Cantaloupe Privacy Policy
Effective Date: November 17, 2016
Last Updated: July 17, 2023
Cantaloupe, Inc. and its affiliates, including, but not limited to Three Square Market, (collectively referred to herein as “Cantaloupe”, “we”, “our” or “us”), recognizes the importance of protecting your privacy and provide this Privacy Policy to help you better understand how your information is collected, used, and shared and your rights regarding your information. We may collect information from visitors, customers and any other individual or entity (“Users”, “you”, or “your”) who visits our Digital Properties or who otherwise communicate with us.
This Privacy Policy applies to data collection by Cantaloupe wherever you interact with us, including but not limited to your use of the website, www.cantaloupe.com and all other Cantaloupe-related sites, digital properties, and mobile apps (“Digital Properties”) as well as on the telephone and any other applications, software, communications, capabilities and services (“Services”).
If you do not agree with this Privacy Policy, please do not interact with us or use our Services.
Personal Information We Collect
We and our vendors and service providers collect, receive, and develop several categories of personal information about you depending on the nature of your interactions with us:
We collect contact information. Contact information typically includes your name, business name, email address, mailing address, and phone number.
We collect account information. When you register with our Digital Properties or for our services, we collect account credentials such as username and password, and any other registration information.
We collect payment information. We collect debit or credit card details (cardholder name, card number, expiration date, etc.) or other forms of payment to fulfill orders placed for our products and services.
We collect location information. We collect your general location when you access our Services, using your ZIP code and Internet Protocol (“IP”) address.
We collect online identifiers. For example, we collect IP address, unique device ID, and other information about your device.
We collect Internet and network activity information. If you use our Digital Properties, we collect information about the browser you are using, as well as device identifiers. We may look at what digital property you came from, or what digital property you visit when you leave us. We may collect page interaction information (such as how long you visit our Digital Properties or areas you navigate to, what search terms you enter), and methods you may use to browse away from the page. We collect this information using cookies and similar technologies described in the Cookie Policy below.
We collect information you share through the Services. We collect content you submit or make available when you use our Services, including any parts of the Services that let you interact with other Users or share content publicly.
How We Collect Personal Information
We and our vendors and service providers collect personal information about you from various sources, directly and indirectly, including from the following:
We collect personal information directly from you. For example, we collect information if you contact us. We collect information if you use our Services. We may also ask you to provide certain information about yourself by filling out and submitting an online form. It is completely optional for you to engage in these activities. If you elect to engage in these activities, however, you may be required to provide personal information, such as your name, mailing address, and email address. In all cases, we will collect this information if you voluntarily submit it to us to use.
We collect personal information from cookies and similar technologies. We use tracking tools like browser cookies and web beacons to collect information from and about you. We collect information when you interact with our Digital Properties, our ads, and our emails that we or our vendors or service providers send to you. We collect information about Users over time and across devices when you use our Digital Properties, and we may have third parties collect information in this way, as well. Learn more about these tools, how we use them and how you can control them by reviewing our Cookie Policy below.
We get personal information about you from vendors or service providers we hire to work on our behalf and from other sources. Other parties may give us information about you. These other parties may include business and marketing partners and social media platforms that give us information they have collected either directly or indirectly from you. For example, vendors that host or maintain our Digital Properties may also give us information. Our marketing agencies, advertising technology vendors, and analytics providers may also provide us with information.
We combine information. For example, we may combine information that we have collected offline with information we collect online. Or we may combine information we get from another party with information we already retain. We may also aggregate your information with other consumers’ information to understand preferences and trends over time.
How We Use Personal Information
We use the categories of personal information described above for the following purposes:
We use personal information to provide and administer the Services. For example, we use your personal information to facilitate communication with you.
We use personal information to fulfill transactions. For example, we use your personal information to process your payments or orders for our Services.
We use personal information for advertising, marketing, and analytics purposes. For example, we may use your personal information to:
- • learn more about you by linking your data with additional data through third-party data providers or analyzing the data with the help of analytics service providers;
- • identify unique Users across devices;
- • tailor advertisements across devices;
- • improve our Services and develop new products, services, and features;
- • analyze trends and traffic, track purchases, and track usage data; and
- • advertise the Services on third-party websites, Digital Properties and applications.
We may use personal information for safety, security, compliance, and due diligence purposes. We may use information to protect our company or others. We also may use information to protect, our Services, as well as to detect and investigate activities that may be illegal or prohibited. We will use certain pieces of personal information to verify your identity if you make requests pursuant to this Privacy Policy. The verification steps and the pieces of personal information that we request may vary depending on the sensitivity and nature of your request.
We may use personal information to provide support and respond to your requests or questions. We use information to contact you in response to your feedback or other matters related to our relationship with you (such as about this Privacy Policy or our Terms of Use.
We may use personal information to test, develop, analyze, and improve our products and services. We may use your personal information to make our Services better. We may use your personal information to customize your experience with us and to conduct research and analysis.
We may use personal information to comply with any legal obligations and enforce our legal rights. For example, we may use personal information to exercise contractual rights, to comply with financial reporting obligations, court orders, warrants, or subpoenas in accordance with applicable law.
We may use personal information as otherwise disclosed or permitted by law, or as we may notify you from time to time.
Lawful Bases for Processing
We process personal information as follows:
We process your personal information with your consent. For example, we process your personal information, with your consent, to provide you with communications and Services. You may revoke consent at any time. You understand that withdrawal of your consent will not affect the legality of our treatment of your personal information while your consent was in place.
We process your personal information when necessary to perform our agreements with you. This includes the terms and conditions that govern your participation in or use of our Services.
We process your personal information in pursuit of our legitimate interests. Examples of these legitimate interests include operation and improvement of the Services, personalization of content on our Digital Properties, and protection of our company and others from fraud or security threats.
We process your personal information when necessary to ensure compliance with a legal obligation to which we are subject. From time to time we may also need to process personal information to comply with a legal obligation, if it is necessary to protect the vital interests of you, the company, other data subjects, or if it is necessary for a task carried out in the public interest.
With Whom Do We Share Personal Information
We will share personal information with vendors and service providers who perform services on our behalf. For example, we share information with vendors who send emails on our behalf.
We also share information with companies that help us manage and operate our Digital Properties and fulfill purchases, including, but not limited to, our eCommerce platform and payment processor, Shopify. To understand how Shopify collects, processes and stores your personal information, please review Shopify’s Terms of Service or Privacy Statement.
We also share information with other parties like advertisers and advertising networks, social media companies (including, but not limited to, Facebook and LinkedIn), and ad tech companies that assist us in marketing and advertising our Services. We may also share information with service providers that help us investigate and prevent data incidents or audit our business and financial statements.
We may share your personal information with our business partners, including for marketing purposes. For example, we may share personal information with other parties who co-sponsor a promotion or our content. Some of these partners may send you information about products or services by mail or email. They may share your information with others.
We may share your personal information with a successor to all or part of our business. For example, if part of our business is sold, we may include customer information as part of that transaction. We may share your information if there is a similar change to our corporate structure. We may also share your information with others as they conduct diligence of our corporate changes.
We will share your personal information with other parties as necessary or required by law. For example, we may share personal information to respond to a court order or subpoena. We may also share information if a government agency or investigatory body requests it. This includes sharing your information with the US government. We may also share your information in order to enforce our agreements, and to protect the rights of others. We may also share information when we are investigating potential fraud. We may share personal information for other reasons we may describe to you from time to time as permitted by law.
Data Protection Rights
We value your rights with respect to your personal information. Depending on the jurisdiction where you reside, your rights may include any of the following.
- • Information. You may have the right to request confirmation of whether we store, use, or share any of your personal information and be informed about with whom your personal information has been shared.
- • Access. You may have the right to request copies of your personal information.
- • Rectification. You may have the right to change or modify your personal information that you believe is out-of-date or incorrect.
- • Erasure. You may have the right to request erasure of your personal information held by us, subject to certain exceptions as prescribed by applicable law.
- • Restrict processing. You may have the right to restrict our uses of your personal information under certain circumstances as prescribed by applicable law.
- • Data portability. You may have the right to request copies of your personal information in an electronic format and request that we send that information to you or another third party under certain circumstances as prescribed by applicable law.
- • Object to processing or withdraw consent. You may have the right to object to our use of your personal information or withdraw consent where you have given it.
- • Avoid automated decision-making. You may have the right not to be subject to a decision based solely on automated processing, including profiling, if this has a legal or other significant effect on you as an individual, subject to certain exceptions as prescribed by applicable law.
We will comply with individuals’ requests, including access, correction, and/or deletion of the personal information we store in accordance with the applicable law that applies to an individual.
We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests.
We will take reasonable steps to verify your identity prior to responding to your requests. The verification steps will vary depending on the sensitivity of the personal information and whether you have an account with us.
You can also designate an authorized agent to make a request on your behalf. If you use an authorized agent, please include written permission that you have designated that agent to make the request, or proof of the agent‘s power of attorney. We may follow up with you to verify your identity before processing your authorized agent’s request.
You may exercise the above rights by emailing us at: privacy@cantaloupe.com.
Other Choices You Have
You can opt-out of receiving our marketing messages. To stop receiving our promotional emails, you can follow the instructions in any promotional message you get from us. You may request to be removed from email, postal, phone, or other lists by emailing us at: privacy@cantaloupe.com or by calling us at: 888-561-4748.
Even if you opt out of getting marketing messages, we will still send you transactional messages. These include responses to your questions or emails related to purchases you make regarding our Services. You can control our use of certain cookies and other tracking tools. We collect information about Users over time and across different websites, Digital Properties and devices. To do this, we and our vendors use several common tracking tools, such as browser cookies, web beacons, and similar technologies. To learn how to manage how we and our vendors use cookies and other tracking tools, please review our Cookie Policy below.
Cookie Policy
What are Cookies
Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our Digital Properties, we may collect information from you automatically through cookies or similar technology. For further information, visit www.allaboutcookies.org.
How We Use Cookies
We use cookies in a range of ways to improve your experience on our Digital Properties, including:
- • Strictly necessary cookies. These are cookies that are required for the operation of our Services. They include, for example, cookies that enable you to log into secure areas of our Services. This category of cookies cannot be disabled.
- • Functionality. We use these cookies so that we recognize you on our Digital Properties and remember your previously selected preferences. These could include what language you prefer, location you are in, or volume level for video playback. A mix of first-party and third-party cookies are used.
- • Analytical cookies. These cookies allow us to recognize and count the number of visitors and to see how visitors move around our Digital Properties when they are using them, including clickstream data. Clickstream data is information collected by our computers when you request access to our Digital Properties via a web browser or Application Programming Interface (API). Clickstream data may include information such as the content accessed, the time spent viewing the content, source of the request, type of device and software making the request, the preceding Digital Properties viewed and similar information. Clickstream data permits us to analyze how visitors arrive at our Digital Properties, what type of content is popular, or what type of visitors in the aggregate are interested in particular kinds of content on the Digital Properties. This information helps us to improve the way our Services work, for example, by ensuring that Users are finding what they are looking for more easily. Information collected by Google Analytics cookies will be transmitted to and stored by Google on servers in the United States of America in accordance with its privacy practices. To see and overview of privacy at Google and how this applies to Google Analytics, visit www.google.com/intl/en/policies/privacy.
- • Advertising. We use these cookies to collect information about your visit to our Digital Properties, the content you viewed, the links you followed and information about your browser, device, and your IP address. We sometimes share limited aspects of this data with third parties for advertising purposes. We may also share online data collected through cookies with our advertising partners. This means that when you visit another website or digital property, you may be shown advertising based on your browsing patterns on our Digital Properties
- • Web Beacons, Pixel Tags and Other Tracking Technologies. Web beacons, pixel tags and other “tracking technologies” are small strings of code placed on a web page or in an email or advertisement. These technologies allow your browser to recognize and store certain types of information such as cookies previously set, the time and date that you viewed the page with the beacon and a description of that page.
How to Manage Cookies and Similar Technologies
There are a few ways to opt out of or delete cookies:
- • On Your Browser (Chrome, Safari, etc.). You may disable cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to disable all cookies (including strictly necessary cookies) you may not be able to access all or parts of our Digital Properties. Disabling a cookie or category of cookie does not delete the cookie from your browser. You will need to do this separately within your browser. If you have disabled one or more analytical cookies, we may still use information collected from cookies prior to your disabled preference being set.
- • Opting Out on a Mobile Device. Depending on your device and operating system, you may be able to reset your mobile device’s advertising identifier to limit this data collection, or prevent the collection of usage data across unaffiliated applications for interest-based advertising purposes, by accessing the privacy settings on your mobile device. Each operating system, iOS for Apple devices, Android for Android devices, and Windows for Microsoft devices, provides its own instructions. Visit the privacy settings for your mobile device or contact your platform operator for more information.
- • Opt-Out of Analytics. You may opt out of tracking by Google Analytics by visiting https://tools.google.com/dlpage/gaoptout.
- • Opt Out of Interest-Based Advertising. To opt out of interest-based advertising by third parties, visit:
- o Network Advertising Initiative (NAI)’s self-regulatory opt out page, if you are located in the United Sates.
- o Digital Advertising Alliance (DAA)’s self-regulatory opt out page and mobile application-based “AppChoices” page if you are in the United States.
- o Australian Digital Advertising Alliance (ADAA)’s self-regulatory opt out page if you are in Australia.
- o Digital Advertising Alliance of Canada (DAAC)’s self-regulatory opt out page if you are in Canada.
Please note that you must opt-out separately on each device (including each web browser on each device) that you use to access our Digital Properties or our Services if you wish to opt-out, and if you clear your cookies or if you use a different browser or device, you will need to renew your opt-out preferences.
- Do Not Track. We do not currently respond to browser do-not-track signals. Instead, we adhere to the standards set out in this Privacy Policy and offer the opt-out choices described above.
Jurisdiction-Specific Data Protection Rights
United States
California
If you reside in California, you have the right to ask us one time each year if we have shared personal information with third parties for their direct marketing purposes. To make a request, please send us an email at: privacy@cantaloupe.com or call us at: 888-561-4748.
. Indicate in your letter that you are a California resident making a “Shine the Light” inquiry. Please allow up to 45 days for a response.
During the last twelve (12) months, we have collected the following categories of personal information from Users.
Category | Type of Identifiers We Collect | Collected |
Identifiers. | First and last name, personal postal address, unique personal identifier, online identifier, Internet Protocol address, personal email address, signatures, account ID and password. | YES |
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | A name, address, telephone number, credit card number, debit card number, or any other financial information. | YES |
Internet or other similar network activity. | Browsing history and time, search history, information on a consumer’s interaction with a website, application, or advertisement. | YES |
Commercial Information. | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | YES |
Inferences drawn from other Personal Information. | Profile reflecting a person’s preferences, behavior, attitudes; and social media account information. | YES |
If you reside in California, you also have the right to make the following requests with respect to your personal information:
- • Access. You have the right to request that we disclose to you the categories of personal information collected about you, the categories of sources from which the personal information is collected, the categories of personal information sold or disclosed, the business or commercial purpose for collecting and selling the personal information, the categories of third parties with whom we share the personal information, and the specific pieces of personal information collected about you over the past 12 months.
- • Deletion. You can request that we delete your personal information that we maintain about you, subject to certain exceptions.
- • Opt-out (Do Not Sell My Personal Information). We have not sold personal information during the last twelve (12) months. On a going forward basis, you can request to opt-out of the sale of your personal information to a third party. For purposes of this Privacy Policy, “sell” means the sale, rental, release, disclosure, dissemination, availability, transfer, or other oral, written, or electronic communication of your personal information to an outside party for monetary or other valuable consideration.
- • Right to be free from discrimination. You have the right not to be discriminated against for exercising these rights.
We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate customer requests. Employment-related information will not be included in fulfillment of your requests.
We will take reasonable steps to verify your identity prior to responding to your requests. The verification steps will vary depending on the sensitivity of the personal information and whether you have an account with us.
You may designate an authorized agent to make a request on your behalf. When submitting the request, please ensure the authorized agent identifies himself/herself/itself as an authorized agent and can show written permission from you to represent you. We may contact you directly to confirm that you have authorized the agent to act on your behalf and confirm your identity. You may exercise the above rights by emailing us at.
Notice of Financial Incentive: From time to time, we may offer financial incentives in connection with the collection or use of personal information. The material terms of the financial incentive will generally be presented to you at the time you sign up. You may withdraw from any financial incentive at any time by emailing us at.
Nevada
If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. You can exercise this right by contacting us at privacy@cantaloupe.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A.
Virginia
Users who are residents of Virginia have the right to request, per Virginia Statute §59.1-577, that we manage User personal information in any of the following ways:
- To confirm if we are processing your personal information;
- To obtain a copy of the personal information we have for you;
- To correct inaccuracies in the personal information that we have for you;
- To delete personal information we have collected or otherwise obtain on you (subject to the other provisions of this Privacy Policy); and
- To opt-out of having your personal information processed (except as described in the Cookie Policy, where you must take actions yourself) for targeted advertising, for purposes of selling to third-parties or for profiling purposes.
To exercise these rights, call us at: 888-561-4748.
Australia
If you are a resident of Australia, you may have the following rights:
- • Access. You may have right to access the personal information held about you
- • Correction. You may have right to correct your information when it is incorrect.
- • Opt-out of Direct Marketing. Under the Australian Privacy Act, you have the right to opt out of the use of your personal information for the purpose of direct marketing, including in relation to personalized advertising. To learn how to opt out of personalized advertising across our Services, please review our Cookie Policy. You will still see non-personalized advertising.
You may exercise the above rights by emailing us at privacy@cantaloupe.com. Please note that we may ask you to verify your identity before responding to such requests. We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations
If you have contacted us at privacy@cantloupe.com with a privacy related complaint and you are not satisfied with our handling of that complaint, you may refer that complaint to the Office of the Australian Information Commissioner:
GPO Box 5218 Sydney NSW 2001
Email: enquiries@oaic.gov.au
Telephone: 1300 363 992
Website: www.oaic.gov.au
If you are a resident of Canada, you may have the following rights:
- • Access. You may have the right to request access to your personal information that we hold.
- • Correction. You may be entitled to update or correct your information if it is inaccurate or incomplete.
- • Withdraw consent. You can withdraw your consent at any time to collection, use and disclosure of your personal information. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
You may exercise the above rights by emailing us at privacy@cantaloupe.com. Please note that we may ask you to verify your identity before responding to such requests. We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations
In addition, if you have contacted us at privacy@cantaloupe.com with a privacy related complaint and you are not satisfied with our handling of that complaint, you have the right to lodge that complaint with the Office of the Privacy Commission of Canada via the following link: https://www.priv.gc.ca/en/report-a-concern/file-a-formal-privacy-complaint/.
New Zealand
If you live in New Zealand and have an established business relationship with us, you may have the right to:
- • Access. You may have the right to ask us for confirmation on whether we are processing your personal information, and request access to your personal information that we hold.
- • Correction. You may be entitled to update or correct your information if it is inaccurate or incomplete.
You may exercise the above rights by emailing us at privacy@cantaloupe.com. Please note that we may ask you to verify your identity before responding to such requests. We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations.
European Economic Area and United Kingdom
If you are located in the EEA or UK, you have the following rights:
- • Access. You have the right to ask us for confirmation on whether we are processing your personal information, and access to the personal information and related information.
- • Rectification. You are entitled to update or correct your information if it is inaccurate or incomplete.
- • Erasure. You have the right to request that we erase your personal information, subject to applicable law.
- • Restrict processing. You have the right to request that we restrict the processing of your personal information.
- • Object to processing. You have the right to object to our processing of your personal information.
- • Data portability. You have the right to request the transfer the data that we have collected to another organization, or directly to you.
You may exercise the above rights by emailing us at privacy@cantaloupe.com. Please note that we may ask you to verify your identity before responding to such requests. We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. In addition, if you are in the European Economic Area or the United Kingdom and you have any complaints about how we use your personal information, you have the right to lodge a complaint with the data protection authority in your country. The data protection authority for the UK is the Information Commission’s Office – whose website is: https://ico.org.uk/. Contact information for data protection authorities based in the European Economic Area, Switzerland and certain non-European countries are available on the EU Commission’s website via the following link: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
International Transfers of Information
Information about you will be transferred to, or accessed by, entities located around the world as described in this Privacy Policy. Some of these entities may be located in countries (such as the United States) that do not provide an equivalent level of protection for personal information as your home country.
We have put in place safeguards to provide adequate protection for transfers of certain information, in accordance with applicable legal requirements..
Security, Retention, and Storage of Personal Information
The Internet is not 100% secure. We cannot promise that your use of our Services will be completely safe. Any transmission of your data to our Digital Properties is at your own risk. We encourage you to use caution when using the Internet. This includes not sharing your passwords. We keep personal information as long as it is necessary or relevant for the practices described in this Privacy Policy. We also keep information as otherwise required by law.
In addition, we implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information, taking into account technological reality, cost, the scope, context and purposes of processing weighted against the severity and likelihood that the processing could threaten individual rights and freedoms. For example, we restrict access to personal information to Cantaloupe employees, contractors, business partners and agents who need to know that information in order to operate, develop or improve our services. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations. We use commercially reasonable security measures such as encryption, firewalls, and Secure Socket Layer software (SSL) or hypertext transfer protocol secure (HTTPS) to protect Personal Information.
We offer the use of a secure server. All supplied sensitive/credit information is transmitted via industry accepted secure communication technology and then encrypted into our Database to be only accessed by those authorized with special access rights to our systems, and are required to keep the information confidential.
Outside Sites (Their Privacy Policies May Be Different)
Our Services may contain links to other websites or Digital Properties, like our sponsor’s websites or links to social media sites, that may offer products or services that our customers might find useful. These third party websites or Digital Properties may request information from you when you arrive. In such instances, the collection and use of your personal information will be governed by the privacy policy applicable to that website or digital property. We do not control the privacy policies, contents or links that appear on these websites or Digital Properties. We encourage you to review the privacy policies of any third-party websites or Digital Properties, and evaluate their services carefully before providing any of them with your personal information.
Children
Our Services are intended for Users 16 years or older; you are not permitted to access or use the Services if you are younger than 16. We do not knowingly collect personal information from children under the age of 16 through the Services. If you are under 16, please do not give us any personal information. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Policy by instructing their children to never provide personal information without their permission. If you have reason to believe that a child under the age of 16 has provided personal information to us, please contact us at privacy@cantaloupe.com, and we will endeavor to delete that information from our databases.
Changes to this Privacy Policy
We may change this Privacy Policy from time to time. If we make significant changes in the way we treat your personal information, or to this Privacy Policy, we will provide you notice through the Services or by some other means, such as email. Your continued use of the Services after such notice constitutes your consent to the changes. We encourage you to periodically review the Privacy Policy for the latest information on our privacy practices.
Contacting Us
If there are any questions regarding this privacy policy you may contact us using the information below:
Cantaloupe, Inc.
100 Deerfield Lane, Suite 300 Malvern, PA 19355 USA Phone: 888-561-4748
Email: privacy@cantaloupe.com Website: https://www.cantaloupe.com/