Last modified: March 12, 2026
National Checking Company (d/b/a NCCO) together with its affiliates ("Company" or "we" or “us” or “our”) respect your privacy and are committed to protecting it through our compliance with this Policy.
This Policy describes the types of information we may collect from you or that you may provide when you visit the following websites:
(our "Websites") and our practices for collecting, using, maintaining, protecting, and disclosing that information.
This Policy applies to information we collect:
It does not apply to information collected by:
Please read this Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Websites. By accessing or using the Websites, you agree to this privacy Policy. This Policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of the Websites after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.
Our Websites are not intended for children under 13 years of age. No one under age 13 may provide any personal information to or on the Websites. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on the Websites, register on the Websites, or make any purchases through the Websites. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at the address listed below in the Contact Information section.
California residents under 13 years of age may have additional rights regarding the collection and sale of their personal information.
We may collect several types of information from and about users of our Websites, including information:
As you navigate through and interact with our Websites, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:
We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking).
The information we collect automatically generally comprises statistical/operational data and usually does not include personal information, but we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Websites and to deliver a better and more personalized service, including by enabling us to:
The technologies we use for this automatic data collection may include:
Some content or applications, including advertisements, on the Websites are served by third- parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our website. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
We use information that we collect about you or that you provide to us, including any personal information:
We may also use your information to contact you about our own and third parties' goods and services that may be of interest to you. If you do not want us to use your information in this way, please you may unsubscribe from such communications.
We may use the information we have collected from you to enable us to display advertisements to our advertisers' target audiences. If you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.
We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.
We may disclose other information, including personal information, that we collect or you provide as described in this Policy:
We strive to provide you with choices regarding the personal information you provide to us. Mechanisms exist to provide you with the following control over your information:
We do not control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") on the NAI's website.
You can review and change your any personal information you have entered through a subscription or account by logging into the account and updated the applicable information.
You may also contact us as the address listed below in the Contact Information section of this Policy to request access to, correct or delete any personal information that you have provided to us. We may not be able to delete your personal information without deleting your user account. We may not be able accommodate a request to change information if we believe the change would violate any law or legal requirement, cause the information to be incorrect, prevent fulfillment of an order, to prevent fraud or for is required for security reasons, or we cannot verify your identity.
Deleted information may still remain viewable in cached, backup, and archived pages, or might have been copied or stored by other Websites users.
Some states provide you with additional rights regarding our use of your personal information. The following describes state specific rights, which may or may not apply to Company and your use of the Websites.
California's "Shine the Light" law (Civil Code Section § 1798.83) permits California residents to request certain information, under certain circumstances, regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact the address listed below in the Contact Information section of this Policy, and Company will respond to the extent applicable.
Collection Notice – This Privacy Policy is our Notice at Collection as required under the California Privacy Rights Act, and any other applicable law, and this Privacy Policy describes the personal information categories we collect, the purpose we collect and use personal information, and the retention periods for each personal information category. We do not collect sensitive personal information, and we do not sell personal information as those terms are defined under California and other privacy law. To learn more about your California and other privacy rights, visit https://oag.ca.gov/privacy/ccpa
Colorado, California, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Virginia, and Utah each provide their state residents with rights to:
Nevada provides its residents with a limited right to opt-out of certain personal information sales.
To make a request under any of the foregoing, please contact the address listed below in the Contact Information section of this Policy, and Company will respond to the extent applicable. By listing these provisions, we are not agreeing to comply with theses law, unless Company is separately obligated under the terms of these laws to so comply.
We provide methods for Minnesota residents to exercise their rights under the Minnesota Consumer Data Privacy Act (MCDPA).
The MCDPA grants Minnesota residents certain rights with respect to their personal information. These rights may be exercised by a Minnesota resident through the contact information listed below.
Please note that requests made under the MCDPA will not apply to data exempt from the requirements of the MCDPA, such as publicly available data, data lawfully obtained from a governmental entity, data the consumer has made available to the general public, data subject to the Fair Credit Reporting Act, the Health Insurance Portability and Accountability Act, the Gramm-Leach-Bliley Act, the Driver's Privacy Protection Act (DPPA), and certain other laws. Additionally, data may be exempt if it is deidentified.
You may request a State Privacy Act Report containing your personal information collected and sold or disclosed for a business purpose. The Report will contain (i) the categories of personal information we collected about you and the categories of sources from which we collected such information; (ii) the specific pieces of personal information we collected about you; (iii) the business or commercial purpose for collecting or selling personal information about you; and (iv) the categories of personal information about you that we sold or disclosed for a business purpose and the categories of third parties to whom we sold or to whom we disclosed for a business purpose such information. You may also request that we disclose to you, as required by law, the third parties to whom we have disclosed your personal data.
Your Opt-Out Rights - you may make an opt-out request to restrict data subject to the MCDPA from being processed for (i) targeted advertising, (ii) the sale of personal data, and (iii) profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you, if applicable. In some instances, you may request the deletion of your personal information. Some exemptions apply to the right to deletion. You have the right to request the correction of inaccurate personal information maintained about you. You have the right to not be discriminated against in pricing and services because you exercise any of your rights under the MCDPA. To submit a request contact us at the address below.
This section of this Policy governs the receipt, access, use, safeguarding, and return or destruction of Student Data that we receive from educational institutions (the "Institution") for the limited purpose of providing educational services to students and related testing and certifications (the "Services"). This Provision is intended to support compliance with the Family Educational Rights and Privacy Act ("FERPA"), 20 U.S.C. § 1232g, and its implementing regulations, 34 C.F.R. Part 99, and related state laws. Notwithstanding any other provision, Student Data will be treated as follows.
We only access, use, and maintain Student Data solely to perform the Services for the Institution and for no other purpose. We do not sell, rent, or license Student Data. We do not use Student Data for targeted advertising/marketing to student accounts. We do not provided Student Data to third parties for marketing purposes. We do not use Student Data in association with any tracking. We do not anonymize or de-identify Student Data.
We do not Disclose Student Data to any third party except (a) as expressly authorized in writing by the Institution, (b) to subprocessors necessary for use to perform the Services as approved by the Institution, (c) to third parties that provide audits certifications that are a part of the Services, and (d) as required by applicable federal law, in which case the we shall, to the extent permitted by law, provide the Institution prompt written notice sufficient to allow the Institution to seek protective relief.
We shall request, access, use, and maintain only the minimum amount of Student Data reasonably necessary to perform the Services, and shall configure workflows to avoid collection or retention of Student Data not required for the Services.
We will implement and maintain reasonable administrative, technical, and physical safeguards designed to protect the confidentiality and integrity of Student Data and to prevent unauthorized access, use, or Disclosure consistent with our written obligations to the Institution that provided the Student Data including those relating to Security Incidents.
The retention of Student Data is determined by the Institution, subject to certain exceptions as approved to the Institution as necessary to met audit, regulatory, and certification standards associated with the Services provided.
You should understand that we are merely a custodian of Student Data on behalf of the Institution which controls the Student Data. You should consult with the Institution with regard to exercising any of your rights under law regarding Student Data. You can contact us with questions regarding Student Data as set forth below.
We have implemented reasonably technical, physical, and administrative measures to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure, however, the safety and security of your information also depends on you. If you have an account on the Websites, it is your responsibility to secure your username and password. We ask you not to share your password.
Additionally, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, no one can guarantee the security of your personal information transmitted to our Websites. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Websites.
Some web browsers may transmit “do-not-track” signals to the websites with which you are communicating. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether you intend for these signals to be transmitted, or whether you even are aware of them. Because there currently is no industry standard concerning what, if anything, websites should do when they receive such signals, we currently do not take action in response to these signals.
We will not share your opt-in to an SMS campaign or communication with any third party for purposes unrelated to providing you with the services of that campaign or communication. We may share your personal data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors that assist us in the delivery of text messages.
It is our policy to post any changes we make to our Policy on this page. In some circumstances, we may notify you of material changes by other means, such as a notice on the home page of the Websites, by email, or other methods. The date the Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Websites and this Policy to check for any changes.
The Websites are directed towards users who reside in the United States. By using the Websites, you affirm that you reside in the United States, and you consent to the collection, storage, processing, and transfer of your information in and to the United States, pursuant to the laws of the United States. We do not knowingly collect, use, or disclose information of European Union residents.
To ask questions or comment about this Policy and our privacy practices, contact us at:
National Checking Company
899 Montreal Circle
St. Paul, MN 55102
privacymatters@NCCO.com