Privacy Policy
[DRAFT: counsel review before launch]
Effective: [DRAFT: effective date]
The short version
[DRAFT] Your answers are encrypted in transit and while they wait for our team, then kept in access-controlled systems. We use them to prepare your review, to contact you about it and about our processing services, and, if you apply, to set up your account. We don't sell them.
What we collect
When you ask for a statement review, we collect the answers you give us: your business name, type and website, how you take payments, your card sales and what you pay now, your equipment, your name, role, email address and phone number, how and when you'd like us to contact you, and any notes you add.
A record of your consent. When you check the consent box and send your answers, we record the exact consent text you saw, the date and time, your IP address, your browser (its user agent) and that you used the review form on our site. We keep this record for [DRAFT: 4 or 5] years so we can show what you agreed to.
How you found us. With your answers we keep the page you first landed on, the website that referred you (its domain only), any campaign tags in the link you followed (utm_source, utm_medium, utm_campaign, utm_term and utm_content), and the code of the MerniPayments rep or partner whose link you used. We also keep the approximate location (country and region) that Cloudflare derives from your IP address, and whether your browser sent a Global Privacy Control signal.
How we use it
We use your information to:
- prepare your statement review and contact you about it;
- contact you about our merchant processing services, by phone or email, and by text only if you opted in to texts;
- help you apply for an account, if you decide to;
- keep a record of your consent and honor your requests to stop contact;
- protect this site from abuse and automated submissions;
- understand how visitors use this site, in aggregate.
Where your answers go and how long we keep them
Your answers travel to us over an encrypted connection through Cloudflare's network. When they reach our server, they are encrypted again so that only our own systems can read them. Our server stores only this encrypted copy until our customer relationship system collects it. After collection, the encrypted copy is kept for about 35 days and then deleted. Backups of our server hold only encrypted copies and are deleted on our backup schedule.
Our customer relationship system keeps your answers in access-controlled storage for [DRAFT: retention period] after our last contact with you, or for as long as you are a customer.
We don't sell your information
We don't sell your personal information, and we don't share it for cross-context behavioral advertising.
Analytics, cookies and the security check
Google Analytics 4 measures how visitors use this site: the pages viewed, how far people get through the review form (by step, never your answers), and whether a request was sent. It sets first-party cookies (_ga and _ga_ followed by part of our measurement id) in your browser. We have turned off Google signals, ad personalization and data sharing with Google, and we never send Google your answers, name, email address or phone number.
If you visit from the European Economic Area, the United Kingdom or Switzerland, Google Analytics sets no cookies for you and sends only cookieless measurements.
Cloudflare Web Analytics counts page views and measures page speed without cookies and without building a profile of you.
Cloudflare Turnstile checks that a person, not a bot, is sending the form. It processes signals from your browser and device to do that. Cloudflare's privacy policy describes how it handles them.
Your choices
Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your personal information, and our pages show the line 'Opt-Out Preference Signal Honored'. We don't sell or share personal information, so nothing else changes.
Analytics: you can turn Google Analytics off for your browser on our Your Privacy Choices page.
Calls, emails and texts: you can withdraw your consent at any time by telling the caller, replying to an email, replying STOP to a text, or contacting us.
Access and deletion: [DRAFT: the privacy rights available to you and how to use them, per counsel]. Contact us using the details below.
Text messages
If you agree to receive text messages, we use your mobile number only to text you about your review and our services. Mobile numbers are not shared with third parties for their marketing purposes, and we don't share your text messaging consent with anyone.
Security
We encrypt your answers in transit and while they wait for our team, and we limit who can read them. No system is perfectly secure, so please don't type card numbers or Social Security numbers into the form; it rejects them.
Children
This site is for businesses. It is not directed to children under 16, and we don't knowingly collect their information.
Changes to this policy
If we change this policy, we'll post the new version here and update the effective date.
Contact us
Merni LLC
Email: [email protected]