Request a demo

x

US Privacy Statement

Introduction

We are Integrated International Payroll Limited (company registration number: 04920388) of

Festival House, Jessop Avenue, 2nd Floor, Cheltenham, GL50 3SH, United Kingdom and

Integrated International Payroll LLC of 12700 Park Central Suite 1910 Dallas, Texas 75251,

United States. You can contact us by writing to:

Integrated International Payroll Limited

2nd Floor, Festival House

Jessop Avenue

Cheltenham

GL50 3SH

United Kingdom

or sending an email to TheDataController@iiPay.com

This addendum to the iipay.com Privacy Statement applies with respect to 

California, 

Colorado, 

Connecticut, 

Oregon, 

Montana

Texas, 

Utah, and 

Virginia 

residents and explains the categories of personal data that we collect from you and how we collect and use personal data that is subject to consumer privacy laws in California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia.

This addendum is an integral part of our iipay.com Privacy Statement. In case of any discrepancy or conflict, the terms of this addendum regarding personal data subject to your state’s law will prevail. 

General overview: Sources of personal data; purposes for collecting, processing, and disclosing personal data; and categories of personal data disclosed

Please refer to iipay.com Privacy Statement which may detail the specific pieces of personal data that we collect or process, the purposes for collecting and processing personal data, the categories of sources from which we collect personal data, and the categories of third parties to whom we disclose or may disclose personal data.

Categories of personal data we collect or process:

We collect or process (or may have collected or processed in the preceding 12 months) the following categories of personal data from or about consumers. Please note that the following list represents categories of personal data across all California, Colorado, Connecticut, Oregon, Texas, Utah, and Virginia consumers whose personal data we may have collected or received and does not necessarily represent information we have collected specifically about you. 

Please also note that the definitions of “personal data” or “personal information” under your state’s consumer privacy laws are subject to certain exceptions and may not include information that is publicly available or that has been aggregated or de-identified in accordance with the laws.  

  • Identifiers, which may include real name and alias, postal address, unique personal identifier, online identifiers as detailed below, Internet Protocol (“IP”) address, e-mail address, telephone number, account number, username and password, Social Security number, driver’s license number, passport number, state, or other government-issued identification card number, and/or other similar identifiers;
  • Commercial and financial information pertaining to you or member of your household (i.e., spouse and/or dependent(s)), which may include records of personal property, products or services purchased, obtained, or considered, account balances, payment history, or account activity, bank account information and other information relating to your financial institution, credit application, credit checks, and information from credit reporting agencies, criminal histories, and/or other purchasing or consumer histories or tendencies;
  • Information relating to Internet activity, which may include cookie identifiers, clear gifs, browser type, Internet service provider (“ISP”), referring/exit pages, operating system, date/time stamp, clickstream data, device platform, device version and/or other device characteristics including your choice of settings;
  • Geolocation data based upon your IP address, cell network data, and/or other similar location data;
  • Audio, electronic, or visual information, which may include records of calls to or from our customer service centers, recordings and/or transcriptions of events or meetings, and/or video surveillance information;
  • Professional or employment-related information, which may include information regarding your professional licenses, current and previous employers, job titles and responsibilities, assets, and income, and/or other information related to your work history and/or prospective employment or contract with the firm;
  • Education information, which may include academic records, degrees, and educational history;
  • Biometric information, which may include fingerprints, facial scans, voice recognition information, genetic information, and/or other similar biometric identifiers;
  • Inferences about you, which may include preferences and characteristics and other information we may infer from other personal information we have collected;
  • Information not listed above and related to characteristics protected under federal or state law, which may include gender, race and ethnicity, nationality, marital status, military service, or veteran status, and/or date of birth; and
  • Medical information and health insurance information;
  • Allergies, dietary restrictions, disabilities, and any special accommodations; and
  • Other personal information not listed above, including signature, physical characteristics or description, insurance information, and/or any other financial- or health-related information.

Sensitive personal data

Some of the personal data we collect might be considered “sensitive,” What constitutes “sensitive ” may vary by law, and generally includes personal information regarding a person’s race, ethnicity, political beliefs, trade union membership, religious or similar beliefs, physical or mental health, disabilities, biometrics, precise geolocation, sexual orientation, criminal record, citizenship, or immigration status. 

Under California law, sensitive personal information may also include Social Security number, passport number, trade union membership, and driver’s license number. Under Oregon law, sensitive personal information also includes an individual’s status as transgender or nonbinary and status as a victim of crime.

Purposes for collecting and processing personal data:

We may collect and process (or may have collected and processed in the preceding 12 months) all of the categories of personal data listed above for:

  • Performing professional services for our clients
  • Undertaking activities to verify or maintain the quality or safety of our services and to improve, upgrade, or enhance our services
  • Undertaking internal research for technological development and demonstration
  • Detecting security incidents; protecting against malicious, deceptive, fraudulent, or illegal activity; and taking appropriate action as a result of any such detected activity
  • Debugging to identify and repair errors that impair existing intended functionality
  • Short-term, transient uses where the personal data is not disclosed to a third party and is not used to build a profile about you or otherwise alter your experience outside the relevant interaction

Purposes for disclosing personal data and categories of third parties to whom we disclose or may disclose personal data:

We may disclose (or may have disclosed in the preceding 12 months) the categories of personal data listed above to third parties for a business purpose listed above. In addition, we may disclose (or may have disclosed in the preceding 12 months) your personal data to the following categories of third parties: clients; affiliates; vendors and suppliers that provide services on behalf of iiPay; professional services organizations, including but not limited to law firms, tax advisors, and auditors; and other third parties, such as advisors, insurers, joint marketing partners, business partners, ad networks, internet service providers, data analytics providers, operating systems and platforms, providers of identity and credit verification services, regulatory and other professional bodies, and government authorities.

Sales of personal data, targeted advertising, and profiling:

While we do not sell or share any personal information collected through its online activities for monetary consideration, we may be deemed as selling or sharing limited personal information for non-monetary consideration to certain third parties that we engage under applicable law. Specifically, our use of your IP address, information related to your Internet activity, and third-party cookie and tracking information may be provided to the firm’s advertising providers and analytics tool providers. Any sale or sharing of personal information is limited to our online activities. We may disclose the categories of personal data listed below to improve the performance of our website, to enhance your browsing experience, to provide you a more personalized browsing experience, and to improve our advertising efforts. You can view a full listing of the third-party cookies we use and opt out of their use via the iipay.com 

We may also disclose email addresses of contacts in our CRM system with third parties for the purpose of delivering targeted advertising on those third parties’ platforms, where such contacts have agreed to our Privacy Statement covering such use of data. 

We do not sell or share for cross-context behavioral advertising any of the personal data collected, as defined by the California Consumer Privacy Act (CCPA).

You may opt out of the targeted advertising, “sharing,” and “selling” described above by sending certain browser-enabled opt-out signals and Cookie dashboard.

Data retention

We retain personal information only for so long as it is needed to fulfil the purpose for which it was collected as described in this Privacy Statement or our Privacy Notice, including to meet business needs and comply with legal requirements, professional standards, or an individual’s request. Accordingly, the retention period may vary and depend on the firm’s retention policies.

Legal rights

Under certain circumstances, depending on your state of residence, you may have rights in relation to your personal data. More detail is listed in the Appendix below.

  • California 
  • Colorado 
  • Connecticut 
  • Montana 
  • Oregon 
  • Texas 
  • Utah 
  • Virginia 

Exercising your rights in relation to personal data

You may see above how you can exercise your privacy rights.

As part of processing some of your requests, we may require you to provide certain personal data about you to verify your identity in accordance with legal requirements. This information may include your first and last name, email address, physical address, telephone number, and description of relationship with iiPay, but may also include additional information based on the nature of your request and your relationship with us.

Additionally, you may designate an authorized agent to make a request on your behalf. To comply with your request, we will require the personal data referenced above to be used for identity verification purposes, as well as the name, email address, and telephone number of your authorized agent.

After we verify your identity and the validity of your request, we may take the following action free of charge:

  • In the case of an access request, we will provide you any required personal data in a manner that is readily usable and portable, when technically feasible, consistent with the requirements of your state consumer privacy law. 
  • In the case of a correction or deletion request, we will correct or delete personal data that we have collected about you (requests for deletion and correction are subject to our right to maintain your personal data for specific purposes permitted under your state consumer privacy law). 
  • In the case of requests to opt out of the sale of your personal data, we will cease any sale of your personal data subject to any exceptions under your state consumer privacy law.
  • In the case of requests to opt out of the use of your personal data for targeted advertising, we will cease any use of your personal data for targeted advertising subject to any exceptions under your state consumer privacy law. 

We will endeavor to comply with your verified request within 45 days (or a shorter period, if required) but may extend that period when reasonably necessary, in which case we will notify you.

Contact for more information

If you have any questions regarding the processing of your personal data, please contact iiPay by reaching out the above addresses.

Appendix:  ADDITIONAL DATA SUBJECT NOTICES

California

Under the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020 [CPRA], [CCPA]), California residents have the following rights around the collection, use, and disclosure of their personal data. For purposes of exercising the rights in this section, the listed terms are defined as follows:

Definitions

  • Cross-context behavioral advertising means the targeting of advertising to a consumer based on the consumer’s personal information obtained from the consumer’s activity across different companies’ websites and/or platforms.
  • Profiling means any form of automated processing of personal information, to evaluate a consumer’s personal aspects, in particular to analyze or predict aspects about that consumer’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
  • Selling means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating personal information for monetary or other valuable consideration.
  • Share, shared, sharing means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information for cross-context behavioral advertising, even if no money is exchanged.

Rights

  • Right of access and data portability. You may have the right to request that we provide you a copy of the personal data iiPay collected about you. In addition, you may have the right to request that we disclose to you information about our collection and use of your personal data in the preceding 12 months, including: (a) the categories and specific pieces of personal data we collect; (b) the categories of sources from which we collect personal data; (c) the business or commercial purpose for which we collect, sell, or share personal data; (d) the categories of third parties to whom we disclose personal data; and (e) the categories of personal data disclosed for a business purpose or sold to third parties and the categories of third parties to whom such personal data was sold or disclosed. Please note that you may only make an access request to us for your personal data up to two times in any 12-month period.
  • Right to deletion. You may have the right to request that we delete certain personal data that we have collected about you. The foregoing is subject to our right to maintain your personal data for specific purposes permitted under the CCPA. If we are unable to comply with any such request, we will notify you. 
  • Right to correction. You may have the right to request that we correct inaccuracies in the personal data we have collected about you.
  • Right to limit the use and disclosure of sensitive personal data. The CCPA grants you the right to instruct a business to limit its use or disclosure of your sensitive personal information to that use which is necessary to perform the services or provide the goods reasonably expected by you in your request for those goods or services and to perform certain activities permitted by the CCPA. Please note that iiPay does not use or disclose sensitive personal data for any purposes other than those necessary to provide the relevant services or as permitted by the CCPA.
  • Right to opt out. You may have the right to request that your personal data not be sold to or shared (as such terms are defined above) with third parties.

Colorado

Under the Colorado Privacy Act, Colorado residents have the following rights around the  collection, use, and disclosure of their personal data. For purposes of exercising the rights in this section, the listed terms are defined as follows:

Definitions:

  • Profiling means any form of automated processing to evaluate, analyze, or predict personal aspects related to a person’s economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
  • Sale, sell, or sold means the exchange of personal data for monetary or other valuable consideration by a controller to a third party.
  • Targeted advertising means displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer’s activities across nonaffiliated websites, applications, or online services to predict consumer preferences or interests.

Rights

  • Right of access. You may have the right to confirm whether iiPay is processing your personal data and to access your personal data.
  • Right of data portability. You may have the right to request that we provide you a copy of your personal data. 
  • Right to correction. You may have the right to request that we correct inaccuracies in the personal data we have collected about you.
  • Right to deletion. You may have the right to request that we delete certain personal data that we have collected about you. The foregoing is subject to our right to maintain your personal data for specific purposes permitted under applicable state law. If we are unable to comply with any such request, we will notify you. 
  • Right to opt out. You may have the right to request that your personal data not be sold to third parties or used for targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. 

Connecticut

Under the Connecticut Personal Data Privacy and Online Monitoring Act, Connecticut residents have the following rights around the collection, use, and disclosure of their personal data. For purposes of exercising the rights in this section, the listed terms are defined as follows:

Definition

  • Profiling means any form of automated processing to evaluate, analyze, or predict personal aspects related to a person’s economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
  • Sale of personal data means the exchange of personal data for monetary or other valuable consideration.
  • Targeted advertising means displaying advertisements to a consumer where the advertisement is selected based on personal data obtained or inferred from that consumer’s activities over time and across nonaffiliated internet websites or online applications to predict such consumer’s preferences or interests.

Rights

  • Right of access. You may have the right to confirm whether iiPay is processing your personal data and to access your personal data.
  • Right of data portability. You may have the right to request that we provide you a copy of your personal data. 
  • Right to correction. You may have the right to request that we correct inaccuracies in the personal data we have collected about you.
  • Right to deletion. You may have the right to request that we delete certain personal data that we have collected about you. The foregoing is subject to our right to maintain your personal data for specific purposes permitted under applicable state law. If we are unable to comply with any such request, we will notify you. 
  • Right to opt out. You may have the right to request that your personal data not be sold to third parties or used for targeted advertising or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you. 
  • Appeal. You may have the right to appeal the denial of any of the above-listed rights. You may do so by following the procedures set forth in the “Exercising your rights in relation to personal data” section above or by responding to the message in which iiPay has communicated its denial and indicating you would like to appeal that denial.

Montana 

The Montana Consumer Data Privacy Act (“MTCDPA”) grants certain rights to Montana residents with regard to their personal information. The following explains your MTCDPA rights and our personal information practices as applicable.

For purposes of this Privacy Statement, “personal information” means “personal data” that is linked or reasonably linkable to an identified or identifiable natural person; “sensitive data” is defined separately under the MTCDPA and in accordance with the above section; and other terms below have the meaning defined in the MTCDPA. Our collection practices and business purposes for collecting personal information are identified in this US privacy extension. Please see the additional information below related to our “sales” of personal information as that term is defined under the MTCDPA, as well as our disclosures of personal information for targeted advertising.

Oregon 

Under the Oregon Consumer Privacy Act, Oregon residents have the following rights around the collection, use, and disclosure of their personal data. For purposes of exercising the rights in this section, the listed terms are defined as follows:

Definitions

  • Profiling means an automated processing of personal data for the purpose of evaluating, analyzing, or predicting an identified or identifiable consumer’s economic circumstances, health, personal preferences, interests, reliability, behavior, location, or movements.
  • Sale or sell means the exchange of personal data for monetary or other valuable consideration by a controller with a third party.
  • Targeted advertising means advertising that is selected for display to a consumer on the basis of personal data obtained from the consumer’s activities over time and across one or more unaffiliated websites or online applications and is used to predict the consumer’s preferences or interests.

Rights

  • Right of access. You may have the right to confirm whether iipay is processing or has processed your personal data. In addition, you may have the right to request that we disclose to you the categories of personal data that we are processing or have processed. 
  • Right of data portability. You may have the right to request that we provide you a copy of your personal data. 
  • Right to correction. You may have the right to request that we correct inaccuracies in the personal data we have collected about you.
  • Right to deletion. You may have the right to request that we delete certain personal data that we have collected about you. The foregoing is subject to our right to maintain your personal data for specific purposes permitted under applicable state law. If we are unable to comply with any such request, we will notify you. 
  • Right to opt out. You may have the right to request that your personal data not be sold to third parties or used for targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. 
  • Appeal. You may have the right to appeal the denial of any of the above-listed rights. You may do so by following the procedures set forth in the “Exercising your rights in relation to personal data” section above or by responding to the message in which iiPay has communicated its denial and indicating you would like to appeal that denial.

Texas (effective July 1, 2024)

Under the Texas Data Privacy and Security Act, Texas residents have the following rights around the collection, use, and disclosure of their personal data. For purposes of exercising the rights in this section, the listed terms are defined as follows:

Definition

  • Profiling means any form of solely automated processing performed on personal data to evaluate, analyze, or predict personal aspects related to an identified or identifiable individual’s economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
  • Sale of personal data means the sharing, disclosing, or transferring of personal data for monetary or other valuable consideration of personal data for monetary consideration by a controller to a third party.
  • Targeted advertising means displaying to a consumer an advertisement that is selected based on personal data obtained from that consumer’s activities over time and across nonaffiliated websites or online applications to predict the consumer’s preferences or interests.

Rights

  • Right of access. You may have the right to confirm whether iiPay is processing your personal data and to access your personal data.
  • Right to correction. You may have the right to request that we correct inaccuracies in the personal data we have collected about you.
  • Right of data portability. You may have the right to request that we provide you a copy of the personal data that you previously provided to iiPay.
  • Right to deletion. You may have the right to request that we delete certain personal data that we have collected about you. The foregoing is subject to our right to maintain your personal data for specific purposes permitted under applicable state law. If we are unable to comply with any such request, we will notify you.
  • Right to opt out. You may have the right to request that your personal data not be sold to third parties or used for targeted advertising or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you.
  • Appeal. You may do so by following the procedures set forth in the “Exercising your rights in relation to personal data” section above or by responding to the message in which iiPay has communicated its denial and indicating you would like to appeal that denial.

Utah

Under the Utah Consumer Privacy Act, Utah residents have the following rights around the collection, use and disclosure of their personal data. For purposes of exercising the rights in this section, the listed terms are defined as follows:

Definition

  • Sale, sell, or sold means the exchange of personal data for monetary consideration by a controller to a third party.
  • Targeted advertising means displaying an advertisement to a consumer where the advertisement is selected based on personal data obtained from the consumer’s activities over time and across nonaffiliated websites or online applications to predict the consumer’s preferences or interests.

Rights

  • Right of access. You may have the right to confirm whether iiPay is processing your personal data and to access your personal data.
  • Right of data portability. You may have the right to request that we provide you a copy of the personal data that you previously provided to iiPay.
  • Right to deletion. You may have the right to request that we delete your personal data that you provided to iiPay. The foregoing is subject to our right to maintain your personal data for specific purposes permitted under applicable state law. If we are unable to comply with any such request, we will notify you.
  • Right to opt out. You may have the right to request that your personal data not be sold to third parties or used for targeted advertising. Additionally, you may have the right to request that iiPay not process your sensitive personal data.

Virginia 

Under the Virginia Consumer Data Protection Act, Virginia residents have the following rights around the collection, use, and disclosure of their personal data. For purposes of exercising the rights in this section, the listed terms are defined as follows:

Definitions

  • Profiling means any form of automated processing to evaluate, analyze, or predict personal aspects related to a person’s economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
  • Sale of personal data means the exchange of personal data for monetary consideration.
  • Targeted advertising means displaying advertisements to a consumer where the advertisement is selected based on personal data obtained from that consumer’s activities over time and across nonaffiliated websites or online applications to predict such consumer’s preferences or interests.

Rights

  • Right of access. You may have the right to confirm whether iiPay is processing your personal data and to access your personal data.
  • Right of data portability. You may have the right to request that we provide you a copy of the personal data that you previously provided to iiPay. 
  • Right to correction. You may have the right to request that we correct inaccuracies in the personal data we have collected about you.
  • Right to deletion. You may have the right to request that we delete certain personal data that we have collected about you. The foregoing is subject to our right to maintain your personal data for specific purposes permitted under applicable state law. If we are unable to comply with any such request, we will notify you. 
  • Right to opt out. You may have the right to request that your personal data not be sold to third parties or used for targeted advertising or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. 

Appeal. You may have the right to appeal the denial of any of the above-listed rights. You may do so by following the procedures set forth in the “Exercising your rights in relation to personal data” section above or by responding to the message in which iiPay has communicated its denial and indicating you would like to appeal that denial.

We use cookies and similar technologies on our websites to help provide you with the best possible online experience. By using our sites, you agree that we may store and access cookies and similar technologies on your device.     Ok