What P.I.I. is accessible and by whom?
vPromotions Users can access information in the following fields within a winner record:
● Name
● Email
● Phone #
● Mobile #
● Date of Birth
● Sex
● Address
● Province/Territory
● City
● State
● Zip Code
● Facebook
● Twitter
● Instagram
● Club Email
● Company
● Work Phone #
● Work Address
● Work City
● Work Prov/Terr
● Work State
● Work Zip Code
This information is available only for winners within the Firm(s) to which the vPromotions User has
access.
Only vPromotions Users with “Tax ID Access” ability can access winners’ Social Security Numbers and Bank Account Information (if provided by a winner) from within the Firm to which the user has access. Tax ID Access can only be granted to a user by a vCreative employee, or a vPromotions User with
“Firm Admin” and “Tax ID Access” abilities.
vCreative employees cannot see winners’ Social Security numbers or banking information within
vPromotions, even when accessing a user account that has Tax ID Access ability through our help desk
“ghost panel.”
Passwords for User Accounts are not accessible by anyone and are reset using the user’s email
address.
How is PII Kept Secure?
Social Security numbers and bank account information are encrypted using SSL (Secure Sockets Layer)
encryption with RSA public key encryptions keys stored on a separate server from encrypted
information.
SSL is a standard security technology for establishing an encrypted link between a server and a
client—typically a web server (website) and a browser; or a mail server and a mail client (e.g.,
Outlook). It allows sensitive information such as credit card numbers, social security numbers, and
login credentials to be transmitted securely. To establish this secure connection, the browser and the
server need an SSL Certificate.
User Security
vPromotions users are first approved by vCreative to ensure that they are requesting access on behalf
of a vCreative customer with a vPromotions contract. Next, they are approved by a vPromotions User
from within the firm to which they have requested access. Only after that approval is given, are they
able to access vPromotions.