CREDO Mobile
CREDO Mobile is an American mobile virtual network operator headquartered in San Francisco, California.
Score
Citation
We share information with a variety of service providers that perform services on our behalf. For example, these service providers may include companies that, among other things, help us provide customer service, produce and deliver customer bills, provide telephone services, provide energy services, run credit checks, develop website interaction analytics, and deliver targeted advertisements. We only provide personal information to these service providers if it’s necessary for them to perform the tasks we’ve contracted with them to do. We require that these service providers secure and protect the information from unauthorized disclosure and limit their use to the contracted purposes.
Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.
Score
Notes
This policy doesn't require the service to allow you to delete your data
This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).
Note that whether the policy allows sharing aggregated user data does not affect this question.
If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).
If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).
Score
Citation
4.1 Third-Party Sharing
While CREDO does not sell your information, from time to time we share your personal information with third parties at your direction or with your explicit permission. We also need to share your information with others on a more regular basis in order operate our business and provide services to you. This section describes the categories of third parties CREDO may share your information with in the regular course of business. Capitalized terms refer to the categories of personal information described in Section 2.
4.1.1 Affiliated Companies
CREDO is a collection of affiliated companies all owned by one parent company. To operate more efficiently, we share staff, facilities, and systems among those companies. Accordingly, we also share personal information among those companies in order to provide, analyze, improve, and develop our services. This applies to all categories of personal information we collect.
We share information with a variety of service providers that perform services on our behalf. For example, these service providers may include companies that, among other things, help us provide customer service, produce and deliver customer bills, provide telephone services, provide energy services, run credit checks, develop website interaction analytics, and deliver targeted advertisements. We only provide personal information to these service providers if it’s necessary for them to perform the tasks we’ve contracted with them to do. We require that these service providers secure and protect the information from unauthorized disclosure and limit their use to the contracted purposes.
Depending on the service provider, this sharing may include your Account Information (including Contact Information, Payment Information, Credit Check Information, and Order Information, and Action Information), additional information you choose to provide (including Advocacy Information, Contribution Information, and Other Information), information we collect automatically (including your Phone Records, Device Information, Port Information, Billing Information, Account Number, Interaction Analytics, Inferences from Other Information, Identifiers and Device Information, Geo-location and Site Use Information), and information we collect from third parties (including Credit Information and List Information).
4.1.3 Government Regulators and Law Enforcement
CREDO may disclose your information to a government regulator or other authority to comply with our legal obligations in case of a regulatory audit or investigation.
We will also release personal information pursuant to a valid U.S. subpoena, summons, or court order. We may release name and address information to a governmental entity without a subpoena or court order in the case of a good faith belief that an emergency involving danger of death or serious physical injury to any person requires disclosure without delay. We work to maintain a balance between complying with our legal obligations and protecting the privacy of our members’ information against improper requests. So, unless specifically prohibited by court order or statute, we will notify you in writing of a request prior to releasing information in response to a subpoena, summons, or court order, or after the fact, in the case of an emergency request. For more information, please see our transparency report.
4.2 Company Sale or Change of Corporate Control
If CREDO enters into a merger, acquisition, bankruptcy, receivership, sale of all or a portion of its assets, your customer information will also be transferred as one of the business assets of CREDO.
4.3 Aggregated or Anonymized Information
CREDO and/or its third party providers may provide aggregated or anonymized information such as the number of users who visit a particular linked site to other parties.
Score
Citation
CREDO may disclose your information to a government regulator or other authority to comply with our legal obligations in case of a regulatory audit or investigation.
We will also release personal information pursuant to a valid U.S. subpoena, summons, or court order. We may release name and address information to a governmental entity without a subpoena or court order in the case of a good faith belief that an emergency involving danger of death or serious physical injury to any person requires disclosure without delay. We work to maintain a balance between complying with our legal obligations and protecting the privacy of our members’ information against improper requests. So, unless specifically prohibited by court order or statute, we will notify you in writing of a request prior to releasing information in response to a subpoena, summons, or court order, or after the fact, in the case of an emergency request. For more information, please see our transparency report.
Score
Citation
To protect the security of your personal information, we use Transport Layer Security (TSL), which ensures all information is encrypted while being transmitted across the Internet between CREDO’s system and your web browser.
Please note that, whenever CREDO handles information that you enter on its sites or on its apps, regardless of where this occurs, we take steps to ensure that your information is treated securely and in accordance with the relevant Terms of Service and this Privacy Policy. Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, CREDO cannot ensure or warrant the security of any information you transmit to us or from our online products or services or on our apps, and you do so at your own risk. Once we receive your transmission, we make our best effort to ensure its security on our systems.
Our sites and apps have security measures in place to protect the loss, misuse and alteration of the information under our control. CREDO follows all state and federal guidelines protecting customer information. Additional protections apply for certain information CREDO collects and maintains about the telecommunications services you obtain from CREDO and how you use those services. This information is categorized by the federal government as Customer Proprietary Network Information or CPNI, and its use and sharing is governed by specific laws.
Score
Citation
Effective January 1, 2020
Note that all companies operating in the EU are subject to Art. 33 of the GDPR, which requires companies to notify their data protection authority of a data breach within 72 hours of discovering it.
Score
Notes
This policy doesn't require the service to alert you in the event of a data breach
Score
Citation
This policy may be changed from time to time. Please refer to the effective date of the policy to determine whether changes have been introduced. To inquire about the content of such changes, or if you have any questions about this Privacy Policy, the practices of CREDO sites or apps, or your dealings with our web sites or apps, please contact:
Customer Service Team
101 Market Street, Suite 700
San Francisco, California 94105
Customers: 800-411-0848
Non-customers: 800-555-7774
credo.service@credomobile.com
This includes the use of data brokers and independent verification authorities (such as background check providers).
Score
Citation
2.3 Additional Information We Collect About You From Third Parties
• Credit Information: When you sign up for service with CREDO Mobile, we may collect your credit score and other credit information from third party credit agencies.
• List Information: From time to time, we obtain lists of consumer names, addresses, email addresses, and/or phone numbers to market our products and services.
• Credit Card Product Information: If you have one of our branded credit cards, as long as your card active is we receive an annual notice from the issuing bank that includes your name, address, phone number, and the last four digits of your social security number. This file lets us know that you are still a user of our product, but CREDO does not keep or otherwise use the file or the information it includes.
Score
Citation
3.1 Purposes
This section describes the categories of purposes for which CREDO uses the information we collect about you. Capitalized terms refer to the categories of personal information described in Section 2.
3.1.1 We Use Your Information to Provide the Services You’ve Requested
This might include things like completing a transaction or order, creating and managing member accounts, enabling you to use our services, enabling or carrying out the political action you’ve volunteered for, managing our donations program, sending you account-related messages, providing customer service, producing bills, and providing you information about your telephone usage.
To do this, we may use your Account Information (including Contact Information, Payment Information, Order Information, and Action Information), information we collect automatically (including your Phone Records, Device Information, Port Information, Billing Information, Account Number, Interaction Analytics, Inferences from Other Information, Identifiers and Device Information, and Site Use Information), and information we collect from third parties (including Credit Card Product Information).
3.1.2 We Use Your Information to Improve, Audit, and Develop Our Products and Services
This might include things like ensuring the proper functioning of accounts, services, and actions, improving the usability of existing services, developing new products and features, planning political actions, targeting action emails, conducting research and testing, and administrating website and service data analytics that measure the performance of our products, services, and actions.
To do this, we may use your Account Information (including Contact Information, Payment Information, Order Information, and OrderAction Information), additional information you choose to provide (including Advocacy Information, Contribution Information, and Other Information), and information we collect automatically (including your Phone Records, Device Information, Port Information, Billing Information, Account Number, Interaction Analytics, Inferences from Other Information, Identifiers and Device Information, and Site Use Information).
3.1.3 We Use Your Information to Protect CREDO’s Services, Member Accounts, and Member Information
This might include verifying users who access accounts and personal information, ensuring the technical security of your account and personal information, ensuring the security of our business, detecting and preventing fraud, abuse, or other security incidents, and enforcing our Customer Agreement, Terms of Service, and other agreements and policies.
To do this, we may use your Account Information (including Contact Information, Payment Information, Credit Check Information, Order Information, and Action Information), additional information you choose to provide (Contribution Information, and Other Information), information we collect automatically (including your Phone Records, Device Information, Port Information, Billing Information, Account Number, Interaction Analytics, Inferences from Other Information, Identifiers and Device Information, Geo-Location, and Site Use Information), and information we collect from third parties (including Credit Information and List Information).
3.1.4 We Use Your Information to Comply With Our Legal Obligations
This might include things like complying with federal, state, and local laws and regulatory requirements, complying with audits, and resolving disputes.
To do this, we may use your Account Information (including Contact Information, Payment Information, Credit Check Information, Order Information, and Action Information), additional information you choose to provide (including Advocacy Information, Contribution Information, and Other Information), information we collect automatically (including your Phone Records, Device Information, Port Information, Billing Information, Account Number, Interaction Analytics, Inferences from Other Information, Identifiers and Device Information, Geo-location, and Site Use Information), and information we collect from third parties (including Credit Information, List Information, and Credit Card Product Information).
3.1.5 We Use Your Information to Customize Our Marketing
This might include things like providing you information about our products and services, improving the layout and content of our sites, developing special offers and promotions that we believe might interest you, targeting advertisements, and administrating website and service data analytics that measure the performance of our products, services, and actions.
To do this, we may use your Account Information (including Contact Information, Payment Information, Order Information, and Action Information), information we collect automatically (including your Billing Information, Account Number, Interaction Analytics, Identifiers and Device Information, Inferences from Other Information, Geo-Location, and Site Use Information), and information we collect from third parties (including Credit Information, List Information, and Credit Card Product Information).
3.1.6 We May Use Your Information for Other Business Purposes
This might include any other purpose that we disclose to you at the time we collect the information or that you have otherwise consented to.
3.2 Email Policy
CREDO uses your e-mail address to communicate with you about your account, the services you’re enrolled in, actions and activism opportunities you may be interested in, your vote on donations distributions, CREDO newsletters and tips, and special marketing offers. You can opt out of receiving non-account-related communications from us by following the opt-out instructions in our e-mails or by visiting https://www.credomobile.com/subscriptions/.
3.3 Call/SMS Policy
By signing up for CREDO Mobile Service through our website or by opting in to any of our optional offers and activism opportunities contact lists, you give express permission for us to contact you on your device. Message and data rates may apply if your device is not using CREDO Mobile service. Text “stop” to any promotional or list text to opt out of non-account-related SMS communications from us.
By entering your phone number on any Credo Action call campaign page on the Sites, you give express permission to call that phone number for the purpose of connecting you with legislators or decision-makers.
3.4 Cookie Policy
Cookies are small text files containing information that are stored by your web browser. This technology allows us to remember you when you visit or take actions on our sites. CREDO uses cookies to identify return visitors, allow you to log in to your account, control the serving of ads to you while you are online, and track and analyze how our websites are being used. You can set your browser to not accept cookies, but this may limit your ability to use our websites.
Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.
Score
Citation
3.2 Email Policy
CREDO uses your e-mail address to communicate with you about your account, the services you’re enrolled in, actions and activism opportunities you may be interested in, your vote on donations distributions, CREDO newsletters and tips, and special marketing offers. You can opt out of receiving non-account-related communications from us by following the opt-out instructions in our e-mails or by visiting https://www.credomobile.com/subscriptions/.
3.3 Call/SMS Policy
By signing up for CREDO Mobile Service through our website or by opting in to any of our optional offers and activism opportunities contact lists, you give express permission for us to contact you on your device. Message and data rates may apply if your device is not using CREDO Mobile service. Text “stop” to any promotional or list text to opt out of non-account-related SMS communications from us.
By entering your phone number on any Credo Action call campaign page on the Sites, you give express permission to call that phone number for the purpose of connecting you with legislators or decision-makers.
Score
Citation
CREDO primarily collects personally identifiable information from and about individuals who use our services, take actions with us, visit our websites or mobile applications, or join our marketing and activism lists. This section describes the categories of personal information CREDO collects and the ways that CREDO collects them.
CREDO does not target minors as customers or activists, and does not intentionally collect information from people under 13 years of age.
2.1 Information You Provide to Us
2.1.1 Account Information
When you sign up for services or take an action with CREDO, you provide information that we use to open an account, process an order or action, or establish a membership with CREDO. The information you provide varies depending on the service you’ve requested, but may include:
• Contact Information: Your name, email address, zip code, billing and shipping addresses, and phone numbers
• Payment Information: Your bank account or credit card information
• Credit Check Information: Your full name, Social Security Number, and date of birth
• Order Information: A list of the products you purchase from us, the amount and types of telephone services you enroll in, and the type of energy services you enroll in—this may include the date and method by which you joined CREDO and the dates of any purchases and account changes
• Action Information: A list of the CREDO petitions you sign, the CREDO donations groups you vote for, contributions you make through CREDO, and any other actions you volunteer for through CREDO—this may include the date and method by which you joined CREDO and the dates of any actions and account changes
2.1.2 Additional Information You Choose to Provide
In the course of using CREDO’s services or taking an action with CREDO, you may choose to provide us with additional personal information, including:
• Advocacy Information: When you take an action with CREDO Action, like signing a petition, responding to a survey, volunteering to make a call, voting on donations groups, or registering for an event or protest, taking this action may provide us information about your political or personal beliefs.
• Contribution Information: When you make a monetary contribution through CREDO, you may provide your Contact Information, plus your employer, occupation, the amount, time, and purpose of the contribution
• Other Information: When you engage in open ended communication with CREDO by filling in a form on our site, responding to a survey from us, entering a contest or sweepstakes, posting on a CREDO community forum, or communicating directly via phone, email, or mail with a CREDO representative, you may voluntarily choose to provide us with personal information that may be collected and stored along with the communications themselves.
2.2 Information We Collect Automatically
2.2.1 Information We Collect Automatically When You Use CREDO Telephone Services
When you are enrolled in one of our telephone services, we receive information from our underlying carriers about your usage of those services, including:
• Phone Records: The phone numbers you call or text, the phone numbers you receive calls or texts from, the timing and duration of your calls and texts, the timing and amounts of your data usage, the city and state or country your phone is located in at the time of a call, and billing information related to your international roaming usage
• Device Information:The models, instrument numbers, serial numbers, and activation statuses of your connected mobile devices and SIM cards
• Port Information: Requests from another carrier to port your number from CREDO to the other carrier and responses from other carriers to requests to port your number from another carrier to CREDO
When you are enrolled in one of our telephone services, we also generate account and billing data based on the services and plans you’re enrolled in, including:
• Billing Information: A monthly bill with itemized charges for mobile and/or long distance telephone services based on your usage records
• Account Number: A number CREDO assigns to mobile and long distance telephone accounts
CREDO is committed to minimizing the data it collects and stores about how you use our telephone service. Accordingly, we want you to be aware that:
• CREDO does not receive, store, or assign precise handset location information, handset IP addresses, or logs of websites visited by your phone in the course of providing telephone service.
• CREDO does not receive or store the content of customer communications sent using our services except customer communications directed to us for customer service purposes.
2.2.2 Information We Collect Automatically When You Visit Our Websites
We use website cookies, pixels, and similar tools to identify return visitors to our websites and automatically collect information about you when you visit any of our websites, including:
• Identifiers and Device Information: Your IP address, device type, operating system, browser type, and internet service provider
• Geo-location: city and country
• Site Use Information: Your referring URL, referring ad/campaign, time and date of any logins, which site pages you visit, and how you interact with them
• Do Not Track Signals: CREDO may receive “do not track” signals from your browser when you visit our websites. However, given the lack of a standard for interpreting those signals, we are not currently set up to respond to them.
2.2.3 Additional Information We May Collect Automatically
• Interaction Analytics: In addition to the Order Information and Action Information listed in Section 3.1.1, we keep a record of what emails we’ve sent you and when, the IP address of the device you used to open them, the links you’ve clicked in those emails, any CREDO Action issue areas you’ve taken action on and which partner organization, if any, referred you to CREDO.
• Inferences from Other Information: We keep a record of inferences about you or your account from the other information collected in this Section 2, including preferences, characteristics, behaviors, and evaluations
2.3 Additional Information We Collect About You From Third Parties
• Credit Information: When you sign up for service with CREDO Mobile, we may collect your credit score and other credit information from third party credit agencies.
• List Information: From time to time, we obtain lists of consumer names, addresses, email addresses, and/or phone numbers to market our products and services.
• Credit Card Product Information: If you have one of our branded credit cards, as long as your card active is we receive an annual notice from the issuing bank that includes your name, address, phone number, and the last four digits of your social security number. This file lets us know that you are still a user of our product, but CREDO does not keep or otherwise use the file or the information it includes.
2.4 Third Party Collection Practices
Our sites and/or mobile applications may link to merchants and information sites. Each of these sites has its own privacy practices and any information you share with these sites is subject to their policies and practices and is independent of CREDO.
Last Updated
June 24, 2020
Sources
Contributors