This Privacy Policy helps to ensure that Cheerfulme complies with applicable law in the countries in which we operate, such as the General Data Protection Regulation (“GDPR”) promulgated by the European Union and the California Consumer Privacy Act (“CCPA”) promulgated by the State of California.
We at Cheerfulme take your privacy seriously, and will only use your personal information for the purposes permitted by law and this Privacy Policy. Please read our Privacy Policy, and let us know if you have questions.
Who is Cheerfulme?
Cheerfulme is a group of companies consisting of Cheerfulme Limited, its affiliates, and its subsidiaries (collectively, “Cheerfulme”). Cheerfulme provides technical solutions to businesses by allowing them to process payments in e-commerce, and via physical payment devices, such as card readers.
Cheerfulme Protects Your Personal Information at Least Up to the Standards Set Forth by PCI-DSS
Cheerfulme is committed to protecting your privacy whenever you buy goods or services from a merchant that uses Cheerfulme payment solutions (“Merchant”). Merchants will generally use Cheerfulme's payment solutions when customer uses a credit or debit payment card over the internet, telephone, fax, unattended or integrated electronic funds transfer at the point of sale (“EFTPOS”) system (collectively “Transactions”).
Cheerfulme recognizes its responsibility to keep all personal information confidential at all times. Any information that Cheerfulme acquires in connection with such Transactions is kept confidential, whether the information is acquired directly from a cardholder or Merchant. Cheerfulme protects personal information - at a minimum - to the Payment Card Industry Data Security Standards (“PCI-DSS”). To learn more about PCI-DSS, please see our PCI-DSS section below, or visit the PCI Security Standards Council’s website, at:
https://www.pcisecuritystandards.org/.
Please note, however, that Cheerfulme's responsibility is limited to protection of information that is obtained by Cheerfulme. Cheerfulme itself cannot control the use or disclosure by your Merchant of any information that it obtains from you.
How We Collect Information
To enable Cheerfulme to provide secure payment facilities, we acquire information which may include a cardholder's name, credit card number (with the expiry date) and billing address. That information is collected when a card and its information is provided to a Cheerfulme payment solution.
How We Use and Disclose Information
Cheerfulme uses the information it collects to obtain authorization for Transactions from the payment card’s issuing bank (the bank that issued your credit or debit card) and from Cheerfulme's own or the Merchant's bank (the “acquirer” or “Acquiring Bank”). Some details from the Transaction (such as name, email and delivery address) may be made available to the Merchant or Acquiring Bank through Payline - Cheerfulme’s web-based transactions management system. Payline allows Merchants to track Transactions and process refunds. Payment card numbers are encrypted and stored by Cheerfulme securely, and are not provided to the Merchant. Please note that your personal data may be shared with legal authorities if required by law. In addition, and separate from its performance of the services set forth in this Privacy Policy, Cheerfulme may aggregate and disclose the aggregated data that is not personally identifiable to its partners or third parties. This aggregated, non-identifiable data may be used for statistical analysis or similar purposes.
Security
Cheerfulme is committed to data security. Cheerfulme uses a variety of technologies and procedures to help protect personal information from unauthorized access, use or disclosure. For example, Cheerfulme stores the data in computer servers with limited access that are located in controlled facilities secured by advanced surveillance and security technology. When Cheerfulme transmits sensitive information (such as a payment card number), Cheerfulme protects it through the use of encryption, such as the Secure Socket Layer (“SSL”) protocol. Credit card details stored onsite are encrypted using 168bit 3DES encryption. Cheerfulme is a level 1 certified PCI-DSS compliant provider.
What is PCI-DSS?
PCI-DSS, the Payment Card Industry Data Security Standard, is a set of security requirements relating to the protection of cardholder data. PCI-DSS is governed by the Payment Card Industry (“PCI”) Security Standards Council, an organisation put together by the major card schemes - VISA, MasterCard, American Express, JCB and Discover. PCI-DSS is relevant to any entity that stores or transmits sensitive cardholder data, which consists of information such as the PAN (card number), card security code, track data, and PIN block. Preceding PCI-DSS, the card schemes had their own standards, and the VISA Account Information Security (AIS) standard formed the basis to most of the PCI-DSS requirements. Click
here
to view our PCI-DSS compliance certificate.
Storage of Information
Cheerfulme may transfer your information to countries outside of your country of residence, and those countries may have information protection rules that are different from those of your country of residence. Generally, Cheerfulme stores and processes information in countries where we operate offices, such as New Zealand, Australia, the United States, and the United Kingdom. Cheerfulme takes measures to ensure that information transfers comply with applicable data protection laws and that your information remains protected to the standards described in this Privacy Policy.
Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk and you accept all liability for such risk, to the extent legally permissible. Once we have received your information, we use strict procedures and security features to try to prevent unauthorised access.
Transfer of Personal Data Outside European Economic Area
The data that we collect from you may be transferred to and stored at a destination outside of the European Economic Area (“EEA”), including, but not limited to, in New Zealand, Australia, and the United States. It may also be processed by staff operating outside the EEA who work for Cheerfulme. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of payment details, and the provision of support services. By submitting your personal data, you agree to this transfer, storing and processing of your data.
Information Shared with Commonly Owned Entities
We may share some or all of your personal information with other non-US companies under common ownership or control of Cheerfulme Inc., which may include our corporate parent or any other subsidiaries owned by our corporate parent in order to provide you better service and improve user experience. These include Cheerfulme entities in New Zealand, the United Kingdom, and in some instances, Australia. Generally, sharing such information is necessary for us to perform on our contract with you – for example, to provide technical support after normal business hours. We may provide additional notice and ask for your prior consent if we wish to share your Personal Information with our commonly owned entities in a materially different way than discussed in this privacy statement.
Your California Privacy Rights
Under the California Consumer Privacy Act or CCPA, and subject to exceptions, California residents have certain rights regarding their data, including:
The right to know the categories of Personal Information (as that term is defined under applicable California law) we’ve collected and the categories of sources from which we got the information.
The right to know the business purposes for sharing Personal Information.
The right to know the categories of third parties with whom we’ve shared Personal Information.
The right to access the specific pieces of Personal Information we’ve collected and the right to delete your information.
The right to opt out of having your Personal Information sold. Cheerfulme does not sell or rent Personal Information to third parties, as we understand that term to be defined by the CCPA and its implementing regulations.
As a California resident, California Law permits you to exercise your right to know or your right to deletion by requesting your Personal Information be deleted or compiled and sent to you by emailing the following address:
admin@Cheerfulme.com.
Cheerfulme will answer your request within 45 days of receiving your request. You can also send your written requests via mail to the following address: Cheerfulme, 31-33 Wilkinson Road, Ellerslie, Auckland 1060, New Zealand, for the attention of the Data Protection Officer.
California Law permits California residents to request certain information once per year regarding our disclosure of Personal Information to third parties for such third parties’ direct marketing purposes. Please see the remainder of this Privacy Policy, including the ‘How We Use and Disclose Information’ section, to determine categories of Personal Information Cheerfulme shares, with whom, and for what purpose. Cheerfulme does not disclose Personal Information to third parties for third parties’ direct marketing purposes, and Cheerfulme does not sell Personal Information to third parties.
California residents have the right to not be discriminated against if they choose to exercise their privacy rights.
Accountability for Third Parties
We may securely transfer personal data to third parties, including banks and financial institutions, for processing on our behalf. For example, when you process a payment with Cheerfulme, your data may be transferred to your merchant’s bank, as well as your bank. We will ensure that such data may only be processed for limited and specified purposes consistent with the consent you provided.
Your Rights With Respect to Your Personal Data
You, as the customer of a Merchant using Cheerfulme, have certain rights with respect to your personal data.
You have the right to revoke your agreement to the collection, processing, and use of your personal data at any time with effect for the future by contacting our Data Protection Officer at the email address, or physical address, listed in this Privacy Policy. However, please note that doing so may result in Cheerfulme no longer being able to perform services for your benefit and/or processing payments for your benefit.
You have the right to request access and know what information is held about you. Cheerfulme will inform you, upon your written request to our Data Protection Officer, about the personal data it has in relation to you, how Cheerfulme has used it, and to whom it has been disclosed subject to certain exceptions prescribed by applicable law and regulation and provided we can authenticate your identity. You have the right to verify, update, or correct your information, and to have obsolete information removed.
You have the right to erasure, or otherwise to have your personal data deleted or removed upon written request to Cheerfulme. Please note that Cheerfulme may erase such data in a reasonable period of time, and that lodging a request to erase your data may effect some of the services Cheerfulme offers to Merchants.
How long will we retain your information?
We will not retain your Personal Information for longer than permitted by applicable law and regulation, and in no event longer than 7 years. If you have questions about our data retention policy, or about the deletion of your data, please contact us at
admin@Cheerfulme.com.
How to Contact Us
Any questions or concerns relating to the collection and processing of your personal data should be sent via email to the following address:
admin@Cheerfulme.com.
At this email address you can also request to change your personal data, or have your personal data deleted. Cheerfulme will answer your request within a reasonable time. You can also send your written requests via mail to the following address: Cheerfulme, 31-33 Wilkinson Road, Ellerslie, Auckland 1060, New Zealand, for the attention of the Data Protection Officer. If you contact Cheerfulme via letter, e-mail, phone or by fax, Cheerfulme is storing your personal data in order to be able to answer your request, and may store your correspondence for our records.
Updating this Policy
Cheerfulme reserves the right to change this Privacy Policy at all times. It is your responsibility to periodically verify the applicable privacy statement and to comply with its most recent version. This Privacy Policy statement was last modified in July 2018.
Cookies
Cookies are small text files that some websites place on your computer as a tool to remember your preferences. At Cheerfulme, we do not use cookies at this time.
Miscellaneous
As you navigate our site, you may click to the websites of partner companies or other companies with whom we have a business relationship. This Cheerfulme Privacy Policy will not apply when you move to one of these other sites because privacy practices and policies are tailored to the products and services offered by each individual company. If you visit the pages and sites of our affiliated business units, please be sure to review the privacy policies applicable to those sites. Our website contains links to third-party websites, and Cheerfulme is not responsible for the content or the privacy practices employed by other websites. Apart from using your data in the processing of Transactions, Cheerfulme does not use your data to make automated decisions. We will ask for your consent before using information for a purpose other than those that are set out in this Privacy Policy. Cheerfulme does not process “sensitive personal data” revealing ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic, biometric, health, or mortality; or data concerning a natural person’s sex life or sexual orientation.
Employment Data
As an employer, Cheerfulme may collect personal information of its employees including name, address, email, date of birth, bank information, work experience, and education history. This information is provided to Cheerfulme by its employees through an application form. In the event a conditional employment offer is made, we may share this information with third parties for the completion of background screenings, payment distribution, and enrolment in health/financial benefits. Cheerfulme may require such third parties to maintain confidentiality of employee personal information.
We release account and other personal information when we believe release is appropriate to comply with the law, as well as to protect the rights, property or safety of Cheerfulme, our customers or others. Certain laws or government regulations may require us to disclose non-public personal information about you to respond to court orders or legal investigations. Please note, that such disclosures do not include selling, renting, sharing, or otherwise disclosing personally identifiable information from customers for commercial purposes in violation of the commitments set forth in this Privacy Policy.