BAMBU’S PRIVACY POLICY

Last Updated:  October 16, 2023

This Privacy Policy, including the accompanying California Consumer Privacy Act (“CCPA”) Privacy Notice, (collectively, “Privacy Policy”) applies to the Bambu Systems, LLC (hereinafter, “Bambu”, “MyBambu®”, “we”, “our” or “us”) website at https://www.mybambu.com/, any other websites to which this Privacy Policy is posted (collectively, the “Sites”), as well as our Bambu App (as defined below) that provides access the Services (as defined below).

This Privacy Policy describes how we may collect, store, use, share and protect certain personal information about consumers who visit our Sites and users (the “users”, “you” or “your”) of the Bambu App in connection with any Services, content, communications, and product features accessed by the Bambu App. Please note, personal information of our users that we collect in connection with the solicitation and/or provision of our financial Services is subject to our GLBA Privacy Notice. In the event of conflict or inconsistency between this Privacy Policy and our GLBA Privacy Notice, the GLBA Privacy Notice will apply to that personal information.

By using or accessing the Sites or the Bambu App, including after any updates have been made, you agree that you have read and understand this Privacy Policy. If you do not agree with any portion of this Privacy Policy, please do not access our Sites or the Bambu App or provide us with any personal information.

You can find a printable version of this Privacy Policy by clicking here.

Our Collection of Personal Information

We collect personal information you when you (i) visit our Sites or download the Bambu App, (ii) request additional information about our Services or the Bambu App, or (iii) otherwise interact with us, including the following categories and types of personal information:

Category of Personal Information Collected

Types of Personal Information

Source of Personal Information

Business Purpose for Collection of Personal Information

Identifiers

Name, Postal Address, Unique Personal Identifiers, Online Identifiers, IP Address, Email Address, Account Name/Password, Signature, Photo ID, Telephone Number, Bank Account Number, Financial Information.

Directly from the users of our Services or potential users, Cookies and Other Tracking Technologies, Third Parties, including Credit Bureaus and those that provide identification verification and fraud prevention services, Public Databases, Social Media Platforms.

Identification, Providing Services, Legal & Regulatory Compliance

Protected Characteristics

Sex (Gender Identity), National Origin, Age.

Directly from the users of our Services or potential users.

Identification, Providing Services, Legal & Regulatory Compliance

Sensitive Personal Information

Social Security Number, Driver’s License Number, State Identification Card, Passport Number, Log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, Precise Geolocation.

Directly from the users of our Services or potential users, Cookies and Other Tracking Technologies, Third Parties, including Credit Bureaus and those that provide identification verification and fraud prevention services.

Identification, Providing Services, Legal & Regulatory Compliance

Biometric Information

Behavioral or activity patterns used to extract a template or other identifier or identifying information, such as keystroke or other physical patterns.

Cookies and Other Tracking Technologies.

Identification, Providing Services, Legal & Regulatory Compliance

Commercial Information

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Directly from the users of our Services or potential users, Cookies and Other Tracking Technologies, Third Parties, including Credit Bureaus and those that provide identification verification and fraud prevent services, Public Databases, Social Media Platforms.

Identification, Providing Services, Legal & Regulatory Compliance

Internet, computer, or other similar network activity

Browsing History, Search History, Information Regarding Interactions with a Website.

Cookies and Other Tracking Technologies.

Identification, Providing Services, Legal & Regulatory Compliance

Geolocation Data

Location or Movements

Cookies and Other Tracking Technologies.

Identification, Providing Services, Legal & Regulatory Compliance

Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information

Audio, Electronic, Visual, or Similar Information, including Phone Call Recordings.

Cookies and Other Tracking Technologies.

Identification, Providing Services, Legal & Regulatory Compliance

Inferences Drawn from Other Personal Information

Profile information about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Directly from the users of our Services or potential users, Cookies and Other Tracking Technologies, Third Parties, including Credit Bureaus and those that provide identification verification and fraud prevent services, Public Databases, Social Media Platforms.

Identification, Providing Services, Legal & Regulatory Compliance

Cookies and Other Tracking Technologies

Cookies:  We use cookies to support the operation of our Sites, the Bambu App, and our Services. Cookies are small text files which are placed on your browser when you visit a website, open or click on an email, or interact with an advertisement. We incorporate both first party cookies (which are cookies served directly by us) and third party cookies (which are cookies served by third parties we work with). We use cookies for a variety of purposes, including to operate our Site, personalize your browsing experience, prevent fraud and assist with security, perform measurement and analytics, and provide advertising (including targeted advertising). You may disable cookies at any time via your browser settings.  Please note, however, that if you disable cookies certain aspects of our Sites and/or the Bambu App may not function properly.

Below are links to the cookie opt-out pages of common web browsers. If your web browser is not listed here, you should review your web browser terms to learn more about your cookie choices.

Social Sharing Features:  Our Services include social sharing features for common social networks to let users share content.  These features are served from third-party services that may serve their own cookies.  The use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with the entity that provides the social sharing feature.  For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of the entities that provide these features.

Analytics and Advertising Services Provided by Others.  We may allow others to provide analytics services on our behalf and to serve advertisements on our behalf across the Internet.  These entities may use cookies, device identifiers, web beacons and other technologies to collect information about your use of the Services and other websites and online services, including your IP address, web browser, pages viewed, mobile network information, time spent on pages or in apps, links clicked and conversion information.  This information may be used by us and others, to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising targeted to your interests and better understand your online activity.  For more information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit http://www.aboutads.info/choices.  Your Device may also include a feature that allows you to opt out of having certain information collected through apps used for behavioral advertising purposes.  Please review the settings of your Device for more information.

Voice/Geolocation Features:  When you use Siri, the things you say will be recorded and sent to Apple to process your requests.  Your device may also send Apple other information (collectively, your “User Data”).  All of this User Data is used to help Siri on your iOS device and any paired Apple Watch understand you better and recognize what you say.  If you have geolocation turned on, the location of your Device at the time you make a request will also be sent to Apple to help Siri improve the accuracy of its response to your requests.  You may choose to turn off location services or Siri at any time.  To do so, access Settings on your iOS device. Information collected by Apple will be treated in accordance with Apple’s Privacy Policy, which can be found at https://www.apple.com/legal/privacy.  If you turn off the geolocation of your Device some Services may not be made available, including account opening.

Our Use of Personal Information

We use your personal information for any one or more of the following business purposes:

  • Fulfill or meet the reason for which the information is provided;
  • Provide you with information, products or services that you request from us;
  • Process and fulfill transactions;
  • Download and register the Bambu App, apply for and open an Account, or obtain a Card;
  • Facilitate payroll or other direct deposits (including tax refunds) to your Account;
  • Facilitate transfers between external bank accounts and Accounts;
  • Verify your identity, including to facilitate a name change request;
  • Respond to inquiries, provide customer support and resolve disputes;
  • Determine your eligibility for, and administer your participation in, certain features of the Services, including surveys, contests, sweepstakes, promotions and rewards;
  • Facilitate and manage referrals from business partners and third-parties;
  • Advertise and market our products and services, and to send you information about third-party products and services;
  • Provide you targeted offers and notify you of third-party locations where you may use our Services;
  • Provide customer support and quality assurance, and conduct customer service training;
  • Collect fees and other amounts owed in connection with your Account;
  • Operate, evaluate and improve our business (including researching and developing new products and services; enhancing, improving, debugging and analyzing our products and services; managing our communications; establishing and managing our business relationships; and performing accounting, auditing, and other internal functions);
  • Debug to identify and repair errors in our systems and maintain and enhance the safety and security of our products and services and prevent misuse;
  • Protect against, identify, and protect against or prevent security incidents, and malicious, deceptive, fraudulent or other illegal activity, claims and other liabilities and prosecute the same;
  • Exercise our obligations and comply with and enforce our rights and remedies arising from applicable legal and contractual requirements, relevant industry standards;
  • Defend against legal claims;
  • Provide you with email alerts, event registrations and other statements concerning our products or services;
  • As otherwise necessary or appropriate to protect the rights, property or safety of us, our customers, consumers or others;
  • Respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
  • For such purposes as may be necessary or appropriate in connection with audits and reporting relating to particular transactions and interactions, including online interactions, you may have with us or others on our behalf;
  • To improve our Sites and Bambu App and present their content to you;
  • For testing, research, analysis and product development;
  • For short-term, transient use including contextual customization of ads; and/or as otherwise described to you when collecting your personal information or as otherwise set forth in the CCPA Privacy Notice.

Sharing Your Personal Information

We do not sell your personal information; however, we may share your personal information as follows:

1.Third-Party Service Providers. We may use third parties to perform certain services on our behalf in connection with the Services such as:

  • to process and store data, including your personal information;
  • to track, analyze, and modify our Services;
  • for marketing, advertising, and distribution;
  • to assist us in providing you with customer support; and
  • to support our IT and security efforts.

Google Analytics. Google Analytics is used as an analytics service provider. Learn more about how Google collects and uses data here.  To opt out of Google Analytics Advertising Features, please use Google Ad Settings. To opt out of Google Analytics entirely, please use this link.

The third parties we work with do not have permission to use the information we share with them beyond what is necessary to assist us. We execute agreements with third parties to ensure they use adequate safeguards when processing your personal information in accordance with this Privacy Policy.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the personal information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.  In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. If you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

2. Merger, Bankruptcy, or Corporate Reorganization.  We may disclose and transfer your personal information to a subsequent owner, co-owner, or operator of Bambu or the Services, or in connection with a merger, consolidation, restructuring, the sale of all or substantially all of our interests and/or assets (i.e., a bankruptcy proceeding), or other corporate change.  We will notify you with any choices you may have regarding your personal information when we are engaged in a merger, bankruptcy, or corporate reorganization.

3.Legal Obligations and Safety. We may share your personal information if it is reasonably necessary to:

  • Comply with a valid legal process (e.g., subpoenas, warrants, court orders, etc.);
  • Comply with requests or investigations by public authorities;
  • Comply with applicable laws or regulations;
  • Enforce or apply the Bambu policies or policies of our business partners;
  • Protect the security or integrity of the Services; or
  • Protect the rights, property, or safety of Bambu, our employees or users, partners and affiliates, or other natural persons.

4. For any other purpose, with your consent.  We may share your personal information on your behalf or at your request. We will only do so with your specific consent. If you provide your consent to share your information, you may withdraw your consent at any time.  Withdrawing your consent will not undo or reverse the lawfulness of any previous processing, and in some cases personal information may not be retrieved once shared.  Contact us if you would like to withdraw your consent.

Your Privacy Choices & Rights 

Depending upon where you are located, certain choices and rights may be available to you under applicable data protection laws.  If you are located in California, please see our CCPA Privacy Notice.

Do Not Call Policy:  This notice is the Bambu Do Not Call Policy under the Telephone Consumer Protection Act.  We do not solicit via telephone numbers listed on the state or Federal Do Not Call lists, unless the law allows.  Bambu employees receive training on how to document and process telephone marketing choices.  Consumers who ask not to receive telephone solicitations from Bambu will be placed on the Bambu Do Not Call list and will not be called in any future campaigns, including those of Bambu affiliates.

Do Not Track Signals:  Currently, we do not monitor or take any action with respect to Do Not Track signals or other mechanisms, which means that we collect information about your online activity both while you are using the Services and after you leave our Services.

“Shine the Light” and “Eraser” Laws:  Residents of the State of California may request a list of all third parties to which we have disclosed certain information during the preceding year for those third parties’ direct marketing purposes.

Retention of Personal Information

We will only retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements, unless otherwise permitted or required by law.

Security of Personal Information

The security of all personal information provided to us is important and we take reasonable steps designed to protect your personal information. We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information that we receive against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure or use.

Third-Party Links

This Privacy Policy covers our privacy practices only.  This Privacy Policy does not apply to the privacy practices of third-party websites, services, or applications, including third parties with whom we partner or use or our Sponsor Banks.  These third-party services are governed by each such third party’s privacy policies.  We are not responsible for the privacy policies and practices of websites other than that of ours, and we are not responsible for the failure of unaffiliated third parties to honor their privacy obligations.  When you download or sign up for the Bambu App, we will collect and use your personal information on behalf of our Sponsor Banks to facilitate the provision of banking services pursuant to their Privacy Policies.  The Sponsor Banks’ Privacy Policy which we strongly urge you to review will apply to information you provide in connection with opening and using your Bambu App and in connection with your Bambu App transactions.  We are not responsible for a Sponsor Bank’s information practices or privacy notices.

Use of the Services by Children

Our Services are not directed to children.  You must be at least 18 years or older to use our Services. We also adhere to the Children’s Online Privacy Protection Act (“COPPA”) and will not knowingly collect information from users under the age of 13.  If a parent or guardian becomes aware that his or her child has provided us with personal information, he or she should contact us at [email protected].   If we become aware that a child under 13 has provided us with personal information, we will take steps to delete the applicable information from our files.

Changes to this Policy

This Privacy Policy is effective as of the date stated at the top of this page.  We may change this Privacy Policy at any time, so we suggest you revisit this webpage often. By accessing and using the Sites and/or the Bambu App after we notify you of such changes to this Privacy Policy, you are deemed to have accepted such changes.

Contact Information

If you have any questions about this Privacy Policy or any of our privacy practices, please contact us at [email protected]. Please see our CCPA Privacy Notice for details on our to exercise any privacy rights available to you.