WEBSITE PRIVACY POLICY

This Privacy Policy is published by Simplifi Holdings, LLC (“Simplifi,” “we” or “us”) and describes how we collect, receive, use, retain, process, disclose, transfer, and secure Personal Information on our website located at http://simpli.fi, our online client portal located at App.simpli.fi, and other websites or apps for our clients that link to this Privacy Policy (collectively, the “Site”). It also describes your choices regarding use, access, deletion, and correction of your Personal Information. The Site is intended for our business clients. Our prospective or current clients, including advertisers or publishers, are referred to in this Policy as “Advertising Customers.” All references to “you,” “your” or “user” apply to Advertising Customers and any other person viewing, using or accessing the Site and its features and services. For information about our data practices when we carry out our advertising services, please review our Privacy Policy for our Services.

“Personal Information” in this Privacy Policy is information about you that is personally identifying or could reasonably be used to identify you, such as your name, email address, or telephone number. The definition of Personal Information depends on the laws that apply in your location, and may include other types of information as well, such as location data, your Internet Protocol (IP) address, or other unique identifier. This Privacy Policy covers information we collect online only, unless local law requires otherwise.

1. CHANGES TO THIS POLICY

This Privacy Policy may change from time to time, so please check back periodically for any changes. If we make any material changes we will notify you by means of a notice on this Site prior to the change becoming effective. If you do not agree to such changes, you must immediately stop using the Site.

2. INFORMATION WE COLLECT

Users can browse the Site without logging in or actively providing any Personal Information. Providing Personal Information, such as by registering for an account, is necessary to become an Advertising Customer and to access certain features and services available on the Site. For example, we will request the name, contact information, company information, and payment information of Advertising Customers. When users register and log in as Advertising Customers, we collect an email address and password. When users request a demo or otherwise contact us with inquiries, we collect the Personal Information needed to respond like a name, email address, and phone number. When users connect to the Site from a social media platform, we collect the Personal Information you have provided to that particular social media platform in accordance with the social media platform’s privacy practices and your settings on that platform.

Users can also register as an Advertising Customer and pay for our services by phone. When users call to register, we collect your name, contact information, company information, and payment information to enable us to process the transaction and set up and manage the user’s account.

It is your choice whether or not to provide us with the Personal Information described above. If you do not provide the necessary Personal Information you will not be able to become an Advertising Customer and you will not be able to access our advertising services or other services available on the Site. We also will have no way to respond to your questions or inquiries or to provide a demo or other requested services.

When users access or browse our Site, we collect certain information automatically including IP addresses and cookie identifiers, regardless of whether the user is logged in or an Advertising Customer. We collect information about your device and your visit(s), such as browser type and version, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data.

We and our third-party vendors use cookies or similar technologies (such as web beacons and pixels) to analyze trends, administer and improve the Site, deliver more relevant advertising, and gather demographic information about our user base as a whole. A persistent cookie remains on your hard drive for an extended period of time. You may be able to remove persistent cookies using tools in your browser. Cookies will remain active for 30 days before deletion or until you remove them. If you reject cookies, you may still navigate our Site, but your ability to use some areas of the Site may be limited. For more information, please see our Cookie Policy. For more information on Google’s data collection practices visit Google’s Policies and Terms.

3. HOW WE USE COLLECTED INFORMATION

We use the information we collect to operate and improve our business and provide the services you have requested, such as to receive information about our products and services, to become and to interact with us as an Advertising Customer, to process your billings, for our legal compliance, to be contacted in regard to an employment opportunity or to provide you with customer service. We also use information to learn about how users browse, navigate, and interact with our site, to analyze trends, to identify and address errors or issues that may impair or restrict the Site’s functionality, and to deliver more relevant advertising. We may send you marketing materials, including by using your email address to send you email updates and promotional materials from or about Simplifi if you are a U.S. resident or if you are an E.U. resident and have opted in to receive promotional emails. You may unsubscribe from promotional emails at any time and/or opt out of targeted advertising as described in the “Your Choices” section below.

4. INFORMATION SHARING AND DISCLOSURE

We will not sell, trade or share your Personal Information with other companies for their direct marketing purposes, unless we have your consent.
We may share the information we collect with other parties for other reasons, including the following:

• With our affiliates and third party vendors who provide services on our behalf, such as an email marketing company who distributes our newsletters to our users, and our third party payment processors who process your transactions. These companies are authorized to use your Personal Information only as necessary to provide these services to us.
• Simplifi may also disclose any information if required to do so by law or in the good faith belief that such action is necessary to: (1) comply with the law or comply with legal process served on Simplifi, (2) protect and defend the rights or property of Simplifi; (3) protect the personal safety of users of Simplifi, its Site and other services, or the public; (4) provide updates and services that may be of interest to the user; or (5) prevent online fraud or other cyber threats, for example through an online threat exchange, or to report, detect and/or prevent security events.
• Simplifi is required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
• We may disclose Personal Information with your consent.

5. SALE OF ASSETS

In the event that Simplifi is involved in a merger, acquisition, or sale of all or a portion of its assets, including in bankruptcy, we reserve the right to include, disclose and transfer any or all stored Personal Information and other data among the assets transferred to the acquiring company. If this occurs, you will be notified via email and/or a prominent notice on our Site of any change in ownership or material changes in uses of your Personal Information, as well as any choices you may have regarding your Personal Information.

6. YOUR CHOICES

Email Marketing
You may unsubscribe from Simplifi’s promotional emails at any time by clicking “unsubscribe” on the emails you receive from us.

Opting Out of Simplifi Targeted Advertising on Your Browser
Simplifi collects data on the Site and across non-affiliated websites and apps to deliver more relevant advertising to you. This process is called interest-based advertising. Simplifi also collects information about potential relationships among different devices for interest-based advertising. If you would like to stop receiving interest-based advertising on your browser from Simplifi, click here. By doing so, Simplifi will replace your unique cookie with an “opt-out” cookie. An opt-out choice means that we no longer use or transfer data from the opted out browser for targeted advertisements, and we no longer use data collected on other devices to inform advertisements on that device. We will still collect and store information through such cookies for other purposes such as metrics and analytics and we may still serve you advertising but it will not be tailored for you. Because cookies are browser specific, if you use more than one browser or device, you will need to make your opt-out choice on each browser or device that you use. To do so, point each browser that you use to this page, and click on the disable link above. Please note that you will need to set the Simplifi opt-out cookie again in some cases, for example, under the following circumstances: You buy a new device, delete cookies from your browser, or upgrade or change the browser of your existing computer or device.

Simplifi is a member of the Network Advertising Initiative (NAI) and adheres to the NAI Code of Conduct. Additional information on the NAI and its code can be viewed at http://www.networkadvertising.org/code-enforcement/code.

Simplifi also licenses the AdChoices icon from the Digital Advertising Alliance (“DAA”) at http://digitaladvertisingalliance.org/ and the DAAC at http://youradchoices.ca for the purpose of providing enhanced notice and to inform users when they are being behaviorally targeted and to provide an opportunity to opt out.

Simplifi makes every effort to ensure adherence to the self-regulatory principles of the DAA and the DAAC.
For information about opting out of Simplifi’s other interest-based advertising activities outside the Site, please see our Services Privacy Policy.

JavaScript
We also use JavaScript to assist us with the collection and use of browsing data, including IP address and cookie identifiers, for interest-based advertising activities.

Do Not Track
We currently honor Do Not Track signals transmitted by browsers by treating this signal as an opt out of interest-based advertising.

Third-Party Targeted Advertising
We partner with one or more third parties to display advertising on our Site and/or to manage our advertising on other sites. Such third parties may use technologies such as cookies to gather information about your activities on this Site and other unrelated sites over time in order to provide you with more relevant advertising based upon your browsing activities and interests. This is called interest-based advertising. Simpli.fi complies with the Digital Advertising Alliance Self-Regulatory Principles and the NAI Code of Conduct in connection with this activity on our Site. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt-out with respect to companies participating in industry self-regulation by clicking http://optout.networkadvertising.org/?c=1 or http://preferences-mgr.truste.com/, or if located in the European Union click http://www.youronlinechoices.eu/. Please note this does not opt you out of being served ads. You will continue to receive ads, but they will not be targeted based on your browsing activity.

7. ACCESSING YOUR INFORMATION

You may request to access your Personal Information that we hold, as well as to correct, amend or delete information when it is inaccurate, or has been processed in violation of the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) or when otherwise required by law. To make such requests, please contact us at [email protected]. We will respond to these requests in accordance with the laws that apply to you and within a reasonable timeframe. You can help us maintain the accuracy of your information by notifying us of any changes to your information. We may deny a request in some cases when permitted by law, such as when the burden or expense of providing access would be disproportionate to the risks to the individual’s privacy in the case in question, or where the rights of persons other than the individual would be violated.

8. INTERNATIONAL OR CROSS-BORDER TRANSFER OF YOUR PERSONAL INFORMATION

By providing Personal Information and/or by communicating with us by email, you acknowledge and expressly consent to our processing and disclosure of your Personal Information outside your country. The Personal Information of users who are located outside the U.S. may be transferred to the U.S., where our servers are located and where it will be processed and stored on servers in the U.S. By accessing the Site, using Advertising Services, providing Personal Information or sending us email, you expressly and unambiguously agree to such transfer, processing, storage and disclosure in countries outside your own. Individuals from the European Union, United Kingdom, and Switzerland, please see the section below on “Cross-Border Transfers from Europe” for more information.

9. EU DATA SUBJECTS: PROCESSING OF PERSONAL INFORMATION

We process Personal Information with your consent. On other occasions, we may process Personal Information when we need to do so to fulfill a contract (for example, for billing purposes) or where required to do this by law. If necessary, we may also process Personal Information when it is in our legitimate interests to do this (e.g., for auditing purposes or for fraud detection) and when these interests are not overridden by your data protection rights.

EU data subjects may have rights to access, portability, to revoke consent, to correct, delete, and/or object to or restrict processing of the Personal Information you provide to us. You can email a request to us at [email protected]. We will respond to your request in a reasonable timeframe and in accordance with the law that applies to you. Sometimes a request in relation to your Personal Information may not apply to certain information, such as information we may keep to comply with legal requirements.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Simplifi commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Simplifi commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to

1.  EU Data Protection Authorities (DPAs), an alternative dispute resolution provider based in the European Union;
2.  Swiss Federal Data Protection and Information Commissioner (FDPIC), an alternative dispute resolution provider based in Switzerland;
3.  Or the UK Information Commissioner’s Office (ICO), an alternative dispute resolution provider based in the United Kingdom

If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit the appropriate DPF-relevant web page above for more information or to file a complaint. The services of above are provided at no cost to you.

Additionally, you have the right to lodge a complaint against us. To do so, contact the supervisory authority in your country of residence.

Simplifi does not transfer personal information to third-party countries or organizations. In the future, should any transfers of personal information to third parties be required, Simplifi will be subject to appropriate safeguards, such as standard contractual clauses or certification schemes, to ensure that the information remains protected in accordance with applicable data protection laws.

10. CROSS-BORDER TRANSFERS FROM EUROPE

Simplifi relies on safeguards such as the SCCs to receive Personal Information from the European Union, United Kingdom and Switzerland. Simplifi complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Simplifi has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Simplifi has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.

To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

Under certain conditions, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted, as described more fully on the Data Privacy Framework website here: https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf

11. US Privacy Rights

Some U.S. residents have certain rights under various state laws with respect to Personal Information processed by Simplifi. Additionally, Simplifi is subject to the investigatory enforcement powers of the Federal Trade Commission (FTC). This section contains disclosures required by those laws and explains the rights that may be available to you.

Personal Information We Collect and Disclose for a Business Purpose
In the past 12 months, we have collected, and disclosed to third parties, the following categories of Personal Information about users, for our business or commercial purposes:

• Personal and online identifiers (such as email address, postal address, or unique online identifiers)
• Internet or other electronic network activity information (such as browsing history, search history, interactions with a website, email, application, or advertisement)
• Geolocation information (including precise location derived from your device)
• Inferences reflecting potential interests or characteristics, including race/ethnicity, health and wellness interests, and political interests.

Categories of Sources
We collect this Personal Information from the following categories of sources:

• Our Advertising Customers;
• Our service providers;
• Affiliates not under the Simplifi brand; and
• Third party data providers.

Categories of Recipients
We may disclose all of the categories of Personal Information listed above to our service providers, to affiliates not under the Simplifi brand, and to other entities for purposes like legal compliance, as described in the “Information Sharing and Disclosure” section of this Privacy Policy above.

We share all of the categories of Personal Information listed above to our business customers for interest-based advertising (also called targeted or cross-context behavioral advertising). This may be considered a sale in some states. We do not otherwise sell Personal Information about users for our Advertising Services.

Why We Collect, Use, and Share Personal Information
We use and disclose the personal information we collect for our commercial and business purposes, as further described above in the “How We Collect and Use Information” and “Information Sharing and Disclosure” sections of this Privacy Policy.

Your Rights Regarding Personal Information
Some U.S. residents have certain rights under various state laws with respect to the Personal Information collected by businesses. If you are a resident of one of these states, you may exercise the following rights regarding Personal Information, subject to certain exceptions and limitations:

• The right to confirm whether Simplifi is processing Personal Information about you.
• The right to correct inaccuracies in the Personal Information we have collected about you.
• The right to know the categories of Personal Information we collect, use, disclose, and sell about you, the categories of sources from which we collected Personal Information, our purposes for collecting or selling Personal Information, the categories of Personal Information that we have either sold or disclosed for a business purpose, and the categories of third parties with which we have shared Personal Information.
• The right to access the specific pieces of Personal Information we have collected about you.
• The right to request that we delete the Personal Information we have collected about you.
• The right to opt out of the processing (including sharing) of Personal Information for interest-based (also called targeted or cross-context behavioral) advertising. Please note that if you opt out of certain practices, we may be unable to provide you with some services.
• Depending on your state, the right to limit Simplifi’s processing of certain “sensitive” Personal Information about you (or to withdraw consent for such processing if you previously gave it).
• The right not to receive discriminatory treatment for the exercise of the above privacy rights.

To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:

• By email at [email protected]
• By phone at 800.840.0768

For residents of certain states, if you have submitted a request that you believe we have not fulfilled, you may contact us to appeal our decision by sending an email with the subject line “Appeal” to [email protected].

Verification Process and Required Information
Note that we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled.

Authorized Agent
For residents of certain states, you may designate an authorized agent to make a request on your behalf by verifying your identity and providing the agent with written permission to make a request on your behalf. An authorized agent may submit a request through the methods provided above.

Minors’ Right to Opt In
We do not knowingly sell, or share for interest-based advertising, Personal Information about minors under 16 years of age.

12. RIGHTS FOR CALIFORNIA RESIDENTS

California Advertising Customers have certain rights under state law with respect to Personal Information processed by Simplifi. This section contains disclosures required by the California Privacy Rights Act (“CPRA”), applies solely to Personal Information subject to the CPRA including offline data, and explains rights that may be available to you.

Personal Information We Collect and Disclose for a Business Purpose
In the past 12 months, we have collected, and disclosed to third parties, the following categories of Personal Information about Advertising Customers, for our business or commercial purposes:

• Personal and online identifiers (such as first and last name, email address, postal address, or unique online identifiers)
• Commercial information, including records of products or services purchased, obtained, or considered
• Internet or other electronic network activity information (such as browsing history, search history, interactions with a website, email, application, or advertisement)
• Geolocation information (such as general location derived from an IP address)
• Professional or employment-related information

Categories of Sources
We collect this Personal Information from the following categories of sources:

• Our Advertising Customers;
• Our service providers;
• Affiliates not under the Simplifi brand; and
• Third party data providers.

Categories of Recipients
We may disclose all of the categories of Personal Information listed above to our service providers, to affiliates not under the Simplifi brand, and to other entities for purposes like legal compliance, as described in the “Information Sharing and Disclosure” section of this Privacy Policy above.

We do not sell Personal Information about our Advertising Customers for money or other consideration. We “share” (as defined by the CPRA) online identifiers and Internet/network activity information by allowing third-party advertising partners to collect such information on our Site for interest-based advertising (also called cross-context behavioral advertising).

Why We Collect, Use, and Disclose Personal Information
We use and disclose the categories Personal Information listed above for our commercial and business purposes, as further described above in the “How We Use Collected Information” and “Information Sharing and Disclosure” sections of this Privacy Policy.

Your Rights Regarding Personal Information
If you are an Advertising Customer who is a California resident, you may exercise the following rights regarding Personal Information, subject to certain exceptions and limitations:

• The right to confirm whether Simplifi is processing Personal Information about you.
• The right to correct inaccuracies in the Personal Information we have collected about you.
• The right to know the categories and specific pieces of Personal Information we collect, use, disclose, and sell about you, the categories of sources from which we collected Personal Information, our purposes for collecting or selling Personal Information, the categories of Personal Information that we have either sold or disclosed for a business purpose, and the categories of third parties with which we have shared Personal Information.
• The right to request that we delete the Personal Information we have collected about you.
• The right to opt out of the sharing of Personal Information for targeted advertising. Please note that if you opt out of certain practices, we may be unable to provide you with some services.
• The right not to receive discriminatory treatment for the exercise of the above privacy rights.

To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:

• By email at [email protected]
• By phone at 800.840.0768

With respect to Advertising Customers, Simplifi does not process Personal Information that is considered sensitive under the CPRA.

Verification Process and Required Information
We may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. Typically, we request your name, business email address, and business phone number to process your request.

Authorized Agent
If you are a California resident, you may designate an authorized agent to make a request on your behalf by verifying your identity and providing the agent with written permission to make a request on your behalf. An authorized agent may submit a request through the methods provided above.

Minors’ Right to Opt In
Only adults are permitted to be Advertising Customers. We do not knowingly sell, or share for interest-based advertising, Personal Information about minors under 16 years of age.

13. THIRD-PARTY LINKS AND TOOLS

Social Media Features
Our Site includes social media plug-ins which are interactive mini-programs that run on our Site. These features may allow the third parties that offer the features to collect information such as your IP address, which page you are visiting on our Site, and other data. Social media features are either hosted by a third party or hosted directly on our Site. Your interactions with these features are governed by the privacy statement of the company providing it. Our Site is not sponsored or endorsed by LinkedIn, Facebook, Twitter, Google+ or YouTube or other third party websites, which are trademarked and owned by third parties and not by us.

Links to Other Sites; Transactions with Third Parties
The Site may contain links to other sites that are not owned or controlled by Simplifi. Please be aware that we are not responsible for the privacy practices of these other sites. We encourage you to review the privacy policies and statements of other sites to understand their information practices. This Privacy Policy applies only to information collected by our Site.

Analytics
The Site uses third-party analytics services including Google Analytics. For more information about Google analytic cookies, please see Google’s help pages and privacy policy: Google Privacy Policy: http://www.google.com/intl/en/policies/privacy/,Google Analytics Help: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage. Google has developed the Google Analytics opt-out browser add-on for the Google Analytics JavaScript (ga.js, analytics.js, dc.js). If you want to opt out of Google Analytics, you can download and install the add-on for your web browser at https://tools.google.com/dlpage/gaoptout.

Simplifi partners with Microsoft Clarity to understand how visitors use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our services. Simplifi uses this information for site optimization and fraud/security purposes using first and third-party cookies to determine the popularity of products/services and online activity. For more information about how Microsoft collects and uses this data, visit Microsoft’s Privacy Statement.

14. DATA RETENTION

We will retain the information you provide to the Site for as long as your account is active, as needed to provide you services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

15. SECURITY

Simplifi uses commercially reasonable physical, managerial, and technical safeguards designed to preserve the integrity and security of your personal information and to protect it against loss or unauthorized use or disclosure.

16. CONTACT US

If you have inquiries or complaints regarding this Privacy Policy please contact Simplifi at:
[email protected]

or:

Chief Privacy Officer
c/o Paul Harrison, CTO
Simplifi Holdings LLC
128 East Exchange Avenue, Suite 700
Fort Worth, TX 76164

The controller of Personal Information collected through the Site is:
Simpli.fi Holdings, LLC
128 East Exchange Avenue, Suite 700
Fort Worth, TX 76164 USA