Policy Privacy.
Please Read Carefully
Your privacy is important to us. So we’ve developed a Privacy Policy that covers how we collect, use, disclose, transfer, and store your information. Please take a moment to familiarize yourself with our privacy practices and let us know if you have any questions.
This Privacy Statement describes our data privacy practices, the ways in which we collect, hold and use information about individual persons and all business entities that visit our website and use our Services. BY USING THIS WEBSITE, YOU CONSENT TO THE COLLECTION AND USE OF INFORMATION AS SET FORTH IN THIS PRIVACY POLICY. YOU ALSO ACKNOWLEDGE THAT WE MAY PERIODICALLY CHANGE, MODIFY, ADD OR REMOVE OR OTHERWISE UPDATE THIS PRIVACY POLICY AT OUR DISCRETION, WITHOUT PRIOR NOTIFICATION.
This Policy also describes the rights you have to (i) opt out of receiving information you have consented to receiving as a registrant to our services; (ii) access, correct, or delete your data under our control; (iii) challenge or dispute our processing of your data; (iv) limit our disclosure of your personal data to third parties; and (v) file a complaint with us or a regulator. You will not receive discriminatory treatment from us for exercising your privacy rights under this Policy.
SECTION 2 GENERAL CONDITIONS
Personal information is data that can be used to identify or contact you as a single person or business entity.
Your personal information (not including credit card information), may be transferred unencrypted and (a) transmitted over various networks; and (b) changed to conform and be adapted to the technical requirements of connecting networks or devices.
You may be asked to provide your personal information anytime you are in contact with us or any one of our affiliated companies. We and our affiliates may share this personal information with each other and use it consistent with this Privacy Policy. We use data and personal information to put together reports and ratings in our service. These reports and ratings are shared with other parties and you agree to share such information when you use this site. We and/or they may also combine it with other information to provide and improve our Services, content, and advertising. You are not required to provide the personal information that we have requested, but, if you chose not to do so, in many cases we will not be able to provide you with our Services or respond to any queries you may have.
Credit card information is always encrypted when transferred over networks.
We may draw inferences from the information identified in the data you provide to create a profile about consumers and businesses reflecting their preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. These inferences allow us to improve our products and services and tailor our online information for the benefit of our customers.
SECTION 3 - DISCLOSURE
We may disclose your personal information if we are required by law to do so or if you violate our Terms.
We may disclose data and personal information used in the generation of our services with other parties or our affiliates.
Additionally, in the event of a reorganization, merger, or sale we may transfer any and all personal information we collect to the relevant third party.
SECTION 4 – Google Cloud and Stripe
Our website is hosted by Google Cloud and our online payments are processed on Stripe. They provide an online e-commerce platform allowing us to sell our products and services to you.
Your data is stored through their data storage, databases and the general Stripe application. Stripe stores your data on a server behind a firewall.
Payment:
If you choose a direct payment gateway to complete your purchase, then Stripe stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS).
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, please read Stripe’s terms of service https://stripe.com/legal.
SECTION 5 - EXTERNAL SERVICE PROVIDERS
We may share personal information with companies who provide services such as information processing, extending credit, fulfilling customer orders, delivering products to you, managing and enhancing customer data, providing customer service, assessing your interest in our products and services, and conducting customer research or satisfaction surveys.
In general, the External Service providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain External Service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by each of these individual providers.
In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
Once you leave our website or are redirected to application External Service Provider, you are subject to the Privacy Policy, User Agreements and Terms of Service of the External Service provider.
Links
When you click on links on our website, the link may direct you away from our website to an External Service Provider. We are not responsible for the privacy practices, user agreements, terms of service, or other agreements of other External Service Providers and encourage you to read their privacy statements, terms, and agreements.
Google analytics:
We use Google Cloud and Google Analytics (“Google Analytics”) which is a service offered by Google Inc. (“Google”) that generates detailed statistics about a website's traffic and traffic sources and measures conversions and sales. Google Analytics uses “cookies” stored on your computer to help analyze how users use our website.
On behalf of us, Google will use the information generated by the cookies for the purpose of evaluating the use of our website, compiling reports on website activity providing us with these reports for analytical purposes.
Google may transfer this information to third parties in case of a statutory obligation or if a third party processes data on behalf of Google.
You may prevent or stop the installation and storage of cookies by you browser settings by downloading and installing the free Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout?hl=en (link is external). We inform you that in such case you may not be able to wholly use all functions of our website.
By using our website you consent to the processing of any personal data Google will collect on you in the way and for the purpose as described above.
SECTION 6 - SECURITY
To protect your personal information, we take reasonable precautions and follow the common industry standards to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
If you provide us with your credit card information, the information is encrypted using Stripe’s secure AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, they follow all PCI-DSS requirements and implement additional generally accepted industry standards.
SECTION 7 - COOKIES
Our website, online services, interactive applications, email messages, and advertisements may use “cookies” and other technologies. These help us better understand user behavior, tell us which parts of our websites people have visited, and facilitate and measure the effectiveness of advertisements and web searches.
Here is a list of the cookies that we use. We have listed them here so you that you can choose if you want to opt-out of cookies or not.
session_id, unique token, sessional, Allows us to store information about your session (referrer, landing page, etc).
PREF, persistent for a very short period, Set by Google and tracks who visits the store and from where
Username, username id, Allows us to store user information.
SECTION 8 – OPT OUT
A. Update or Opt Out. If you have registered to participate in industry discussions or receive marketing and business materials, as a customer or a registrant, or to auto renew your services, you may update your preferences, or revoke your consent and unsubscribe to our Services at any time by clicking on any unsubscribe link, or by contacting us at unsubscribe@ratingindex.net.
B. Email Messages. Our email messages may contain web beacons and other features that tell us you received and were able to open the message. We do not honor electronic do-not-track signals sent by a consumer’s browser when you visit our websites or other mechanisms that would give you an ability to exercise choice regarding the collection of personal information about your online activities over time and across third party websites.
C. No Discrimination. The status of a customer will not be affected if the customer declines to sign up to receive or decides to receive our Services.
SECTION 9 CONSUMERS RIGHT IN US
A. Right to Request Deletion of Your Personal Information
You have a right to request that we delete any personal information about you that we have collected from you. Upon receiving a verifiable request, we will delete your personal information from our records and direct any service providers we have used to process your personal information to delete the same from their records. However, we will decline to delete your personal information if maintaining it is necessary in order for us to:
1. Complete the transaction for which the personal information was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between us and you;
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
3. Debug to identify and repair errors that impair existing intended functionality;
4. Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
5. Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code;
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, if you have provided informed consent;
7. Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
8. Comply with a legal obligation; or
9. Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
B. Right to Access Your Personal Information
You have the right to ask us to disclose the categories and specific pieces of personal information, including information reasonably capable of being associated with you or your household that we have collected about you within the previous 12 months and still retain. We will also disclose, if applicable:
The categories of sources from which the personal information was collected
The business or commercial purpose for collection the information
The categories of service providers with whom we shared the information
When you request access, we will not disclose the following personal information to you, but we will explain to you the basis for our denial:
Information lawfully made available from federal, state, or local government records;
Information if the disclosure of it creates a conflict with federal or state law;
Information that is de-identified or aggregate consumer information;
Information from a third party that is publicly available information;
Information if the disclosure of it creates a substantial, articulable, and unreasonable risk to the security of that personal information, your account with us, or the security of our business’s systems or networks; or
Your Social Security number, driver’s license number or other government-issued identification number, financial account number, any health insurance or medical identification number, an account password, or security questions and answers
For purposes of this Policy, we will not collect personal information that we would not otherwise collect in the ordinary course of our business, retain personal information for longer than we would otherwise retain such information in the ordinary course of our business, or re-identify or otherwise link information that is not maintained in a manner that would be considered personal information.
C. Exercising Your Rights of Deletion and Access
1. If you are a customer, you may exercise (i) your right to request deletion of your personal information collected or maintained by us, or (ii) your right to access the information we have collected, used, disclosed, or sold, by contacting us at the privacypolicy@ratingindex.net. For your protection when you request deletion or access, we will expect you to verify your identity by accessing your password-protected account with FICO. You may exercise your right to request access to your personal information at any time, but not more often than twice in a 12 month period.
2. We will use a two-step process for online requests to delete where you must first submit the request to delete and, second, separately confirm that you want your personal information deleted. We will respond in writing through your account. In our response to your request to delete, we will specify the manner in which the personal information has been deleted. We will maintain a record of your request.
3. If you do not have an account with us, but you have interacted with our online or offline, you may exercise your right to request access to your personal information by contacting us at privacypolicy@ratingindex.net. We will provide the information you request by mail or electronically at your option, in a portable and readily useable format that allows you to transmit this information to another entity without hindrance. For your protection when you request deletion or access, we will expect you to verify your identity, which may depend on the nature of the personal information requested.
4. Upon receiving an access request or a request to delete, we will confirm receipt of the request within 10 days and provide information about how we will process the request. We will describe our verification process and when you should expect a response. We will respond to requests for access and requests to delete within 45 days, which begins on the day we receive your request. We may take up to an additional 45 days to respond to the consumer’s request, for a maximum total of 90 days from the day the request is received, if we provide you with notice explaining the reason that the business will take more than 45 days to respond to the request.
5. If we receive from you a request for access or a request to delete your personal information that we collect or maintain in our business capacity as a service provider on behalf of another business, we will deny your request, but we will notify you to submit the request directly to that business, and we will provide you with contact information for that business, if feasible.
6. You may designate an authorized agent to make an access request or a request to delete on your behalf, but we require that (i) you provide the authorized agent written permission to do so; and (ii) the agent verifies her own identity directly with us. A power of attorney will suffice.
SECTION 10 - CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.
If our business is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to provide Services to you.
QUESTIONS AND CONTACT INFORMATION
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at privacypolicy@ratingindex.net or mail
Rating Index Inc.
Attn: Privacy Policy
2133 Leghorn St.
Mountain View California US 94043