Amaryllis Privacy Policy

Last updated: April 16, 2020

Amaryllis values your privacy. This privacy policy (“Policy”) describes how we, Amaryllis (Adir) Payment Solutions Ltd. (“Amaryllis”, “we”, “us”, “our”) handle Personal Data we receive or collect in relation to access and use of our website, www.amaryllispay.com (“Website”) and our Payment Facilitation Platform (“Platform”), and other products and services we offer, and from our business contacts (such as representatives of customers and suppliers) and other third parties who provide us with Personal Data.

Personal Data” as used in this Policy means information relating to an identified or identifiable natural person.

We may change this Policy from time to time in order to keep you apprised of our data collection and use practices. We encourage you to regularly visit and review this Policy to stay informed of such practices.

Table of Contents
1. What information we collect and how we use it
A. Information you Provide
1.1 Platform Account
1.2 Support Requests
1.3 Newsletter or Marketing Sign Up
1.4 Business Contact Information
1.5 Contact Forms on our Website
1.6 Demo Request
1.7 AmaryllisBot

B. Information We Automatically Collect
1.8 Cookies
1.9 Usage Data and Analytics Services

2. How (and with whom) we Share your Personal Data
2.1 MarketScale
2.2 HostGator
2.3 Law Enforcement or Other Government Entities
2.4 With your Consent
2.5 Disputes
2.6 Mergers and Acquisitions
2.7 Affiliates

3.   Your GDPR Rights
4.  Transfers of Personal Data to other countries outside the EU or EEA
5.  California Do Not Track Notice
6.  Personal Data of Children
7.  Amaryllis as a Processor
8.  Our Contact Information

1. WHAT INFORMATION WE COLLECT AND HOW WE USE IT

This section describes the ways in which we collect and receive information, what Personal Data is collected, the purpose for which it is collected, the legal basis for processing the data, to whom it is transferred, and the period for which we retain it. This description may be supplemented by additional information in other parts of this Policy. For example, you may find for more information on third parties to whom your information may be transferred in Section ‎2 below.

A. Information You Provide

1.1 Platform Account
When we create an account for you to access and use our Platform (“Account”), we will request certain Personal Data from you, including your name, email address, and phone number. We will use such information to set up your account and to provide you with support in connection with your use and access to the platform. The legal basis for our collection and use of information is your consent, as well as our legitimate interest in fulfilling our contract with the company you represent, our customer (or fulfilling its request for trial access to the Platform). This information is transferred to and stored with Azure, a cloud computing and hosting service we used to operate and host our Platform. Azure is provided by Microsoft Corporation. We retain the Personal Data you provide in connection with such requests in accordance with our agreement with the company you represent.

1.2 Support Requests
If you contact us by email or phone to request support in connection with your use of the Platform or your Account, or if we contact you in connection with any problems in connection with your Account or in response to your support request, we may ask for your full name, phone number, and email address. We use this information to verify your identity, process your request, and contact you regarding your request (or to answer your question) or the issue associated with your Account. We may also store the details of your request in order to present this information to you as part of your Account history, in order to display and contact you with information that is relevant to you in the future, and to assist you with further requests for support. We will also use the details of your request (including information about you) for our own review of our customer support and communication practices. The legal basis for our collection and use of information is the performance of our contract with you and our legitimate interest. We transfer this information to and store it with Help Scout, a help desk software service provided by HelpScout PBC, which we use to manage and respond to support requests (“Help Scout”). We also transfer such information to MarketScale (for more information about MarketScale please see Section ‎2.1 below), in order to provide you with information and offers that are relevant to you or the entity you represent.

1.3 Newsletter or Marketing Sign Up.

If you provide us with your email address to sign up to receive promotions, newsletters or other commercial or marketing communications, or information regarding our products and services, from us on our Website or otherwise (or if you check a box or otherwise agree or request to receive these communications), we will use this information and other Personal Data you provide to send you such communications and contact you in order to explore a possible business relationship. The legal basis for our collection and use of information is your consent. We transfer your email address and other Personal Data you provide to our service provider MarketScale. You may request that we stop sending you such communications at any time, including by clicking the “unsubscribe” link at the bottom of the e-mails we send.1.3 Newsletter or Marketing Sign Up.

1.4 Business Contact Information

When we receive your information in a business context, such as if you have provided us with your business card (including electronically), have sent us an e-mail inquiring about our products or services and you list your contact information (for example as part of your e-mail signature), or if have otherwise provided us with your business contact information, such as in a meeting or at an event hosted or attended by us, or if you have entered into an agreement with us to receive or provide products or services, we save your name, email address, phone number, company and a description of your business category  (“Business Contact Information”). We will use your Business Contact Information to contact you in connection with our business or potential business relationship.

Where we have a contract with you (whether you are or represent a customer or supplier of ours), the legal basis for our collection and use of such information is the performance of our obligations and exercising our rights under our contract with you. Otherwise, the legal basis for our collection and use of your Business Contact Information is our legitimate interest.

We transfer Business Contact Information we collect to our service provider MarketScale. We retain Business Contact Information in accordance with our agreement with the company you represent.

1.5 Contact Forms On Our Website
If you contact us or submit information on our Website, such as by filling out and submitting the “General Inquiry”, “Schedule a Call” or “Contact Bruce Shirey” forms, you will be asked to provide us your name, email address, phone number, company and a business category regarding the nature of your inquiry. We will use the information you provide in order to respond to your request or inquiry. If your request is for support, we will use the information as described in Section ‎1.1 above. The legal basis for our receipt and use of such information is your consent. Such information is transferred to and stored with MarketScale. If, after contacting us, you or the entity you represent, open an account or acquire a license to use our Platform or otherwise purchase our products and services, this data will be treated as “Business Contact Information” as described above.

1.6 Demo Request
If you sign up to or schedule a “Demo Request” on our Website to experience our Platform, you will be moved to a form when you will be asked to provide your name, email address, phone number, company, and a business category. We will use such information to contact you regarding our products and services, schedule a demonstration, and provide you with information relevant to you. The legal basis for our collection and use of information is your consent. Such information is transferred to and stored with a web hosting service provided by HostGator (for more information on HostGator please see Section ‎2.2 below), as well as MarketScale. We retain the Personal Data you provide in connection with such requests for a period of twenty-six (26) months after unless you or the entity you represent becomes a customer of ours. In such a case, such information will be linked with your Platform and account and we will use it to provide you with the Platform and support and will be used as described in Section ‎1.6 (Business Contact Information) below.

1.7 Amaryllis Bot
If you click to open our “AmaryllisBot” on our Website, a new window will appear where you can ask questions, learn more about our Platform and other products and services. While chatting with our “bot” you will be asked to provide your name, email address, phone number, company, and a business category. If you have requested to receive a demonstration or to receive further information about our products or services, we will use this information to contact you in order to fulfill your request. The legal basis for our collection and use of information is your consent. Such information is transferred to and stored with ROKO Labs LLC. (“Roko”), which provides us with a chat-bot service we use to operate AmaryllisBot, and HostGator, and MarketScale.

B.  Information We Automatically Collect

1.8 Cookies

We use “cookies” to track the activity on our Website, Platform, and landing pages you may arrive at after clicking on an advertisement or other
link we send or provide. Cookies are small text files sent to your computer and then sent 
back by your Web browser to a website or other online service to retrieve the information in the cookie (for instance, whether you visited a website previously, or have already logged into an online account). “Session” cookies are temporary cookie files that last until you close your browser when they are deleted. “Persistent” cookies remain on your device until you or your browser delete them, or for the period set in the specific cookie. We use cookies to analyze the performance of our advertisements, determine whether payment is owed to our partners, and understand the interests of our customers and potential customers. This information is used to customize your user experience, and improve our Website, improve our marketing efforts and our products and services. Information we collect through the use of such cookies on our Platform is linked with your Account. You may delete cookies or block cookies from your device, by changing the preferences in your browser. Doing so, however, may impair the functionality of the Services in whole or in part.

1.9 Usage Data and Analytics Services
We collect and analyze information about how you use and access our Website and the Platform using services and tools provided by third-parties as further described below (“Analytics Services”). Generally, Analytics Services collect information such as information using technologies like cookies and other tracking technologies. The legal basis for our collection of such data is our legitimate interest in understanding our Website and Platform are used and using that information to improve our products and services.

A. Google Analytics
Google Analytics, provided by Google LLC (“Google”), collects information such as when and how often users visit our Website, what pages or parts of the Website (including the AmaryllisBot) they visit and access, the visitor’s operating system (OS) and web browser type, Flash version, JavaScript support, the visitor’s device screen resolution, and screen color processing ability, what other websites or applications they used prior to accessing our Website, the visitor’s network location, and their IP addresses. We use the information we receive from Google Analytics to maintain and improve our Website and Platform. We do not combine the information collected through the use of Google Analytics with other Personal Data we maintain, however, Google combines this information with other information it collects about you if you have consented to “Ads Personalization” as part of “Google Signals”. Google’s ability to use and share information collected by Google Analytics about your visits to our Services is governed by the Google Analytics Terms of Service, available at http://www.google.com/analytics/terms/us.html/, and the Google Privacy Policy, available at http://www.google.com/policies/privacy/. You may learn more about how Google collects and processes data specifically in connection with Google Analytics at http://www.google.com/policies/privacy/partners/. You may prevent your data from being used by Google Analytics by downloading and installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout/. We retain Personal Data collected through Google Analytics for a period of 26 months.

B. Hotjar
We use Hotjar in order to better understand our users’ needs and to optimize our services and Website. Hotjar collects and provides information about what users and visitors do on our Website, for example, your IP address (captured and stored in anonymized form), which pages you visit, how much time you spend on a page, which links you click, your device screen size, type, and unique device identifiers, browser information, geographic location (country only), and preferred language. Hotjar uses cookies and other technologies to collect this data. Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor Amaryllis match this data with other data relating to an identified or identifiable individual. Data collected by Hotjar is retained by Hotjar for a maximum of 365 days. We retain such data separately for a period of 26 months. For further information about Hot Jar details, please see Hotjar’s privacy policy by clicking on this link. https://www.hotjar.com/legal/policies/privacy .

You may be able to opt-out from having Hotjar collect your information when visiting a Hotjar Enabled Site at any time by visiting Hotjar’s Opt-out page and clicking ‘Disable Hotjar’ or enabling Do Not Track (DNT) in your browser. For more information about opting-out of data collection by Hotjar, please visit https://www.hotjar.com/legal/compliance/opt-out/.

C. Lead Forensics 
Lead Forensics is a service provided by Lead Forensics Limited. Lead Forensics identifies our Website visitor’s IP addresses and matches them with the IP addresses of businesses in their database. Lead Forensics provides us with the name of the business that visited the Website and other contact information for representatives of such businesses, including their first name, last name, email address, and LinkedIn profile. We use this information to understand which entities are interested in our products and services and to identify and contact potential customers of our products and services. The legal basis for our collection, receipt, and use of such data is our legitimate interest. We retain this information for a period of 26 months. For more information about Lead Forensics data services for its customers like Amaryllis, please visit https://www.leadforensics.com/software-data-compliance.

2. How (and with whom) May We Share your Personal Data
In addition to any methods or third parties with whom we may share your Personal Data described above, we share Personal Data in the following manner

2.1   MarketScale
We share Personal Data with MarketScale, LLC. (“MarketScale”), a service provider that assists us in managing our website, social media accounts, analyzing the information we collect, and provides us with marketing services.

2.2   HostGator
We host our Website with Hostgator.com, LLC (“HostGator”), a popular website hosting service. Information we collect through our Website are transferred to and in some cases, stored with HostGator.

2.3 Law Enforcement or Other Government Entities.
Where required by law or government or court order, we will disclose Personal Data relating to you, but only to the extent, we are required to do so by law.

2.4 With Your Consent.
|In the event that you have requested or have consented to the transfer of Personal Data relating to you (such as by checking a box to signify your agreement), we will transfer Personal Data to the relevant third party.2.4 With your Consent.2.4 With your\

2.5 Disputes.
In case of any dispute with or concerning you, we may disclose Personal Data relating to you with our legal counsel, professional advisors and service providers, the relevant court or other tribunal and other third parties as needed in order to resolve the dispute, defend ourselves against any claims, or enforce our rights.

2.6 Mergers and Acquisitions
In the event that we, or a part of our business, are sold to a third party, or if we are merged with another entity, or in the event of bankruptcy or a similar event, we will transfer information about the relevant portions of our business as well as relevant customers and users, to the purchaser or the entity with which we are merged.

2.7 Affiliates
We share Personal Data with our affiliates, such as our U.S. subsidiary, Amaryllis, Inc., who assist us in processing Personal Data and providing our products and services.

3. Your GDPR Rights
Subject to certain exceptions and exclusions, the following rights apply to individuals who are located in an EU member state or otherwise protected by the EU General Data Protection Regulation (“GDPR”), as further described below. If you are such a person, then:

  • Right of Access. You may request that we confirm to you whether or not we store Personal Data about you and to receive a copy of the Personal Data we maintain about you and information about (a) the purposes of the processing of the Personal Data; (b) the categories of Personal Data being processed; (c) the names of the recipients or the categories of recipients to whom the Personal Data have been or will be disclosed, in particular recipients in third countries or international organizations; (d) if possible, the period we believe we will store the Personal Data, or the criteria we use to determine that period; (e) the sources of the Personal Data, if not collected from you; and (f) whether we use automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
  • Right to Rectify. You may request that we correct any Personal Data about you that we maintain that is incorrect. Depending on the purpose for which the data is used, you may also request to complete incomplete Personal Data we maintain.
  • Right to Erasure (“Right to be Forgotten”). You may request that we erase or suppress Personal Data that relates to you in the following cases: the data is no longer needed by us; the data was collected and is used on the basis of your consent and you withdraw that consent; when you have a right to object to our use of the data (as described below under, “Right to Object”); we are not lawfully processing the data, or we are otherwise required by law to delete the data. However, there may be circumstances in which we may retain your data or we may refuse your request, for example, when we review the data to defend ourselves or make legal claims or exercise our own rights. In addition, this right may not apply to the display or access of your Personal Data outside of the European Union.
  • Right to Restrict Processing. You may request that we restrict our use or processing of your Personal Data if: you claim the Personal Data is inaccurate, during the time we investigate your claim; our processing of the Personal Data was unlawful; we no longer require the Personal Data; we processed the Personal Data for our legitimate interests and you object to this use (as you are permitted to do under Article 21(1) of the GDPR), during the time that we investigate whether our legitimate interests override your request. However, there may be circumstances in which we are legally entitled to refuse your request
  • Right to Data Portability. You may request that we provide you with your Personal Data that we process based on your consent or to fulfill a contract with you or that we process using automated means, in a structured, commonly used and machine-readable format, and to transfer your Personal Data to another entity or have us transfer it directly to such entity.
  • Right to Object. You may, based on reasons specifically relating to you, object to our processing of your Personal Data, when: (i) the data is used for our legitimate interests and our interests in processing the data does not override your interests, rights, and freedoms and we do not require the use of the data for the establishment, exercise or defense of our legal claims or rights; and (ii) we use the data for direct marketing purposes or profiling for direct marketing purposes.
  • Right to Object to Automated Decision Making. You may request that you not to be subject to a decision based solely on automated processing, including profiling, when the decision produces legal effects concerning you or significantly affects you.
  • Right to Withdraw Consent. Where we process Personal Data relating to you based on your consent (such as by clicking a checkbox adjacent to a statement of the consent), you may withdraw your consent and request that we cease using your Personal Data for the purpose for which you have your consent, or altogether, depending on the situation.
  • Right to Make a Complaint. You may file a complaint regarding our practices with the data protection authority in your place of habitual residence, place of work, or the place of the alleged infringement. For a list of data protection authorities in the European Economic Area, please see here: https://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.

You can exercise your rights that apply to us by contacting us by email at privacy@amaryllispay.com

We may be permitted by law (including the GDPR and local national laws) to refuse or limit the extent to which we comply with your request. We may also require additional information in order to comply with your request, including information needed to locate the information requested or to verify your identity or the legality of your request. To the extent permitted by applicable law, we may charge an appropriate fee to comply with your request.

Furthermore, the above rights apply in respect of Personal Data we have collected and maintain about such individuals on our own behalf (i.e., as the “controller”), for information about how you may exercise such rights (and whether they may be exercised) when we process and maintain such information on behalf of a third party (i.e., as a “processor”), please see Section ‎7 (Amaryllis as Processor) below.

4. Transfers of Personal Data to other countries outside the EU or EEA
We transfer Personal Data we receive in or from the European Union (and other locations) to the following countries outside the EU and European Economic Area:

  • Israel, where we are located. As of the date of this Policy, the European Commission has determined that the State of Israel adequately protects Personal Data. (A list of countries which the European Commission has determined to adequately protect Personal Date can be found, as of the date of this Policy, here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en).
  • The United States, where our US subsidiary, Amaryllis, Inc., is located as well as where Azure, MarketScale, HelpScout, and HostGator store information we provide. The legal basis for the transfer of data to each of these entities is agreements with them which include the obligations with respect to the processing of Personal Data in the form approved by the EU Commission (“EU Model Clauses”) or their registration as complying with the US-EU Privacy Shield Framework for the protection of Personal Data.
  • The United Kingdom, where Lead Forensics is located and stores data it receives. The legal basis for transferring data to Lead Forensics is the EU Model Clauses which we have entered into with Lead Forensics.
  • Google stores the information collected through Google Analytics in various locations around the world. Google LLC certifies that it complies with the US-EU Privacy Shield Framework for the protection of Personal Data.

If you are an individual protected by the GDPR, you may contact us in order to obtain additional information regarding the basis for the transfer of Personal Data relating to you to countries outside the European Economic Area. Please note that information or copies of documents we may provide to you in connection with such requests may be limited or redacted in order to protect the rights of third parties or to comply with contractual obligations we may have (such as obligations of confidentiality.

5. California Do Not Track Notice.
We do not track individuals’ online activities over time and across third-party web sites or online services (though we do receive information about the webpage you visited prior to accessing our Website, the Platform, or advertisement landing pages). Other than Google, which uses data collected through Google Analytics as described here, we do not permit third parties to track individuals’ online activities on our Website or Platform over time and across third-party websites or online services, unless it is part of a service provided to us as described above. We do not respond to Web browser “do not track” signals or similar mechanisms.

6. Personal Data of Children
Our Website and Platform are not intended for, and we do not knowingly collect Personal Data from persons under the age of eighteen (18). If you believe that a person under the age of eighteen (18) has provided us with Personal Data, or if we have received the Personal Data of such person, please contact us at privacy@Amaryllispay.com.

7. Amaryllis as a Processor
This Policy applies to our collection, receipt, and handling of Personal Data on our own behalf and for our own purposes, in the capacity of a “controller” or “data controller” of Personal Data (“Controller”). It does not apply to our receipt of Personal Data from, and the processing of such information on behalf of, a third party, such as our customers, which we do in the capacity of a “processor” of Personal Data (“Processor”).

When we process Personal Data as a Processor, we generally do not have the authority to fulfill requests or provide notices in relation to such Personal Data. Such actions and obligations are generally within the authority of the third party on whose behalf we process the data, who is the Controller. Our handling of such information is governed by our contract with that Controller. This is the case, for example, when you make a payment using the payment processing of our customers. If you would like to make a request or receive information regarding your Personal Data in such a case, you must contact our customer or the applicable Controller which collected the Personal Data. We encourage you to read the specific privacy policy or other notices provided by the entity that collected the Personal Data.

8. Our Contact Information
If you have questions about this notice, or if you want to exercise your rights as described in this Notice, you may contact us at any time as follows:

Amaryllis
515 N Flagler Drive, Suite P-300
West Palm Beach, FL 33401
USA
Email: privacy@amaryllispay.com

In order to honor any access or deletion request, we will require you to provide enough information for us to verify your identity.  For example, we may ask you for information associated with your account, including your contact information or other identifying information.  If you designate an authorized agent to make a rights request on your behalf, we may require proper proof of that authorization as well as direct verification of your identity from you.