Keyo is committed to ensuring that your information is secure. We have instituted appropriate physical, electronic and managerial procedures to safeguard and secure the information we collect online to prevent unauthorized access or disclosure of the information we collect. Access to information is limited (through user/password credentials and software systems) to those employees who require it to perform their job functions. We use industry-standard Secure Socket Layer (SSL) encryption technology, as well as AES 256-bit encryption technology, to safeguard the account registration process, biometric information, payment information and sign-up information. Other security safeguards include data encryption, firewalls, and physical access controls to building and files. We use regular Malware Scanning.
No method of transmission over the Internet, or method of electronic storage is 100% secure and reliable however, and Keyo cannot guarantee absolute security concerning your information.
INFORMATION WE COLLECT AND USE
We collect information from you when you register on our website, place an order, subscribe to a newsletter, respond to a survey, fill out a form, use live chat, open a support ticket, use a Keyo terminal, or enter information on our website. We collect Biometric Data from you when you use a Keyo kiosk and provide your Biometric Data or when you use a Keyo terminal to pay for goods or services at a participating merchant (see our Biometric Data Policy at https://www.keyo.com/biometric-policy ).
We may require you to provide us with certain Personally Identifiable Information, including but not limited to your name, phone number, and postal address to provide you with the functionalities of our website and services and a better user experience. We may collect the following Personally Identifiable Information about you when you use our website and services:
~ Your name and job title and any other information you submit when you sign up for access to our website and services
~ Your contact information including phone number and email address
~ Your credit card and payment information
~ Information you provide to us for customer service and support
~ information which you populate your profile with, including photographs
~ Messages that you send or receive through our website
~ Details of transactions that you conduct while using our website and services, including any information we require to provide the products or services that you sign up for
~ Your location according to the IP address assigned to your computer machine or mobile device by your Internet Service Provider, and mobile location data
~ Usage data about how you use our site, so-called Anonymous Data, which we collect using Cookies
~ Other Information relevant to customer surveys and/or offers
~ Information concerning the dates and times you use our website and services
~ Information concerning the type of browser, operating system and language that you use while visiting our website
~ Information about the website that directed you to our website, including information about the website that you previously visited before visiting or logging on to our website
~ Your Biometric Data (see our Biometric Data Policy at https://www.keyo.com/biometric-policy
For your convenience, we may store your credit card and payment information for more than sixty (60) days in order to expedite future orders and to automate the billing process. You may change, update, or remove your credit card and payment information by accessing your account through our website.
We collect the information described above for the following reasons:
~ For our internal record-keeping purposes and requirements
~ To administer your user account with us (including notifying you of any compatible matches, tips, announcements, updates, special offers or services, should you consent to these things)
~ To ensure that you are complying with the terms and conditions of use and to comply with our statutory and regulatory obligations
~ To help us improve the structure, layout and usability of our website and services
~ To allow you to participate in interactive features offered by our website and services
~ To help personalize your repeat visits to and usage of our website and services
~ To provide you with information on products or services or news and offers that you request from us
~ To answer questions you may raise or respond to comments you may send to us
~ To notify you about changes to our service or the functionality of our website and services
~ To carry out market analysis and research
CONTROL OF YOUR PERSONALLY IDENTIFIABLE INFORMATION
You may request that we delete any of your Personally Identifiable Information we have by notifying us at firstname.lastname@example.org. You may also decline to provide Personally Identifiable Information when requested on our website to provide you with access to our website’s functionality. If you decline to provide Personally Identifiable Information that is required for you to use Keyo’s website and services, however, you may be prevented from accessing and using some, or all, portions of our website and services or experience a loss of functionality of our website and services as well as a reduced user experience.
If you previously permitted Keyo to use your Information for direct marketing purposes, you may rescind that permission at any time by writing to or emailing us at email@example.com.
We will not sell, distribute or lease your Personally Identifiable Information to third parties unless we have your permission or unless we are required by law to do so. We may use your Personally Identifiable Information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.
You may request details of Personally Identifiable Information which we have about you. If you would like a copy of your Personally Identifiable Information that we have please write to firstname.lastname@example.org. If you are a resident of the European Union or present in the European Economic Area (“EEA”) at the time that you are accessing or using our website and services, you will not be charged a fee for this service.
If you believe that any of your Personally Identifiable Information we have is incorrect or incomplete, you may have the information corrected by notifying us at email@example.com.
If you reside, are located in, or are a citizen of a nation state that is part of the EEA, you are entitled:
~ To request that we provide access to any Personally Identifiable Information we hold about you;
~ To request that we prevent the processing of your Personally Identifiable Information for direct-marketing purposes;
~ To request that we update any Personally Identifiable Information which is out of date or incorrect;
~ To request that we delete any Personally Identifiable Information which we are holding about you;
~ To request that we restrict the way that we process your Personally Identifiable Information;
~ To request that we provide your Personally Identifiable Information to a third party provider of services; or
~ To request that we provide you with a copy of any Personally Identifiable Information which we hold about you.
Certain Personally Identifiable Information may be exempt from such requests in certain circumstances, which may include circumstances where we need to keep processing your such information to comply with certain legal obligations. There will be certain residual data that will remain within our databases, access logs and other records, which may or may not contain your Personally Identifiable Information.
WHERE WE STORE YOUR INFORMATION
HOW LONG WE RETAIN/KEEP YOUR INFORMATION
If you are an inactive user or infrequently use our website and services, you should be aware that we will continue to store your information until you cancel your account. You are responsible for changing your preferences or cancelling your account.
LOG DATA AND COOKIES
We collect information that your browser sends to us that is called Log Data whenever you visit our website. This Log Data may include information such as your computer’s Internet Protocol (IP) address, browser version, pages of our website that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
Cookies are files with small amount of data that is commonly used as an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive. Our website uses these “cookies” to collect information and to:
~ Improve our website and services
~ Help remember and process the items in the shopping cart
~ Understand and save user’s preferences for future visits
~ Keep track of advertisements
~ Compile aggregate data about site traffic and site interactions in order to offer better website experiences and tools in the future. We may also use trusted third-party services that track this information on our behalf
Cookies help us provide you with a better website user experience by enabling us to monitor which pages are being used. A cookie in no way gives Keyo access to your computer or any Personally Identifiable Information about you, other than the data you choose to share with us. You have the option to either accept or refuse these cookies through your browser and to know when a cookie is being sent to your computer. If you choose to refuse our cookies, you might not be able to use some portions and functionalities of our website and services.
We honor do not track signals and do not track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.
Where we maintain or use deidentified information, we will continue to maintain and use the deidentified information only in a deidentified fashion and will not attempt to re-identify the information.
LINKS TO OTHER SITES
Keyo.co may contain links to other websites of interest. If you use any of these links to leave our website, Keyo does not have any control over that other website or the information that the other website may collect from you. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services or for the protection and privacy of any information which you provide while visiting such other websites.
We may be required by law, for example, through potential or actual litigation, court order, public or governmental authorities, or rules and regulations within or outside your country of residence to disclose all or part of your information to third parties. We may also deem it necessary to make such a disclosure in the event of an issue of national security, law enforcement or other such
similar situations as we deem necessary including, for example, allegations of alleged infringement of copyright, trademarks or other third parties’ rights.
~ Remarketing with Google AdSense
~ Google Display Network Impression Reporting
~ Demographics and Interests Reporting
~ DoubleClick Platform Integration
Users can set preferences for how Google advertises to you using the Google Ad Settings page. Alternatively, you can opt out by visiting the Network Advertising initiative opt out page or permanently using the Google Analytics Opt Out Browser add on.
We may share your Personally Identifiable Information and other information with third-party service providers in order to provide our website functionality and services to you including third parties such as VISA, CyberSource (go to https://www.cybersource.com) and Stripe (go to https://stripe.com/about) who assist us with:
~ information and data processing
~ credit and payment processing
~ order fulfillment
~ managing and hosting data
~ consumer research or satisfaction surveys
~ To improve our services
~ To provide service on our behalf
~ To perform service, maintenance and repair-related activities
~ To assist us in analyzing how our website and services are used
These third-party companies may have access to your information to perform the tasks described above. However, they are obligated not to disclose or use your information for any other purpose. We do not provide your information to third parties that enable them to engage in any direct marketing to you without your express consent.
CALIFORNIA PRIVACY RIGHTS AND DISCLOSURES
Keyo is committed to protecting the privacy rights of California residents. This Policy describes how we collect, use, and share the Personally Identifiable Information of California residents, as well as the rights that California residents have with respect to their Personally Identifiable Information.
This Policy applies to all California residents who use our website, mobile app, or any other service or product we offer (collectively, the "Services"). This Policy does not apply to information that is collected offline, or to the information of consumers who are not residents of California.
Under California law, Personal Information refers to details collected on the Internet about an individual user, including the user's first and last names, addresses, email addresses, telephone numbers, social security numbers, contact information, birthdays, physical appearance related details, and any other information stored online that may identify the user. It is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably
be linked, directly or indirectly, with a particular California resident or household. This information is referred to in this Policy as “Personally Identifiable Information.”
We collect Personally Identifiable Information from California residents in a variety of ways, including:
~ When you provide it to us directly, such as when you create an account, make a purchase, or sign up for our newsletter
~ When you use our Services, such as when you browse our website or use our mobile app
~ From public records or widely available sources, including information from the media, and other records and information that are made available by federal, state, and local government entities
~ From outside companies or organizations that provide data to support activities such as fraud prevention, underwriting, and marketing. Examples may include internet service providers, social networks, operating systems and platforms, data brokers, advertising networks, security, and data analytics providers
~ From outside companies or organizations from whom we collect Personally Identifiable Information to support human resource and workforce management activities. Examples may include operating systems and platforms, and social networks.
~ From outside companies or organizations from whom we collect Personally Identifiable Information as part of providing products and services, completing transactions, supporting our everyday operations, or business management and development. Examples include companies or organizations to whom we provide products or services; other parties, partners, and financial institutions; and parties involved with mergers, acquisitions, and other transactions.
The types of Personally Identifiable Information we may collect from California residents include (i) identifiers, such as your name, address, email, phone number, and social security number, (ii) personal characteristics, such as your age, gender, and interests, (iii) online activity information, such as your browsing history, location data, and search queries, (iv) financial information, such as your payment card number and expiration date, and (v) sensitive information, such as your biometric information.
The purposes for which we collect, use, and disclose Personally Identifiable Information depend on, among other things, our relationship or interaction with a specific California resident. We collect, use, and disclose Personally Identifiable Information in different contexts.
We collect, use, and disclose Personally Identifiable Information to support employment, infrastructure, and human resource management in a variety of ways, including managing and operating facilities and infrastructure, and obtaining support for fulfilling the above purposes from our third-party service providers, professional services and business partners.
We also collect, use, and disclose Personally Identifiable Information to provide and manage products and services, including to (i) establish and process transactions for our products and services, (ii) support the ongoing management and maintenance of our products and services ,(iii) obtain support for fulfilling the above purposes from our third-party service providers, professional services and business partners, and financial institutions, (iv) support our everyday operations, including to meet risk, legal, and compliance requirements, (v) perform accounting, monitoring, and reporting, (vi) enable information security and anti-fraud operations, (vii) support audit and investigations, legal requests and demands, as well as exercise and defend legal claims, (viii) enable the use of service providers for business purposes, (ix) comply with laws, regulations, policies, procedures, and contractual obligations, and (x) obtain support for fulfilling the above purposes from our third-party service providers, professional services and business partners, and financial institutions.
In addition to the foregoing, we may collect, use, and disclose Personally Identifiable Information to (i) manage, improve, and develop our business, (ii) market, personalize, develop, and improve our products and services, (iii) conduct research and analysis, including to drive product and services innovation, (iv) support customer relationship management, and (v) obtain support for fulfilling the above purposes from our service providers and from our professional services, business, and marketing partners.
We may collect, use and disclose Sensitive Personal Information as permitted by law for the following purposes: (i) to perform services for our business, provide goods or services as requested by individuals, and ensure security and integrity, (ii) for short term transient use such as displaying first party, non-personalized advertising, (iii) to process and fulfil orders, maintain and service accounts, provide customer service, verify customer information, process payments, and provide financing, and (iv) for activities relating to quality and safety control or product improvement. These activities concern the use of Personally Identifiable Information we collect from California residents for a variety of purposes such as:
~ To provide and improve our Services;
~ To communicate with you, such as to send you updates and promotional materials;
~ To personalize your experience on our Services;
~ To perform research and analysis; and
~ To comply with legal obligations.
We may disclose Personally Identifiable Information of California residents to third parties for a variety of purposes. These cases include where we disclose such information to service providers who assist us in providing our Services, to third-party partners who help us communicate with you or perform research and analysis, to a third party in the event of a merger, acquisition, or other similar event, and as required by law, such as in response to a subpoena or court order. The categories of third parties to whom we disclose Personally Identifiable Information about a specific individual depend on, among other things, our relationship or interaction with a specific California resident. Such third parties include:
~ Outside companies or organizations, including service providers subject to appropriate confidentiality and use restrictions, to whom we disclose Personally Identifiable Information as part of providing products and services, completing transactions, supporting our everyday operations, or business management and development. Examples may include internet service providers, social networks, operating systems and platforms, data brokers, advertising networks, and data analytics providers; companies or organizations to whom we provide products or services; other parties, partners, and financial institutions; and parties involved with mergers, acquisitions, and other transactions involving transfers of all or part of a business, or a set of assets;
~ Companies or individuals that represent California residents such as an accountant, financial advisor, or person holding power of attorney on behalf of a California resident;
~ Government agencies including to support regulatory and legal requirements;
~ Outside companies or organizations, including service providers subject to appropriate confidentiality and use restrictions, to whom we provide Personally Identifiable Information to support human resource activities and workforce management. Examples may include operating systems and platforms and data analytics providers;
~ Outside companies or organizations, in connection with routine or required reporting, including consumer reporting agencies and other parties; and
~ Outside companies, in connection with online advertising activities prior to January 1, 2023.
During the past twelve (12) months, we have collected the following categories of Personally Identifiable Information:
~ Personal Identifiers — Personal unique identifiers, such as full name and federal or state issued identification numbers including Social Security number, driver’s license number, and passport number;
~ Personal Information — Personal information, including contact details (e.g., telephone number and address), financial information (e.g., account number and balance), and payment card details (e.g., credit and debit card numbers);
~ Purchase Information — Purchase information, such as products and services obtained and transaction histories;
~ Biometric Information — Biometric information, such as palm vein configurations;
Internet or Online Information — Internet or online information (e.g., browsing history) and information regarding interaction with our websites, applications, or advertisements;
~ Geolocation Data — Geolocation data, such as device location;
~ Audio and Visual Information — Audio, electronic, visual, thermal, olfactory, or similar information, such as call and video recording;
~ Employment Information — Professional or employment-related information, such as work history and prior employer, information from background checks, resumes, and personnel files;
~ Education Information — Education information subject to the federal Family Educational Rights and Privacy Act, such as student records and confirmation of graduation;
~ Inferences — Inferences based on information about an individual to create a summary about, for example, an individual’s preferences and characteristics; and
~ Other sensitive personal information.
Sensitive Personal Information includes the following types of data:
~ Social Security number, driver’s license, state identification card, or passport number;
~ Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account;
~ Precise geolocation;
~ The contents of mail, email, and text messages unless we are the intended recipient of the communication; and
~ Biometric information processed to uniquely identify an individual.
Under the CPRA, California residents have certain rights with respect to their Personally Identifiable Information, including:
~ The right to know what Personally Identifiable Information we have collected about you, and how it has been used and shared.
~ The right to request that we delete your Personally Identifiable Information.
~ The right to opt-out of the sale of your Personally Identifiable Information.
~ The right to non-discrimination for the exercise of your privacy rights.
~ The right to correct and/or update your Personally Identifiable Information.
~ The right to access a copy of certain Personally Identifiable Information in a portable format
~ The right to limit use and sharing of "sensitive personal information"
Please contact us to exercise these rights. We will respond to your request within forty-five (45) days, or provide a written explanation of any delay or denial of your request.
For more details about Personally Identifiable Information we collect, including the categories of sources, please see the INFORMATION WE COLLECT AND USE section above. We collect this information for the business and commercial purposes described in the HOW WE USE INFORMATION section above. We share this information with the categories of third parties described in the THIRD PARTIES and SERVICE PROVIDERS sections above. We do not sell your Personally Identifiable Information without your consent or without providing a right to opt out. Please note that we do use third-party cookies for our advertising purposes as further described in the LOG DATA AND COOKIES section above.
Requests under the CCPA
The CCPA defines a “sale” as the disclosure of Personally Identifiable Information for monetary or other valuable consideration. Keyo does not sell and has not, within at least the last twelve (12) months, sold Personally Identifiable Information, including Sensitive Personally Identifiable Information that is subject to the CCPA’s sale limitation. As of January 1, 2023, we do not share Personally Identifiable Information for cross-context behavioral advertising within the scope of CCPA. We have no actual knowledge that we sell or share Personally Identifiable Information of California residents sixteen (16) years of age and younger.
If you are a California resident, you have the right to request that we disclose to you the following information covering the twelve (12)-month period prior to your request:
~ The categories of Personally Identifiable Information we collected about you and the categories of sources from which we collected the Personally Identifiable Information;
~ The business or commercial purpose for collecting Personally Identifiable Information about you;
~ The categories of third parties to whom we disclosed Personally Identifiable Information about you, and the categories of Personally Identifiable Information disclosed;
~ The specific pieces of Personally Identifiable Information we collected about you;
~ Delete Personally Identifiable Information we collected from you; and
~ Correct inaccurate personal information that we maintain about you.
In addition, you have the right to be free from discrimination by a business for exercising your CCPA privacy rights, including the right as an employee, applicant, or independent contractor not to be retaliated against for exercising your CCPA privacy rights.
Subject to certain limitations, California law provides California consumers the right to request to know more details about the categories or specific pieces of Personal Identifiable Information we collect (including how we use and disclose this information), to delete their Personal Identifiable Information, to opt out of any sales that may be occurring, and to not be discriminated against for exercising these rights. You may opt-out by visiting the following page: California Opt-Out. You may designate another person to opt-out on your behalf.
California consumers may make a request by contacting us at firstname.lastname@example.org or by mail to the following address:
111 North Wabash Ave. Ste.100
The Garland Building #3473
Chicago IL 60602
We will verify your request using the information associated with your account, including email address. Government identification may be required. Consumers can also designate an authorized agent to exercise these rights on their behalf.
Consistent with California law, if you choose to exercise your applicable rights, we will not charge you different prices or provide you a different quality of services. If we ever offer a financial incentive or product enhancement that is contingent upon you providing your Personal Identifiable Information, we will not do so unless the benefits to you are reasonably related to the value of the Personal Identifiable Information that you provide to us.
If you reside in the State of California or a child over whom you hold parental or legal guardian responsibilities resides in the State of California, you are entitled to request a list of all of that child’s Personally Identifiable Information that we disclose to necessary third parties as well as a deletion of the information. See THIRD PARTIES and SERVICE PROVIDERS above. If you instruct us to remove the Personally Identifiable Information of a child over whom you have parental or legal
guardian responsibility, please be aware that the child may be unable to use some or all of our services. If you have questions concerning the removal or deletion of children’s Personally Identifiable Information, please contact our support team at email@example.com.
An agent must be authorized to make a request on your behalf. As part of our verification process, we may request that you provide, as applicable, for an individual (“requestor”) making a request on behalf of a California resident:
~ The requestor’s name; contact information; social security or individual taxpayer identification number; date of birth; and Driver’s License, state identification, or Matricula Card.
~ The name; contact information; social security or individual taxpayer identification number; date of birth; and Driver’s License, state identification, or Matricula Card of the California resident on whose behalf the request is being made.
~ A document to confirm that the requestor is authorized to make the request. We may accept, as applicable, a signed permission by the California resident on whose behalf the request is made, power of attorney, legal guardianship or conservatorship order, or a birth certificate of a minor.
Keyo does not use the Personally Identifiable Information of children for marketing or advertising purposes. We do not knowingly collect Personally Identifiable Information from children under the age of sixteen (16) without the consent of the children’s parents or legal guardians. If you are a parent or legal guardian and you are aware that your child has provided us with Personally Identifiable Information without your consent, you may contact us to delete the information.
In instances where the collection of children’s Personally Identifiable Information is necessary to provide the services we offer, for example in connection with schools and other facilities to whom we provide our goods and services, we do not collect such Personally Identifiable Information without the clear consent of their parents or legal guardians. If you decline such consent or instruct us to remove the Personally Identifiable Information of a child over whom you have parental or legal guardian responsibility, please be aware that the child may be unable to use some or all of Keyo services. If you have questions concerning the removal or deletion of children’s Personally Identifiable Information, please contact our support team at firstname.lastname@example.org.
KEYO BIOMETRIC DATA POLICY
Last updated: July 11, 2023