Privacy Policy

Introduction

SFC+ Inc. (“SFC+,” “we,” “us,” or “our”) respects yourprivacy. This Privacy Policy explains how we collect, use, disclose, retain,and protect personal information when you visit www.sfc.plus, use the SFC+mobile app, take part in promotions, contact us, or use our features andservices (together, the “Services”). It also explains the privacy choices andrights that may be available to you.This Policy covers personal information SFC+ processes inconnection with the Services. Merchants, payment providers, remittanceproviders, app stores, and other third parties may collect or use informationunder their own privacy notices.

This Policy does not govern their independent practices, so please review their notices when using their services.

The information we collect depends on the SFC+ services you use. This may include information needed to facilitate online purchases,loyalty rewards, bill payments, remittances, donations, and other transactions.Some services are provided with third-party partners, which may collect andprocess information under their own privacy policies. We will provide anadditional notice before you use a service when required or appropriate.

Please read this Policy alongside any additional noticeshown for a particular feature or transaction. If the additional noticedescribes a specific type of information processing in more detail, thatdescription applies to that feature or transaction.

Personal Information We May Collect

The information we collect depends on how you use SFC+ and which Services you choose. The categories below describe information we may collect; we do not collect every category from every user.

Information you provide

Identifiers and contact details, such as name, email address, telephone number, mailing address, account username, and other details you submit when registering or contacting us.
Account and profile information, such asregistration details, preferences, profile changes, and account-related communications.
Rewards and transaction information, such aspoints earned or redeemed, transaction date and amount, merchant or recipient details, transaction status, and related account references.
Customer support and correspondence information, including questions, complaints, feedback, and information you choose to provide in communications with us.
Promotion information, such as entries, eligibility details, or information submitted when participating in a contest, promotion, or offer.

Information collected from devices and use of the Services

Device and technical information, such as IP address, device type, operating system, browser type, app version, language, and identifiers made available by the device or platform.
Usage and log information, such as pages viewed, features used, referring pages, access times, session activity, crash reports, and interactions with the Services.
Approximate location information that may be inferred from an IP address or provided by your device, where enabled and permitted. We do not intend to collect precise geolocation unless a feature requires it and the relevant permission is obtained.

Information from other sources

We may receive information from merchants, service providers, analytics providers, app stores, promotion partners, or other parties where appropriate to operate the Services, validate a transaction or offer, prevent fraud, respond to requests, or comply with legal obligations.The exact information received depends on the feature and the relevant third party's practices.

Please do not submit sensitive personal information through general contact forms or email unless it is necessary and specificallyrequested through an appropriate channel.

How We Use Personal Information

We may use personal information for the following purposes, as applicable:

To create, administer, authenticate, and maintain user accounts.
To provide rewards, points, promotions, merchant offers, transaction history, notifications, and other requested Services.
To process and document transactions, respond to questions, troubleshoot issues, and provide customer support.
To communicate about accounts, transactions, service changes, policy updates, security notices, and other service-related matters.
To send marketing or promotional communications where permitted by law and, where required, with your consent. You can opt out of marketing communications as described below.
To understand how the website and app are used, measure performance, diagnose errors, improve functionality, and developServices.
To detect, investigate, prevent, and address fraud, unauthorized activity, security incidents, misuse, and violations of ourterms.
To enforce agreements, protect the rights and safety of users and others, establish or defend legal claims, and comply with applicable laws, lawful requests, and regulatory obligations.
For other purposes disclosed to you at the time information is collected or with your direction or consent.

Cookies, Analytics, and Similar Technologies

SFC+ and its providers may use cookies, software development kits (SDKs), pixels, log files, and similar technologies to keep the Services functioning, remember preferences, understand usage, measure campaign effectiveness, and improve the user experience. Your browser or device may provide settings to manage certain technologies, although disabling them may affect functionality.

Google Analytics

Google Analytics, a web analytics service provided by GoogleLLC, helps measure website traffic and understand how visitors use the website.It may collect information such as visits, page views, and engagement.Depending on the services and settings in use, Google may process this information in connection with other Google services, including advertising services. For more information, review Google’s Privacy Policy and Google’s information about Google Analytics data practices.

Mixpanel

Mixpanel, a web and mobile analytics service provided by Mixpanel, Inc., helps us understand how people use the website and app, evaluate features, and improve the user experience. Depending on how the service is configured, it may collect information about interactions with theServices. For more information, review Mix panel’s applicable terms and privacy documentation, including its information about Do Not Track preferences.

SFC+ and its providers may also use cookies, software development kits (SDKs), pixels, log files, and similar technologies to keep the Services functioning, remember preferences, understand usage, measure campaign effectiveness, and improve the user experience. Your browser or device may provide settings to manage certain technologies, although disabling them may affect functionality.

Some browsers offer “Do Not Track” signals, but there is no single standard for responding to all such signals. Where applicable law requires us to recognize a browser-based opt-out preference signal, such as Global Privacy Control, we will do so as required by law.

How We Disclose Personal Information

We may disclose personal information to the following categories of recipients, to the extent necessary for the purposes described in this Policy:

Service providers and contractors that support hosting, cloud storage, analytics, customer support, communications, security, fraud prevention, and technical operations.
Merchants and promotion partners, where needed to administer rewards, verify eligibility, redeem points, deliver offers, or complete a user-requested activity.
Transaction, payment, remittance, or otherservice partners, where applicable to the specific service or transaction requested by the user.
Professional advisers, auditors, insurers, and similar parties where reasonably necessary for their services and subject to appropriate confidentiality duties.
Government agencies, regulators, law enforcement, courts, or other parties when required or permitted by law, legal process, or to protect rights, safety, and security.
A successor, purchaser, or other relevant party in connection with a proposed or completed merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to applicable law.
Other parties at your direction or with your consent.

We use contractual and operational safeguards appropriate to the information and the circumstances of the disclosure. Service providers that handle information on our behalf may use it only for authorized purposes, consistent with our agreements and applicable law.

Sale, Sharing, and Targeted Advertising

Some state privacy laws define “sale,” “sharing,” andtargeted advertising broadly. Depending on how our analytics, advertising, andpartner technologies are configured, certain disclosures may fall within these definitions even when no money changes hands. Where required, we will provide a“Do Not Sell or Share My Personal Information,” “Do Not Sell My Data,” or “YourPrivacy Choices” mechanism for applicable opt-outs.

If applicable law gives you the right to opt out of the saleor sharing of personal information or targeted advertising, you may submit are quest through the relevant privacy choices link on our website, where available, or contact us using the information in Section 15. We will not unlawfully discriminate against you for exercising a privacy right.

Marketing and Communications

We may send service-related communications necessary tooperate your account or provide the Services. These may include transaction notices, security alerts, account information, and material changes to our terms or policies. You may not be able to opt out of essential service communications while maintaining an active account.

You may opt out of promotional emails by using the unsubscribe link in the message or contacting info@sfc.plus. If promotional text messages are offered, follow the opt-out instructions in the message or contact us. Message and data rates may apply where applicable. Opting out of marketing does not necessarily stop non-promotional service messages.

Data Retention

We keep personal information for as long as reasonablynecessary to provide the Services, maintain business and transaction records, resolve disputes, enforce agreements, prevent fraud, and meet legal, tax, accounting, regulatory, or contractual obligations. How long we keep information depends on its type, why we collected it, and any applicable legal requirements.

When information is no longer required, we will take reasonable steps to delete it, de-identify it, or securely dispose of it, subject to legal requirements and legitimate record keeping needs. A request to delete information may not require deletion of records that SFC+ is legally required or otherwise permitted to retain.

Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include access controls, authentication, encryption where appropriate, monitoring, and oversight of service providers. No website, app, or method of transmitting information is completely secure.

You are responsible for protecting your account credentials and notifying us promptly if you suspect unauthorized access to your account.SFC+ will investigate suspected security incidents and provide notifications when and as required by applicable law.

Privacy Rights and Choices

Your privacy rights depend on where you live, which Services you use, and which laws apply. Depending on the law and subject to verification and legal exceptions, you may have the right to:

Right to know or access: request information about the personal information collected, used, disclosed, sold, or shared.
Right to delete: request deletion of personal information, subject to exceptions.
Right to correct: request correction of inaccurate personal information.
Right to opt out: opt out of sale or sharing of personal information or targeted advertising, where applicable.
Right to limit certain uses or disclosures of sensitive personal information, where applicable.
Right to data portability or a copy of certain information, where applicable.
Right to appeal a decision on a privacy request, where required by applicable law.
Right to non-discrimination for exercising applicable privacy rights.

To submit a request, contact us using the details in Section15 and describe the request and the state or country in which you reside. We may need to verify your identity and authority before acting. We will respond within the period required by applicable law. If we cannot fulfill a request, we will explain the reason where required. Authorized agents may submit requests where permitted by law and subject to verification.

You may also be able to manage certain information through your SFC+ account. Please keep your account information accurate and notify usof relevant changes.

U.S. State Privacy Rights

Depending on the state where you live, you may have additional rights under applicable law. These may include the right to accessor obtain a copy of personal information, correct inaccurate information, request deletion, opt out of certain sales or targeted advertising, and appeal a decision on a privacy request. Not every right applies in every state, and some rights are subject to eligibility requirements, identity verification, and legal exceptions.

To submit a privacy request, contact us using the information in Section 15. We will review and respond within the time required by applicable law. If the law gives you a right to appeal our decision, we will explain how to do so and provide any required request or opt-out methods.

State-Specific Privacy Provisions

California

California: If the California Consumer Privacy Act, as amended (CCPA), applies to SFC+ and your information, you may have rights to know/access, delete, or correct certain personal information; obtain a portable copy; opt out of certain sales or sharing, including certain targeted advertising; and limit certain uses and disclosures of sensitive personal information. These rights are subject to the law’s requirements and exceptions.

Hawaii

Hawaii: Applicable Hawaii and federal laws may provide privacy, data-security, and breach-notification protections. The rights and protections available depend on the information involved and the service being used.

Arizona

Arizona: Applicable Arizona and federal laws may provide protections related to data security, data breaches, consumer fraud, and certain types of information. The protections available depend on the information and activity involved.

Nevada

Nevada: Nevada law provides certain privacy protections, including requirements related to some online data practices and consumer health data. Any applicable opt-out or other rights depend on the type of information and activity covered by the relevant law.

Texas

Texas: If the Texas Data Privacy and Security Act (TDPSA)applies, residents may have rights to access, correct, or delete certain personal data, obtain a copy of it, and opt out of certain targeted advertising, sales of personal data, or profiling. These rights are subject to the Act’s requirements and exceptions.

Illinois

Illinois: Illinois law provides certain privacy and data-security protections. The Illinois Biometric Information Privacy Act(BIPA), for example, imposes requirements on covered entities that collect or otherwise obtain covered biometric identifiers or information. This statement does not mean that SFC+ collects biometric information; if such information is collected, the applicable requirements must be assessed and followed.

Washington

Washington: Washington law provides certain privacy and data-security protections. The My Health My Data Act may impose additional notice, consent, access, deletion, and sharing requirements when covered consumer health data is involved. This statement does not mean that SFC+collects consumer health data; any such activity must be assessed under the applicable law.

The summaries below are intended to explain certain state-specific rights in plain language. They do not replace applicable law, and the rights available to you depend on the law’s requirements and exceptions. If a law requires a separate notice or a specific way to submit a request, appeal a decision, or opt out, we will provide it as required. Some services or transactions may also have their own privacy notices.

Children’s Privacy

The Services are intended for individuals who are at least18 years old, consistent with the eligibility statement in the existing SFC+terms. We do not knowingly seek to collect personal information online from children under 13. If you believe a child has provided personal information to us, contact us so we can review the matter and take appropriate action as required by law.

International Users and Data Transfers

Depending on where you access the Services and where our providers operate, personal information may be processed in the United States or other jurisdictions, subject to applicable legal requirements. Privacy laws in those jurisdictions may differ from the laws where you live.

Third-Party Websites and Services

The Services may link to websites, apps, or services operated by third parties. We do not control their privacy practices. Review the applicable third party’s privacy notice before providing information to it.A third party’s processing of information under its own policies is not governed by this Policy.

Changes to This Policy

We may update this Policy to reflect changes in ourServices, practices, technologies, or legal obligations. When we make changes, we will revise the “Last Updated” date and post the revised Policy on our website. Where required by law, we will provide additional notice or obtain consent. We encourage you to review this Policy periodically.

Contact Us

If you have questions about this Policy or want to submit a privacy request, contact us:
SFC+ Inc.
Email: support@sfc.plus
Phone: +1 (888) 421-2838
Mail: 2883Surveyor St, Pomona, CA 91768
Website: https://sfc.plus/privacy-policy