RevTrax (legally known as OnCard Marketing, Inc.) is an innovative promotions services company. We use our proprietary promotions platform (the “RevTrax Technology”) to help our clients run promotions to find new customers and retain existing ones (the “RevTrax Services”). RevTrax’s clients (each, a “Client”) include companies in the consumer packaged goods, retail, auto, financial services, travel, and other industries.
A. Company Site at www.RevTrax.com
Our Company Site provides information about our company, business, and the services we provide. It is also the portal used by our Clients to sign into the customer dashboard for the RevTrax Services. The Company Site collects Personal Information, Usage Data, and Tracking Data when you visit the site at www.RevTrax.com.
a. Definition. Except in jurisdictions where applicable law requires a different definition, “Personal Information” collected by the Company Site means information about an individual that can be used to identify that individual. Your Personal Information includes your name, email address, telephone number, and postal address. It also includes any information that we have associated with your Personal Information. For visitors who access the Company Site from the EEA, Switzerland, and the UK, however, “Personal Information” means data that identifies or can identify a particular user or device, and includes elements of Tracking Data and Usage Data as described in Section A.3. below.
b. Personal Information Collected by the Company Site. RevTrax, or its service providers on RevTrax’s behalf, collects Personal Information from you when you engage in any of the following activities on the Company Site:
We may combine Personal Information that you submit on or through the Company Site with information that we collect from or about you from other sources, offline and online.
c. How We May Use Personal Information Collected on the Company Site. We use the Personal Information that you provide on the Company Site for the following activities:
Note to visitors from the EEA, Switzerland, or the UK: RevTrax processes, as the data controller, the Personal Information we receive on the Company Site from visitors from the EEA, Switzerland, or the UK on one or more of the following legal grounds:
d. When We May Disclose Personal Information Collected on the Company Site. The Personal Information that you provide to the Company Site may be disclosed:
f. No Sensitive Information. You are prohibited from disclosing to the Company Site any sensitive Personal Information. Examples of sensitive Personal Information include social security numbers, detailed financial information, health information, information related to racial or ethnic origin, political opinions, religion or other beliefs, criminal background, and trade union membership.
“Usage Data” are the information that your browser sends to RevTrax’s servers when you visit the Company Site.
“Tracking Data” are the information collected by the cookies, pixel tags, scripts, and other tracking technologies that we use to keep track of visitor activity on the Company Site. (Note that the Tracking Data collected by the RevTrax Technology is different, and is discussed in Section B.)
As with other Internet services, our web servers gather information automatically each time your browser or device interacts with the Company Site, and store that information in “log files.” The information stored in the log files of our Company Site includes Personal Information, Usage Data and Tracking Data.
b. Usage Data and Tracking Data Collected by the Company Site. The Usage Data and Tracking Data collected by the Company Site include:
Note to visitors from the EEA, Switzerland or the UK: For Company Site visitors from the EEA, Switzerland or the UK, note that RevTrax cookies, IP addresses, unique device IDs, and other elements of Usage Data and Tracking Data are defined as Personal Information under the GDPR, and will be handled by RevTrax as Personal Information.
Usage Data and Tracking Data are collected from the Company Site by RevTrax, and by our service providers on our behalf, in the following situations:
c. How We May Use and Disclose Usage Data and Tracking Data. We may use and disclose Usage Data and Tracking Data collected on the Company Site for any purpose permitted by applicable law.
Note: If we are required by applicable law to treat any element of Usage Data or Tracking Data as Personal Information, then we will handle those elements as Personal Information. If we combine any Usage Data or Tracking Data with Personal Information, we will treat the combined information as Personal Information as long as it is combined.
b. Use of Your Personal Information on the Company Site. You may opt-out from receiving marketing-related email messages from us either by using the unsubscribe mechanism provided in the message or by emailing us at privacy@RevTrax.com. If you opt out from receiving marketing-related messages from us, we may still send administrative messages to you. You cannot opt out from receiving administrative messages.
See Section D.4. of this Privacy Privacy if you wish to review the Personal Information that we have collected from you on the Company Site.
The Company Site does not support the Do Not Track browser setting.
RevTrax uses third-party advertising companies to advertise RevTrax and the RevTrax Services. We allow these service providers to use their tracking technologies on the Company Site so that we can target ads about RevTrax to you when you are elsewhere on the Internet. This process is sometimes referred to as interest-based advertising or online behavioral advertising. If you want more information about these third-party advertising companies, please visit the ad industry choice mechanism at http://www.aboutads.info/choices/.
RevTrax works with global companies and technologies, and we may need to transfer your Personal Information outside of the country from which it was originally provided. This transfer may be between RevTrax-affiliated companies or to third parties that we work with who are likely located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we process that data, including Personal Information, in the United States.
The RevTrax Services currently consist of the following offerings:
In this Section B, we describe the information that is collected by the RevTrax Technology about Users who are presented with (a) web-based promotions, and (b) postal mail-based promotions.
Note for individuals in the EEA, Switzerland and the UK: RevTrax does not currently offer its postal mail-based promotion service outside the United States and Canada.
a. Usage Data and Tracking Data Collected by Web-Based Promotions. The RevTrax Technology collects Usage Data and Tracking Data when the RevTrax Technology presents a Client’s Web-based promotion to a User. The kinds of Usage Data and Tracking Data collected for the RevTrax Services are different from that collected for the Company Site.
As used in our discussion about the web-based promotions in this Section B.2.:
Usage Data are the information that is sent automatically to RevTrax’s servers when a User is presented with a Web-based promotion. This information includes a User’s device type, operating system version, and Internet browser type and version.
Tracking Data are the information collected by the RevTrax Technology from a User who is presented with a Web-based promotion.
The Usage Data and Tracking Data collected by the RevTrax Technology from web-based promotions include:
The Tracking Data are collected by the RevTrax Technology using:
Proprietary tracking technologies including:
A cookie that the RevTrax Technology uses to recognize a User.
Other tracking technologies include pixel tags and scripts, and are used by RevTrax for preparing reports for its Clients.
As with other Internet services, our web servers gather information automatically each time a User’s browser or device interacts with the RevTrax Technology, and store that information in “log files.” The information stored in our web servers’ log files includes Usage Data and Tracking Data.
b. Personal Information Collected by Web-Based Promotions.
Social sharing. For many promotions, the Client’s digital-based promotion has a “share with a friend” feature. When a User provides the email address of another in response to this feature, the RevTrax Technology sends the Client’s digital-based promotion to that email address. An email address is Personal Information, and RevTrax collects the email address on Client’s behalf to forward the promotion as requested by the User.
Proof of purchase. Some promotions require proof of purchase and offer the option of uploading a receipt or document via a web page or app. Users are also asked to provide a mobile phone number or other identifier to prevent fraud. We will treat the uploaded information as Personal Information.
a. Background. In our postal mail-based promotions service, Clients ask RevTrax to mail a direct mail promotion to Users who have visited one or more Client websites (each, a “Client Site”). In this RevTrax Service, a promotion is mailed to the User, even if Client does not know the User’s name or contact information. The promotion is sent without Client or RevTrax learning the User’s name or contact information.
This service is implemented with the participation of an independent audience information company (“Audience Company”) that operates a proprietary database of consumer addresses, and a direct mail printing company (“Printer”). For data privacy reasons, the Audience Company and Printer are prohibited from disclosing to RevTrax or its Clients the Personal Information of any User recipient to which a direct mail promotion is mailed.
b. Usage Data and Tracking Data Collected by Postal Mail-Based Promotions. As used in our discussion about the web-based promotions in this Section B.3.:
Usage Data are the information that is sent automatically to RevTrax’s servers when a User visits a Client Site. This information includes a User’s device type, operating system version, and Internet browser type and version.
Tracking Data are the information collected by the RevTrax Technology when a User visits a Client Site.
The RevTrax Technology collects Usage Data and Tracking Data when a User visits a Client Site. In addition, the Audience Company collects tracking data on the Client Site about that User visit. The Usage Data and Tracking Data collected by the RevTrax Technology and Audience Company’s technology do not include a User’s name, address or other contact information.
The Client decides on the kinds of Users to whom a direct mail promotion should be mailed (the “Selected Users”), based in part on User behavior on the Client Site observed by the Tracking Data.
c. Personal Information Collected by Postal Mail-Based Promotions. As instructed by RevTrax, the Audience Company uses the tracking data that it has collected about a Selected User’s visits to the Client Site to match that Selected User to a record in the Audience Company database. If there is a match, then the Audience Company pulls the Selected User’s address, and sends the address to Printer. Printer uses the Selected User addresses to print and mail the designated direct mail promotion. The Audience Company and Printer are prohibited from providing Personal Information about the Selected Users to RevTrax or its Clients. Audience Company is the controller of the addresses and other Personal Information about the Selected Users in its database.
d. Information Collected When a Promotion is Redeemed. When a selected User responds to a promotion (whether online, in a store, by phone, or other means), the information submitted is received by our Client and RevTrax. Among other things, the submitted information is used to measure the effectiveness of the promotion and for reporting and analysis.
We use the data collected by the RevTrax Technology when we perform the RevTrax Services for the following purposes:
If a Client requests that the RevTrax Technology collect and store Personal Information provided by a User in response to a promotion, RevTrax transfers that Personal Information to the Client, and is not authorized to use that Personal Information in its own business.
We may disclose data collected by the RevTrax Technology for the following purposes:
From time to time, RevTrax may create and run owned-and-operated websites. These owned-and-operated websites (each previously defined as a “RevTrax Site”) generally provides Users with our Clients’ web-based promotions.
A RevTrax Site is powered by the RevTrax Technology. The RevTrax Technology collects Usage Data and Tracking Data when a User visits a RevTrax Site. Please refer to Section B for information about the Usage Data and Tracking Data collected by the RevTrax Technology.
The RevTrax Sites do not support the Do Not Track browser setting.
RevTrax employs commercially reasonable security measures to prevent the loss, misuse or alteration of information collected by the Company Site, RevTrax Sites, RevTrax Technology. However, no data transmission over the Internet or data security system can be guaranteed to be 100% secure.
The Company Site, RevTrax Sites, and RevTrax Technology are not targeted to anyone under the age of 13 ("Child"). We do not knowingly collect Personal Information from Children, unless agreed in writing with a particular Customer and in compliance with applicable law.
If you have a login to the Company Website (i.e., you are a RevTrax client), log into your account to make changes to the Personal Information we have on file for your account.
If you do not have a login to the Company Site (for example, a prospective customer or a website visitor) and would like to access, change, or delete the Personal Information that you have previously provided to the Company Site, contact us by emailing us at privacy@RevTrax.com to make the requested changes. You may be asked to verify your identity for anti-fraud purposes. Once verified, we will comply with your request as soon as reasonably practicable. If you have requested that some Personal Information be deleted, note that we may need to retain some of the information for backup or Compliance Purposes. In addition, there could remain residual traces of the deleted Personal Information in our databases and other records. We are not responsible for changing or deleting information from the databases of third parties that have previously accessed your information.
OnCard Marketing, Inc. d/b/a RevTrax
132 West 31st Street Suite 702
New York, NY 10001