Deluxe Privacy Policy

Last updated: April 28, 2025

Introduction

This Privacy Policy (“Policy”) applies to Websites and mobile applications owned and operated by Deluxe Corporation and its subsidiaries and affiliates (referred to herein as “Deluxe,” “we,” “us” or “our”) that link to this policy. The following information will help you understand how we collect, use, share, and safeguard your Personal Information.

Changes to this Policy

This Policy may change from time to time, and we will post changes to this page. Please check this Policy regularly for updates.

Information We Collect About You and How We Collect It:

“Personal Information” is information that relates or could reasonably be linked to an identified or identifiable person, whether alone or in combination with other information.

Deluxe collects the following types of Personal Information:

Identifiers (such as your contact information (name, alias, email address, postal address, phone number, account name) driver’s license number, Social Security number, or unique personal or device identifiers (mobile advertising ID, cookies, IP address, device signature)) (“Identifiers”)
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (such as physical characteristics or description, passport number, insurance policy number, education, employment, employment history, medical information, or health insurance information) (“Recordkeeping Data”)
Characteristics of protected classifications under state or federal law (such as age, race, color, gender or gender identity, ancestry, national origin, citizenship, religion or creed, marital status, physical or mental disability, military and veteran status) (“Protected Classifications Data”)
Commercial information (such as transaction data, purchase history, signatures, or delivery information) (“Commercial Data”)
Financial information (such as bank account information, routing numbers, and credit or debit card information, and other financial information) (“Financial Data”)
Internet or other network or device activity (such as browsing history, search history, browser type and language, operating system, App usage, and other interactions with our online Services) (“Internet Data”)
Geolocation information (such as city, state, and zip code associated to your IP address or derived through Wi-Fi triangulation; and, with your permission, in accordance with your mobile device settings, precise geolocation information from GPS-based functionality on your mobile devices) (“Geolocation Data”)
Audio, electronic, visual, thermal, olfactory, or similar information (such as CCTV at our locations and call recordings) (“Sensory Data”)
Inference information about you (such as preferences, characteristics, attitudes, and behaviors) (“Inference Data”)
Other information that we collect from or about you that identifies or can reasonably be associated with you (“Associated Data”)
Sensitive personal information (such as Social Security, driver's license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; religious or philosophical beliefs; or union membership) (“Sensitive Personal Information”).

Collectively, we refer to the activities outlined above as the “Services.” By accessing our Services, you agree to this Policy. Some U.S. states require that we provide their residents with additional information. Please review the Additional Information Regarding Your State Privacy Rights below for more information.

We may collect Personal Information from a variety of sources, including, sometimes automatically:

From you, through our provision of Services, for example, when you request or use Services, sign up for a newsletter, register for a webinar, enter into a contractual relationship for Services, interact with us at an event, provide information in conjunction with Services, call our help desks, complete a survey, order or inquire about Services via phone or internet, visit our Websites or mobile applications, send us communications, visit one of our physical locations, or automatically as you browse the Internet.
From other sources, including:
- Publicly available database
- Subscription-based sources
- Court documents and filings
- Joint marketing and event sponsors
- Our clients and customers
- Counterparties in transactions or disputes
- Social media platforms
- Our service providers

We need to collect Personal Information in order to provide the requested Services to you. If you do not provide the information requested, we may not be able to provide the Services. If you disclose any Personal Information relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Policy.

Cookies, Web Beacons, and Other Tracking

Regarding information we (and other entities) may automatically collect relating to your interactions with us and our Services via cookies and similar technologies, please see our Cookies Policy and the “Digital Advertising & Analytics” section of this Policy to learn more about the use of this information and the choices available to you. Additionally, we use session replay and similar technology to record and better understand your interactions on the Services.

How We Use Information We Collect About You:

Deluxe may use or disclose the Personal Information we collect for any lawful purpose, including the following legitimate business or commercial purposes:

Performing Services, including management of business operations, maintaining or servicing accounts, providing customer service, sending administrative information to you, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, providing similar services, responding to inquiries and fulfilling requests (“Performing Services”)
Auditing and reporting related to particular transactions and interactions, including online interactions you may have with us or others on our behalf, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing to verify that our internal processes function as intended and are compliant with legal, regulatory, and contractual requirements (“Auditing”)
Short-term, transient use, including, but not limited to, the delivery of contextual ads shown as part of the same interaction with us (“Short-term Use”)
Helping to ensure security and integrity, including detecting security incidents and cyberattacks, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity (“Data Security & Fraud Prevention”)
Debugging to identify and repair errors that impair existing intended functionality (“Repairs”)
Undertaking internal research for technological development and demonstration, including enhancing, improving, or modifying our current Services, and using data analysis to improve our Services (“Research and Development”)
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us and to maintain the safety, security, and integrity of our Services, Websites, databases, or other technology assets and business (“Quality and Safety”)
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us is among the assets transferred (“M&A”)
To advance our commercial or economic interests, including marketing our Services to you, determining the effectiveness of our promotional campaigns or by inducing you or another to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction (“Commercial Interests”)
To enforce our terms and conditions or legal or regulatory rights, comply with applicable laws and regulations, which may include laws outside your country of residence, or to cooperate with public or government authorities and law enforcement (“Legal Interests”)
For any other purpose with your consent, or as otherwise disclosed at the time information is collected

Deluxe may use or disclose information that has been aggregated and/or de-identified without limitation.

Deluxe collects Personal Information and uses it for legitimate business purposes as detailed in the following table:

Category of information collected	Purpose of collection
Identifiers	Performing Services; Auditing; Short-term Use; Data Security & Fraud Prevention; Research and Development; Quality and Safety; M&A; Commercial Interests; Legal Interests
Recordkeeping Data	Performing Services; Auditing; Short-term Use; Data Security & Fraud Prevention; Research and Development; Quality and Safety; M&A; Commercial Interests; Legal Interests
Protected Classifications Data	Performing Services; Commercial Interests; Short-term Use; M&A; Legal Interests
Commercial Data	Performing Services; Short-term Use; Data Security and & Fraud Prevention; M&A; Commercial Interests; Legal Interests
Financial Data	Performing Services; Data Security and & Fraud Prevention; M&A; Legal Interests
Internet Data	Performing Services; Auditing; Short-term Use; Data Security & Fraud Prevention; Research and Development; Quality and Safety; M&A; Commercial Interests; Legal Interests
Geolocation Data	Performing Services; Data Security and & Fraud Prevention; M&A; Legal Interests
Sensory Data	Performing Services; Data Security and & Fraud Prevention; Research and Development; Quality and Safety; Legal Interests
Inference Data	Performing Services; Commercial Interests; Short-term Use; M&A; Legal Interests
Associated Data	Performing Services; Commercial Interests; Short-term Use; Data Security and & Fraud Prevention; M&A; Legal Interests
Sensitive Personal Information	Performing Services; M&A; Legal Interests

Digital Advertising & Analytics

We may partner with ad networks and other ad serving providers (“Advertising Providers”) that serve ads on behalf of us and others on non-affiliated platforms. Some of those ads may be personalized, meaning that they are intended to be relevant to you based on information Advertising Providers collect about your use of the Site and other sites or apps over time, including information about relationships among different browsers and devices. This type of advertising is known as interest-based advertising.

You may visit the DAA Webchoices tool at www.aboutads.info to learn more about this type of advertising and how to opt out of this advertising on websites by companies participating in the DAA self-regulatory program. You can also exercise choices regarding interest-based advertising on your mobile device by downloading the appropriate version of the DAA’s AppChoices tool at https://youradchoices.com/appchoices.

If you delete your cookies or use a different browser or mobile device, you may need to renew your opt-out choices exercised through the DAA Webchoices or AppChoices tool. Note that electing to opt out will not stop advertising from appearing in your browser or applications. It may make the ads you see less relevant to your interests.

We may also work with third parties that collect data about your use of the Site and other sites or apps over time for non-advertising purposes. Deluxe uses Google Analytics and other third-party services to improve the performance of the Site and for analytics and marketing purposes. For more information about how Google Analytics collects and uses data when you use our Site, visit www.google.com/policies/privacy/partners, and to opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout.

Additionally, your browser may offer tools to limit the use of cookies or to delete cookies; however, if you use these tools, our Site may not function as intended.

Protection of Personal Information

We have implemented measures designed to secure Personal Information from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. Unfortunately, no transmission or storage system can be guaranteed 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us at 877-861-8985.

Your Choices

If you no longer want to receive marketing emails from Deluxe, you may opt out by following the unsubscribe instructions in any of our marketing emails or by contacting us at 877-861-8985. Note that if you opt out of receiving marketing emails from us, we may still send you important administrative and account messages.

For choices with respect to interest-based advertising activities, please see the “Digital Advertising & Analytics” section above.

State consumer privacy laws may provide their residents with additional rights regarding the use of their Personal Information. For more information about the rights and requests you may have under applicable state consumer privacy laws, please see Additional Information Regarding Your State Privacy Rights below.

Data Retention

Deluxe retains Personal Information as long as necessary according to our enterprise records retention schedule. Retention period calculations are based upon the time the Personal Information is needed to satisfy the purposes described in this Policy and for which Personal Information was provided to us; to comply with applicable laws, legal holds, and other legal obligations (including contractual obligations); to resolve disputes; to enforce agreements; to meet operational requirements; and to fulfill your requests. To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information; the potential risk of harm from unauthorized use or disclosure of Personal Information; the purposes for which we process Personal Information and whether we can achieve those purposes through other means; and the applicable legal requirements. Once the retention period expires and if not otherwise required to retain information by law, we will delete or de-identify Personal Information.

Third Party Services and Websites

The Websites, Apps, and Services may contain links to unaffiliated third parties. This Policy does not apply to such third-party sites. When you click a link to visit a third-party website, you will be subject to that website’s privacy practices. We encourage you to review the privacy and security practices of any linked third-party website before providing any Personal Information on that website.

The Services also include integrated social media tools or “plug-ins,” such as social networking tools offered by third parties. If you use these tools to share Personal Information or you otherwise interact with these features on the Services, those companies may collect information about you and may use and share such information in accordance with your account settings, including by sharing such information with the general public.

The inclusion of a link or plug-in on the Services does not imply endorsement of the linked site or embedded platform by Deluxe or by our affiliates or subsidiaries.

In addition, we are not responsible for the data practices of other organizations, including with respect to any Personal Information you disclose to other organizations through or in connection with Apps or our social media.

Special Notification about Webinars

Webinars offered as a service to users of the Services (“Webinars”) are hosted by unaffiliated third-party vendors, and not by Deluxe.

Our third-party vendors require users to provide Personal Information to register for or attend Webinars. For example, this Personal Information includes name and email address. Users seeking continuing education credit also may be asked to provide the appropriate identification number(s). Please note that this Personal Information is collected by our vendors and not by us. We encourage you to read the privacy statements of our vendors, which control how such vendors handle Personal Information provided by you to register for the Webinars.

Additionally, our third-party vendors provide us with Personal Information about users of our Webinars. We use this Personal Information to track attendance, to facilitate future communication with such users, and for other purposes set forth in this Policy.

Additional Information Regarding Your State Privacy Rights

Certain U.S. states grant individuals certain rights under state privacy laws with respect to Personal Information we collect. If you are a resident of those states, in this section we provide additional notices about our privacy practices and explain consumer rights that may be available to you. This Policy does not apply to our employees, contractors, owners, directors, or officers where the Personal Information relates to their current, former, or potential role at Deluxe. Job applicants can review Deluxe’s Privacy Notice for Job Applicants for more information about the Personal Information Deluxe collects when you apply for a position with us.

Personal Information We Collect and Disclose

In the preceding 12 months, Deluxe collected and disclosed the categories of Personal Information disclosed above in the “Information We Collect About You and How We Collect It” section of this Privacy Policy.

We share Personal Information for targeted advertising purposes but do not otherwise engage in “sales” of Personal Information as defined by state laws. Additionally, we do not knowingly sell or share Personal Information of individuals under age 16. The categories of Personal Information we have disclosed in the past 12 months to third-party business partners for advertising and marketing purposes, including targeted advertising, are described above in the “How We Disclose Information About You” section of this Privacy Policy, specifically in the rows for disclosures to Third-Party Online Advertisers and Ad Networks.

Some of the categories of Personal Information we collect may be considered sensitive personal information under the California Consumer Privacy Act (“CCPA”). We do not use or disclose sensitive personal information, as defined by the CCPA, for purposes that require an opt-out opportunity under the CCPA.

Categories of Sources. We collect Personal Information from the categories of sources identified above in the “Information We Collect About You and How We Collect It” section of this Privacy Policy.

Our Purposes for Processing Personal Information. We use and disclose the Personal Information we collect for our commercial and business purposes.

How We Disclose Information About You

The table below explains the categories of information that we may disclose to third parties and the categories of those parties:

Third Parties with whom we share information and why	Categories of information shared
Our Subsidiaries and Affiliated Businesses. We may share information we collect within our family of companies under the Deluxe brand to deliver Services to you, and enhance our products, services, and your customer experience, consistent with this Policy. Those businesses may also use your information for their own purposes, including marketing purposes.	All categories of information we collect may be shared with our subsidiaries and affiliates
Third Parties Aiding in our Provision of Services. We may share information we collect with third-party vendors, service providers, and consultants that provide products or services as part of our Services to you, such as email vendors, Internet service providers, analytics vendors, and our legal and business advisors. These third parties may only use your information as directed by Deluxe.	All categories of information we collect may be shared with third parties to aid in our provision of Services and Websites
Third Parties for Marketing Purposes. We may share your information with third-party vendors that help us advertise and market our Services to you.	Identifiers Commercial Data Internet Data Inference Data
Third Parties for Legal Requirements and Proceedings. We may disclose information to law enforcement authorities or other government officials to comply with subpoenas, court orders, legal process or other law enforcement or government measures, and to comply with other legal obligations. We may disclose information if we believe disclosure is necessary or appropriate in connection with an investigation of suspected or actual fraudulent or illegal activity.	Any or all categories of information may be shared with third parties for legal requirements and proceedings, depending on the specific legal requirements
Third Parties for the Protection of our Websites, Services and Users. We may disclose information to protect and defend the rights, interests, and safety of the Websites and, our subsidiaries and affiliates, and their employees, contractors, and agents; to protect the security and safety of our users of the Websites or any Deluxe product or service, including when we believe disclosure is necessary to prevent physical harm or financial loss.	Any or all categories of information may be shared with third parties for the protection of our Websites, Services and Users
Third Parties in Business Transfers. We may disclose information in connection with a proposed or completed corporate transaction, including for example a merger, investment, acquisition, reorganization, consolidation, bankruptcy, liquidation, or sale of some or all of our assets.	Any or all categories of information may be shared with third parties in connection with a business transaction, depending on the specific transaction
Third-Party Online Advertisers and Ad Networks. We may use or rely on third-party advertising technologies, including internet service providers and analytics vendors, that allow for the delivery of relevant content and advertising on the Websites, as well as on other websites you visit and other applications you use, and these technologies will collect certain information from your use of the Websites to assist in delivering such ads.	Identifiers Internet Data Geolocation Data Inference Data
Other Third Parties. We may share information with other third parties with your consent or as otherwise disclosed at the time of data collection or sharing.	Any or all categories of information may be shared with third parties with consent or as disclosed

We may use and share de-identified information to the extent permitted by applicable law. When we use de-identified information, we maintain and use the information in de-identified form and do not attempt to re-identify it, except to check whether our deidentification processes satisfy the requirements of applicable law.

Recipients of Personal Information

We disclose the categories of Personal Information designated above to the categories of third parties listed above in the “How We Disclose Information About You” [section of this Privacy Policy for commercial and business purposes.

Individual Rights and Requests

Residents of certain states have rights with respect to the Personal Information collected by Deluxe. You may be able to make the following requests regarding Personal Information, subject to certain exceptions and limitations:

You may request to confirm whether we are processing Personal Information about you
You may request access to the following information:
1. The categories of Personal Information we collected, used, and disclosed about you
2. The categories of sources from which we collected such Personal Information
3. The business or commercial purpose for collecting or sharing Personal Information about you
4. The categories of Personal Information about you that we shared or disclosed for a business purpose
5. The categories of third parties to whom we shared or disclosed such Personal Information (if applicable)
6. Depending on your state, a list of the specific third parties to which we have disclosed Personal Information;
You may request to receive the specific pieces of Personal Information we maintain about you.
Depending on your state law, you may request a portable and readily usable copy of the Personal Information we have collected about you, to the extent feasible
You may request that we correct inaccuracies in Personal Information we have collected about you
You may request that we delete Personal Information we collected about you
You may request to opt out of (i) the sharing or processing of Personal Information for targeted advertising; (ii) the sale of Personal Information; or (iii) profiling for decisions that have significant effects. Please note that if you opt out of certain practices, we may be unable to provide you with some services
Choice regarding sensitive information. Depending on your state law, you can
1. Request to opt out of our processing of certain “sensitive” information, or
2. Withdraw consent for such processing if you previously gave it

We will not discriminate against you because you exercise any of the above rights, or any other rights under the state privacy laws.

Exercising Your Rights. To exercise your rights to know, delete, or correct described above, please submit a request and any required verifying information (described further below) by:

Emailing: privacy@deluxe.com
Calling toll-free: 877-861-8985

To opt out of sales, sharing, or processing for targeted advertising: click the “Do Not Sell or Share My Personal Information” link in the footer of our Website.

Appeals. Additionally, for residents of certain states, if you have submitted a request that you believe we have not reasonably fulfilled, you may contact us to appeal our decision by sending an email with the subject line “Appeal” to privacy@deluxe.com.

Verification and Authorized Agents. Only you, or someone legally authorized to act on your behalf, may make a request related to your Personal Information. You do not need to create an account with us to submit a request or have it fulfilled. Your request must:

Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it
Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized agent. In order to process your request, please include your full personal or business name plus email address, mailing address, and/or daytime telephone number
- For an authorized agent, we require a copy of the signed authorization from the individual on whose behalf the agent is acting demonstrating the agent’s ability to act on that person’s behalf, a valid power of attorney, court appointment document or the agent’s registration with the relevant state authority. Once we receive a Personal Information request from an authorized agent, unless that agent has a power of attorney issued pursuant to applicable law, we may contact the person to whom the request relates in order to, among other things, verify their identity, confirm the agent’s capacity to act on that person’s behalf, and if applicable, respond to or deliver information requested pursuant to the Personal Information request
If your request lacks sufficient detail or identifying information, we may need to request additional information from you to verify your identity or understand the scope of your request.
For a request related to a household, all members of the household must submit the request, and each must provide information sufficient for us to verify their identity. We may deny a request from a household if we cannot verify that the individual(s) making the request are part of the same household.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request.

Updating Your Information

When you have an account with us, you may review, change, or update your contact information by logging into your account.

Contact Information

To ask questions about this Policy and our privacy practices, contact us at:

Deluxe Privacy Program Office
801 South Marquette Ave.
Minneapolis, MN 55402
877-861-8985