Merchant Privacy Notice
Information we collect
| Category | Examples |
|---|---|
| Business details | Legal and storefront names, business type, state of formation, year founded, website, description, services, category, addresses, hours, order estimates |
| Contact details | Work email and phone, owner or representative email and phone |
| Tax and identity | EIN (or SSN for sole proprietors), owner name, title, ownership percentage, date of birth, last 4 digits of SSN, home address, additional owners |
| Banking | Account holder name, account type, routing and account numbers |
| Licences and documents | Business licence, permits, insurance, liquor licence, and for medical merchants state licence, NPI, DEA, CLIA and related certificates |
| Agreements | Your acceptance of these terms and this notice, and when you gave it |
| Technical | A one-way scrambled form of your IP address, browser type, and the time you applied, used for security and abuse prevention |
How we use it
- To review your application and verify your business, owners and licences, as required by anti-fraud, "know your customer" and other laws.
- To set up and run your merchant account, list your business, route orders and dispatch drivers.
- To pay you, collect fees, handle refunds and chargebacks, and meet tax reporting duties.
- To provide support and send service and account messages.
- To protect customers, drivers, merchants and Concierge from fraud, abuse and safety risks.
- To comply with law, respond to lawful requests, and enforce our agreements.
We do not sell your information and do not use your sensitive identity or banking information for advertising.
Who we share it with
- Payments partner (Stripe), for identity verification, payouts and payment processing.
- Service providers who host our systems, send email, or help verify licences and identities, under contracts that limit their use of your data.
- Drivers and customers, but only what they need for an order, such as your business name, pickup address, hours and contact phone.
- Authorities, when required by law or to protect safety, and professional advisers under confidentiality.
- A buyer or successor, if Concierge is involved in a merger, acquisition or sale of assets, subject to this notice.
How we protect it
Applications are sent over encrypted connections. Tax IDs, dates of birth, SSN digits, home addresses and bank account and routing numbers are encrypted individually before they are stored, and only the last 4 digits are shown to our staff. Documents are kept in private storage that only our verification team can open through short-lived links. Staff access requires multi-factor sign-in and is limited by role and logged.
How long we keep it
We keep application information while your application is reviewed and for as long as you are a merchant. If an application is declined or withdrawn, we keep it for up to 2 years for fraud prevention and record-keeping, then delete or anonymize it. After an account closes we keep records for as long as tax, financial, and health-care laws require, generally up to 7 years, and delete or anonymize them afterwards.
Your choices and rights
You can ask to see, correct or delete information about you or your business, or ask how it is used, by emailing support@conciergeincgroup.com. We will verify your request and respond within 45 days. Some information must be kept to meet legal obligations or resolve disputes, and we will tell you if that applies. Depending on where you live, you may have additional rights under state law. We will not treat you differently for exercising them.
Changes and contact
We may update this notice and will post the new version here with its effective date. For material changes we will also notify active merchants by email. Questions: support@conciergeincgroup.com, Concierge Inc, Atlanta, Georgia.
