Privacy Policy
Overview
AwardTransfer is operated by Sauces 201 LLC. This policy explains what data we collect, why, and your rights under applicable laws including GDPR (EU/UK) and CCPA (California).
What we collect
We collect the following categories of data:
- Email address — if you choose to subscribe to the pnm.now newsletter via the form on this site.
- Usage data — pages visited, browser type, device type, and approximate geographic region (country/city level), collected automatically by Firebase (Google) to help us understand how the site is used.
- Session data — a temporary browser session item stored locally on your device to remember that you've entered the site password. This never leaves your device and is cleared when you close your browser tab.
Newsletter
If you subscribe to the pnm.now newsletter, your email address is collected and transferred to Mailchimp (The Rocket Science Group LLC), our email service provider. Mailchimp stores and processes this data on our behalf to send you the newsletter.
Legal basis: Consent (GDPR Article 6(1)(a)). By submitting the subscription form, you give explicit consent to receive the newsletter.
Retention: Your email address is retained until you unsubscribe. Every newsletter includes a one-click unsubscribe link. You may also contact us to request deletion at any time.
Data transfers: Mailchimp is based in the United States. Data transfers are covered by Standard Contractual Clauses and Mailchimp's participation in the EU–US Data Privacy Framework.
Mailchimp's privacy policy is available at intuit.com/privacy/statement.
Firebase and Google
This site is hosted on Firebase Hosting and uses Firebase Firestore, operated by Google LLC. Google may collect usage data in accordance with their own privacy policies. Firebase's terms include a Data Processing Amendment covering GDPR requirements. You can review Google's privacy practices at policies.google.com/privacy.
Cookies and browser storage
AwardTransfer does not set advertising or analytics cookies. The site uses the following browser storage:
- sessionStorage — stores a temporary flag to remember that you've entered the site password. Cleared automatically when you close the tab. Never sent to any server.
- localStorage — stores a flag to remember that you've dismissed the cookie notice. No personal data is stored.
- Firebase SDK storage — the Firebase JavaScript SDK may use IndexedDB or localStorage for internal caching of database responses. This data is strictly necessary for the site to function and does not contain personal information.
Your rights
If you are located in the EU, UK, or another jurisdiction with applicable data protection laws, you have the following rights:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate data.
- Right to erasure — request deletion of your personal data (e.g. removal from the newsletter list).
- Right to withdraw consent — unsubscribe from the newsletter at any time using the link in any email, or by contacting us.
- Right to lodge a complaint — you have the right to lodge a complaint with your local data protection authority (e.g. the ICO in the UK, or your national DPA in the EU).
To exercise any of these rights, contact us via pnm.now. We will respond within 30 days.
Third-party links
This site links to external websites (card issuers, airlines, hotels, pnm.now). We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing any personal information.
Children
This site is not directed at children under 13. We do not knowingly collect information from children.
Changes
We may update this policy from time to time. The date at the top reflects the most recent revision. Continued use of the site after changes are posted constitutes acknowledgment of the updated policy.
Contact
Questions about this policy or data requests? Reach us via pnm.now.