Bamboo | Privacy Policy

Last Updated June 7, 2021

This Privacy Policy (the “Privacy Policy”) explains how Bamboo Rewards LLC, and any of its

websites, mobile applications, and platforms, (“Bamboo”, “we”, “our” or “us”) collects, uses,

shares, and protects the personal information of persons who interact with our website,

www.bamboorewards.com (“Site”), mobile application (“App”), or platform (“Platform”) (the

Site, App, and Platform shall collectively be the “Service”), and the transactional information of

persons who make purchases from merchants that have subscribed to our Platform (“Rewards

Providers”).

Even if you do not sign up as a customer of Bamboo, we may still collect, process, use, store, and

share your transactional data in accordance with this Privacy Policy. By using the Service, you

agree to the policies and practices described in this Privacy Policy and the Terms of Use. If you

do not agree with our policies and practices, you may choose not to use the Service.

Bamboo may offer certain products and/or services for a fee or for evaluation purposes. In such

situations, additional terms or requirements may apply to our collection and use of personal

information, and if there is any conflict between such additional terms and this Privacy Policy, the

additional terms will control.

1. INFORMATION WE COLLECT

When you interact with us through the Service, we may collect personal information from and

about you. You may interact with us directly, such as when you sign up for a Bamboo account

through the Site or App, as well as indirectly, such as when you sign up for a Bamboo account

through our Platform operated by one of our Rewards Providers. When you make a purchase or

otherwise interact with one of our Rewards Providers, we may also collect transactional

information from you.

2. INFORMATION YOU PROVIDE

We collect personal information from you when you voluntarily provide it, such as when you

us with inquiries or respond to one of our surveys. For example, we may collect your name, phone

number, email address, birthdate, and the messages you send or receive through the Service.

3. INFORMATION AUTOMATICALLY COLLECTED

We collect transactional information automatically when you transact with one of our Rewards

Providers. Transactional information may include details from your receipt (e.g., subtotal, total,

and tip amount), payment card used, name associated with the payment card, billing address, and

order ticket data (e.g., items purchased and their purchase price) from point of sale printers and

devices (“Terminals”) used by Rewards Providers.

When you interact with the Service, we also may use various technologies, including cookies, web

beacons, pixel tags, log files, local shared objects (Flash cookies), HTML5 cookies, or other

tracking technologies, to automatically collect certain general user data and information, including

aggregate measures of the Service’s use and aggregate technical and other data about your use of

the Service that does not personally identify you. For example, we may track the total number of

visitors or users of the Service, the number of visitors to each page of our Site or App, the domain

names of our visitors’ Internet service providers, and how end user customers use and interact with

the Service.

4. INFORMATION COLLECTED ABOUT REWARDS PROVIDERS AND THEIR

PERSONNEL

We may collect personal data directly from Rewards Providers (including prospective customers)

about themselves and their personnel. We may collect information from these parties in a variety

of contexts, such as when completing one of our online forms, making an application for our

Service, interacting with us on social media, or corresponding with us. The types of information

we obtain in these contexts include:

A. Contact information of the Rewards Providers and their personnel who interact with

us, such as name, job title, address, telephone number, and email address

B. Profile information, such as username and password that Rewards Providers may

establish on the Service, along with any other information that Rewards Providers enter

into their account profile

C. Feedback and correspondence, such as information Rewards Providers provide when

they request information from us, receive customer support, or otherwise correspond

with us, including by interacting with our Service

D. Financial account information, such as payment card or bank account details, as well

as their billing address

E. Information about Rewards Providers, such as their name, location where a transaction

occurred, and information about transactions processed by the Rewards Providers,

including transaction volume, velocity, amounts, types of goods or services sold, and

chargeback ratios

F. Information related to Rewards Providers’ use of the Service, such as account

information, spending thresholds, spending activity and patterns, and information about

the transactions we process

G. Information about Rewards Providers’ personnel and their interaction with the Service.

H. Marketing information, such as Rewards Providers’ preferences for receiving

marketing communications, merchant surveys, and details about how they engage with

our marketing communications

5. TRACKING OPTIONS AND CALIFORNIA DO NOT TRACK DISCLOSURES

Our cookies and other tracking technologies help provide additional functionality to the Service

and help us analyze Service usage more accurately. For instance, our Service may set a cookie on

your browser that saves your login credentials. You can set your browser or operating system

settings to limit certain tracking or to decline cookies, but by doing so, you may not be able to use

certain Service features. Please refer to your web browser’s or operating system’s website or

“Help” section for more information on how to delete and/or disable your browser or operating

system from receiving cookies or controlling your tracking preferences.

To learn more about the use of cookies or other technologies to deliver more relevant advertising

and to know your choices with respect to collection and use of the data by these third-party tools,

you may visit the Network Advertising Initiative’s (NAI) opt-out page at

http://www.networkadvertising.org/choices.

To opt-out of the use of your mobile device ID for targeted advertising, please see

http://www.aboutads.info/appchoices. On your mobile device, you may also adjust your privacy

and advertising settings to control whether you want to receive more relevant advertising.

Our system may not respond to Do Not Track requests or headers from some or all browsers.

6. HOW INFORMATION IS USED

Bamboo uses the personal information you provide in a manner that is consistent with this Privacy

Policy. If you provide information for a certain reason, we may use that information in connection

with the reason for which it was provided. For instance, if you contact us by email, we will use the

information you provide to answer your question or resolve your problem. Also, if you provide

information to obtain access to the Service, we will use your information to provide you with

access to the Service and to monitor your use of the Service.

Bamboo uses transactional data to facilitate your transactions with Rewards Providers. If you are

a Bamboo accountholder, transactional data will be used by Rewards Providers to automatically

award you rewards points and/or to provide you with other offers that may be of interest to you.

We may also remove your personal information from transactional data and aggregate it with other

anonymous data, pool and/or combine aggregated data with other information, and share

aggregated data with Rewards Providers, affiliates, service providers, agents and business partners.

Bamboo may also disclose de-identified, aggregated data to describe our services to current and

prospective business partners, and to other third parties for other lawful purposes.

Bamboo and its subsidiaries and affiliates (the “Related Companies”) may use data collected

automatically through your use of the Service to analyze, improve, support and operate the Service,

to help us improve the content and functionality of the Service, to better understand our users, for

distribution in general benchmarking data and industry and/or other usage and demographic

reports, and other business purposes.

Bamboo may also use the personal information collected from and about you through the Service

to improve the Service. Bamboo and its Related Companies may use this information to contact

you in the future to tell you about services we believe will be of interest to you. Bamboo may also

use your information in other ways, with your consent or as disclosed to you at the time of

collection.

By voluntarily providing us with personal information or by utilizing the Service, you are

consenting to our use of your personal information in accordance with this Privacy Policy. You

acknowledge and agree that such personal information may be transferred from your current

location to the offices and servers of Bamboo.

By making a purchase at a Rewards Provider that uses Bamboo Terminals, your transactional

information will be used in accordance with this Privacy Policy. Transactional data of Bamboo

accountholders may be used to provide you with Bamboo rewards points and other offers from our

Rewards Providers. Transactional data of non-accountholders will be collected, processed, used,

stored and shared to facilitate the transaction and to fulfil any other lawful purpose.

We will retain your personal data for the duration of your involvement/engagement with us and

for as long as reasonably necessary afterwards based on the need to satisfy a legal, regulatory,

accounting, or reporting requirement.

7. INFORMATION DISCLOSURE

Bamboo is not in the business of selling your personal information. We consider personal

information to be a vital part of our relationship with you.

There are, however, certain circumstances in which we may share your information for a business

or commercial purpose with certain service providers or partners, or where you may share your

information with third parties, as set forth below:

A. Rewards Providers: To the extent you have obtained or redeemed a reward offered by a

Rewards Provider, added a Rewards Provider as a membership to your account, made a

purchase at or through a Rewards Provider, or otherwise participated in any other activity

sponsored or offered on behalf of the Rewards Provider, we may provide your personal

and transactional information to such Rewards Providers (a) for the Rewards Provider to

redeem and validate your reward, send you customized offers, troubleshoot redemption,

combat fraud and otherwise communicate with you; (b) as part of legal proceedings

affecting Bamboo or the Rewards Provider; or (c) to send you marketing information or

otherwise facilitate a direct relationship between the Rewards Provider and you.

B. Business Transfers: As we develop our business, we might sell or buy businesses or assets.

In the event of a corporate sale, merger, reorganization, dissolution or similar event, your

information may be part of the transferred assets. We will use reasonable efforts to try to

require that the transferee use personal information collected through the Service or

through Bamboo Terminals in a manner that is consistent with this Privacy Policy.

C. Related Companies: We may also share your personal information with our Related

Companies but will only do so in a manner that is consistent with this Privacy Policy.

D. Agents, Consultants, and Service Providers: Bamboo, like many businesses, sometimes

hires agents or service providers to perform certain business-related functions. Examples

of such functions include maintaining databases, sending emails and SMS messages,

offering and developing certain features of the Service, and performing maintenance and

security. When we employ an agent or service provider to perform a function of this nature,

we only provide them with the information that they need to perform their specific function.

E. Legal Requirements: Bamboo may disclose your information if required to do so by law or

in the good faith belief that such action is necessary to (i) comply with a legal obligation

or assist government enforcement agencies, (ii) protect and defend the rights or property

of Bamboo, Rewards Providers, or our users, (iii) act in urgent circumstances to protect the

personal safety of users of the Service or the public, (iv) protect against legal liability; (v)

protect Rewards Providers from fraudulent, abusive, or unlawful uses; or (vi) protect the

security or integrity of the Service.

F. Aggregate or Anonymous Non-Personal Information: We may also share aggregate,

anonymous, or de-identified non-personal information with third parties for their or our

marketing or analytics uses, and as described in the “HOW INFORMATION IS USED”

section above.

8. YOUR CHOICES AND OPT-OUTS

We do not share your personal information with other third-party organizations for their own

commercial uses except as described in this Privacy Policy, or with your express consent.

The Service will automatically send you SMS messages with updates and other information. You

may stop receiving SMS messages by replying STOP in response to any received SMS message.

You may also opt-out of receiving SMS messages on the Bamboo website. If you opt-out of

receiving SMS messages, you may not be able to use certain Service. You may opt-in to receive

email promotions from us. If after you opt-in to receive emails and do not want to receive

marketing emails from us, click the unsubscribe link in the footer of such emails.

9. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have the right to ask to make an access and deletion request.

Bamboo will not discriminate against you for exercising these rights, but we may offer financial

incentives to those who opt-in to our collection of personal information.

A. Access Request. You may make up to two requests per year for information as to:

i. The categories of personal information that we’ve collected about you, or

shared with a service provider or partner for a business or commercial

purpose;

ii. The sources from which we collected such information;

iii. The business or commercial purpose for collecting that personal information.

iv. The specific pieces of personal information we have collected about you.

B. Deletion Request. You may request that we delete the Personal Information that we’ve

collected from or about you. If we cannot delete all of your information, we will let you

know the reason why, such as if we need to continue to provide you with loyalty

rewards, or for an internal business or legal reason.

C. We will respond to your request within 45 days unless we need additional time, in

which case we will let you know. Please see the “Access to Information/Contacting

Us” section of this Privacy Policy for instructions on how to make one of these requests.

D. Further to the “Information Disclosure” section, over the last 12 months, Bamboo has

collected and shared for a business or commercial purpose the following categories of

personal information:

i. Identifiers/Contact Information: These include your name, postal and

email address, phone number, and unique identifiers that may identify

your device or browser but not you by name.

ii. Commercial/Transactional Information: Your transaction and usage

history, payment card information, and which Rewards Providers you visit.

iii. Internet/Electronic Activity: Your geolocation information, IP address,

web/app browsing, and search history related to our Service, and

information regarding your interaction(s) with the Service or our

advertising.

10. EXCLUSIONS

This Privacy Policy does not apply to any information other than information collected through

the Service and/or from Bamboo Terminals at Rewards Providers. This Privacy Policy shall not

apply to any unsolicited information you provide to Bamboo through the Service or any other

means. This includes, but is not limited to, information posted to any public areas of the Service,

such as public forums, any ideas for new products or modifications to existing products, and other

unsolicited submissions. All such unsolicited information shall be deemed non-confidential, and

Bamboo shall be free to reproduce, use, disclose, distribute and exploit it without limitation or

attribution.

A. Children: Bamboo does not direct the Service to, nor does it not knowingly collect

personal information from children under the age of 13 If we learn that a child under

the age of 13 has provided personally identifiable information to Bamboo through the

Service, we will endeavor to delete that information from our databases.

B. Links to Other Websites: This Privacy Policy applies only to the Service and to Bamboo

Terminals at Rewards Providers. The Service may contain links to other websites not

operated or controlled by Bamboo (the “Third-Party Sites”). The policies and

procedures we describe here do not apply to the Third-Party Sites. The links do not

imply that Bamboo endorses or has reviewed the Third Party Sites. We suggest

contacting those sites directly for information on their privacy policies.

11. SECURITY

Bamboo takes reasonable steps to protect the personal information provided via the Service from

loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet,

email, mobile or other electronic transmission is ever fully secure or error free, so you should take

special care in deciding what information you provide.

12. CHANGES TO THE PRIVACY POLICY

The Service and our business may change from time to time. As a result, it may be necessary for

Bamboo to make changes to this Privacy Policy. Bamboo reserves the right to update or modify

this Privacy Policy at any time and from time to time without prior notice. If we change this Privacy

Policy in a material way, we will provide appropriate notice to you. Please review this Privacy

Policy periodically, and especially before you provide any information to us. This Privacy Policy

was last updated on the date indicated above. Your continued use of the Service after any changes

or revisions to this Privacy Policy shall indicate your agreement to the terms of such revised

13. ACCESS TO INFORMATION; CONTACTING US

You may request, by contacting us as specified below, that we disclose, update, correct, or delete

certain personal information that we have collected through the Service. We will take reasonable

steps to honor your request in accordance with applicable law. You may also update, correct, or

delete certain information associated with your account by logging into our website

www.bamboorewards.com, and you are responsible for maintaining the accuracy of this

information. To make such a request, please send an email to _______________. Bamboo may

take steps to verify your identity before responding to your request.

Please also feel free to contact us if you have any questions about this Privacy Policy or the

practices described therein. You may contact us at ___________ or by emailing us at

___________________.

info@bamboorewards.com

(833) 968-7847