Onovative Website Privacy Policy

Last Updated: 06/30/2023
(06772151.1)

Main Street, Inc. (“Main Street,” “we,” or “us”) recognizes the importance of protecting your personal information. This Privacy Policy describes how Main Street processes personal information through mainstreetinc.com and onovativebanking.com (the “Websites”) by explaining the types of information Main Street collects, how that information is used, our sharing practices, and your choices.

Information We Collect

We collect information from you directly when you provide it to us, automatically through our Websites, and from third parties. Each collection mechanism is described in more detail in this Privacy Policy.

Information You Provide Directly

Contact Us. When you use our Websites to contact us, we may collect your name, email address, phone number, and any other information you provide to us.

Login. When you use our Websites to login to your account, we may collect your customer ID, username, email address, and password.

Register for a New Account. When you use our Websites to register for a new account, we collect your username, email address, and password.

Apply for a Job. When you use our Websites to apply for a job with Main Street, we may collect your name, email address, phone number, address, and any other information you provide to us.

Reorder Checks. When you use our Websites to reorder checks, we will collect your routing number and account number.

Free Evaluation. When you use our Websites to request a free evaluation, we collect your name, email address, phone number, and any other information you provide to us.

Request a Demo. When you use our Websites to request a demo, we may collect your name, email address, and any other information you provide to us.

Information Collected Automatically

We automatically collect the following types of information when you use our Websites:

Technical Data. We collect information about the device and browser you use to access our Websites and we collect your internet protocol (“IP”) address.

Cookies and Similar Tracking Technologies. A cookie is a small text file that is stored on your device through your browser. Most web browsers automatically accept cookies, but you can set your browser to decline cookies. We use this automatically collected information to analyze trends, to provide, administer, and improve our Websites, to track the number of visitors to the Websites and time spent on different pages of the Websites.

How We Use Your Information

We may use personal information for the administration and operation of our Websites and services, to understand how visitors interact with our Websites, to improve our Websites and services, and for analytics and marketing purposes.

In addition to the uses described above, we also use your information:

• To protect our interests or the interests of third parties;
• To maintain and enhance the security of our Websites;
• To prevent abuse of our Websites;
• To comply with our legal obligations;
• To perform or enforce our agreements; or
• For any other purpose with your consent.

Third-Party Sharing

You may be able to engage with our Websites through social media services and through third-party social media plug-ins, integrations, and applications. When you engage with our content on or through social media services or other third-party platforms, plug-ins, integrations, or applications, you may allow us to have access to certain information in your profile and information about your interaction with our content. For a description on how social media services and other third-party platforms, plug-ins, integrations, or applications handle your information, please refer to their respective privacy policies and terms of use, which may permit you to modify your privacy settings. Main Street is not responsible for these third-party sites nor for how they utilize your personal information. Please use caution and refer to the privacy policies posted on applicable third-party sites or platforms for further details.

Third parties may also use cookies or similar technologies on our Websites. Please see “More About Analytics and Advertising” and “Your Choices” below for more information about third-party cookies.

We may share your information:

• With any affiliates in connection with your use of our Websites or our business relationship with you;
• With any contractors, service providers, or other third parties we use to support our Websites and services;
• To fulfill any purpose for which you provide it;
• With your consent;
• To comply with any court order, law, or legal process, including to respond to any government or regulatory request;
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets; or
• If we believe disclosure is necessary or appropriate to protect our rights, property, or interests, or the rights, property, or interests of third parties.

More About Analytics and Advertising

We use third-party analytics providers to help track how users interact with our Websites. Third parties may also use cookies or web pixels for online advertising personalization. Third-party tracking technologies are not controlled by us, even if they use our Websites to help collect data. Statements regarding our practices do not apply to the methods for collecting information used by third parties or the use of the information that such third parties collect. The relevant third party’s terms of service, privacy policy, permissions, notices, and choices should be reviewed regarding their collection, storage, and sharing practices.

We use Google Analytics to obtain aggregated information about the traffic and usage of our Sites. Google Analytics uses cookies to capture information such as the URL of the page you are viewing, your browser information, and your geographic region. For more information about how Google Analytics collects and processes data, please visit: https://policies.google.com/technologies/partner-sites. To opt out of having your information used by Google Analytics, please visit: https://tools.google.com/dlpage/gaoptout/.

Third-Party Platforms

This Privacy Policy applies only to Main Street’s Websites and not to any other websites, platforms, or mobile applications operated by third parties. Our Websites may contain links to other websites, platforms, and mobile applications that we believe may be of interest to you. Main Street is not responsible for the privacy practices of any websites, platforms, or mobile applications not controlled by us. We encourage you to review the privacy policies of any platforms, websites, or mobile applications you use outside of our Websites before providing any information to or through them.

Data Retention

We only store information for as long as is needed to fulfill our contractual or legal obligations or any other permissible purpose for which we have collected it, including to prevent fraud or security incidents. When the applicable retention period has expired, we take measures to delete the information, aggregate it, or anonymize it.

Security

We use commercially reasonable administrative, physical, and technical measures to safeguard your information and help protect it from unauthorized access. However, we cannot guarantee complete protection of your information since transmission via the internet is not 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us by contacting us as detailed in the “Contact Us” section.

Children

 Our Websites are not directed to children, as defined under applicable law. If you believe that a child has provided their information to us through our Websites, please contact us as detailed in the “Contact Us” section, so that we can take steps to delete it.

Your Choices

 You can control the use of cookies within your browser. However, please note that disabling some or all cookies may affect the functionality of our Websites. Our Websites may respond to certain browser “Do Not Track” signals. Please see the “California Residents” section for more information.

We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt-out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s websites at https://www.networkadvertising.org. You may also be able to opt-out of receiving third-party behavioral ads by visiting the Digital Advertising Alliance (“DAA”) websites at http://www.aboutads.info/choices. We are not responsible for effectiveness of or compliance with any third-parties’ opt-out options.

Changes to Our Privacy Policy

Please check this Privacy Policy often, as we may amend the language on the Websites from time to time. If we make any material changes to our privacy practices, we will notify you in accordance with applicable law. By using our Websites, you recognize and agree to the terms of this Privacy Policy. When you access this site, you acknowledge that you have read and agree to the Privacy Policy outlined below.

California Residents

 The following disclosures are made pursuant to the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (“CCPA”).  These disclosures supplement any privacy notices we previously or contemporaneously provided to you, including any California-specific privacy notice provided to you if you are an employee of Main Street.

Right to Know

 California residents have the right to be informed of the categories and specific pieces of personal information collected about them, including sensitive personal information, collected, used, and disclosed, the categories of sources from which that information is collected, whether that information is sold or shared, the categories of third parties to whom that information has been disclosed, the business or commercial purposes for collecting and using each category of personal information, and the intended retention period for each category of personal information. 

The below chart reflects the categories of personal information we have collected from California residents during the past twelve months, the categories of sources from which the information was collected, the business or commercial purpose for which the information was collected, the categories of third parties to whom we disclosed that information, and our anticipated retention period for each category of information.

 

Personal Information Category set forth in Cal. Civ. Code § 1798.140	Source(s) of Personal Information Collection	Business or Commercial Purpose(s) for Collection/Use	Third Parties, Service Providers, and Contractors Receiving Personal Information Category	Retention Period
Personal identifiers, including real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license or passport number, or other similar identifiers.	Directly from you; indirectly from you as you navigate or use our Websites; advertising networks; internet service providers; data analytics providers. For job applicants: Recruiters; background check providers.	Provide you with our products and services; respond to your questions; provide you with information about our products and services; maintain, improve, upgrade, or enhance our Websites and services; identify and repair errors; detect security incidents; protect against fraud or illegal activity; market to you. For job applicants: Asses your application; satisfy legal obligations.	Social networks; technology service providers; data analytics providers; customer relationship management providers. For job applicants and employees: Background check providers; human resources providers.	The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
California Customer Records personal information (Cal. Civ. Code § 1798.80(e)), including name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.	Directly from you. For job applicants: Recruiters; background check providers.	Provide you with our products and services; respond to your questions; provide you with information about our products and services; maintain, improve, upgrade, or enhance our Websites and services; identify and repair errors; detect security incidents; protect against fraud or illegal activity. For job applicants: Process your application; satisfy legal obligations.	For job applicants and employees: Background check providers; human resources providers.	The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
Characteristics of protected classifications under California or federal law.	For job applicants: Directly from you; recruiters, background check providers.	For job applicants: Process your application; meet our legal obligations.	For job applicants and employees: Background check providers; human resources providers.	The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	We do not collect.	Not applicable.	Not applicable.	Not applicable.
Biometric information.	We do not collect.	Not applicable.	Not applicable.	Not applicable.
Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information about individual interactions with an Internet website, application, or advertisement.	Indirectly from you as you navigate or use our Websites; advertising networks; internet service providers; data analytics providers.	Detect security incidents; protect against malicious, deceptive, fraudulent, or illegal activity; verify, maintain, improve, upgrade, or enhance our Websites or services; identify and repair errors; provide you with advertising or marketing services; perform analytics.	Advertising networks; technology service providers; data analytics providers.	Barring any legally required additional retention period, up to one year.
Geolocation data	We do not collect.	Not applicable.	Not applicable.	Not applicable.
Sensory data including audio, electronic, visual, thermal, olfactory, or similar information.	We do not collect.	Not applicable.	Not applicable.	Not applicable.
Professional or employment-related information.	For job applicants: Directly from you; recruiters.	For job applicants: Process your application.	For job applicants and employees: Background check providers; human resources providers.	Barring any legally required additional retention period, up to 7 years for non-hired applicants.
Non-public education information	Not applicable.	Not applicable.	Not applicable.	Not applicable.
Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	We do not collect.	Not applicable.	Not applicable.	Not applicable.

 

 

Sensitive Personal Information Category as set forth in Cal. Civ. Code § 1798.140	Sources from which Information was Collected	Purposes for Collection; Use	Third Parties, Service Providers, and Contractors Receiving Personal Information	Retention Period
Social security number, driver’s license number, state identification card, or passport number.	For job applicants: Recruiters; background check providers.	For job applicants: Process your application; satisfy legal obligations.	For job applicants and employees: Background check providers; human resources providers.	Barring any legally required additional retention period, up to 7 years for non-hired applicants.
Account access credentials (user names, account numbers, or card numbers combined with required access code, security code or password to access an account).	Directly from you.	Protect against malicious, deceptive, fraudulent, or illegal activity.	Technology service providers; customer relationship management providers.	Barring any legally required additional retention period, up to 7 years for non-hired applicants.
Precise geolocation (location within a geographical area of a circle with a radius of 1850 feet or less).	We do not collect.	Not applicable.	Not applicable.	Not applicable.
Racial or ethnic origin	We do not collect.	Not applicable.	Not applicable.	Not applicable.
Religious or philosophical beliefs	We do not collect.	Not applicable.	Not applicable.	Not applicable.
Union membership	We do not collect.	Not applicable.	Not applicable.	Not applicable.
Genetic Data	We do not collect.	We do not collect.	Not applicable.	Not applicable.
Mail, email, or text messages where the content is not directed to us.	We do not collect.	Not applicable.	Not applicable.	Not applicable.
Unique identifying biometric information	We do not collect.	We do not collect.	Not applicable.	Not applicable.
Personal information collected and analyzed concerning health.	We do not collect.	We do not collect.	Not applicable.	Not applicable.
Personal information collected and analyzed concerning sex life, or sexual orientation.	We do not collect.	We do not collect.	Not applicable.	Not applicable.

 

Right to Limit Use and Disclosure of Sensitive Personal Information

We do not collect or process sensitive personal information for the purpose of inferring characteristics about consumers. We also do not disclose sensitive personal information for purposes other than those specified in section 7027(m) of the CCPA regulations promulgated by the California Privacy Protection Agency. Therefore, we do not offer consumers the option to limit the use of their sensitive personal information.

 Right to Opt Out of Sharing for Cross-Context Behavioral Advertising

In the past twelve months, we have used data about your activities on our online properties to serve you ads on online properties owned or controlled by third parties. In the past twelve months, we have provided the following categories of information to advertising networks, data analytics providers, and social media networks for this purpose:

• Personal identifiers, such as unique personal identifier, online identifier, internet protocol address, device information and identifiers, and unique advertising identifiers and cookies; and internet and other electronic network activity information.

You can opt out of this sharing of personal information for cross-context behavioral advertising by modifying your cookie settings, or, you may do so in a frictionless manner by activating Global Privacy Control (“GPC”) opt out preference signal to opt out of disclosures of your personal information through the browser you are using. To learn more about the GPC, click here .  You may also contact us as set forth in the “Exercising Your Rights” section below.

Right to Opt Out of Sale

While we do not sell personal information in exchange for monetary consideration, we do share personal information for other benefits that could be deemed a “sale,” as defined by the CCPA. The CCPA broadly defines “sale” in a way that may include activities such as the delivery of targeted advertising on websites or allowing third parties to receive certain information, such as cookies, IP address, and/or browsing behavior. In the past twelve months, we have provided the following categories of information to advertising networks, data analytics providers, and social media networks in ways that could be considered a “sale” under California law:

• Personal identifiers, such as unique personal identifier, online identifier, internet protocol address, device information and identifiers, and unique advertising identifiers and cookies; and internet and other electronic network activity information.

We disclosed these categories of information to these third parties for the purposes of performing analytics and marketing and to maintain, improve, upgrade, or enhance our products or services.

We have no actual knowledge of selling the personal information or the sensitive personal information of minors under 16 years of age.

California residents have the right to opt out of the “sale” of their personal or sensitive personal information.

If you would like to opt of such disclosures, you may do so by modifying your cookie settings, or, you may do so in a frictionless manner by activating Global Privacy Control (“GPC”) opt out preference signal to opt out of disclosures of your personal information through the browser you are using. To learn more about the GPC, click here.   You may also contact us as set forth in the “Exercising Your Rights” section below.

 Right to Delete Personal Information

 You have the right to request the deletion of your personal information, subject to certain exceptions.

 Right to Correct Inaccurate Personal Information

You have the right to request the correction of any inaccurate personal information that we maintain about you.

Right to Access

You have the right to request the categories and specific pieces of personal information we have collected about you.

Right of Non-Retaliation and Non-Discrimination

 You have the right to exercise the privacy rights conferred to you under the CCPA without receiving retaliatory or discriminatory treatment. Company does not retaliate or discriminate against your for exercising the privacy rights conferred to you under the CCPA.

 Exercising Your Rights

To exercise your rights, you may contact us via phone at 205-350-4000 or via email at marketing@mainstreetinc.com. You may also submit a request through our Websites, here. Requesters will need to provide us with personal information in order to verify their identity and residency. We will compare the information you provide with our internal records. The personal information that we use to verify identity and residency will not be used for any other purpose.

You may authorize an agent to submit a request on your behalf if you provide the authorized agent with written permission signed by you. We may require you to verify your identity directly with us and confirm that you provided the authorized agent with permission to submit a request on your behalf.

 Contact Us

Should you have any questions about our Privacy Policy, do not hesitate to contact us at: marketing@mainstreetinc.com