Privacy

Bottomline Technologies, on behalf of itself and its affiliates, (together, "Bottomline" or "we" or "us") is the operator of this Site (as defined in Bottomline's Terms of Use (the "Terms"). We know privacy is important to you; it is also vital to our business. This Privacy Policy describes the types of "Personal Information" (information or combinations of information that identifies a particular person) that Bottomline collects (directly or through service providers) in connection with all Bottomline Sites, and how that Personal Information is used, shared and protected. By using this Site, you are agreeing to accept and comply with Bottomline’s Privacy Policy as set forth below.

Types of "Personal Information" we collect. In addition to the types of information described above, we may also collect Personal Information about you when you directly submit it to us. Bottomline may provide you the opportunity to do such things as subscribe to email alerts regarding Bottomline events, products, services or company news, to request company information, or to request product or service information through an email contact form. You may opt-out of receiving these solicitations at any time. Such information may include your name, your company's name, your personal or company email address or other contact information. It is up to you whether to provide this information. Such information will be used and disclosed as reasonably necessary to meet your needs and respond to your requests, such as disclosing it to our email service provider to send you emails or to one of our affiliated entities to provide you with product information. Parties with whom we share Personal Information are bound to contracts requiring them to use and disclose the information only for the permitted purposes and to use reasonable security measures to protect Personal Information from unauthorized access and use. Bottomline may also use and disclose Personal Information to comply with application U.S. and/or International laws, regulations, Court orders and lawful instructions from government agencies, to protect the personal safety of Site users or the public, to prevent and defend claims, to resolve disputes, to troubleshoot problems, to enforce the Terms, and to protect our rights and property. If you register for a service offered through the Site, Bottomline may collect additional Personal Information and use it for additional purposes reasonably related to that service; you will be given a supplemental privacy disclosure as part of the registration process.

Cookies & Related Issues. When you visit the Site, we may receive certain standard information that your browser sends to every website you visit, such as the originating IP address, browser type and language, access times and referring website addresses, and other such information. This data may be used, among other reasons, to improve the operation and security of the Site by assisting in "authenticating" who you are when you access this Site, particularly if you register for access to part of the Site and are issued or create a username and password. We may receive additional technical data about the device used to access the Site ("Device Data") (such as device ID, device model, operating system version, application types and versions, browser type, language, and plug-ins, originating IP address, and time zone and geolocation information). Device Data may be used as part of our security controls to uniquely identify the device and authenticate the user when accessing the Site. Device Data may be shared (along with information about any fraudulent transactions using the device) with one or more third-party service providers. These providers will compare and add the Device Data and fraud data to a database of similar device and fraud information in order to identify and block access to the Site by devices associated with fraudulent or abusive activity.

Additionally, we may receive additional information about your visit to the Site, including the pages you view, the links you click and other actions you take in connection with the Site and any products and services offered through it. This data may be used, among other reasons, to improve the operation of the Site and/or provide you marketing information. We may use third parties to provide advertisements that may be of interest to you, based on that’s your activity while visiting our website and/or third-party websites.

Like most websites, the Site also uses "cookies," which are small data files placed on your computer or other device by the Web server when you visit the Site. Most such cookies are "session" cookies that are only used while you are on the Site, but a few are "persistent" cookies that stay on your hard drive and are read by the Web server when you return to the Site. The Site uses cookies to recognize your device and to store your preferences and other information on your device. This saves you time by eliminating the need to repeatedly enter the same information and will display your personalized content on your later visits to the Site. Cookies cannot and will not be used to deliver or run programs on your device. Most Web browsers automatically accept cookies, but you can modify your browser setting to decline cookies. Bottomline shall request your permission prior to installing a cookie on your device that is directly owned or developed by Bottomline. You choose to decline a Bottomline owned cookie, however you may not be able to sign in or use other interactive features of the Site that depend on cookies.

You may encounter our cookies or pixel tags on websites that we do not control. For example, if you view a Web page created by a third party or use an application developed by a third party, they may place a cookie or pixel tag on your computer or device. Our Web site includes Social Media Features, and Widgets, such as the Share this button, or interactive mini-programs. These Features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the Feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly on our Site. Your interactions with these Features are governed by the privacy policy of the company providing it.

Online behavioral Advertising: Bottomline Technologies may use third-party online advertising companies to provide you with Bottomline advertisements that may be relevant to your interests, as determined by your activity on Bottomline and non-Bottomline websites. This type of ad customization is known as "online behavioral” or “interest-based” advertising. These advertising companies may use cookies to understand your interests based on, for example, pages visited and browsing patterns on Bottomline and non-Bottomline websites.

Links & Frames. Links to other sites may be provided on any of Bottomline Site for your convenience. By providing these links, Bottomline is not endorsing, sponsoring or recommending such sites or the materials disseminated by or services provided by them, and are not responsible for the materials, services or other situations at or related to or from any other site, and make no representations concerning the content of sites listed in any part of this Site. Consequently, Bottomline cannot be held responsible for the accuracy, relevancy, copyright compliance, legality or decency of material contained in sites listed in any search results or otherwise linked to this Site. For example, if you "click" on a banner advertisement or a search result, your "click" may take you off this Site. This may include links from advertisers, sponsors, and content partners that may use Bottomline's logo(s) as part of a co-branding agreement. These other sites may send their own cookies to users, collect data, solicit Personal Information, or contain information that you may find inappropriate or offensive. In addition, advertisers may send cookies to users that Bottomline does not control. Bottomline reserves the right to disable links from any third-party sites to this Site.

Interactive Features. This Site may include opportunities for you to access, view and provide content for this Site, such as blogs, comment sections, discussion forums and other similar interactive features ("Interactive Features"). If you have any questions specifically regarding the Interactive Features (or the related portions of this Site), please contact Bottomline at info@Bottomline.com. You alone are responsible for your use of any Interactive Features and you use them at your own risk. Any content questions, comments, suggestions, information, ideas, concepts, photographs, graphics or other materials, whether oral, written or electronic (collectively, "Content") which you submit through an Interactive Feature must pertain to the designated topic or theme of the applicable Interactive Feature. You may not use this Site or any Interactive Features in any way that (as determined by Bottomline) impairs, restricts or inhibits anyone else from enjoying or using this Site or the Interactive Features.

Amendments. Bottomline may amend this Policy at any time by posting a revised version on this Site, which will be effective at the time it is posted for all Personal Information collected thereafter unless a delayed effective date is expressly stated in the revision. By using this Site after such additions or modifications are posted, you are agreeing to accept and comply with the Policy as modified.

Bottomline Technologies is committed to upholding the highest ethical standards in its business practices and strives to collect, use and disclose Personal Information in a manner consistent with the laws of the countries in which it does business. This General Data Protection Regulation (GDPR) Privacy Policy sets forth the privacy principles that Bottomline Technologies, its successors, subsidiaries, divisions and groups in the United States follows with respect to personal consumer information transferred from the European Economic Area (EEA) (which includes the twenty-eight member states of the European Union (EU) plus Iceland, Liechtenstein and Norway) and from Switzerland to the United States. This GDPR Customer Privacy Policy supplements the Bottomline Technologies Privacy Statement. Unless specifically defined in this policy, the terms in this GDPR Customer Privacy Policy have the same meaning as in the Bottomline Technologies Privacy Statement. Bottomline Technologies, protects all Personal Information that we receive from the EEA, however, this GDPR Customer Privacy Policy applies only to Personal Information received from the EEA that is not otherwise covered by an alternative mechanism such as the EU Standard Contractual Clauses.

How we work out what marketing you receive. We use marketing to let you know about products, services and offers that you may want from us. This section tells you how we decide what marketing to show or send you. It also explains how we work out what you may be interested in. We may use your Personal Information to make decisions about what products, services and offers we think you may be interested in.

We can only use your Personal Information to send you marketing messages if we have either your consent or a ‘legitimate interest’. That is when we have a business or commercial reason to use your information. The Personal Information we have for you is made up of what you tell us, and data we collect when you use our services, or from outside organizations we work with. We study this to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.

You can contact us at any time and ask us to stop using your Personal Information this way. If you allow it, we may show or send you marketing material online (on our own and other websites including social media), in our app, or by email, mobile phone or post. What you get will depend on marketing choices that you set. You can change these at any time and tell us to stop sending you marketing. We do not sell the information we have about you to outside organizations. We may ask you to confirm or update your choices, if you take out any new products or services with us in future. We will also ask you to do this if there are changes in the law, regulation, or the structure of our business. If you change your mind you can contact us to update your choices at any time.

Privacy Shield Framework and General Data Protection Regulation (GDPR). The United States Department of Commerce and the European Commission have agreed on a set of data protection principles (the “EU-U.S. Privacy Shield Framework”) and frequently asked questions (collectively the “EU-U.S. GDPR Framework”) to enable U.S. companies to satisfy the requirement under GDPR that adequate protection be given to Personal Information transferred from the EU to the United States or other non-EEA countries. The EU also has recognized the EU-U.S. GDPR Framework as providing adequate data protection. The United States Department of Commerce and the Federal Data Protection and Information Commissioner of Switzerland have agreed on a similar set of data protection principles (the "Swiss-U.S. Privacy Shield Framework") and frequently asked questions (collectively the “Swiss-U.S. GDPR Framework”) to enable U.S. companies to satisfy the requirement under Swiss law that adequate protection be given to Personal Information transferred from Switzerland to the United States.

Bottomline Technologies complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States.  Bottomline Technologies has certified to the Department of Commerce that it adheres to the Privacy Shield Principles.  If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern.  To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/

Individuals whose personal data Bottomline Technologies processes under Privacy Shield have the right to access, correct or delete their Personal Information. Personal Information originating in the EU or Switzerland is not shared with third parties. Provisions regarding liability for actions of agent processors do not apply because Personal Information will not transfer to third parties. Individuals can contact CISO@bottomline.com with questions regarding limiting use or disclosure of their Personal Information.

In compliance with the Privacy Shield Principles, Bottomline Technologies commits to resolve complaints about our collection or use of your personal information.  EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Bottomline Technologies at: CISO@Bottomline.com

Bottomline has committed to cooperate with the panel established by the EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved Privacy Shield complaints concerning data transferred from the EU and Switzerland. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact the DPAs or FDPIC to file a complaint.  The services of the DPAs and FDPIC are provided at no cost to you. Under certain conditions, to invoke binding arbitration for complaints regarding Privacy Shield compliance not resolved by any of the other Privacy Shield mechanisms reference Annex I for additional information: https://www.privacyshield.gov/article?id=ANNEX-I-introduction

The Federal Trade Commission has jurisdiction over Bottomline Technologies’s compliance with the Privacy Shield.

Scope. This Privacy Policy (the "Policy") applies to all Personal Information received from consumers by Bottomline Technologies in the United States from the European Economic Area and from Switzerland, in any format including electronic, paper or verbal. Bottomline Technologies provides a wide range of technology products for the payment sectors such as payment processing, merchant settlement and business process services, security fraud prevention and account services to EEA Clients.

In order to provide these services, Bottomline Technologies receives information about the customers of these EEA Clients including but not limited to Personal Information that reveals race, ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or that concerns health or sex life or name, office and personal telephone numbers, company and home address, account numbers and transaction details, website login credentials, and email address (collectively, Personal Information).

Use of Personal Information. Bottomline Technologies uses Personal Information to perform its obligations under its EEA Client agreements, including the following activities:

• Processing opening, change or closing requests for individuals on behalf of the EEA Client;
• Processing opening, change or closing requests for accounts on behalf of the EEA Client;
• Processing transaction information on behalf of the EEA Client;
• Providing transaction screening services to EEA Clients;
• Providing data security services to EEA Clients;
• Providing account management services to EEA Clients; and
• Providing EEA Client support or implementation services for the above activities and for Bottomline Technologies software.
   

If Bottomline Technologies intend to use your information for a purpose that is incompatible with these purposes or if we intend to disclose it to a type of third party not previously identified, we will notify you and offer you the opportunity to opt out of such uses and/or disclosures. Bottomline Technologies will obtain assurances from its agents that they will safeguard Personal Information consistently with this Policy. Examples of appropriate assurances that may be provided by agents include: a contract obligating the agent to provide at least the same level of protection as is required by the GDPR. Where Bottomline Technologies has knowledge that an agent is using or disclosing Personal Information in a manner contrary to this Policy, Bottomline Technologies will take reasonable steps to prevent or stop the use or disclosure.

Supplemental Privacy Policies. Some areas, features and services on the Site may be offered on the condition that you view and agree to privacy terms and disclosures specific to those areas, features and services. Those specific privacy terms and disclosures will be deemed to supplement the terms and disclosures in this Privacy Policy and, if inconsistent, to supersede them.

Third-Party Content. Bottomline receives some of the Materials on this Site from third parties, including other users. All statements, opinions, advice, criticisms, offers or other information stated or expressed by any such third parties reflect solely the opinion and belief of the respective third party making such statement, and not that of Bottomline or any of its affiliates. Bottomline makes no endorsement, guarantee or other statement, express or implied, about such third-party Materials, including that any such third-party Materials are accurate, complete, timely, corroborated or otherwise useful or appropriate for any use or circumstance. You must independently evaluate any such third-party Materials yourself if you intend to rely in any way on the information contained in or provided in connection with such third-party Materials, and you alone must engage any appropriate professionals necessary or prudent in making that evaluation (which Bottomline recommends you do).

Third-Party Site Links. Bottomline Sites may provide links to other sites operated by third parties over whom Bottomline has no control and whose privacy policies may differ from ours. These links are provided for your convenience. If you browse on or submit Personal Information to any of those sites, information about you may be collected by them and will be governed by their privacy policies.

Eligibility. This Site is not offered to any person under the age of 13. If you are over the age of 13 but under the age of 18, you must either: (i) be an emancipated minor, or (ii) have obtained the legal consent of your parent or legal guardian to use this Site and enter into these Terms. Please do not submit such information to us, and as a parent or legal guardian, please do not allow your children to submit personal information without your permission.

Copyright Notice. Materials may be made available to you via this Site that comes from third parties not within Bottomline's control such as, but not limited to a message board. In connection with the Digital Millennium Copyright Act (DMCA), while Bottomline fully respects the copyright interest of all of Bottomline's users and all such third parties, Bottomline has no obligation to, and does not, scan Materials or any content uploaded, provided, posted or otherwise used in connection with this Site for the inclusion of illegal, infringing, improper, unauthorized or impermissible content. However, as a matter of policy, Bottomline does not allow Materials it knows are infringing another person or entity's copyright to remain on this Site. Our agent for notice of claims of copyright or other intellectual property infringement can be reached as follows,

By mail:

Attn: Copyright Agent

Bottomline Technologies, Inc.

325 Corporate Drive

Portsmouth, NH 03801

United States

Regional Information & Product/Services Marketing. Information Bottomline publishes on this Site may contain references or cross references to Bottomline products and services that are not announced or available in your country or region of the world. Such references do not imply that Bottomline intends to announce such products or services in your country. Please consult your local Bottomline business contact for information regarding the products and services which may be available to you.

How to withdraw your consent. You can withdraw your consent at any time. Please contact us if you want to do so. This will only affect the way we use information when our reason for doing so is that we have your consent. If you withdraw your consent, we may not be able to provide certain products or services to you.

Data Protection Statement. In accordance with our responsibilities under the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 you should be aware that the Personal Information you choose to provide will not be passed to any person or organization outside Bottomline. It will be taken that, in providing the information you agree to the use of your personal details to that extent.

How long we keep your Personal Information. We may also keep your data for longer than 10 years if we cannot delete it for legal, regulatory or technical reasons. We will only use your Personal Information for those purposes and will make sure that your privacy is protected.

Contacting Us. If you have questions about this Privacy Policy, please contact us at CISO@Bottomline.com