Thrifty Shopper Privacy Policy

1. Importance of your Privacy

At TapMango, your privacy is of great importance to us. We understand that you entrust us with certain personal information in order for TapMango to administer the rewards and/or loyalty programs of our clients/merchants (‘TapMango Services’). This Privacy Policy applies to the TapMango Website, the TapMango mobile app or a merchant-branded version of the app, as well as TapMango in-store tablets (referred to collectively as ‘TapMango Applications’).

PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE SUBMITTING ANY INFORMATION TO TAPMANGO OR THROUGH ANY TAPMANGO APPLICATION. BY VOLUNTARILY PROVIDING ANY INFORMATION TO TAPMANGO AND USING OUR APPLICATIONS, YOU ARE ACKNOWLEDGING THAT YOU HAVE READ AND UNDERSTOOD THIS POLICY AND THAT YOU CONSENT TO OUR COLLECTION, USE AND DISCLOSURE OF THIS INFORMATION AS SET FORTH IN THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT PROVIDE US WITH ANY INFORMATION, AND SIMPLY EXIT THIS PAGE AND/OR THE TAPMANGO APPLICATION WITHOUT ACCESSING OR USING ANY OF OUR SERVICES.

2. Who We Are and Getting in Touch

TapMango is located at 5775 Yonge Street, Suite 1801, Toronto, ON, M2M 4J1, CANADA. TapMango welcomes your comments regarding this Privacy Policy. Any questions or inquiries relating to privacy or data protection should be directed to our Privacy Officer at privacy@tapmango.com.

EU residents may also exercise their data subject rights by contacting our Privacy Officer, who is also TapMango’s Data Protection Officer (see Section 10 of this policy: GDPR Compliance at TapMango).

3. What Personal Information does TapMango Collect about Me?

‘Personal information’ is any information about an identifiable individual. TapMango collects personal information provided to us using fair and lawful means, and for the following specific purposes:

• To log in to TapMango on our Website or app, you must select a username and password or use Facebook for social sign in. However, the password you select is stored hashed such that it remains unknown even to TapMango, and if using social sign in, none of your Facebook profile information is collected by TapMango;
• To register for TapMango, you will be asked to provide your name, mobile phone number, e-mail address, birthday and any specific information requested by TapMango merchants such as the products or services you may be interested in. Merchants decide what data fields are mandatory and optional for participating in their loyalty programs;
• To respond to and learn from our users: Any information you voluntarily provide is also collected by TapMango, such as if you provide personal information using the ‘Contact Us’ page on TapMango’s Website or if you choose to complete a TapMango or merchant survey through our Applications;

In addition, when you use TapMango’s Website or app, we automatically receive and record information on our server logs from your browser or mobile platform, including your IP address, unique device identifier, and other device information (such as your operating system version and mobile network provider). TapMango also automatically collects and uses additional information from users such as location, purchase activity, Application open date and time, idle time, and all clicks and/or swipes within the Application (together with time and order). We collect such information to assess user experience and improve our Applications. TapMango may also collect information posted by users on social media sites for users that have opted to connect to or otherwise link TapMango with social media accounts, including Facebook and Twitter.

4. How is My Personal Information Used?

TapMango uses personal information responsibly in order to ensure we are meeting your expectations of TapMango Services. For example, we use personal information to:

• Administer loyalty/rewards programs on behalf of merchants we have a business relationship with;
• Engage in proximity marketing using geofencing technology on behalf of our merchants;
• Give TapMango and its merchants a clear picture of its users’ purchasing activities;
• Provide TapMango users with merchant benefits;
• Contact you from time to time as requested by merchants; to provide critical information about service updates, technical issues or other information important to know regarding TapMango Services; or to provide support and answer any questions you may have;
• Customize, measure and improve our services and content;
• Analyze our user database to review preferences and trends for statistical and analytical purposes, marketing initiatives and for operations and development; and
• Enforce this Privacy Policy and TapMango’s Terms of Use.

Note that automated data collection does not lead to profiling that significantly affects TapMango users, but is simply used to give TapMango a clear picture of its users and to provide special offers to TapMango users.

5. Who is My Personal Information Shared With?

TapMango only shares personal information as authorized by you or as follows:

• With the merchant who has entered into a business relationship with TapMango to provide you with their own rewards/loyalty program and other incentives;
• With service providers who directly or indirectly assist us in providing TapMango Services to you. In working with our service providers, your personal information may be transferred to a foreign jurisdiction to be processed or stored. Such information may be provided to law enforcement or national security authorities of that jurisdiction upon request, in order to comply with foreign laws; and
• In response to a subpoena, regulatory investigation or court order, or your personal information may be shared with law enforcement authorities who have demonstrated their lawful authority.

TapMango does not sell personal information to third parties for marketing or any other commercial purposes other than in connection with or during negotiation of any merger, financing, acquisition or dissolution transaction or proceeding involving the sale, transfer, divestiture, or disclosure of all or a portion of our business or assets. In the event of an insolvency, bankruptcy, or receivership, personal information may also be transferred as a business asset. If another company acquires our company, business, or assets, TapMango users will be notified before any such business transaction occurs, and be given the opportunity to deactivate or terminate their account should they so choose to. The acquiring company will assume the rights and obligations regarding your personal information as described in this Privacy Policy.

6. How is My Personal Information Kept Secure?

TapMango has implemented critical physical, organizational and technical measures to guard against unauthorized or unlawful processing of the data we collect. We have also taken steps to avoid accidental loss or destruction of, or damage to, your personal information. While no system is completely secure, the measures implemented by TapMango significantly reduce the likelihood of a data security breach.

In addition, we recommend that you do your part in protecting yourself from unauthorized access to your TapMango account by ensuring no one else uses your computer or device when you are logged in, by logging off when TapMango Services are not in use and by keeping your password confidential. TapMango is not liable for any unauthorized use of your personal information that is beyond our reasonable control.

Here are some examples of the data security controls in place at TapMango (this is not an exhaustive list):

• The use of encryption when personal information is transferred to and stored on TapMango’s servers. Transmission between your browser and our web server is implemented using Secure Sockets Layer (SSL) technology;
• Limited access to personal information by TapMango staff on a need-to-know basis, and the use of robust authentication processes (e.g. complex passwords are required);
• The use of data centers with effective physical and logical data security controls, and the use of reputable third parties who have demonstrated security consciousness; and
• Secure office premises and staff that are keenly aware of their data protection responsibilities.

No method of transmitting or storing data is 100% secure. As a result, although we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us. If you have reason to believe that your TapMango account is no longer secure (for example, if you feel that the security of your account has been compromised), you must immediately notify us of the problem at support@tapmango.com in order for TapMango to resolve the issue in a timely manner. Also keep in mind that e-mail is not a secure form of communication so never send sensitive personal information to us via e-mail.  Examples of sensitive information include social insurance numbers or credit card numbers.

7. Not for Children under Thirteen

TapMango Services are neither designed nor intended to collect personal information from children who are under the age of thirteen (13).

In order to ensure compliance with the provisions of the U.S. Children's Online Privacy Protection Act and other data protection laws around the world aimed at protecting children, children under the age of thirteen (13) are not permitted to access or use TapMango Applications, and children under the age of thirteen (13) should not provide any personal information to TapMango. You may reside in a country where local laws fix the digital age of consent to be older than 13. You may only use TapMango if you have reached this age of consent, in accordance with applicable local laws. If you do not meet the digital age of consent of your country, you must immediately cease using TapMango Services.

8. Cookies and Usage Tracking

A cookie will be used here to mean a Web cookie, being a small text file stored on your computer hard drive, or a token or “mobile cookie” placed in the TapMango app’s local storage, in order to tailor the environment based on your preferences, and track user behavior. This unique code identifies your device to TapMango. Since cookies are only text files, they cannot run on your device, search your device for other information or transmit any information to anyone.

Most web browsers can either alert you to the use of cookies or refuse to accept cookies entirely. You should be aware that if you elect not to accept cookies, some parts of the TapMango Website may not function properly.

TapMango uses the following types of cookies for the purposes set out below:

9. How Long is my Personal Information Retained?

We will retain your information as long as you have a TapMango account, to permit us to use it for the purposes that we have identified in this Privacy Policy. However, TapMango has implemented retention schedules to avoid indefinitely storing personal information associated with an inactive account.

Personal information this is no longer required for administrative or business purposes, and that does not need to be archived by TapMango, will be overwritten or scrambled such that it no longer identifies the TapMango user. Keep in mind however that third parties who store data on our behalf have their own retention rules.

10. GDPR Compliance at TapMango

EU data subjects permanently residing in the European Union may have supplementary statutory rights with respect to their personal data as outlined in the General Data Protection Regulation EU/2016/679. This includes the right to access their personal data, have it deleted, have it corrected, or object to/restrict processing of such data. If you would like to make such a request, please e-mail privacy@tapmango.com  (Attn: Privacy Officer). In the context of a request for erasure, TapMango will scramble or pseudonymize the data subject’s information to make it anonymous.

TapMango has required our service providers who we entrust with TapMango user data to commit in writing to the continued protection of such data as a data processor. If at any time in the future we plan to share personal data with additional third parties to deliver TapMango Services, we will ensure that they too maintain a high standard of care for such data.

TapMango is a Canadian organization. Canada was the first country outside of Europe deemed adequate by the EU Commission in 2001, under the EU Data Protection Directive 95/46/EC (the GDPR’s predecessor). An adequacy finding allows the flow of data from the EU to Canada as a trusted country in data protection.

TapMango uses data hosting providers who have made GDPR commitments of their own. Where data is stored in the U.S. by TapMango’s service providers, these entities comply with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the processing of personal data transferred from the EU to the United States. To learn more about the Privacy Shield program or the Privacy Shield Principles, please visit www.privacyshield.gov.

11. External Links and TapMango Social Media

We may offer links from our Applications to the sites or apps of our service providers, affiliates or unrelated companies that may be of interest to you. TapMango makes no representations as to such third parties’ practices for dealing with your personal information.

TapMango’s use of social media serves as an extension of our presence on the Internet. Social media account(s) are public and are not hosted on TapMango’s servers. Users who choose to interact with TapMango via social media should read the terms of service and privacy policies of these third party services/platforms.

This Privacy Policy only applies to the TapMango Applications and does not govern the activities of third parties. We recommend that you check the privacy policies of any apps, sites or platforms you associate with before sharing your personal information with such third parties.

12. Changes to this Privacy Policy

We may change this Privacy Policy from time to time in order to better reflect our current data handling practices. Thus, we encourage you to review this Privacy Policy frequently! The “Last Updated” date at the top of this Privacy Policy indicates when changes to this policy were published and thus in force. Your continued use of our Services following the posting of any changes to this Privacy Policy means you accept such changes.