In this policy, the terms “we”, “us”, “our”, and “ours” refer to Jefferson Capital Holdings, LLC and its affiliates (“JCAP”). Sections 4-7 apply to JCAP affiliates designated in Section 4 and to information processed on accounts established in the European Economic Area (EEA) or the United Kingdom. All other sections of this policy apply to JCAP and all affiliates.
JCAP respects individual privacy and values the confidence of its customers, employees, consumers, business partners, and others. Not only does JCAP strive to collect, use, and disclose Personal Information in a manner consistent with the laws of the countries in which it does business, but it also has a tradition of upholding the highest ethical standards in its business practices. We have therefore adopted a privacy and data protection policy that is applicable to information relating to our employees as well as to information relating to other individuals collected or processed in the general course of our business, including but not limited to Personal Information received from locations within the European Union.
This Policy applies to any Personal Information received by JCAP in any format, including electronic, paper or verbal.
For purposes of this Policy, the following definitions shall apply:
The following company affiliates adhere to the DPF Principles and may collect the same types of EU data as JCAP:
Where JCAP collects Personal data directly from individuals in the EEA or the United Kingdom, we will inform them of the following:
To ensure fair and transparent processing of personal data JCAP will also provide the following information:
Where the personal data was not obtained from the data subject, the following information will be supplied in addition to the information set out above:
Where JCAP intends to further process the personal data for a purpose other than that for which the personal data were obtained JCAP shall provide the data subject prior to that further processing with information on that other purpose.
Where JCAP receives Personal Information from its subsidiaries, affiliates or other entities in the EEA or the United Kingdom, it will use and disclose such information in accordance with the notices provided by such entities and the choices made by the individuals to whom such Personal Information relates.
JCAP will offer the opportunity to choose whether their Personal Information is to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. JCAP will provide clear and informed methods to exercise their choices.
In cases of onward transfer to third parties of data of EU or United Kingdom individuals received pursuant to the EU-US Data Privacy Framework, JCAP is liable unless we can prove we were not a party to the events giving rise to the damages. JCAP will obtain assurances from its Agents that they will safeguard Personal Information consistently with this Policy. Examples of appropriate assurances that may be provided by Agents include: a contract obligating the Agent to provide at least the same level of protection as is required by the relevant DPF Principles, Data Privacy Framework certification by the Agent, or being subject to another European Commission adequacy finding. Where JCAP has knowledge that an Agent is using or disclosing Personal Information in a manner contrary to this Policy, JCAP will take reasonable steps to prevent or stop the use or disclosure.
ACCESS AND CORRECTION:
Upon request, JCAP will grant reasonable access to Personal Information that it holds. In addition, JCAP will take reasonable steps to permit Consumers and Employees to correct, amend, or delete information that is demonstrated to be inaccurate or incomplete.
JCAP will take reasonable precautions to protect Personal Information in its possession from loss, misuse and unauthorized access, disclosure, alteration and destruction. We restrict access to Personal Information to employees who need to know that information to provide services. We maintain physical, electronic and procedural safeguards that comply with applicable laws to guard Personal Information.
JCAP will use Personal Information only in ways that are compatible with the purposes for which it was collected or subsequently authorized by the individual. JCAP will take reasonable steps to ensure that Personal Information is relevant to its intended use, accurate, complete, and current.
JCAP is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). Any Employee that JCAP determines is in violation of this policy may be subject to disciplinary action up to and including termination of employment.
Any questions or concerns regarding the use or disclosure of Personal Information should be directed to ‘Department Privacy’ at the address given below. In compliance with the EU-US Data Privacy Framework EU-U.S. DPF and the UK Extension, to the EU-U.S., JCAP commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the U.S. pursuant to the EU-U.S. DPF. Individuals with inquiries or complaints should first contact JCAP at:
200 14th Avenue E
Sartell, MN 56377
JCAP has further committed to refer unresolved DPF Principles-related complaints to a U.S.-based independent dispute resolution mechanism, DATA PRIVACY FRAMEWORK SERVICES, operated in the U.S. by BBB National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbbprograms.org/dpf-complaints for more information and to file a complaint. This service is provided free of charge to you. If your DPF complaint cannot be resolved through these above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. Seehttps://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf.
Adherence by JCAP to these DPF Principles may be limited (a) to the extent required to respond to a legal or ethical obligation; (b) to the extent necessary to meet national security, public interest or law enforcement obligations; and (c) to the extent expressly permitted by an applicable law, rule or regulation.
Information provided to us to enable us to contact you. Examples may include name, email address, mailing address, telephone number, etc. Contact information may identify you personally.
Information you may provide to us, which may include credit card number, bank information, billing address, billing contact name, telephone numbers, email address, etc. Billing information may identify you personally.
Information that allows you to access the services we provide, technical support, ticketing system and any third-party services provided through us. Examples may include user ID, invitation number, account number, access and permission levels, password, etc. Password information does not identify you personally, but it may when associated with other information.
Information that allows us to configure the services we provide so that they are more easily provided to you. Examples may include your IP address, browser type, referring/exit pages, operating system, affiliate id, etc. Technical information does not identify you personally, but it may when associated with other information.
Information you choose to provide to us and that is not necessary for the operation of the services we provide. Examples may include acceptance of an offer extended to you, your endorsement of us and your connections to us in social networks, etc. It is your decision whether you include information that identifies you personally when you provide voluntary information to us.
We may collect non-public personal information about you as permitted by law from:
We may disclose non-public personal information about you to third parties, such as business partners, vendors, and credit reporting agencies. We will disclose information about you only to the extent that it is: (a) specifically directed by you; (b) permitted by applicable law and (c) not prohibited by other applicable law.
We use your Personal Information to send you information about our company, process requests for services, and to contact you when necessary. You will be permitted to opt out prior to using your Personal Information for any other purpose. We also may be required to disclose an individual’s Personal Information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements. We may also use the information we collect to improve the content of our website(s).
An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data, should direct their query via email to Privacy@JCap.com. If requested to provide or remove data, we will respond within a reasonable timeframe or within the timeframe as required by applicable law.
INTERNET DATA SECURITY AND INTEGRITY:
We make every effort to follow industry standard security measures to prevent the loss, misuse and alteration of the information under our control. However, no information transmitted on the internet or stored on servers is 100% secure. Fraudulent people exist, software and hardware can malfunction, and people make mistakes. As a result, we cannot guarantee that any information covered by this Policy will be absolutely secure.
DO NOT TRACK BROWSER REQUESTS:
At this time, we do not respond to “do not track” signals sent from browsers.
To facilitate consumer preference in a digital environment, our SMS JCAP Outreach (SMS/TXT program/system) provides efficient two-way communication. By providing your mobile number, you give permission to send you account-related text messages, like payment reminders and notifications, in conjunction with the services we provide.
If you have questions regarding this Policy or about the privacy practices of JCAP, please contact us at: Privacy@JCap.com.
Effective October 18. 2023