact information. You also agree that you will not send us the contact information of a minor. We may inform any other person you invite that you gave us his or her information.
  • If you are using one of our “open loop” card services, you may have the opportunity to request information about prior purchases on your card and your remaining balance. If you request this information, we will obtain this information from our banking partners on your behalf.

Use and processing of information

We may use the information we collect in the following ways:

  • To identify you when you visit our websites.
  • To provide products and Services.
  • To improve our Services and product offerings, including analytics.
  • To offer you recommendations and tailor the Services to your preferences.
  • To respond to inquiries related to support, employment opportunities, or other requests.
  • To send marketing and promotional materials, including information relating to our products, Services, sales, or promotions, to personalize the advertisements you see on our Services and third-party online properties, and to measure the effectiveness of our advertising. We may disclose your information to business partners, online advertising partners, and social media platforms for this purpose.
  • For internal administrative purposes, as well as to manage our relationships.
  • To protect and secure our Services, assets, network, and business operations, and to detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal.
  • To comply, in good faith, with legal process, such as warrants, subpoenas, court orders, and lawful regulatory or law enforcement requests and to comply with applicable legal requirements, including “know-your-customer” due diligence and other anti-money laundering or OFAC compliance obligations.

Aggregate/De-Identified Information. We may aggregate and/or de-identify any information collected through our Services so that such information can no longer be linked to you or your device (“De-Identified Information”). We may use De-Identified Information for any purpose, including without limitation for research and marketing purposes, and may also disclose such data to any third parties, including advertisers, partners, and sponsors.

Combined Information. We may combine the information that we collect through the Services with information that we receive from other sources, both online and offline, and use such combined information in accordance with this Privacy Notice.

Legal Bases for Processing. The laws in certain jurisdictions (such as those in the European Union and United Kingdom), require us to inform you of the "legal bases" on which we process your information. The legal bases for using your information as set out in this Privacy Notice are as follows:

  • Where we need to perform the contract we are about to enter into or have entered into with you for the Services.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation.
  • Where we have your consent to process your information in a certain way.

Disclosures of information

In addition to the specific situations discussed elsewhere in this notice, we disclose information in the following situations:

1. Affiliates and Acquisitions. We may disclose information to our corporate affiliates (e.g., subsidiaries or other companies under common control). If another company acquires, or plans to acquire, our company, business, or our assets, we will also disclose information to that company, including at the negotiation stage.

2. Other Disclosures with Your Consent. We may ask if you would like us to disclose your information to unaffiliated third parties who are not described elsewhere in this notice.

3. Other Disclosures without Your Consent. We may disclose information, where we determine in good faith that such disclosure is necessary, in response to subpoenas, warrants, or court orders, or in connection with any legal process, or to comply with relevant laws. We may also disclose your information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies, or to comply with your request for the shipment of products to or the provision of services by a third-party intermediary.

4. Public. Some of our websites and social media pages may provide the opportunity to post comments or reviews, on a message board or in a public forum. If you decide to submit information on these pages, that information may be publicly available.

5. Service providers. We engage vendors to perform specific business functions on our behalf and they may receive information about you from us or collect information from you directly. These vendors are obligated by contract to use information that we disclose only for the purpose of providing these business functions, which include:

  1. Supporting Service functionality, such as vendors that support event registration, customer service and Client relationship management, subscription fulfillment, freight services, application development, list cleansing, postal mailings, and communications (email, fax).
  2. Analytics, online advertising, and marketing services, including entities that analyze traffic on our online properties and assist with identifying and communicating with potential Clients.
  3. Security vendors, such as entities that assist with security incident verification and response, service notifications, and fraud prevention.
  4. Information technology vendors, such as entities that assist with website design, hosting and maintenance, data and software storage, and network operation.

6. Online advertising partners: We partner with companies that assist us in advertising our Services, including partners that use cookies and online tracking technologies to collect information to personalize, retarget, and measure the effectiveness of our online advertising activities across the web.

7. Social media platforms: If you interact with us on social media platforms, the platform may be able to collect information about you and your interaction with us. If you interact with social media objects on our Services (for example, by clicking on a Facebook “like” button), both the platform and your connections on the platform may be able to view that activity. To control this disclosure of information, please review the privacy policy of the relevant social media platform.

Your Privacy Rights & Choices

Your Consumer Privacy Rights

Depending on the laws applicable in your jurisdiction of residence, you may be able to make the following choices regarding your personal information:
  1. Access To Your Personal Information. We will grant you, where required by law, reasonable access to the personal information that we have about you, in a machine-readable format, which depending on the information and technical abilities, you may be able to port to third parties.
  2. Changes To Your Personal Information. We will grant you, where required by law, the ability to request that your information be modified. In some instances, you may be able to update and correct your personal information through your account. If our website does not permit you to update or correct certain information, you may contact us to request that your information be modified.
  3. Deletion of your personal information. We typically retain personal information that we collect for the period necessary to fulfill the purposes outlined in this notice, unless a longer retention period is required or permitted by law. We will grant, where required by law, your request that we delete your personal information. You should note that in many situations we may keep your personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes.
  4. Revocation of consent or objections. We will grant, where required by law, your request to revoke consent to processing (where our processing is based upon consent), or object to our processing (where our processing is not based upon your consent). If you revoke your consent or object we may no longer be able to provide you Services. In some cases we may limit or deny your request to revoke consent or object if the law permits or requires us to do so, or if we are unable to adequately verify your identity.

To the extent that we are a data processor that is processing your information on behalf of one of our Clients, we encourage you to reach out to that Client to make your request, as we are required to await instructions from the Client as the data controller. If you submit your request directly to us, we may explain how to forward your request to the applicable Client for handling as the data controller.

Please address written requests and questions about your rights to privacy@tangocard.com or call us at 1-877-743-7545. We will not discriminate against you for exercising these rights.

Note that we may require you to prove your identity, including by phone call or email. Depending on your request, we will ask for information such as your name, the last item you received or ordered from us, or the date of your last redemption or order from us. We may also ask you to provide a signed declaration confirming your identity.

In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. We will require verification that you provided the authorized agent permission to make a request on your behalf. You must provide us with a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us. If you are an authorized agent submitting a request on behalf of an individual you must attach a copy of the following information to the request:

  1. A completed Authorized Agent Designation Form indicating that you have authorization to act on the consumer’s behalf.
  2. If you are a business, proof that you are registered with the Secretary of State to conduct business in California.

If we do not receive both pieces of information, the request will be denied.

If your request is denied in part or in full, depending on your jurisdiction of residence, you may have the ability to appeal our decision. If an appeal right applies to you, we will let you know in our response to your request.

Marketing Choices
  1. Promotional Emails. In accordance with appliable legal obligations, we send promotional communications such as newsletters, surveys, offers, and other marketing materials to you, as well as targeted offers from third parties. You can stop receiving promotional emails by following the unsubscribe instructions in e-mails that you receive or emailing us at the contact information provided below. If you decide not to receive promotional emails, we may still send you service-related communications, including rewards sent by other Clients.
  2. Online Tracking. We do not currently recognize automated browser signals regarding tracking mechanisms, which may include “Do Not Track” instructions.
Information Sales and Targeted Advertising Opt Out

Depending on your jurisdiction, you may also have the right to opt out of “sales” of your information and “sharing/processing of your information for targeted advertising.”

As explained in the “Disclosure of Information” section above and as further detailed in our Cookie Policy, we may allow third-party advertising providers to collect information about your activities on the Services for targeted advertising purposes or use advertising analytics partners to assist us in analyzing use of our Services and our user/customer base. Under applicable law, the disclosure of your personal information to these third parties to assist us in providing these services may be considered a “sale” of personal information or the processing/sharing of personal information for targeted advertising purposes.

If you would like to opt out of the disclosure of your personal information through cookies and similar tools for purposes that could be considered “sales” for those third parties’ own commercial purposes, or “sharing” or processing for purposes of targeted advertising, please visit the following link, which is also available in the footer of our Services: “Do Not Sell or Share My Personal Information.” Note that you will need to opt out on each device you use to access the services. We will honor legally-required browser-based opt out signals in compliance with applicable law.

How we protect personal information

No method of transmission or electronic storage is fully secure. While we use a variety of efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of any unauthorized access to your personal information, we may notify you electronically, in writing via email, if permitted to do so by law.

Our Services may permit you to create an account and prompt you to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.

Special information for job applicants

When you apply for a job with us, we may collect information from you, including:

  • Information you provide in connection with your application.
  • Information that you make available in your social media accounts.
  • Information about you that is available publicly.
  • Information that you authorize us to collect via third parties, including former employers or references.

In certain circumstances, you may submit your application for employment through a third-party service that displays our job posting. We do not control the privacy practices of these third-party services. Please review their privacy policies carefully prior to submitting your application materials.

Other important information

The following additional information relates to our privacy practices:

  • Transmission of Information To Other Countries. We are located in and process data inside the United States, which may have privacy laws that differ from the laws in your jurisdiction of residence. By using the Services, you acknowledge that these transfers will occur. We will use appropriate transfer mechanisms, such as standard clauses, to effectuate such transfers.
  • Changes To This Privacy Notice. We may change our privacy notice and practices over time. We will provide notice of such changes by posting the updated policy on this page with the date the changes come into effect, or, where material changes are made, through other notice as otherwise required by law.
     
  • Information About Children. The Services are intended for users age 16 and older. We do not knowingly collect information from children under this age. If we discover that we have inadvertently collected information from anyone younger than the age of 16, we will delete that information.
  • Disclosure of Medical or Health Information. To the extent that we receive protected health information about you, that information is subject to electronic disclosure to the extent permitted by applicable law.
  • Data Retention. We may store information about you for as long aswe have a legitimate business need for it.

Additional Information for California Residents and California Notice at Collection

Your California Privacy Rights; “Shine the Light” Law

California residents are entitled once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of personal information to third parties for their own direct marketing purposes in the preceding calendar year. We do not disclose your personal information to third parties for third parties’ own direct marketing purposes.
California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (“CCPA”) gives California residents the rights to receive certain information regarding the collection, use, and disclosure of information about them, as well as rights to know/access, correct, delete, and limit the use and disclosure of sensitive personal information and opt out of the “sale” or “sharing” of “personal information” (as all terms in quotes are defined under the CCPA).

Under the CCPA, you have the right to receive notice of certain information about our data collection, use, and disclosure. The following table summarizes the categories of personal information we collect; the categories of sources of that information; whether we disclose, sell, or share that information to service providers or third parties, respectively; and the criteria we use to determine the retention period for such information. The categories we use to describe personal information are those enumerated in the CCPA. We collect this personal information for the purposes described above in “Use and Processing of Information.”

Please note that because this list is comprehensive, it may refer to types of information that we collect and share about people other than yourself.  For example, while we transfer credit card or debit card numbers for our business purpose in order to process payments for orders placed with us, we do not collect or transfer credit card or debit card numbers of individuals that submit questions through our website’s “contact us” page.

Categories  of personal information that we collect

Source

We disclose for business purposes to:

We  “share” or “sell”  as defined in the  CCPA to:

Identifiers  – such as name, postal address, phone number, email address, account name,  signature, or other similar identifiers
You;  our enterprise clients
Service providers

Product and service fulfillment companies

Internet service providers

Payment Processors and financial institutions

Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law

Data analytics providers
Business  partners
Financial information – such as bank account number, credit or debit card number, or other financial information
You
Service providers

Payment Processors and financial institutions

Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law
Not sold/shared
Commercial information – such as information about products or services purchased,  obtained, or considered, or other purchasing or consuming histories or  tendencies
You
Service providers

Product and service fulfillment companies

Payment processors and financial institutions

Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law

Data analytics providers
Not sold/shared
Network activity data – internet or other electronic network activity information, such as IP address, Device identifier (e.g., MAC), Cookie or tracking pixel information, Information about your interaction with our website, app, email correspondence, or products, browsing history, search history, and information regarding an individual’s interaction with an internet website, application, or advertisement
You; our analytics and advertising partners
Service providers

Product and service fulfillment companies

Internet service providers

Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law

Data analytics providers
Advertising  partners
Professional/ employment information – such as occupation
You;  our analytics and advertising partners
Service providers

Government entities, law enforcement, lawyers, auditors, consultants and other parties as required by law
Not sold/shared

We determine the retention period for each of the categories of personal information listed above based on (1) the length of time we need to retain the information to achieve the business or commercial purpose for which it was obtained, (2) any legal or regulatory requirements applicable to such information, (3) internal operational needs, and (4) any need for the information based on any actual or anticipated investigation or litigation.

Entities to whom we disclose information for business purposes are Service Providers, which are companies that we engage to conduct activities on our behalf. We prohibit Service Providers from using personal information for any purpose that is not related to our engagement.

Entities to whom we “sell” or with whom we “share” information are third parties. Under the CCPA, a business “sells” personal information when it discloses personal information to a company for monetary or other benefit. A company may be considered a third party either because we disclose personal information to the company for something other than an enumerated business purpose under California law, or because its contract does not prohibit it from using personal information for purposes unrelated to the service it provides to us. A business “shares” personal information when it discloses personal information to a company for purposes of cross-context behavioral advertising.

Your rights under the CCPA

  • Opt out of sale or sharing of personal information: You have the right to opt out of our sale or sharing of your personal information to third parties. To exercise this right, please visit our Do Not Sell or Share My Personal Information  webpage or contact us. Your right to opt out does not apply to our disclosure of personal information to Service Providers.
  • Limit the use of your sensitive personal information: You have the right to limit our use and disclosure of your sensitive personal information if we use such information to infer characteristics about you. We do not use your sensitive personal information for this purpose. Your right to limit our use and disclosure of such information is subject to exception.
  • For additional rights that you may be able to exercise under the CCPA, please see the “Your Privacy Rights and Choices” section of the Privacy Notice above.

Contact information

privacy@tangocard.com

1-877-743-7545

Last revised date: 2/7/2024