BigCart Holding, Inc. (“BigCart”), its affiliates and subsidiaries (collectively, “we”, “us” or “our”) provides this Privacy Policy to the website mobile application (“App”) or other interface visitors, users, and businesses (collectively, “you” or “your”) that access services provided by or through BigCart. This Privacy Policy applies when you access or use www.bigcart.io or any other website or application that links to or directly provides this Privacy Policy (collectively, the "Sites") and describes how we collect, store, use, share, and protect information about you to operate the Sites and make available business financial products and services (collectively with the Sites, the “Services”). This Privacy Policy also describes your choices regarding certain information we collect about you. The terms of this Privacy Policy are incorporated into the BigCart Terms of Service.
We have implemented this Privacy Policy because your privacy, and the privacy of other users, is important to us. Please carefully read this Privacy Policy and the Terms of Service before accessing or using the Services. By accessing or using the Services you agree to the terms of this Privacy Policy and the Terms of Service.
If you enroll for or obtain a financial product or service where we function as a service provider for our bank and finance partners, any information that we collect from and about you related to that financial product or service will be on behalf of the bank partner.
Contact Information
Any questions or concerns regarding this Privacy Policy, our practices, the Sites, or the Services, please contact us by at email hello@bigcart.io or with a letter by postal mail to:
BigCart Holdings, Inc.
828 Ralph McGill Blvd
Unit 211
Atlanta, GA 30306For phone inquiries please call: 941.284.0217
Information Collected
In connection with your use of the Services, we collect three types of information about you: Business Information, User Information, and General Information. Information from any of these categories may be linked with other information that we collect about you.
- Business Information. Business Information includes, but is not limited to (i) business name, address, email, and telephone number, (ii) company structure, (iii) industry type, (iv) incorporation date, (v) annual revenue, (vi) bank account information, (vii) payment information (e.g., payment history, payment card number), (viii) accounting information (e.g., Quickbooks), and (ix) beneficial ownership information.
In the U.S., federal law requires us to collect and verify beneficial ownership information of our Customers. We collect this information to protect the U.S. financial system from financial crimes like money laundering, tax evasion, corruption, and fraud. Requiring the disclosure of key individuals who ultimately own or control the business helps law enforcement investigate and prosecute financial crimes. We will collect and maintain beneficial ownership information in compliance with this Privacy Policy. - User Information. User Information includes information about the owners, principals, and business representatives, such as: name, job title, user name(s), mailing address, email address, primary telephone number, date of birth, social security number, and FICO score.
- General information. General Information includes technical information such as information regarding your use of and interactions with the Sites. This General Information includes, but is not limited to, information about (i) your Internet connection, (ii) the equipment you use to access the Sites and usage details, (iii) your operating system, browser version and internet protocol (IP) address, (iv) the location of your mobile device, device type, your device’s unique identifier, and your mobile network information, and (v) web pages, content, communications, or advertisements that you view or otherwise interact with, and (vi) referring/exit pages, clickstream data, and information that you search for using the Services.
- Business Information. Business Information includes, but is not limited to (i) business name, address, email, and telephone number, (ii) company structure, (iii) industry type, (iv) incorporation date, (v) annual revenue, (vi) bank account information, (vii) payment information (e.g., payment history, payment card number), (viii) accounting information (e.g., Quickbooks), and (ix) beneficial ownership information.
How We Collect Your Information
- Information Provided by You. We collect any information you provide when you use the Services. For example, we collect User Information and Business Information from you when you (i) register an account on the Sites, (ii) fill out forms or fields on the Sites, or (iii) complete an application for a product or service available through the Services. We also collect any information you may submit through communications with us by email, mail, text, telephone, facsimile or other means.
The Services allow us, upon your direction, to obtain User Information and Business Information from third party entities that your business maintains accounts with such as financial institutions, service providers, and social networking services. For example, we may obtain (i) transactional information about your business from financial institutions, (ii) information about your business’s engagement with customers from social networking services, and (iii) information about your business’s sales volume from service providers. - Information We Collect When You Use Our Services. We automatically collect General Information from your computer, mobile device or other device you use when you access the Services (including downloading and using a mobile application or accessing a mobile optimized Site), view content about the Services on a third-party website or open emails or links in emails from us. We, our business partners, or our service providers may use cookies or similar technologies to collect information. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to the Services. Please review your web browser "Help" file to learn the proper way to modify your cookie settings. Please note that if you delete or choose not to accept cookies from the Service, you may not be able to utilize the features of the Services to their fullest potential. We also use cookies and similar technologies hosted by third parties on the Services. We may receive reports based on the use of these technologies by such companies on an individual and aggregated basis.
- Information Received from Third Parties. In the course of providing the Services, we may also collect additional Business Information or User Information from third parties, including, but not limited to: financial institutions, referral partners, identity verification services, card networks, vendors, mailing list providers, consumer reporting agencies, commercial credit bureaus and associations, fraud prevention agencies, and publicly available sources. We may combine this information with information we already have about you.
- Information Provided by You. We collect any information you provide when you use the Services. For example, we collect User Information and Business Information from you when you (i) register an account on the Sites, (ii) fill out forms or fields on the Sites, or (iii) complete an application for a product or service available through the Services. We also collect any information you may submit through communications with us by email, mail, text, telephone, facsimile or other means.
Use of Information
- Service-Related Usage. We use the information we collect about and from you, both in a personally-identifiable form and in an aggregated or anonymized form, for a number of purposes, including for providing, supporting, promoting, and improving the Services. Such uses include:
- Enabling you to obtain products and services through the Services;
- Facilitating marketing, processing, servicing, and collections activities;
- Providing customer support;
- Understanding, customizing, and enhancing your experience;
- Providing targeted marketing and advertising;
- Determining your eligibility for the Services;
- erifying your identity, conducting appropriate diligence, and keeping your information current;
- Creating an account connection between your account and a third-party account or platform;
- Sending notifications and information regarding the Services;
- Measuring and improving the performance and functionality of the Sites;
- Managing and protecting our information technology infrastructure;
- Administering and managing the security of the Sites;
- Developing new products and services;
- Compiling, using, researching, analyzing, and generating data analytics reports to better understand our Customers and to improve the Services; and
- Using the location of your mobile device for location-based Services that you may request, such as to provide nearby ATM locations and/or for fraud prevention purposes.
- Communications. We may communicate with you using the information collected (i) for customer service, (ii) to provide you with updates or information relating to the Services, or (iii) to conduct surveys and collect feedback about the Services.
- Marketing and Advertising. We may use the information we collect for marketing and advertising purposes. These purposes may include communicating with you about our products and services, or products and services offered by or through our business partners (including our bank partners), including but not limited to providing you with promotional materials that may be useful, relevant, valuable, or otherwise of interest to you, and inviting you to participate in events or surveys. To learn more about your choices regarding marketing communications, please see the Your Choices section below. To learn more about your choices regarding interest-based advertising and cross-device tracking, please see the Third-Party Information Collection section below.
- Compliance with Law and Our Own Obligations. We may use the information we collect, to the extent permitted or required under applicable laws to the extent permitted or required under applicable laws (i) to enforce our Terms of Service or other legal rights, including intellectual property infringement, (ii) to detect and protect against potentially prohibited or illegal activities, including fraud and unauthorized access, (iii) in response to lawful requests for information or legal process, (iv) to establish, exercise, or defend a legal claim, and (v) to comply with our contractual obligations, our policies, industry standards, and applicable laws.
- Other Purposes. We may use the information we collect for other purposes for which we provide notice to you at the time of collection or for which we obtain your consent.
- Aggregate Data. We may process your information in an anonymized or aggregated form for purposes other than described above.
- Service-Related Usage. We use the information we collect about and from you, both in a personally-identifiable form and in an aggregated or anonymized form, for a number of purposes, including for providing, supporting, promoting, and improving the Services. Such uses include:
Information Sharing
We may share Business Information, User Information, and General Information as follows:
- Affiliates and Subsidiaries. We may share your information with and amongst our affiliates, including the American Express family of companies, and subsidiaries for any of the purposes described in the Use of Information section above.
- Service Providers. We may engage service providers to assist us in providing Services. These service providers may provide services such as fraud prevention, cloud computing, cybersecurity, identity verification, credit checks, collections, and payment processing. We may share any information we receive with such parties as is necessary for the provision of the Services.
- As Required By Law and Similar Disclosures. We may disclose your information if we believe doing so is required or appropriate to (i) comply with applicable laws, regulations, and card association rules, (ii) comply with regulatory investigations, enforcement requests, and legal process, such as subpoenas, court orders, and bankruptcy notices, (iii) respond to your requests or resolve disputes or inquiries, (iv) detect, prevent, or otherwise address fraud, confidentiality, security or technical issues, (v) respond to regulatory authorities jurisdiction over us for examinations, compliance, or other purposes, (vi) respond to requests from bank partners or third-party auditors, and (vii) protect your, our, or others’ rights, property, or safety, or the security or integrity of our Services.
- Business Partners. We may disclose information about you with business partners, including our bank partners, in connection with jointly offered products and services, as well as products and services offered by these partners and made available through the Services or which we believe may be of interest to you or your business. These business partners are generally subject to contractual obligations entered into with us restricting how they may use this information.
- Corporate Changes and Transactions. We may disclose your information in connection with (including, without limitation, during the negotiation or due diligence process of) a corporate merger, consolidation, or restructuring; the sale or transfer of some or all of our stock and/or assets; equity or debt financings, acquisition, divestiture, or dissolution of all or a portion of our business; or other corporate change.
- Aggregated or Anonymized Information. We may share, license or distribute information in anonymized or aggregated form so that the information does not identify a specific user, without restriction, including, but not limited to, for producing data analytics and reports for business partners or other third parties.
- Consent. We may disclose your information to any third party with your consent. For example, we may disclose information at your direction, as described at the time you agree to share, or when you authorize a third-party application or website to access your information.
- Other Purpose. To fulfill the purpose for which you provide such information to us or any other purpose disclosed by us when you provide the information to us.
Data Retention
We will retain your information for (i) as long as reasonably necessary to provide you Services, (ii) as long as reasonably useful for commercial purposes, or (iii) as long as necessary to comply with applicable laws and internal policies regarding recordkeeping, reporting, audits, and litigation holds. If you wish to request that we no longer use your information to provide you Services, you may contact us at the address or phone number at the bottom of this Privacy Policy. We will nonetheless retain your information to the extent that we deem necessary to comply with our legal or contractual obligations, resolve disputes, as needed to provide you Services, or for other business purposes.
Security
The security of Personal Information is important to us. We take reasonable measures, including administrative, technical, and physical safeguards to protect your information from loss, misuse, unauthorized access, disclosure, alteration, and destruction. These security measures include firewalls, data encryption, physical access controls to our data centers, and information access authorization controls. Your information is securely sent to us with at least 128 bit-encryption over the Transport Layer Security (TLS) protocol. This creates an encrypted connection between your browser and us so that any sensitive information you provide can be securely transmitted.
If you link your bank account information as a part of applying for or receiving the Services, we will have read-only access to such information. We do not have access to change, edit, or modify your bank account information. We also cannot see your banking credentials (i.e., username and passwords). You are responsible for securing and maintaining the privacy of your banking credentials and account information. We are not responsible for protecting any information you share with a third-party in relation to an account connection that you have authorized.
Children
This Site and products or services available through this Site are not intended for children under the age of 18. We do not knowingly solicit or market online to children under the age of 18. If we knowingly receive a child's personally identifiable information, we will immediately delete it from our system. Contact us at the address or phone number in the Contact Us section of this Privacy Policy if you believe that we have mistakenly or unintentionally collected information from a child under the age of 18.
Opting Out
At all times, you may choose whether or not to provide or disclose Personal Information. If you choose not to provide mandatory Personal Information, you may still visit parts of the Services but you may be unable to access certain options, programs, offers, and services that involve our interaction with you.
You may choose not to receive future promotional, advertising, or other Services-related emails from us by selecting an unsubscribe link at the bottom of such emails that you receive from us. Please note that even if you opt out of receiving the foregoing emails, we may still send you a response to any "Contact Us" request as well as administrative emails (for example, in connection with a password reset request, an email verification, or a payment-related email) that are necessary to facilitate your use of the Services.
Changes to this Policy
From time to time, we reserve the right to change this Privacy Policy. We may use personal information for new, unanticipated uses not previously disclosed in our privacy notice. If our information practices change at some time in the future, we will post the policy changes to our Web site to notify you of these changes and we will use for these new purposes only data collected from the time of the policy change forward. If you are concerned about how your information is used, you should check back at our Web site periodically.