Deluxe Small Business Sales, Inc. Privacy Policy

III. Purpose & Use of Collected Personal Data

LogoMix collects information from our users at several different points on our site. No registration is required to view the Site. However, if you choose to register or provide Personal Data on our newsletter sign-up, free trial, order forms, affiliate, partner or other areas of our site, we will ask for information as described above in II.b.. We use this information to create new accounts, fulfill your order, communicate with you regarding our services, and manage our customer relationships. We may send you service-related announcements when it is necessary to do so. Generally, you may not opt-out of these communications, which are not promotional in nature. If you do not wish to receive them, you have the option to deactivate your account. For the purposes of order verification and fraud prevention, we may exchange information about our customers internally within LogoMix and among our affiliates.

V. Sharing of Personal Data & Accountability for Onward Transfer

1. Personal Data Disclosures
   

   There are a variety of circumstances where we may need to disclose Personal Data to:

   • A person who, in the reasonable judgment of Deluxe is seeking the information as your agent. For example, we may provide information about your account to your legal representative if we are satisfied that that individual is requesting the information on your behalf;

   • Our parent company or affiliates to help us serve you better and provide you with requested services;

   • A company or individual employed by us to perform functions on our behalf, such as support services, order processing/fulfillment, information technology development and support, customer service or data processing, and are authorized to use your Personal Data only as necessary to provide these services to us; and,

   • A public authority, agent of a public authority or law enforcement agency if required by law.
   
   
   

   We will share randomized, aggregated demographic information about our users with third parties. This information cannot identify any individual person. Deluxe may also disclose your Personal Data to any other third party with your prior consent.

   Additionally, Deluxe may share your Personal Data, without your prior consent, for the limited purposes noted below:

2. Subprocessors/Third Party Service Providers

   To provide and market our services, Deluxe uses subprocessors to perform functions such as:

   • Technical Infrastructure
   • Marketing & Analytics
   • Order processing/Fulfillment & Support
   • Credit and payment Card Transactions

     We only share Personal Data with third party service providers to the extent necessary to provide the requested services. These companies are prohibited from retaining, sharing, storing or using the Personal Data for any secondary purposes. By contract, we hold our third-party service providers accountable for the privacy and security of Personal Data in accordance with our Privacy Policy and applicable laws and regulations. In such cases of onward transfer, we maintain liability for your Personal Data under the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks.

     You have the choice to limit the use and disclosure of your Personal Data. If you choose to limit the data to be used, simply do not disclose that information to Deluxe or use the Site. In certain cases, limiting the use and disclosure of your Personal Data may impact functionality or prevent the use of Deluxe’s products or services. When Deluxe does share your Personal Data with third party service providers and/or subprocessors, Deluxe will:

     1. transfer such data only for limited and specified purposes;

     2. ascertain that the subprocessor is obligated to provide at least the same level of privacy protection as is required by these Principles;

     3. take reasonable and appropriate steps to ensure that the subprocessor effectively processes the Personal Data transferred in a manner consistent with the organization’s obligations under these Principles;

     4. require the subprocessor to notify Deluxe if it makes a determination that it can no longer meet its obligation to provide the same level of protection as is required by these Principles;

     5. upon notice, including under (iv), take reasonable and appropriate steps to stop and remediate unauthorized processing; and

     6. provide a summary or a representative copy of the relevant privacy provisions of its contract with that subprocessor to the Department of Commerce upon request.

   
   

   Deluxe shall remain liable under the Principle of Accountability for Onward Transfer if its subprocessors process your Personal Data in a manner inconsistent with the Privacy Shield Principles, unless Deluxe proves that it is not responsible for the event giving rise to the damage.

3. Legal Obligations

   We cooperate with government or law enforcement officials and private parties to enforce and comply with laws applicable to our services. We will disclose information about you to government or law enforcement officials or private parties, as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process, to protect our property, and the property and rights of a third party, to protect national security, the safety of the public or any person, or to prevent or stop activity we consider illegal or unethical. Our subpoena policy can be found at https://www.deluxe.com/policy/subpoena-policy.

   If you are visiting this website from a country other than the country in which our servers are located, your communications with us will result in the transfer of information across international boundaries. By visiting this website and communicating electronically with us, you consent to such cross-border transfers. In the case of data transfers from the EEA and Switzerland, the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks apply.

VI. Protection of Personal Data

The security and confidentiality of your personal information is very important to us. Deluxe has implemented commercially reasonable technical and organizational safeguards to appropriately protect your Personal Data against accidental, unauthorized, or unlawful access, use, loss, destruction or damage. In order to protect your Personal Data and your right to privacy, Deluxe:

• Takes steps to protect information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction

• Maintains physical, electronic, and management procedures to safeguard information based on its sensitivity

• Uses Transport Layer Security (TLS) technology to protect sensitive data

• Uses servers that are protected by firewalls, which are frequently updated to enhance security

• Protects the confidentiality of Personal Data when dealing with third parties

• Strives to keep Personal Data as accurate and up-to-date as is necessary for the purposes identified above

We cannot guarantee the security of information on or transmitted via the Internet. We rely on various security procedures and systems to ensure the secure storage and transmission of data, including encryption and authentication technology licensed from third parties, to effect secure transmission of confidential information.

VII. Limits to Your Privacy

The Site contains links to other sites that are not owned or controlled by us. When you leave our website, we encourage you to read the privacy statements of each website that collects Personal Data. This Privacy Policy applies only to information collected by this Site.

VIII. Choice Regarding Collection, Use & Distribution of Personal Data

Where site functionality is not impacted, you can choose to opt-out whether your Personal Data is (i) to be disclosed to a third party or (ii) to be used for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized by the individuals. If you do not wish to receive promotional material from us, you may choose to "opt-out" each time we ask you for Personal Data. In certain cases, limiting the use and disclosure of your Personal Data may impact functionality or prevent the use of Deluxe products or services.

IX. Access & Correction

We maintain processes or mechanisms to allow you to review, update, correct or delete Personal Data held by us. You have the right to make changes to your account information, access, correct, or delete Personal Data held by LogoMix using any of the following methods:

• visiting the My Account page on the Site

• emailing Customer Support at help@freelogoservices.com or

• writing to LogoMix:
      Attn: Privacy Program Office; RE: LogoMix Access & Correction Request 3680 Victoria Street North, Shoreview, MN 55126

We will retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law. If you would like your account deactivated or deleted, please state this in your communication. We will respond to all requests within a reasonable timeframe.

X. Contacting Deluxe, Dispute Resolution, Arbitration & Cost

Deluxe will address all questions, complaints or requests concerning this Privacy Policy within 30 days of receipt. Please see the applicable details below:

1. EU & Swiss Citizens

   In compliance with the EU-U.S. and Swiss-U.S. Privacy Shield Principles, Deluxe commits to resolve complaints about your privacy and our collection or use of your Personal Data. European Union and Swiss individuals with inquiries or complaints regarding this Privacy Policy should first contact Deluxe at:

   Deluxe Small Business Sales, Inc. Attn: S. Carver, Privacy Compliance Manager, Privacy Program Office 3680 Victoria Street N. Shoreview, MN 55126 United States of America Email: privacyprogramoffice@deluxe.com
   
   

   Deluxe has further committed to refer unresolved privacy complaints under the EU-U.S. and Swiss-U.S. Privacy Shield Principles to an independent dispute resolution provider.  If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request. 

   As noted above, under certain circumstances, more fully described on the Privacy Shield website (https://www.privacyshield.gov), if your complaint remains unresolved, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.

   If you believe that our processing of your Personal Data infringes your rights under the General Data Protection Regulation, without prejudice to any other administrative or judicial remedy, you also have the right under Article 77 of the General Data Protection Regulation to lodge a complaint with a supervisory authority located in the EU Member State: (i) where you habitually reside; or (ii) where your place of work is located; or (iii) where the place of the alleged infringement took place.

   If, after exhausting the above remedies your complaint is not satisfactorily addressed, you may, under certain limited conditions, invoke “last resort” binding arbitration before a Privacy Shield Panel.

2. Non-EU/Non-Swiss Citizens

   Deluxe commits to resolve complaints about your privacy and our collection or use of your Personal Data. Non-EU/Non-Switzerland citizens with inquiries or complaints regarding this privacy policy should contact Deluxe at:

   Deluxe Small Business Sales, Inc. Attn: S. Carver, Privacy Compliance Manager, Privacy Program Office 3680 Victoria Street N. Shoreview, MN 55126 United States of America Email: privacyprogramoffice@deluxe.com
3. Law/Jurisdiction

   For information about Law/Jurisdiction, please see our Terms of Use.

XI. Changes to Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we decide to change our Privacy Policy, we will prominently post those changes here and any other place we deem appropriate, so you are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If we make any material changes, we will notify you by way of an email (sent to the email address associated with your account) or by means of a notice on this Site prior to the change becoming effective.

We use a self-assessment approach to address compliance with this Privacy Policy, verifying periodically that the policy is accurate, comprehensive, and addresses the privacy requirements applicable to the markets we serve. Periodically, our operations and business practices are reviewed for compliance with corporate policies and procedures governing the confidentiality of information.