Effective Date / Last updated: FEB 28th 2024

Apollo Recovery Services Inc. (“Apollo”, “we”, “our”, “us”) values and respects the privacy of individuals. This Privacy Policy (“Privacy Policy”) describes the types of information, including Personal Data, that Apollo processes as part of our websites, including https://www.apollorecovery.net/ and other online tools such as the CSP Portal, DCA Portal, MNO Portal (collectively, the “Services”). This Privacy Policy outlines individual rights regarding Apollo’s collection, use, and disclosure of Personal Data related to the Services.

As used in this Privacy Policy, the term “Personal Data” means information that identifies an individual or a household directly or indirectly, by reference to identifier(s) such as name, identification number, location data, online identifier, or one or more factors specific to an individual’s physical, physiological, genetic, mental, economic, cultural, educational, commercial, professional, or social identity.

The terms of this Privacy Notice are not intended to supersede any corporate agreements in place with your employer or other organization that you are affiliated with, which has contracted to use Apollo services (“Agreement(s)”). In the event of a conflict between this Privacy Notice and such Agreement(s), the terms of the Agreement(s) will prevail.

If there are questions about our privacy practices, please refer to the end of this Privacy Policy for information about how to contact us.

I. PERSONAL DATA COLLECTION

a. Some Personal Data is collected from Users through the Services.

b. Types of Personal Data Collected:

  • Among the types of Personal Data collected through the Services, by Apollo itself or through third parties, are: Cookies; Usage Data; email address; first name; last name; phone number; and IP address.

  • Details of each type of Personal Data collected are provided in the dedicated sections of this Privacy Policy or through explanatory messages displayed prior to the data collection.

  • Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using the Services.

  • Unless specified otherwise, all Personal Data requested by the Services are required for a User to use the Services, and failure to provide this data may make it impossible for Apollo to provide the Services. In cases where the Services indicate that some Personal Data is not required, Users are free not to communicate this data without impacting the availability or the functionality of the Services.

  • Users who are uncertain about which Personal Data is required for the Services are welcome to contact Apollo.

c. Users are responsible for any third-party Personal Data obtained, published, or shared by such Users through the Services and confirm that they have the third party’s consent to provide such data to Apollo.

d. In addition to the information contained in this Privacy Policy, Apollo may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.

II. USE OF PERSONAL DATA AND PURPOSE OF PROCESSING

a. Apollo processes Personal Data, including sharing it with third parties, only when processing is necessary for the purposes of our legitimate commercial interests and performance of the Services as further described in this Section. Apollo does not share, sell, or disclose Personal Data that we collect, except when required by law or law enforcement.

b. Purposes for which each type of Personal Data is collected through the Services:

  • Providing the Services to Users

  • Performing analytics on the Services

  • Contacting the User

  • Displaying content from external platforms

  • Managing contacts and sending messages

  • Performing platform services and hosting

  • Managing registration and authentication

  • Performing tag management

  • Managing system logs and maintenance

  • Performing internal operations, such as improving the effectiveness of our Services

  • Conducting audits

  • Providing information to our representatives and advisors, such as our attorneys, accountants, and others to help us comply with legal, accounting, or security requirements

  • Transferring information as part of a merger or sale of the business

  • Resolving disputes between Users, customers, and Apollo

  • Protecting the rights, safety, and information of Apollo, our customers and their members, and third parties

  • Complying with our legal obligations, responding to enforcement requests, protecting Apollo’s rights and interests (or those of its Users or third parties), and detecting any malicious or fraudulent activity

c. A User’s Personal Data may be used for legal purposes by Apollo in court or in the stages leading to possible legal action arising from improper use of the Services. The User acknowledges and agrees that Apollo may be required to reveal Personal Data upon the request of public authorities.

d. Apollo may aggregate, combine, anonymize, and/or pseudonymize any data that we collect and process, including Personal Data. This may be done for the purpose of performing the Services, correcting data currently held by Apollo, expanding data sets, and research.

III. WHO CAN ACCESS PERSONAL DATA COLLECTED

a. Apollo will only disclose Personal Data as set forth in this Privacy Policy, as permitted by law, or with the User’s consent. Where third parties are processing Personal Data on our behalf, they will be required to agree, by contractual means or otherwise, to process the Personal Data in accordance with applicable law and to act only on Apollo’s instructions.

b. In addition to being accessible by Apollo, in some cases, Personal Data may be accessible to certain types of persons involved with the operation of the Services (administration, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by Apollo.

c. Apollo will not share, sell, or disclose Personal Data collected through the Services for any reason other than legal obligations, responding to enforcement requests, protecting Apollo’s rights and interests (or those of its Users or third parties), and detecting any malicious or fraudulent activity.

IV. MODE AND PLACE OF PROCESSING DATA

a. Apollo takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of Personal Data. Apollo utilizes industry-accepted reasonable security practices and has implemented reasonable technical and organizational measures to protect the confidentiality, security, and integrity of User’s Personal Data. The measures that Apollo has implemented take into account the current available security technologies, cost, and risk presented by the type of Personal Data Apollo processes. Although Apollo uses reasonable security measures to help protect Personal Data against unauthorized disclosure or loss, Apollo cannot guarantee the security of Personal Data transmitted to Apollo over the Internet. While Apollo strives to use commercially acceptable means to protect Personal Data, there is no guarantee that information may not be accessed, disclosed, altered, or destroyed.

b. The processing of Personal Data is carried out using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated herein or through the Services.

V. RETENTION OF PERSONAL DATA

a. Personal Data shall be processed and stored for as long as required by the purpose(s) it has been collected for.

  • Personal Data collected for purposes related to the performance of a contract between Apollo and the User (or User’s employer) shall be retained until such contract has been fully performed.

  • Personal Data collected for the purposes of Apollo’s legitimate business interests shall be retained as long as needed to fulfill such purposes.

  • Apollo may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn.

  • Apollo may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority. b. Once the applicable retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to correct, and the right to data portability cannot be enforced after the expiration of the applicable retention period.

VI. RIGHTS OF USERS

a. Users may exercise certain rights regarding their Personal Data processed by Apollo.

b. In particular, Users have the right to do the following:

  • Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.

  • Object to processing of their Personal Data. Users have the right to object to the processing of their Personal Data if the processing is carried out on a legal basis other than consent.

  • Access their Personal Data. Users have the right to learn if their Personal Data is being processed by Apollo, obtain disclosures regarding certain aspects of such processing and obtain a copy of the Personal Data undergoing processing.

  • Verify and seek rectification. Users have the right to verify the accuracy of their Personal Data and ask for it to be updated or corrected.

  • Restrict the processing of their Personal Data. Users have the right, under certain circumstances, to restrict the processing of their Personal Data. Where Users have and exercise such right, Apollo will not process a User’s Personal Data for any purpose other than storing it.

  • Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Personal Data from Apollo.

  • Receive their Personal Data and have it transferred to another controller. Users have the right to receive their Personal Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Personal Data is processed by automated means and that the processing is based on the User’s consent, on a contract which the User is part of, or on pre-contractual obligations thereof.

  • Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

c. Where Personal Data is processed for a public interest, in the exercise of an official authority vested in Apollo, or for the purposes of the legitimate interests pursued by Apollo, Users may object to such processing by providing grounds related to their particular situation to justify the objection.

d. Should a User’s Personal Data be processed for direct marketing purposes, they can object to that processing at any time without providing any justification. Apollo does not process Personal Data collected for direct marketing purposes.

e. Any requests to exercise User rights can be directed to Apollo through the contact details provided in this Privacy Policy.

VII. COOKIE POLICY

When a User first accesses the Services from certain jurisdictions, the User will receive a message advising the User that cookies are in use. By clicking “accept,” the User agrees to Apollo’s use of cookies as described in this Privacy Policy. If the User does not wish to receive cookies, the User may withdraw their consent or set their browser to reject cookies or to alert the User when a cookie is placed on their device. If the User withdraws consent, limits, or disables the use of cookies when the User visits or uses the Services, the User may not be unable to use the full functionality of the Services. For more information about our specific use of cookies, please reference our “Cookie Policy,” which is attached as Schedule 1 (Cookie Policy) and incorporated herein by reference. Apollo may also permit select third parties to use cookies to collect information about Users’ online activities across other websites or over time in order to assist us with Services analytics.

VIII. HOW “DO NOT TRACK” REQUESTS ARE HANDLED

The Services do not support “Do Not Track” requests. To determine whether any third-party services used by or linked to the Services honor “Do Not Track” requests, please read the privacy policies for those services.

IX. THIRD PARTY SERVICES

The Services may contain links to third party websites, applications, and services not operated by Apollo. These links are provided as a service and do not imply any endorsement by Apollo of the activities or content of these websites, applications, or services nor any association with their operators. Apollo is not responsible for the privacy policies or practices of any third party, including websites or services directly linked to or from our Services.

X. INFORMATION FOR CALIFORNIAN CONSUMERS

The California Consumer Privacy Act of 2018 (“CCPA”) provides several rights to California residents with regards to the collection, disclosure, sale, and deletion of their Personal Data. The Apollo Recovery Services California Privacy Notice set forth in Schedule 2 (California Privacy Notice) describes in more detail Apollo’s compliance with CCPA and how residents of California may exercise their CCPA Rights. If a User has questions about exercising their CCPA Rights, please contact us as set out below.

XI. USERS BASED IN THE EUROPEAN UNION OR THE UNITED KINGDOM

For purposes of the EU’s General Data Protection Regulation (“GDPR”), and the UK GDPR, the data controller is Apollo Recovery Services Inc., with an office at 1551 NW Quimby, Portland, Oregon.

Apollo is headquartered in the United States. By using any of the Services from outside the United States, Users acknowledge that their Personal Data will be accessed by Apollo or transferred to Apollo in the United States and to those entities listed in Section III of this Privacy Policy who are located around the world; and that User Personal Data will be transferred to, and stored and processed in, the United States or elsewhere in the world where Apollo servers are located.

XII. MINORS AND CHILDRENS’ PRIVACY

Apollo does not knowingly collect Personal Data from children under the age of 18. If Apollo learns that Personal Data of persons younger than 18 years-of-age has been collected through the Services, Apollo will take the appropriate steps to delete this information. If you are a parent or guardian and discover that your child or a minor under the age of 13 has posted, submitted, or otherwise communicated Personal Data to Apollo without your consent, then you may alert us at [email protected] so that we may take appropriate action to remove the minor’s Personal Data from our systems.

XIII. DEFINITIONS

a. “Data Processor”: The natural or legal person, public authority, agency, or other body that processes Personal Data on behalf of the controller, as described in this privacy policy. b. “Data Subject”: The natural person to whom the Personal Data refers. c. “European Union” or “EU”: Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area. d. “Usage Data”: Information collected automatically through the Services (or third-party services utilized for the Services), which can include: the IP addresses or domain names of the computers utilized by the Users who use the Services, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., the time spent on each page within the Services) and the details about the path followed within the Services with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User’s IT environment. e. “User”: The individual using the Services who, unless otherwise specified, coincides with the Data Subject.

XIV. MISCELLANEOUS

a. This privacy statement has been prepared based on provisions of multiple legislation, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

b. More details concerning the collection or processing of Personal Data may be requested from Apollo at any time. Please see our contact information for inquiries.

c. Changes to this Privacy Policy:

  • Apollo reserves the right to make changes to this Privacy Policy at any time by notifying its Users through the Services and/or – as far as technically and legally feasible – sending a notice to Users via any contact information available to Apollo. Users are strongly recommended to check the Services often, referring to the date at the top of this Privacy Policy for the last modification date.

  • Should changes to this Privacy Policy affect processing activities performed on the basis of the User’s consent, Apollo shall collect new consent from the User, where required.

d. Contact Information for Apollo/Data Controller

Apollo Recovery Services Inc., 1551 NW Quimby, Portland, Oregon

Apollo contact email: [email protected]