Privacy Policy

1. About This Policy

CambridgeCommerce, Inc. (“CEC,” “we,” “us,” or “our”) is a California corporation providing payment processing sales agent and merchant services referral services. This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with our website (cambridgecommerce.com), our merchant application portal, and our business operations.

This policy applies to personal information we collect from prospective merchants, existing merchant clients, website visitors, and business contacts. It does not apply to information collected by our acquiring bank and payment processor partners after a merchant application is submitted, which is governed by those partners’ own privacy policies.

2. Information We Collect

We collect personal information in several categories, depending on your interaction with us.

A. Website Visitors and Contacts

When you visit our website or contact us, we may collect: name, email address, phone number, company name, and website URL. This information is collected via our website contact form, scheduling tools, and direct communications.

B. Merchant Applicants (QuickApp and Document Upload)

When you submit a merchant application through our website, we collect the following categories of information for the purpose of evaluating and submitting your application to acquiring banks and payment processors for merchant account underwriting:

• Business information: company name, formation state and date, business address, website URL, tax identification number (EIN), business description, and sales volume estimates
• Owner and principal information: name, title, address, date of birth, government-issued identification number (driver’s license or passport number), ownership percentage, and email address
• Business financial information: bank account number, routing number, voided check or signed bank letter, bank statements, processing statements, financial statements, and tax returns
• Processing information: gateway preferences, shopping cart/CRM platform, billing model, and transaction information

C. SMS Communications

If you opt into our SMS messaging service, we collect your name, mobile phone number, and email address for the purpose of appointment reminders, application onboarding, and merchant support communications.

D. Automatically Collected Information

Our website may collect standard web analytics data including IP address, browser type, pages visited, and referring URL through standard web technologies.

3. Sensitive Personal Information

Under the California Privacy Rights Act (CPRA), the following categories of information we collect are classified as “sensitive personal information”:

• Government-issued identification numbers (driver’s license, passport)
• Business financial account numbers and routing numbers

We collect this information solely for the specific business purpose of merchant account underwriting and do not use it for any secondary commercial purpose. You have the right to limit our use and disclosure of sensitive personal information to what is necessary to perform the services you requested. To exercise this right, see Section 7 below.

4. How We Use Your Information

We use the personal information we collect for the following business purposes:

• Evaluating and processing merchant account applications on your behalf
• Submitting applications and supporting documentation to acquiring banks and payment processors for underwriting review
• Communicating with you regarding your application status and merchant account
• Providing ongoing merchant support and customer service
• Sending SMS appointment reminders and service communications (with your consent)
• Complying with applicable legal and regulatory requirements, including KYC and AML obligations imposed by our processor partners
• Maintaining records as required by our agreements with acquiring banks and payment processors

We do not use your personal information for targeted advertising, profiling, or any purpose unrelated to the merchant services we provide to you.

5. How We Share Your Information

We do not sell your personal information. We do not share your personal information with third parties for their own marketing purposes.

Service Providers

We share personal information with service providers who process data on our behalf under written data processing agreements. These service providers are restricted from using your personal information for any purpose other than providing services to us. Categories of service providers include:

• CRM, pipeline management, and workflow automation platforms
• Document generation and PDF processing tools
• Marketing automation and communication platforms
• Website hosting and form management platforms
• Email, productivity, and document storage platforms (including Microsoft 365 and Google Workspace)
• SMS messaging and communication service providers

A list of specific service providers is available upon request submitted to [email protected].

Acquiring Banks and Payment Processors

As part of providing our merchant referral and application services, we submit your merchant application and supporting documentation directly to acquiring banks and payment processors for the purpose of underwriting and establishing your merchant account. These institutions are independent data controllers and their handling of your information is governed by their own privacy policies and applicable financial privacy laws, including the Gramm-Leach-Bliley Act (GLBA). Categories of institutions we work with include acquiring banks, independent sales organizations (ISOs), and registered payment processors. Specific institutions used for your application will be identified to you during the application process.

Legal Requirements

We may disclose personal information if required to do so by law, court order, or regulatory authority, or to protect the rights, property, or safety of CEC, our clients, or others.

6. Data Retention

We retain personal information for the following periods:

• Merchant application data and financial documentation: Seven (7) years following the conclusion of our services, as required by our agreements with acquiring banks and card network rules
• SMS contact information: For the duration of your SMS subscription; deleted within 24 hours of opt-out
• Website contact and inquiry data: Two (2) years from the date of collection, unless a merchant relationship is established

7. Your California Privacy Rights

If you are a California resident, the CCPA/CPRA provides you the following rights with respect to your personal information:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: You have the right to request deletion of personal information we have collected about you, subject to certain exceptions including our legal obligation to retain records under our processor agreements.
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information (including government IDs and financial account numbers) to what is necessary to perform the services you requested.
• Right to Opt Out of Sale or Sharing: We do not sell or share your personal information as those terms are defined under the CCPA/CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

How to Submit a Privacy Request: You may submit a privacy rights request by contacting us at:

We will verify your identity before processing your request and respond within 45 days as required by law, with one possible 45-day extension if necessary.

8. SMS Messaging Policy

By opting into our SMS messaging service, you consent to receive text messages from CambridgeCommerce for appointment reminders, application onboarding communication, and merchant support. Message and data rates may apply. Message frequency varies.

To opt out at any time, reply STOP, email us at [email protected], or call (760) 444-9000. You will receive a final confirmation message and your number will be removed within 24 hours.

To request assistance, reply HELP.

We do not share your mobile number with third parties for marketing purposes.

9. Data Security

We maintain administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (HTTPS/TLS), access controls on systems holding personal information, and data processing agreements with all service providers. However, no security system is impenetrable, and we cannot guarantee the absolute security of your information.

10. Children’s Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on our website with a revised “Last Updated” date. Your continued use of our website or services after any update constitutes acceptance of the revised policy.

12. Contact Us

For questions about this Privacy Policy, to exercise your privacy rights, or for any data-related inquiries, please contact: