Onovative Website Privacy Policy
Last Updated: 02/28/2024
(93770687.1)
Main Street, Inc. (“Main Street,” “we,” or “us”) recognizes the importance of protecting your personal information. This Privacy Policy describes how Main Street processes personal information through mainstreetinc.com and onovativebanking.com (the “Websites”) by explaining the types of information Main Street collects, how that information is used, our sharing practices, and your choices.
Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use the Websites. By accessing or using the Websites, you agree to this Privacy Policy. This Privacy Policy may change from time to time (see Changes to Our Privacy Policy below). Your continued use of the Websites after we make changes is deemed to be acceptance of those changes, so please check the Privacy Policy periodically for updates.
Information We Collect
We collect information from you directly when you provide it to us, automatically through our Websites, and from third parties, including human capital management platforms, recruiters, and background check agencies. Each collection mechanism is described in more detail in this Privacy Policy.
Information You Provide Directly
Contact Us. When you use our Websites to contact us, we may collect your name, email address, phone number, inquiry type, financial institution, the subject and contents of any messages you send to us, and any other information you provide to us.
Login. When you use our Websites to login to your account or customer support account, we may collect your customer ID, username, email address, and password.
Register for a New Account. When you use our Websites to register for a new account, we collect your username, email address, and password.
Apply for a Job. When you use our Websites to apply for a job with Main Street, we may collect your name, email address, phone number, address, resume, signature, comments, and any other information you provide to us.
Reorder Checks. When you use our Websites to reorder checks, we will collect your routing number and account number.
Free Evaluation. When you use our Websites to request a free evaluation, we collect your name, email address, phone number, and any other information you provide to us.
Request a Demo. When you use our Websites to request a demo, we may collect your name, email address, telephone number, financial institution, information related to how you heard about us, how we can help you, and whether you are a current customer, and any other information you provide to us.
Submit a Request. When you use our Websites to contact us for support or submit a request for customer service, we may collect your name, profile photo, email address, financial institution, telephone number, information related to your requests (and their status), contributions, and what you are following, and the subject and description of our request, including any attachments that you provide to us.
Information Collected Automatically
We automatically collect the following types of information when you use our Websites:
Technical Data. We collect information about the device and browser you use to access our Websites, details of your visits to the Websites, including browsing actions and patterns, traffic data, location data (including real-time location if you allow the Websites to access your precise geolocation), logs and other communication data, and the resources that you access and use on the Websites, and information about your computer and internet connection, including your IP address, operating system, and browser type.
Cookies and Similar Tracking Technologies. A cookie is a small text file that is stored on your device through your browser. Most web browsers automatically accept cookies, but you can set your browser to decline cookies. We use this automatically collected information to analyze trends, to provide, administer, and improve our Websites, and to track the number of visitors to the Websites and time spent on different pages of the Websites.
We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking).
How We Use Your Information
We may use personal information for the administration and operation of our Websites and services, to understand how visitors interact with our Websites, to improve our Websites and services, and for analytics and marketing purposes.
In addition to the uses described above, we also use your information:
- To protect our interests or the interests of third parties;
- To maintain and enhance the security of our Websites;
- To collect and process applications for employment;
- To prevent abuse of our Websites;
- To comply with our legal obligations;
- To perform or enforce our agreements; or
- For any other purpose with your consent.
Third-Party Sharing
You may be able to engage with our Websites through social media services and through third-party social media or other plug-ins, integrations, and applications. When you engage with our content on or through social media services or other third-party platforms, plug-ins, integrations, or applications, you may allow us to have access to certain information in your profile and information about your interaction with our content. For a description on how social media services and other third-party platforms, plug-ins, integrations, or applications handle your information, please refer to their respective privacy policies and terms of use, which may permit you to modify your privacy settings. Main Street is not responsible for these third-party sites nor for how they utilize your personal information. Please use caution and refer to the privacy policies posted on applicable third-party sites or platforms for further details.
Third parties may also use cookies or similar technologies on our Websites. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Website. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and devices and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
Please see “More About Analytics and Advertising” and “Your Choices” below for more information about third-party cookies and how you can opt out of receiving targeted advertising from many providers.
We may share your information:
- With any subsidiaries or affiliates in connection with your use of our Websites or our business relationship with you;
- With any contractors, service providers, or other third parties we use to support our Websites and services, including: data analytics providers, advertising networks, technology service providers, tag management systems, human capital management platforms, social networks (including links to our LinkedIn and Twitter pages), customer service software providers (including Zendesk- please note that personal information collected, stored, used, and/or processed by the Zendesk Group is collected, stored, used, and/or processed in compliance with the California Consumer Privacy Act (CCPA), as amended, and any regulations made under it), and web mapping platforms (please note that the Websites may include Google Maps features and content. Google Maps may collect users’ IP address, latitude and longitude coordinates, and search terms. For more information, please visit Google’s privacy policy, available at: https://policies.google.com/privacy);
- To fulfill any purpose for which you provide it;
- With your consent;
- To comply with any court order, law, or legal process, including to respond to any government or regulatory request;
- To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets; or
- If we believe disclosure is necessary or appropriate to protect our rights, property, or interests, or the rights, property, or interests of third parties.
We may also use your information to contact you about our products and services that may be of interest to you. If you do not want to receive solicitations regarding our products and services, you may unsubscribe from such communications by clicking the link in the applicable communication or by contacting us at ma*******@***********nc.com.
More About Analytics and Advertising
We use third-party analytics providers to help track how users interact with our Websites. Third parties may also use cookies or web pixels for online advertising personalization. Third-party tracking technologies are not controlled by us, even if they use our Websites to help collect data. The relevant third party’s terms of service, privacy policy, permissions, notices, and choices should be reviewed regarding their collection, storage, and sharing practices.
- Google Analytics collects personal data through the Websites, including through the use of cookies. For information about how Google Analytics collects and processes data, please visit: https://policies.google.com/technologies/partner-sites. To opt out of having your information used by Google Analytics, please visit: https://tools.google.com/dlpage/gaoptout/.For more information, please visit Google’s privacy policy at: https://policies.google.com/privacy?hl=en&fg=1.
- Additionally, third parties, including Google (through, for example, our use of Google Analytics Advertising Features, including Dynamic Remarketing), may place and read cookies on your browser, or use web beacons to collect information in connection with ad serving on or through the Websites, including for the purposes of showing our ads on sites across the internet. Our partners will collect personal information for personalization of ads and may use first-party cookies or other first-party identifiers and third-party cookies and other third-party identifiers for personalized and non-personalized advertising and measurement. Ad serving may be based on users’ visits to our Websites or other websites on the Internet, and your activity may be tracked over time and across websites. For information about how Google collects, shares, and uses data, please visit: https://policies.google.com/technologies/partner-sites. You can opt out of Google’s use of cookies or device identifiers by visiting the Google Ads Settings web page at: https://www.google.com/ads/preferences/. For more information, please visit Google’s privacy policy at: https://policies.google.com/privacy?hl=en&fg=1. You can opt out of a third-party vendor’s use of cookies by visiting the Network Advertising Initiative opt-out page or control the use of device identifiers by using your device’s settings.
- We use the Meta Pixel to analyze user activity on our Websites for remarketing and behavioral targeting. The Meta Pixel is triggered when you perform certain activities on the Websites, and aids us in displaying Facebook ads to Facebook users who have visited our Websites, or Facebook users who share certain characteristics with visitors to our Websites. Meta and other third parties may use cookies, web beacons, and other storage technologies to collect information from the Websites and from other internet websites, and use that information for the purposes of targeting ads and providing measurement services. Meta may track your activity over time and across websites. For more information about the data Meta collects, please visit Meta’s privacy policy at: https://www.facebook.com/privacy/policy/. For specific information about Meta Pixel, please visit: https://www.facebook.com/business/help/742478679120153?id=1205376682832142. For more information about ad targeting and exercising your choice to opt out of the collection and use of information for ad targeting, please visit: https://www.facebook.com/help/568137493302217, or https://optout.aboutads.info/?c=2&lang=EN.
Third-Party Platforms
This Privacy Policy applies only to Main Street’s Websites and not to any other websites, platforms, or mobile applications operated by third parties. Our Websites may contain links to other websites, platforms, and mobile applications that we believe may be of interest to you. Main Street is not responsible for the privacy practices of any websites, platforms, or mobile applications not controlled by us. We encourage you to review the privacy policies of any platforms, websites, or mobile applications you use outside of our Websites before providing any information to or through them.
Data Retention
We only store information for as long as is needed for the purposes outlined in this Privacy Policy, to conduct business with you, to fulfill our contractual or legal obligations, to resolve disputes, to enforce any agreements, or any other permissible purpose for which we have collected it, including to prevent fraud or security incidents. Security
We use commercially reasonable administrative, physical, and technical measures to safeguard your information and help protect it from unauthorized access. However, we cannot guarantee complete protection of your information since transmission via the internet is not 100% secure. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Websites. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us by contacting us as detailed in the “Contact Us” section.
Children
Our Websites are not directed to children, as defined under applicable law. If you believe that a child has provided their information to us through our Websites, please contact us as detailed in the “Contact Us” section, so that we can take steps to delete it.
Your Choices
You can control the use of cookies within your browser. However, please note that disabling some or all cookies may affect the functionality of our Websites. Our Websites may respond to certain browser “Do Not Track” signals. Please see the “California Residents” section for more information.
We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt-out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s websites at https://www.networkadvertising.org. You may also be able to opt-out of receiving third-party behavioral ads by visiting the Digital Advertising Alliance (“DAA”) websites at http://www.aboutads.info/choices. We are not responsible for effectiveness of or compliance with any third-parties’ opt-out options.
Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request to this designated address: ma*******@***********nc.com. However, please know we do not currently sell data triggering that statute’s opt-out requirements.
Changes to Our Privacy Policy
Please check this Privacy Policy often, as we may amend the language on the Websites from time to time. If we make any material changes to our privacy practices, we will notify you in accordance with applicable law.
California Residents
The following disclosures are made pursuant to the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (“CCPA”). These disclosures supplement any privacy notices we previously or contemporaneously provided to you, including any California-specific privacy notice provided to you if you are an employee of Main Street.
Right to Know
California residents have the right to be informed of the categories and specific pieces of personal information collected about them, including sensitive personal information, collected, used, and disclosed, the categories of sources from which that information is collected, whether that information is sold or shared, the categories of third parties to whom that information has been disclosed, the business or commercial purposes for collecting and using each category of personal information, and the intended retention period for each category of personal information.
The below chart reflects the categories of personal information we have collected from California residents during the past twelve months, the categories of sources from which the information was collected, the business or commercial purpose for which the information was collected, the categories of third parties to whom we disclosed that information, and our anticipated retention period for each category of information.
| Personal Information Category set forth in Cal. Civ. Code § 1798.140 | Source(s) of Personal Information Collection | Business or Commercial Purpose(s) for Collection/Use | Third Parties, Service Providers, and Contractors Receiving Personal Information Category | Retention Period |
| Personal identifiers, including real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license or passport number, or other similar identifiers. |
Directly from you; indirectly from you as you navigate or use our Websites; advertising networks; social networks; internet service providers; data analytics providers.
For job applicants: Recruiters; background check providers; human capital management platforms. |
Provide you with our products and services; respond to your questions; provide you with information about our products and services; maintain, improve, upgrade, or enhance our Websites and services; identify and repair errors; detect security incidents; protect against fraud or illegal activity; market to you; perform analytics. For job applicants: Asses your application; satisfy legal obligations. |
Affiliates; Social networks; technology service providers; data analytics providers; advertising networks; tag management systems; session replay tools; customer service software providers; web mapping platforms.
For job applicants: Background check providers; human capital management platforms. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer. |
| California Customer Records personal information (Cal. Civ. Code § 1798.80(e)), including name, signature, social security number, address, telephone number, passport number, driver’s license or state identification card number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information. |
Directly from you.
For job applicants: Recruiters; background check providers; human capital management platforms. |
Provide you with our products and services; respond to your questions; provide you with information about our products and services; maintain, improve, upgrade, or enhance our Websites and services; identify and repair errors; detect security incidents; protect against fraud or illegal activity; market to you; perform analytics. For job applicants: Process your application; satisfy legal obligations. |
Affiliates; social networks; technology service providers; data analytics providers; advertising networks; tag management systems; session replay tools; customer service software providers; web mapping platforms.
For job applicants: Background check providers; human capital management platforms. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer. |
| Characteristics of protected classifications under California or federal law. |
Directly from you; indirectly from you as you navigate or use our Websites; advertising networks; social networks; internet service providers; data analytics providers.
For job applicants: Directly from you; recruiters, background check providers; human capital management platforms. |
Provide you with our products and services; respond to your questions; provide you with information about our products and services; maintain, improve, upgrade, or enhance our Websites and services; identify and repair errors; detect security incidents; protect against fraud or illegal activity; market to you; perform analytics.
For job applicants: Process your application; meet our legal obligations. |
Affiliates; social networks; technology service providers; data analytics providers; advertising networks; tag management systems; session replay tools; customer service software providers.
For job applicants : Background check providers; human capital management platforms. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer. |
| Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
Directly from you; indirectly from you as you navigate or use our Websites; advertising network social networks; internet service providers; data analytics providers.
|
Provide you with our products and services; respond to your questions; provide you with information about our products and services; maintain, improve, upgrade, or enhance our Websites and services; identify and repair errors; detect security incidents; protect against fraud or illegal activity; market to you; perform analytics.
|
Affiliates; social networks; technology service providers; providers; data analytics providers; advertising networks; tag management systems; session replay tools; customer service software providers; web mapping platforms.
|
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer. |
| Biometric information. | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information about individual interactions with an Internet website, application, or advertisement. |
Indirectly from you as you navigate or use our Websites; advertising networks; social networks; internet service providers; data analytics providers.
|
Detect security incidents; protect against malicious, deceptive, fraudulent, or illegal activity; verify, maintain, improve, upgrade, or enhance our Websites or services; identify and repair errors; provide you with advertising or marketing services; perform analytics. | Affiliates; advertising networks; technology service providers; data analytics providers; social networks; tag management systems; session replay tools; customer service software providers; web mapping platforms. | Barring any legally required additional retention period, up to one year. |
| Geolocation data |
Directly from you; indirectly from you as you navigate or use our Websites; advertising networks; social networks; internet service providers; data analytics providers.
|
Provide you with our products and services; maintain, improve, upgrade, or enhance our Websites and services; identify and repair errors; detect security incidents; protect against fraud or illegal activity; market to you; perform analytics. | Affiliates; advertising networks; technology service providers; data analytics providers; social networks; tag management systems; session replay tools; customer service software providers; web mapping platforms. | The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer. |
| Sensory data including audio, electronic, visual, thermal, olfactory, or similar information. | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Professional or employment-related information. |
Directly from you.
For job applicants: Directly from you; recruiters; human capital management platforms. |
Provide you with our products and services; respond to your questions; provide you with information about our products and services; maintain, improve, upgrade, or enhance our Websites and services; identify and repair errors; detect security incidents; protect against fraud or illegal activity; market to you; perform analytics.
For job applicants: Process your application. |
Affiliates; advertising networks; technology service providers; data analytics providers; social networks; tag management systems; session replay tools; customer service software providers.
For job applicants: Background check providers; human capital management platforms. . |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer. |
| Non-public education information | For job applicants: Directly from you; recruiters; human capital management platforms. | For job applicants: Process your application. |
For job applicants and employees: Affiliates; background check providers; human capital management platforms; technology service providers. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer. |
| Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Indirectly from you as you navigate or use our Websites; advertising networks; social networks; internet service providers; data analytics providers. | Verify, maintain, improve, upgrade, or enhance our Websites or services; provide you with advertising or marketing services; perform analytics. | Affiliates; advertising networks; technology service providers; data analytics providers; social networks; tag management systems; session replay tools; customer service software providers; web mapping platforms. | The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post- relationship, whichever is longer. |
| Sensitive Personal Information Category as set forth in Cal. Civ. Code § 1798.140 | Sources from which Information was Collected | Purposes for Collection; Use | Third Parties, Service Providers, and Contractors Receiving Personal Information | Retention Period |
| Social security number, driver’s license number, state identification card, or passport number. | For job applicants: Recruiters; background check providers; human capital management platforms. | For job applicants: Process your application; satisfy legal obligations. |
For job applicants and employees: Affiliates; technology service providers; Background check providers; human capital management platforms . |
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
| Account access credentials (user names, account numbers, or card numbers combined with required access code, security code or password to access an account). | Directly from you. | Provide you with our products and services; Protect against malicious, deceptive, fraudulent, or illegal activity. | Affiliates; technology service providers. | The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post- relationship, whichever is longer. |
| Precise geolocation (location within a geographical area of a circle with a radius of 1850 feet or less). | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Racial or ethnic origin | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Religious or philosophical beliefs | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Union membership | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Genetic Data | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Mail, email, or text messages where the content is not directed to us. | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Unique identifying biometric information | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Personal information collected and analyzed concerning health. | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Personal information collected and analyzed concerning sex life, or sexual orientation. | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Personal information that reveals a consumer’s citizenship status. | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Personal information that reveals a consumer’s immigration status. | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
Right to Limit Use and Disclosure of Sensitive Personal Information
We do not collect or process sensitive personal information for the purpose of inferring characteristics about consumers. We also do not disclose sensitive personal information for purposes other than those specified in section 7027(m) of the CCPA regulations promulgated by the California Privacy Protection Agency. Therefore, we do not offer consumers the option to limit the use of their sensitive personal information.
Right to Opt Out of Sharing for Cross-Context Behavioral Advertising
In the past twelve months, we have used data about your activities on our online properties to serve you ads on online properties owned or controlled by third parties. In the past twelve months, we have provided the following categories of information to advertising networks, affiliates, data analytics providers, tag management systems, web mapping platforms, and social media networks for this purpose:
- Personal identifiers, such as unique personal identifier, online identifier, internet protocol address, device information and identifiers, and unique advertising identifiers and cookies; internet and other electronic network activity information; California Customer Records personal information; characteristics of protected classifications under California or federal law; inference data; professional or employment-related information; geolocation data; and commercial information.
You can opt out of this sharing of personal information for cross-context behavioral advertising by modifying your cookie settings, or, you may do so in a frictionless manner by activating Global Privacy Control (“GPC”) opt out preference signal to opt out of disclosures of your personal information through the browser you are using. To learn more about the GPC, click here . You may also contact us as set forth in the “Exercising Your Rights” section below.
Right to Opt Out of Sale
While we do not sell personal information in exchange for monetary consideration, we do share personal information for other benefits that could be deemed a “sale,” as defined by the CCPA. The CCPA broadly defines “sale” in a way that may include activities such as the delivery of targeted advertising on websites or allowing third parties to receive certain information, such as cookies, IP address, and/or browsing behavior. In the past twelve months, we have provided the following categories of information to advertising networks, affiliates, data analytics providers, tag management systems, web mapping platforms, and social media networks in ways that could be considered a “sale” under California law:
- Personal identifiers, such as unique personal identifier, online identifier, internet protocol address, device information and identifiers, and unique advertising identifiers and cookies; internet and other electronic network activity information; California Customer Records personal information; characteristics of protected classifications under California or federal law; inference data; professional or employment-related information; geolocation data; and commercial information.
We disclosed these categories of information to these third parties for the purposes of performing analytics and marketing and to maintain, improve, upgrade, or enhance our products or services.
We have no actual knowledge of selling the personal information or the sensitive personal information of minors under 16 years of age.
California residents have the right to opt out of the “sale” of their personal or sensitive personal information.
If you would like to opt of such disclosures, you may do so by modifying your cookie settings, or, you may do so in a frictionless manner by activating Global Privacy Control (“GPC”) opt out preference signal to opt out of disclosures of your personal information through the browser you are using. To learn more about the GPC, click here. You may also contact us as set forth in the “Exercising Your Rights” section below.
Right to Delete Personal Information
You have the right to request the deletion of your personal information, subject to certain exceptions.
Right to Correct Inaccurate Personal Information
You have the right to request the correction of any inaccurate personal information that we maintain about you.
Right to Access
You have the right to request the categories and specific pieces of personal information we have collected about you.
Right of Non-Retaliation and Non-Discrimination
You have the right to exercise the privacy rights conferred to you under the CCPA without receiving retaliatory or discriminatory treatment. Company does not retaliate or discriminate against your for exercising the privacy rights conferred to you under the CCPA.
Exercising Your Rights
To exercise your rights, you may contact us via phone at 205-350-4000 or via email at ma*******@***********nc.com. You may also submit a request through our Websites, here. Requesters will need to provide us with personal information in order to verify their identity and residency, including your name, email address, and proof of identity. We will compare the information you provide with our internal records. The personal information that we use to verify identity and residency will not be used for any other purpose.
You may authorize an agent to submit a request on your behalf if you provide the authorized agent with written permission signed by you. We may require you to verify your identity directly with us and confirm that you provided the authorized agent with permission to submit a request on your behalf.
Contact Us
Should you have any questions about our Privacy Policy, do not hesitate to contact us at: ma*******@***********nc.com