What This Privacy Policy Covers
This policy covers how EPX treats personal information that EPX collects and receives, including information related to your past use of EPX products and services. Personal information is information about you that is personally identifiable like your name or email address and that is not otherwise publicly available.
Information Collection
We collect, store and process your personal information on servers located in the United States. EPX collects no information from you on its marketing site, however EPX collects some minimal personal information used for positive identification when your Web Account is created, and when you sign on to WebSuite for the first time. Once you register to use our services, you are no longer anonymous to us.
EPX may set and access cookies on your computer. The information in these cookies is not shared with any third party. EPX automatically receives and records information on our server logs from your browser, including your IP address, EPX cookie information, and the page you request. EPX does not track the web sites that you visit before or after you leave the EPX site.
Information Use
EPX uses information for the following general purposes:
- Provide appropriate information based on security level privileges;
- Verify your identity in the event of a lost or forgotten password;
- Improve our product and services;
- Contact you with information regarding the EPX products or services you use;
- Provide reporting for EPX’s, EPX’s sponsor bank’s and your company’s administrators of your Web Account.
We limit access to personal information about you to employees who we believe reasonably need to come into contact with that information to provide products or services to you or in order to do their jobs, or who require it to fulfill customer service requests.
Information Disclosure
EPX does not rent, sell, or share personal information about you with other people or nonaffiliated companies, except under the following circumstances:
- We respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims;
- We believe it is necessary to share information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of EPX's terms of use, or as otherwise required by law;
- We share your information with our parent, subsidiaries and / or joint ventures to help coordinate the services we provide to you, enforce our terms and conditions, and promote trust and safety;
- We transfer information about you if EPX is acquired by or merged with another company. In this event, EPX will notify you before your information is transferred and becomes subject to a different privacy policy.
Your personal information other than Name is not viewable by any other EPX WebSuite user, including those with administrative privileges.
Changes to this Privacy Policy
EPX may update this policy. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address specified in your EPX Web Account or by placing a prominent notice on our site.
Information Security
EPX is committed to handling your personal information with high standards of information security. We restrict access to your personally identifiable information to employees who need to know that information in order to provide products or services to you. We maintain physical, electronic and procedural safeguards that comply with industry regulations to guard your nonpublic personal information. We test our security systems regularly and also contract with outside companies to audit our security systems and processes. The security of your EPX Web Account information also relies on your protection of your EPX password. You may not share your EPX password with anyone. EPX will never ask you to send your password or other sensitive information to us in an e-mail, though we may ask you to enter this type of information on the EPX web site.
Accessing and Changing Your Information
You can review the personal information provided to EPX by you and your administrator at any time by logging in to your Web Account on EPX’s web site’s Change Account Profile page of the "Web Account" link. You can also make any desired changes to such information by logging in to your Web Account, selecting the Change Account Profile option and making and saving the appropriate changes.
Inactive Accounts
If your Web Account is made inactive, EPX will mark your account as "Inactive," but will keep your account information in our database. This is necessary in order to deter fraud and to retain the linkage of your account to the actions taken under it. However, if your account is made inactive, your personally identifiable information will not be used by us for any further purposes, nor sold or shared with third parties, except as necessary to prevent fraud and assist law enforcement, or as required by law.
Retention
Please note that any information that we have copied may remain in back-up storage for some period of time, even if your Web Account has been made inactive. This may be the case even though no information about your account remains in our active user databases.
