Privacy policy

This is version 2.1 of our privacy policy and became effective on 19 November 2018.

1. Definitions

   1. This Privacy Policy uses the same definitions as those outlined within clause 20 of the PressPatron Terms of Use (www.presspatron.com/terms).

2. Your privacy

   1. PressPatron is a platform by which Supporters can make Contributions to Publishers, and is provided by Ripple Media Limited.
   2. The Platform is accessible via Publisher Websites or at the Website (www.presspatron.com).
   3. We want to make sure that you understand how your personal information is used so please read this Privacy Policy carefully.

3. Application of this Privacy Policy

   1. This Privacy Policy describes how we collect and process certain information about you, including personal information.
   2. It is important that you read this Privacy Policy so that you are fully aware of how and why we are using your information.
   3. This Privacy Policy does not cover any information that you submit to Publisher Websites, or that may be retrieved through your use of Publisher Websites. That information will be covered by the privacy policies of those individual Publishers.

4. What information we collect about you

   1. We collect and process different kinds of information which we have grouped together as follows:
      • identity information including your name, username or similar identifier, password, and photograph;
      • contact details including your address, email and telephone numbers;
      • payment related information including your payment card details (we use a third party payment processor to process payment transactions, as detailed within Section 8);
      • business information such as legal entity name, photo identification, bank account information, tax ID number, and legal entity type (for Publishers);
      • profile information including details about payments to and from you through the Services, preferences and interests, feedback and queries (including through social media), survey responses, comments and content;
      • technical information that is automatically collected when you use our Services, including your IP address, your login data, operating system, information about your web browser, and other information about the devices you use to access the Services, including the hardware model, operating system and version, unique device identifiers and mobile network information;
      • usage information that is automatically collected when you use our Services, including the URL of your previously visited web page, access times, pages viewed, traffic volumes, time spent on pages; and
      • marketing and communications information including your preferences in receiving marketing from us and our third parties and your communication preferences.
   2. We also collect and process aggregated personal information such as statistical or demographic data for any purpose. Aggregated personal information could be derived from your personal information but is not considered personal information as this information will not directly or indirectly reveal your identity.
   3. Please note that if we are unable to process personal information in the manner outlined in this Privacy Policy, then the Services may suffer from reduced functionality, including not being able to complete a Contribution, and you will not have access to certain features of the Services, including the Publisher Dashboard and Supporter Dashboard.

5. How we collect information

   1. We use different methods to collect information:
      • You may give us your personal information when you create an account through the Services, make a contribution, request information or support, fill out a form, complete a survey, post comments or content, request marketing to be sent to you, or otherwise correspond or interact with us.
      • As you interact with our Services, we will automatically collect information about your equipment, browsing actions and patterns, and use of the Services. We collect this personal data by using session-based cookies, web beacons server logs and other similar technologies. Please see section 5.2 for further detail.
      • We may also obtain personal information from other sources and combine that with information we collect through our Services. For example, we may collect personal information from third parties, including but not limited to Publishers and publicly available sources.
   2. Cookies are small pieces of information that are stored in a browser-related file on the device you use to interact with the Services. Cookies allow us to see which features of our Services are popular and count visits. Cookies only become personally identifiable to us once you have logged in to our Services. Web beacons are electronic images that may be used in our Services or emails and help deliver cookies, count visits, understand usage, campaign effectiveness, and determine whether an email has been opened and acted upon.
   3. Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services.

6. What we do with the information we collect

   1. We will use personal information for the purposes, and under the lawful basis, as set out in this section 6.
   2. We process personal information:
      • to provide and maintain the Services;
      • to identify you when you sign-in to your account and verify that your account is not being used by others;
      • to enforce compliance with our Terms (www.presspatron.com/terms);
      • to verify and process Contributions as directed by you; and
      • to comply with laws,

      and such processing is necessary for the performance of the contract between us and our Users.

   3. We process personal information:
      • to analyse usage of the Services, or carry out research and analysis, so we can improve the Services;
      • from time to time to communicate with you in relation to the Services or Publishers, including to provide customer service, to provide news and information we think will be of interest to you, or to inform you of products, services, offers, promotions, rewards, and events offered by us and others;
      • detect, investigate and prevent fraudulent transactions and other illegal activities, and protect our and our User’s rights and property;
      • to enforce our rights under the PressPatron Terms of Use or any other cause of action we may have; and
      • to remember your preferences, and otherwise personalise the Services for you,

      and such processing is necessary for the purposes of a legitimate interest pursued by us, and we have assessed that our interests are not overridden by the interests or fundamental rights and freedoms of the person to whom the personal information relates.

   4. If we believe we are required to do so under any applicable law, regulation or legal process, we may process your personal information to co-operate with government or regulatory authorities, including disclosing your personal information to such agencies.
   5. You can unsubscribe from any promotional communications from us by following the instructions on any promotional communications sent to you. You can also exercise this right at any time by contacting us using the details at the end of this Privacy Policy. If you opt out, we may still send you non-promotional communications, such as those about your account or our ongoing relationship.

7. Third Parties

   1. We share your personal information with the parties set out below for the purposes set out in the section above. This list is accurate at the date of this Privacy Policy, and we reserve the right to update this list as our business evolves.
      • Weebly for website hosting and analytics.
      • Stripe to process Contributions as directed from Supporters to Publishers.
      • Amazon Web Services to host the Platform and Dashboards.
      • Mailchimp and GSuite/Gmail for email communications.
      • Zapier for data synchronization.
      • Pingdom to monitor website performance.
      • Google Analytics to analyse the use of our Services.
      • Google Docs to create surveys and collect responses.
      • Airtable for our sales and engagement database.
      • Streak for our customer relationship management.
      • Dropbox for Publishers to securely upload their identity documentation.
      • Our Publishers have access to information about their Supporters. Please note that if you subscribe to newsletter updates from a Publisher, you provide permission for the Publisher to communicate with you regularly via email. Publisher’s use of Supporter information is not subject to this Privacy Policy but will be governed by the Publisher’s Privacy Policy.
      • Our vendors, consultants and other service providers may have access to personal information to carry out work on our behalf.
   2. We may also share your personal information with third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal information in the same way as set out in this Privacy Policy.

8. Storage and security of information

   1. When you provide your credit card information, we transmit it via an encrypted connection to our third party payment processor, Stripe (stripe.com). Stripe maintains administrative, technical, and physical procedures to protect information stored on their servers, as outlined within their privacy policy at stripe.com/us/privacy. We do not store any credit card numbers on our servers.
   2. We utilise a range of techniques to help protect personal information from loss, theft, misuse and unauthorised access, disclosure, alteration and destruction. This information may (for the avoidance of doubt) be transferred and stored on servers inside and outside of the US.
   3. You play an important role in keeping your personal information secure by maintaining the confidentiality of any password and accounts used for the Services. Please notify us immediately if there is any unauthorised use of your account by any other internet user, or any other breach of security.
   4. To the extent permissible under applicable law, we will not be held responsible for consequences arising from unauthorised access or use of your personal information.

9. Retention of your information

   1. We will delete your personal information once:
      • we deem that the purpose for collection of that information is no longer relevant; and
      • we are no longer required to comply with any legal obligation that necessitates the retention of that information.

10. Your rights

    1. California Privacy Rights
    2. California law permits residents of California to request certain details about how their personal information is shared with third parties for direct marketing purposes. If you are a California resident and would like to make such a request, please contact us here.
    3. New Zealand Privacy Rights
    4. We are subject to the Privacy Act 1993 (NZ), as such you have the right to access and/or correct any of personal information that we hold about you.
    5. Please note that in certain circumstances we may withhold access to your information where we have the right to do so under the Privacy Act 1993, for example, where disclosing the information may reveal the identity of a third party.
    6. For more information about privacy issues in New Zealand and protecting your privacy, visit the New Zealand Privacy Commissioner's website (www.privacy.org.nz).
    7. EU Privacy Rights
    8. Under the GDPR, if you are an EU based person you have the right to:
       • access and correct your personal information;
       • in certain circumstances, have your personal information erased;
       • restrict the processing of your personal information;
       • move, copy or transfer your personal data easily for your own purposes across different services in a safe and secure way; and
       • object to processing where we rely on our legitimate interests as the lawful basis for processing.
    9. Please note that in certain circumstances we may refuse to respond to a rights request where we have the right to do so under the GDPR, for example, where a request is manifestly unfounded or excessive.
    10. Exercising your rights
    11. If you wish to exercise your rights, you can do this by contacting us using the details below. We may require you to provide verification of your identity.

11. Changes to our Privacy Policy

    1. We may amend or update this Privacy Policy from time to time. Historic versions of this Privacy Policy can be obtained by contacting us. We will notify you of any amendments or updates via email or notification via the Website. Revised versions will be effective immediately once posted on our website.

12. Contact us

    1. If you have any questions about this Privacy Policy, or if you would like to exercise your rights you can contact us via email by clicking here.