ComprePension (“ComprePension,” “we,” “our,” or “us”) is committed to protecting the privacy, confidentiality, integrity, and security of information processed through the ComprePension pension administration platform. ComprePension provides secure, web-based pension administration and participant self-service capabilities to retirement systems, plan sponsors, employers, pension administrators, and their authorized participants. This Privacy Policy explains how information may be collected, received, used, disclosed, retained, and protected when individuals access or use the ComprePension platform. For many implementations, ComprePension processes participant information on behalf of the pension plan, retirement system, employer, or other organization sponsoring the retirement program (“Plan Sponsor”). In these circumstances, the Plan Sponsor determines the purposes for which participant information is processed, and ComprePension processes that information in accordance with its contractual obligations and authorized instructions.
Depending upon the services provided by a Plan Sponsor, ComprePension may process information such as:
ComprePension will seek to process only information reasonably necessary to provide authorized pension administration and related services.
Plan Sponsors and Employers : Participant, employment, payroll, service, pension, and related information may be provided by the organization sponsoring or administering the retirement plan.
Participants: Users may provide information directly when registering, updating permitted personal information, submitting retirement information, uploading documents, or interacting with portal functionality.
Authorized Service Providers: Information may be received from authorized actuarial, administrative, payroll, benefits, technology, or other service providers when necessary to administer the retirement program.
Portal Activity: ComprePension may generate security logs, authentication records, audit trails, transaction records, and other operational information when individuals use the platform.
ComprePension may process information to:
ComprePension may provide pension benefit calculations and retirement estimates based upon participant information, plan provisions, assumptions, and calculation rules configured for the applicable retirement plan. Unless expressly designated otherwise by the applicable Plan Sponsor, estimates displayed through the portal are provided for informational and planning purposes and should not be interpreted as a final determination of benefits. Final benefits remain subject to applicable plan documents, participant records, eligibility requirements, administrative review, and approval by the appropriate retirement plan authority.
ComprePension does not sell participant personal information. Information may be disclosed only when reasonably necessary to provide authorized services, including to:
Service providers receiving access to information are expected to process that information only for authorized purposes and in accordance with applicable contractual and security requirements.
ComprePension may operate within Microsoft Azure cloud infrastructure. For hosted client implementations, the applicable hosting region and geographic requirements are established through the contractual agreement with the Plan Sponsor. Where contractually required, client production information may be maintained within approved United States cloud regions.
ComprePension maintains administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, or destruction. Security measures may include:
No information system can guarantee absolute security. ComprePension therefore maintains layered security controls and operational processes designed to manage information security risk.
Users are responsible for maintaining the confidentiality of their account credentials and complying with applicable account security requirements. Users should not share passwords, authentication codes, or account access with another person. If a user suspects unauthorized access to an account, the user should immediately notify the applicable Plan Sponsor or designated ComprePension support contact.
ComprePension may maintain audit records for security, administration, troubleshooting, compliance, and operational purposes. Audit information may include:
Access to audit information is restricted to authorized personnel.
ComprePension may use cookies or similar technologies necessary to provide secure portal functionality, maintain authenticated sessions, protect against security threats, remember authorized preferences, and support application performance. ComprePension does not use pension participant information for third-party behavioral advertising.
Information is retained in accordance with applicable:
Information that is no longer required will be securely deleted, destroyed, returned, or otherwise handled in accordance with applicable contractual and retention requirements.
Upon termination or expiration of services, client information will be handled according to the applicable agreement between ComprePension and the Plan Sponsor. Depending upon contractual requirements, information may be returned, transferred, archived for an authorized retention period, or securely deleted. Backup copies may remain temporarily within protected backup systems until expiration through established backup retention processes.
Depending upon applicable law and the relationship between ComprePension and the Plan Sponsor, individuals may have rights regarding their personal information. Requests may include:
Because ComprePension frequently processes information on behalf of a Plan Sponsor, participants may be directed to submit certain privacy or record-correction requests directly to their employer, retirement system, pension plan, or other Plan Sponsor. ComprePension will reasonably cooperate with Plan Sponsors in responding to authorized privacy requests.
ComprePension is designed for authorized retirement plan administration and participant services and is not intended for independent use by children. Information relating to dependents, beneficiaries, or survivors may be processed when necessary for legitimate retirement plan administration purposes.
The portal may provide access or links to authorized third-party services. Those organizations may maintain their own privacy policies and practices. ComprePension is not responsible for the independent privacy practices of third-party websites or services that are outside ComprePension’s control.
ComprePension maintains incident response procedures for identifying, investigating, containing, remediating, and recovering from information security incidents. When an incident involving client information requires notification, ComprePension will coordinate notifications with the affected Plan Sponsor in accordance with applicable contractual and legal requirements.
ComprePension may provide SMS/text messaging services for authorized account and pension-related communications. Depending on the services enabled by the applicable Plan Sponsor, these messages may include account notifications, authentication or verification messages, security notifications, pension-related alerts, service notifications, and other communications related to use of the ComprePension platform. Participation in the ComprePension SMS messaging program is voluntary. Where consent is required, users must affirmatively opt in to receive SMS/text messages. Consent to receive text messages is not a condition of using the ComprePension platform or receiving pension benefits.
ComprePension does not sell, rent, or share mobile phone numbers, SMS opt-in information, or text messaging consent information with third parties or affiliates for marketing or promotional purposes. Mobile information and SMS messaging consent collected through ComprePension will be used only for purposes associated with providing authorized ComprePension services and communications. Mobile information may be provided to service providers that support the technical delivery and operation of the messaging service, such as telecommunications, messaging, hosting, or customer support providers, solely as necessary to provide those services. Such service providers are not authorized to use mobile information or messaging consent for their own marketing or promotional purposes. All categories of information sharing described elsewhere in this Privacy Policy exclude SMS/text messaging originator opt-in data and consent. SMS/text messaging opt-in data and consent will not be shared with any third parties or affiliates for marketing or promotional purposes.
Users may opt out of SMS/text messages at any time by replying STOP to a ComprePension text message. After an opt-out request is processed, the user will no longer receive SMS messages associated with that messaging program unless the user subsequently provides consent to receive messages again. For assistance with SMS/text messaging, users may reply HELP or contact ComprePension support at cbc@cbcus.net or 888-620-9825. Opting out of SMS communications does not affect a participant’s pension benefits or prevent the participant from accessing the ComprePension portal. Certain communications may continue to be provided through other available channels, such as email or the secure portal.
ComprePension may periodically update this Privacy Policy to reflect changes in platform functionality, business practices, security requirements, contractual obligations, or applicable laws. The updated policy will identify its effective or revision date. Material changes may be communicated through the portal or other appropriate channels.
Participants with questions concerning their pension records, benefit eligibility, or plan-specific information should contact their Plan Sponsor or pension administrator.