Deluxe Privacy Policy

Last updated: October 8, 2026

Introduction

This Privacy Policy (“Policy”) applies to Websites and mobile applications owned and operated by Deluxe Corporation and its subsidiaries and affiliates (referred to herein as “Deluxe,” “we,” “us” or “our”) that link to this policy. The Policy also applies to the processing of your information provided to us or collected by us offline, including via postal mail and through our call centers. The following information will help you understand how we collect, use, share, and safeguard your Personal Information. 

Collectively, we refer to the Websites and apps noted above and activities outlined in this Policy as the “Services.” By accessing our Services, you agree to this Policy. Some U.S. states require that we provide their residents with additional information. Please review the Additional Information Regarding Your State Privacy Rights below for more information.

Changes to this Policy

This Policy may change from time to time, and we will post changes to this page. Please check this Policy regularly for updates. 

How Our Role Changes Depending on the Service

When you interact with Deluxe directly, such as visiting our websites, placing an order, signing up for marketing emails, attending a webinar, or contacting us, we decide how and why your personal information is processed (we act as a “controller” or “business”). When we process information on behalf of a financial institution, merchant, or other client (for example, to provide check, payments, or fraud‑prevention services), we generally act as a “service provider”/“processor” and follow that client’s instructions. In those cases, processing personal information about you is subject to the client’s privacy policies, which we suggest you review, and your privacy rights request usually must be submitted to the client that has the direct relationship with you.

Gramm-Leach-Bliley Act (GLBA) Covered Information

Some information we process for financial institution clients is “nonpublic personal information” governed by the GLBA. GLBA-covered information is generally exempt from state consumer privacy laws. You may receive separate GLBA notices from financial institution clients that govern processing nonpublic personal information about you and may include certain rights with respect to that data. We encourage you to review those GLBA notices.

Information We Collect About You and How We Collect It:

“Personal Information” is information that relates or could reasonably be linked to an identified or identifiable person, whether alone or in combination with other information.

Deluxe collects the following types of Personal Information:

• Identifiers (such as your contact information (name, alias, email address, postal address, ZIP code, phone number, account name), driver’s license number, Social Security number, or unique personal or device identifiers (mobile advertising ID, cookies, IP address, device signature)) (“Identifiers”)
• Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (such as physical characteristics or description, passport number, insurance policy number, education, employment, employment history, medical information, or health insurance information) (“Recordkeeping Data”)
• Characteristics of protected classifications under state or federal law (such as age, race, color, gender or gender identity, ancestry, national origin, citizenship, religion or creed, marital status, physical or mental disability, military and veteran status) (“Protected Classifications Data”)
• Commercial information (such as transaction data, purchase history, signatures, or delivery information) (“Commercial Data”)
• Financial information (such as bank account information, routing numbers, and credit or debit card information, and other financial information) (“Financial Data”)
• Internet or other network or device activity (such as browsing history, search history, browser type and language, operating system, App usage, and other interactions with our online Services) (“Internet Data”)
• Geolocation information (such as city, state, and ZIP code associated to your IP address or derived through Wi-Fi triangulation (“Geolocation Data”)
• Audio, electronic, visual, thermal, olfactory, or similar information (such as CCTV at our locations and call recordings) (“Sensory Data”)
• Inference information about you (such as preferences, characteristics, attitudes, and behaviors) (“Inference Data”)
• Other information that we collect from or about you that identifies or can reasonably be associated with you (“Associated Data”)
• Sensitive personal information (such as Social Security, driver's license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; religious or philosophical beliefs; or union membership) (“Sensitive Personal Information”).

We may collect Personal Information from a variety of sources, including, sometimes automatically:

• From you, through our provision of Services, for example, when you request or use Services, sign up for a newsletter, register for a webinar, enter into a contractual relationship for Services, interact with us at an event, provide information in conjunction with Services, call our help desks, complete a survey, visit, order, or inquire about Services via postal mail, phone, or Internet, send us communications, or visit one of our physical locations.
• From other sources, including:
  • Publicly available databases
  • Subscription-based sources
  • Court documents and filings
  • Joint marketing and event sponsors
  • Our clients and customers
  • Counterparties in transactions or disputes
  • Social media platforms
  • Our service providers

We need to collect Personal Information in order to provide the requested Services to you and otherwise operate our business. If you do not provide the information requested, we may not be able to provide the Services. If you disclose any Personal Information relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Policy. 

Cookies, Web Beacons, and Other Tracking

We (and other entities) may automatically collect  information relating to your interactions with us and our Services via cookies and similar technologies. For example, we may monitor how many times you visit the Website, which pages you go to, traffic data, location data, and the originating domain name of your Internet Service Provider. Please see the Digital Advertising & Analytics section of this Policy to learn more about the use of this information and the choices available to you. Additionally, we use session replay and similar technology, as applicable, to record and better understand your interactions on the Services.

How We Use Information We Collect About You

Deluxe may use the Personal Information we collect for any lawful purpose, including the following legitimate business or commercial purposes:

• Performing Services, including management of business operations, maintaining or servicing accounts, providing customer service, sending administrative information to you, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, providing analytics services, providing similar services, responding to inquiries and fulfilling requests (“Performing Services”)
• Auditing and reporting related to particular transactions and interactions, including online interactions you may have with us or others on our behalf, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing to verify that our internal processes function as intended and are compliant with legal, regulatory, and contractual requirements (“Auditing”)
• Short-term, transient use, including, but not limited to, the delivery of contextual ads shown as part of the same interaction with us (“Short-term Use”)
• Helping to ensure security and integrity, including detecting security incidents and cyberattacks, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity (“Data Security & Fraud Prevention”)
• Debugging to identify and repair errors that impair existing intended functionality (“Repairs”)
• Undertaking internal research for technological development and demonstration, including enhancing, improving, or modifying our current Services, and using data analysis to improve our Services (“Research and Development”)
• Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us and to maintain the safety, security, and integrity of our Services, databases, or other technology assets and business (“Quality and Safety”)
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us is among the assets transferred (“M&A”)
• To advance our commercial or economic interests, including marketing our Services to you, determining the effectiveness of our promotional campaigns or by inducing you or another to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction (“Commercial Interests”)
• To enforce our terms and conditions or legal or regulatory rights, comply with applicable laws and regulations, which may include laws outside your country of residence, or to cooperate with public or government authorities and law enforcement (“Legal Interests”)
• For any other purpose with your consent, or as otherwise disclosed at the time information is collected

Deluxe may use or disclose information that has been aggregated and/or de-identified without limitation. 

Deluxe collects Personal Information and uses it for legitimate business purposes as detailed in the following table:

How We Disclose Information About You

The table below explains the categories of information that we may disclose to third parties, the purposes for such disclosures, and the categories of those parties:

Digital Advertising & Analytics

We may partner with ad networks and other ad serving providers (“Advertising Providers”) that serve ads on behalf of us and others on non-affiliated platforms. Some of those ads may be personalized, meaning that they are intended to be relevant to you based on information Advertising Providers collect about your use of the Website and other websites or apps over time, including information about relationships among different browsers and devices. This type of advertising is known as interest-based advertising.

You may visit the DAA Webchoices tool at www.aboutads.info to learn more about this type of advertising and how to opt out of this advertising on websites by companies participating in the DAA self-regulatory program. You can also exercise choices regarding interest-based advertising on your mobile device by downloading the appropriate version of the DAA’s AppChoices tool at https://youradchoices.com/appchoices.

If you delete your cookies or use a different browser or mobile device, you may need to renew your opt-out choices exercised through the DAA Webchoices or AppChoices tool. Note that electing to opt out will not stop advertising from appearing in your browser or applications. It may make the ads you see less relevant to your interests. 

We may also work with third parties that collect data about your use of the Website and other websites or apps over time for non-advertising purposes. Deluxe uses Google Analytics and other third-party services to improve the performance of the Website and for analytics and marketing purposes. For more information about how Google Analytics collects and uses data when you use our Website, visit https://policies.google.com/technologies/partner-sites, and to opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout.

Additionally, you can adjust your cookies preferences by visiting our Privacy Preference Center (PPC) by clicking on the cookie icon available on our Services (e.g., at the bottom of the homepage), or your browser may offer tools to limit the use of cookies or to delete cookies; however, if you use these tools, our Services may not function as intended.

Protection of Personal Information

We have implemented measures designed to secure Personal Information from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. Unfortunately, no transmission or storage system can be guaranteed 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us at 877-861-8985.

Your Choices

If you no longer want to receive marketing emails from Deluxe, you may opt out by following the unsubscribe instructions in any of our marketing emails. Note that if you opt out of receiving marketing emails from us, we may still send you administrative and account messages.

For choices with respect to interest-based advertising activities, please see the Digital Advertising & Analytics section above.

State consumer privacy laws may provide their residents with additional rights regarding Personal Information. For more information about the rights and requests you may have under applicable state consumer privacy laws, please see Additional Information Regarding Your State Privacy Rights below. 

Data Retention

Deluxe retains Personal Information as long as necessary according to our enterprise records retention schedule. Retention periods are based upon the time the Personal Information is needed to satisfy the purposes described in this Policy and for which Personal Information was provided to us; to comply with applicable laws, legal holds, and other legal obligations (including contractual obligations); to resolve disputes; to enforce agreements; to meet operational requirements; and to fulfill your requests. To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information; the potential risk of harm from unauthorized use or disclosure of Personal Information; the purposes for which we process Personal Information and whether we can achieve those purposes through other means; and the applicable legal requirements. Once the retention period expires and if not otherwise required to retain information by law, we will delete or de-identify Personal Information.

Notice to Canadian Customers

Canadian customers are advised that the information collected by Deluxe, including any personal information, may be transferred and stored outside of Canada, for example, in the United States.

Third Party Services and Websites

The Services may contain links to unaffiliated third parties. This Policy does not apply to such third-party websites. When you click a link to visit a third-party website, you will be subject to that website’s privacy practices. We encourage you to review the privacy and security practices of any linked third-party website before providing any Personal Information on that website. 

The Services also include integrated social media tools or “plug-ins,” such as social networking tools offered by third parties. If you use these tools to share Personal Information or you otherwise interact with these features on the Services, those companies may collect information about you and may use and share such information in accordance with your account settings, including by sharing such information with the general public.

The inclusion of a link or plug-in on the Services does not imply endorsement of the linked website or embedded platform by Deluxe or by our affiliates or subsidiaries.

In addition, we are not responsible for the data practices of other organizations, including with respect to any Personal Information you disclose to other organizations through or in connection with apps or our social media.

Special Notification about Webinars

Webinars offered as a service to users of the Services (“Webinars”) are hosted by unaffiliated third-party vendors, and not by Deluxe.

Our third-party vendors require users to provide Personal Information to register for or attend Webinars. For example, this Personal Information includes name and email address. Users seeking continuing education credit also may be asked to provide the appropriate identification number(s). Please note that this Personal Information is collected by our vendors and not by us. We encourage you to read the privacy statements of our vendors, which control how such vendors handle Personal Information provided by you to register for the Webinars.

Additionally, our third-party vendors provide us with Personal Information about users of our Webinars. We use this Personal Information to track attendance, to facilitate future communication with such users, and for other purposes set forth in this Policy.

Additional Information Regarding Your State Privacy Rights

Some U.S. states, including Alabama, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia (collectively, “Certain States”), grant individuals certain rights under state privacy laws with respect to Personal Information we collect. If you are a resident of Certain States, in this section we provide additional notices about our privacy practices and explain consumer rights that may be available to you. This Policy does not apply to our employees, contractors, owners, directors, or officers where the Personal Information relates to their current, former, or potential role at Deluxe. Job applicants can review Deluxe’s Privacy Notice for Applicants for more information about the Personal Information Deluxe collects when you apply for a position with us.

Personal Information We Collect and Disclose

In the preceding 12 months, Deluxe collected and disclosed the categories of Personal Information disclosed above in the Information We Collect About You and How We Collect It section of this Privacy Policy.

We share Personal Information for “cross-context behavioral advertising” or targeted advertising (referred to as targeted advertising in this Policy) purposes but do not otherwise engage in “sales” of Personal Information as defined by state laws. Additionally, we do not knowingly sell or share Personal Information of individuals under age 16. The categories of Personal Information we have disclosed in the past 12 months to third-party business partners for advertising and marketing purposes, including targeted advertising, are described above in the “How We Disclose Information About You” section of this Privacy Policy, specifically in the rows for disclosures to Third-Party Online Advertisers and Ad Networks.

Some of the categories of Personal Information we collect may be considered sensitive personal information under the California Consumer Privacy Act (“CCPA”). We do not use or disclose sensitive personal information, as defined by the CCPA, for purposes that require an opt-out opportunity under the CCPA.

Categories of Sources. We collect Personal Information from the categories of sources identified above in the Information We Collect About You and How We Collect It section of this Privacy Policy.

Our Purposes for Processing Personal Information. We use and disclose the Personal Information we collect for our commercial and business purposes, as described above in the How We Use Information We Collect About You and How We Disclose Information About You sections of this Privacy Policy.

De-identified Information. We may use and disclose de-identified information to the extent permitted by applicable law. When we use de-identified information, we maintain and use the information in de-identified form and do not attempt to re-identify it, except to check whether our deidentification processes satisfy the requirements of applicable law.

Recipients of Personal Information

We disclose the categories of Personal Information described above (in the Information We Collect About You and How We Collect It section) to the categories of third parties as described above in the How We Disclose Information About You section of this Privacy Policy for commercial and business purposes

Individual Rights and Requests

Residents of Certain States have rights with respect to the Personal Information collected by Deluxe. You may be able to make the following requests regarding Personal Information, subject to certain exceptions and limitations:

1. You may request to confirm whether we are processing Personal Information about you.
2. You may request access to the following information:
   1. The categories of Personal Information we collected, used, and disclosed about you
   2. The categories of sources from which we collected such Personal Information 
   3. The business or commercial purpose for collecting or sharing Personal Information about you
   4. The categories of Personal Information about you that we shared or disclosed for a business purpose
   5. The categories of third parties to whom we shared or disclosed such Personal Information (if applicable)
   6. If you are a resident of Connecticut, Minnesota, or Oregon, a list of the specific third parties to which we have disclosed Personal Information.
3. You may request to receive the specific pieces of Personal Information we maintain about you.
4. Depending on your state law, you may request a portable and readily usable copy of the Personal Information we have collected about you, to the extent feasible.
5. You may request that we correct inaccuracies in Personal Information we have collected about you.
6. You may request that we delete Personal Information we collected about you.
7. You may request to opt out of (i) the sale of Personal Information and/or (ii) the sharing or processing of Personal Information for targeted advertising. Please note that if you opt out of certain practices, we may be unable to provide you with some Services.
8. Choice regarding sensitive information. Depending on your state law, you can
   1. Request to opt out of our processing of certain “sensitive” information, or
   2.  Withdraw consent for such processing if you previously gave it.

We will not retaliate against you because you exercise any of the above rights, or any other rights under the state privacy laws. 

Exercising Your Rights. To exercise your rights to know, delete, or correct, or any other rights described above aside from opt-outs, please submit a request and any required verifying information (described further below) by:

Emailing: privacy@deluxe.com
Calling toll-free: 877-861-8985

To opt out of sales and/or sharing, click the “Do Not Sell or Share My Personal Information” link in the footer of our Website.

Opt-out Preference Signals: Under some state privacy laws, certain mechanisms or technologies may be used to signal your opt-out preferences to entities that process Personal Information. To the extent that we are able to recognize these signals and they are legally sufficient, we process these signals as requests to opt out of processing for (i) sales of Personal Information and/or (ii) sharing or processing of Personal Information for targeted advertising. Depending on the signal you select, the opt-out may apply to only certain interactions, such as on a specific browser or device.

Appeals. Additionally, for residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Tennessee, Texas, and Virginia, if you have submitted a request that you believe we have not reasonably fulfilled, you may contact us to appeal our decision by sending an email with the subject line “Appeal” to privacy@deluxe.com.

Verification and Authorized Agents. Only you, or someone legally authorized to act on your behalf, may make a request related to your Personal Information. You do not need to create an account with us to submit a request or have it fulfilled. Your request must:

• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
• For requests other than opt-outs, provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized agent. In order to process your request, please include your full personal or business name plus email address, mailing address, and/or daytime telephone number.
  • California residents may use an authorized agent. For an authorized agent, we require a copy of the signed authorization from the individual on whose behalf the agent is acting demonstrating the agent’s ability to act on that person’s behalf, a valid power of attorney, court appointment document or the agent’s registration with the relevant state authority. Once we receive a Personal Information request from an authorized agent, unless that agent has a power of attorney issued pursuant to applicable law, we may contact the person to whom the request relates in order to, among other things, verify their identity, confirm the agent’s capacity to act on that person’s behalf, and if applicable, respond to or deliver information requested pursuant to the Personal Information request.
• If your request lacks sufficient detail or identifying information, we may need to request additional information from you to verify your identity or understand the scope of your request.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request.

Updating Your Information

When you have an account with us, you may review, change, or update your contact information by logging into your account.

Contact Information

To ask questions about this Policy and our privacy practices, contact us at:

Deluxe Privacy Program Office
801 South Marquette Ave.
Minneapolis, MN 55402
877-861-8985