Data Security and Privacy Policy

About Us

Switch Commerce is among the leaders in ATM transaction processing. We process for over 50,000 terminals nationwide, including Puerto Rico, US Virgin Islands, and Asia Pacific region. We provide connections to all PIN debit networks including: AFFN, Cirrus, CU24, EBT, Exchange, Plus, Pulse, NYCE, Star, SHAZAM, MoneyPass and more. Our Terminal Management System and Mobile Terminal Management System (collectively, “TMS”) allows our customers and users to completely manage their ATM business needs, merchants, and terminal portfolio. Mobile TMS, available for Android and iPhone, incorporates the full capabilities of the web version of our Terminal Management System plus additional mobile features.

Purpose

This document is designed for public communication concerning the data security and privacy policy of Switch Commerce, LLC, effective January 1st, 2018. Switch Commerce cares about our customer and user’s personal information and make it a priority to protect that information. User data, within the context of this policy, applies to name, ID, password, address, phone, email and banking information (collectively, “User Data”).

Information Collected

This privacy policy covers all User Data we obtain from documents provided by you or User Data information entered through TMS. How we use this information is covered in the section, How Your Information Is Used. NOTE: Switch Commerce does not request or store any debit card or credit card information in relationship to a customer or user.

New Customers

User Data gathered via signed documents (physical or electronic) during initial onboarding of a new customer or updating existing information. Address, phone, and email changes received via email or postal services.

Through TMS

User Data entered through TMS updating existing information or creating new users.

Information Shared

We do not share any personal information obtained from our customers or users with any outside entity except for the purposes of fulfilling our obligations to regulatory compliance, your sponsor bank requirements, required by law, or as required to support our offered features and functionality.

How Your Information Is Used

Your contact information is used by us for contacting you via phone, mail, email, or SMS text for conducting business needs or for the purposes of fulfilling our obligations to regulatory compliance, your sponsor bank requirements, required by law, or as required to support our offered features and functionality. Your banking information is used for allowing us to credit/debit your provided account in accordance with our contractual agreement with you.

Who Can Access Your Information

Besides appointed employees of Switch Commerce, your information can only be accessed by you through TMS, using a unique user ID and password. The password must be changed every 90 days. Only those you authorize through TMS can see or change your information.

How Your Information Is Stored and Protected

Your information resides on our self-hosted servers, behind the same systems and controls we use to protect cardholder’s credit card data used at an ATM, encrypted with sophisticated algorithms. These systems and controls undergo elaborate audits each year as regulated by the Payment Card Industries Data Security Standards (PCI-DSS) V3.2 regulatory compliance requirements as well as multiple white-hat penetration tests. These systems, under the control of PCI-DSS requirements, are designed to ensure personal cardholder data cannot be obtained and used by an outside entity.

Mobile TMS

Mobile device features do not create, store, change, or manage any User Data. However, documented below are mobile device features which are utilized and for what purpose.

Use My Location

Used for identifying location of terminal for terminal creation and maintenance.

Photos

Used for uploading terminal identifying information to TMS for use by the user/company at a later time for documentation purposes.

Camera

Used for taking photos of terminals, locations, etc. for subsequent uploading and saving into TMS.

Microphone

Used to update terminal information via voice commands.

Retention

We will retain your personal data for the period necessary to fulfill the purposes outlined in this Privacy Statement unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

Access, Change or Suppress Your Data

If you would like to review, correct, update, suppress, restrict or delete personal data that you have previously provided to us, or if you would like to receive an electronic copy of your personal data for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by law), you can contact us at privacy@switchcommerce.com, or by mail:

Switch Commerce, LLC
Attn: Privacy
6565 N. MacArthur Blvd, Ste 1000
Irving, TX 75039

In your request, please make clear what personal data you would like to have changed, whether you would like to have your personal data suppressed from our database, or other limitations you would like to put on our use of your personal data. For your protection, we only fulfill requests for the personal data associated with the particular email address that you use to send us your request, and we may need to verify your identity before fulfilling your request. We will try to comply with your request as soon as reasonably practicable.

Please note that we often need to retain certain data for recordkeeping purposes and/or to complete any activities that you began prior to requesting a change or deletion. There may also be residual data that will remain within our databases and other records, which will not be removed. In addition, there may be certain data that we may not allow you to review for legal, security or other reasons.