We collect information from you when you register on our site, place an order, respond to a survey, fill out a form or provide online banking or investing credentials.
When ordering or registering on our site, as appropriate, you may be asked to enter your: name, e-mail address, mailing address, phone number, credit card information or credentials for our online investing or banking accounts. You may, however, visit our site anonymously.
Any of the information we collect from you may be used in one of the following ways:
Blueleaf takes your security seriously. We use secure Web standards (HTTPS, SSL) to keep your confidential information secure between your web browser and our servers. We never store your usernames and passwords for third party sites on our servers, even in encrypted form. We encrypt all other personally identifiable information stored on our servers, including any Blueleaf credentials, connection information identifying where your information is stored with our third parties, and any transaction information.
Your data are stored on servers located in secure facilities that have successfully passed a SOC 2 Type II audit and follow the ISO 27002 information security framework. We and our partners are obligated to periodically submit to routine audits, including the physical security of our servers, network monitoring and security, and the security of our applications.
Cookies are small files that a site or its service provider transfers to your computer’s hard drive, through your Web browser. A cookie enables the sites or service providers systems to recognize your browser and capture and remember certain information.
If you prefer, you can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies via your browser settings. Like most websites, if you turn your cookies off, some of our services may not function properly. To best use our site, please permit cookies from blueleaf.com and *.blueleaf.com in your browser settings.
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims. We may also share such information if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Service, or as otherwise required by law. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.
Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
We are in compliance with the requirements of COPPA (Children’s Online Privacy Protection Act), because we do not collect any information from anyone under 13 years of age. Our website, products and services are all directed to people who are at least 13 years old or older.
Legal Bases for Processing EU Users’ Personal Information
We only process your information when we have a legal basis to do so. That is, we will only process your Personal Information when:
• We need it to provide you the Services;
• You give us consent for a specific purpose; or
• It satisfies Blueleaf’s legitimate interests (which are not overridden by your data protection interests), such as for improving, marketing, and promoting the Services and protecting our legal rights;
• We need to process your data to comply with our legal obligations.
You have control over your Personal Information. Below are the rights you have and the steps you can take to exercise them. Please note that your rights may be limited in certain cases: for example, if fulfilling your request would reveal information about another person, or if you ask to delete information which we or your employer are permitted by law or have compelling legitimate interests to keep, and it may take time for us to investigate your request. If you believe that we are not respecting your rights with regard to your Personal Information, you may lodge a complaint with your local supervisory authority.
Right to Access
You have a right to request a copy of the Personal Information that Blueleaf holds. To request this information, please email us at firstname.lastname@example.org.
Right to Rectification
If you believe that any Personal Information that Blueleaf holds is incorrect, you have the right to correct that information. If you have any concerns regarding the accuracy of your information, please email us at email@example.com.
Right to Erasure, Restriction, or Objection to Processing
If you believe we do not have the right to process your information or you object to our processing for a particular purpose, or if you want us to erase your Personal Information altogether, please email us at firstname.lastname@example.org.
Right to Withdraw Consent
If you gave us consent to process your Personal Information for a particular purpose, you have the right to withdraw that consent by emailing us at email@example.com. Your withdrawal of consent does not affect the lawfulness of our processing of your Personal Information prior to the withdrawal.
You have the right to obtain the Personal Information that you have directly submitted to Blueleaf in a format you can transfer to another service provider. If you want to exercise this right, please email us at firstname.lastname@example.org.
Contact Information for the Data Controller
Blueleaf Wealth, Inc.
745 Atlantic Ave, 8th Floor
Boston, MA 02111
This policy was last modified on March 1, 2019.