Privacy Policy
Effective Date: September 30, 2025
Last Updated: September 30, 2025
Table of Contents
- Introduction
- Information We Collect
- How We Use Your Information
- How We Share Your Information
- Your Privacy Rights and Choices
- State-Specific Privacy Rights
- Data Security
- Data Retention
- Cookies and Tracking Technologies
- Children's Privacy
- International Data Transfers
- Third-Party Websites
- Changes to This Privacy Policy
- Contact Us
1. Introduction
National Access, LLC ("National Access," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at www.natlaccess.com (the "Website") or use our services.
Important Note: This Privacy Policy applies to the public-facing Website. If you are a registered user of the National Access Portal, additional privacy terms specific to the Portal and our payment financing services are available within the Portal platform.
By using the Website, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Website.
Our Commitment to Privacy
We respect your privacy and are committed to transparency about our data practices. We comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and similar privacy laws in Virginia, Colorado, Connecticut, Utah, Montana, Oregon, Texas, and other states.
2. Information We Collect
We collect several types of information from and about users of our Website.
2.1 Information You Provide to Us
Contact Information:
- Full name
- Email address
- Phone number (mobile and/or landline)
- Mailing address
- Company name and business information
Communications:
- Information contained in inquiries, contact form submissions, and other communications you send to us
- Feedback, suggestions, or other input you provide
Marketing Preferences:
- Your consent to receive marketing communications
- Communication preferences
2.2 Information Collected Automatically
When you access the Website, we and our third-party service providers automatically collect certain information:
Device and Usage Information:
- Internet Protocol (IP) address
- Browser type and version
- Operating system
- Device type, model, and identifiers
- Pages visited, date and time of visits, time spent on pages
- Referring/exit pages and URLs
- Click-stream data and other usage information
Location Information:
- General geographic location (city, state, country) derived from your IP address
Cookies and Similar Technologies:
- Information collected through cookies, web beacons, pixels, and similar tracking technologies (see Section 9)
2.3 Information from Third Parties
We may receive information about you from third-party sources, including:
Business Partners:
- Law firms or attorneys who refer clients to our services
- Professional associations and industry organizations
Public Sources:
- Publicly available information from government records or public databases
Service Providers:
- Analytics providers
- Advertising networks
- Marketing platforms
2.4 Categories of Sensitive Personal Information
We may collect the following categories of sensitive personal information as defined under applicable state laws:
- Social Security numbers, driver's license numbers, or government-issued identification numbers (Portal users only, not collected via the Website)
- Financial account information (Portal users only)
- Precise geolocation data (only if you enable location services)
Note: We do not collect racial or ethnic origin, religious beliefs, union membership, genetic data, biometric data for identification purposes, health information, or information concerning sexual orientation or sex life through this Website.
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Primary Business Purposes
Service Delivery:
- To respond to inquiries and provide information about our services
- To communicate with you about your requests
- To process applications for our services
- To provide customer support
Business Operations:
- To operate, maintain, and improve the Website
- To analyze usage trends and preferences
- To develop new features, products, and services
- To conduct internal research and development
Marketing and Communications:
- To send you marketing communications (with your consent where required)
- To provide information about services, promotions, and events
- To conduct surveys and gather feedback
Legal and Compliance:
- To comply with legal obligations and regulatory requirements
- To protect our rights, privacy, safety, or property
- To enforce our Terms of Service and other agreements
- To prevent fraud and security incidents
3.2 Legal Bases for Processing
We process your personal information based on the following legal grounds:
- Consent: When you provide explicit consent (e.g., opting in to marketing communications)
- Contract Performance: When necessary to provide services you've requested or enter into agreements
- Legitimate Interests: To operate our business, improve our services, prevent fraud, and ensure security
- Legal Obligation: To comply with applicable laws, regulations, legal processes, or governmental requests
4. How We Share Your Information
We do not sell your personal information.
We may share your information in the following circumstances:
4.1 Service Providers
We share information with third-party vendors who perform services on our behalf:
Categories of Service Providers:
- Website hosting and infrastructure providers
- Analytics and data analysis services
- Customer relationship management (CRM) platforms
- Email and SMS communication platforms
- Marketing and advertising services
- IT support and security services
- Payment processors (Portal users only)
Our Commitments: Service providers are contractually obligated to use your information only as necessary to provide services to us and to maintain the confidentiality and security of your information.
4.2 Business Partners
Law Firms and Attorneys:
- We share information with law firms and attorneys when you inquire about financing services for legal matters
- Information is shared only with your consent or as necessary to fulfill your request
4.3 Corporate Transactions
Business Transfers:
- In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity
- We will notify you via email or prominent notice on the Website of any change in ownership
4.4 Legal Requirements and Protection
We may disclose information when we believe in good faith that disclosure is necessary to:
- Comply with applicable laws, regulations, legal processes, or governmental requests
- Enforce our Terms of Service, Privacy Policy, or other agreements
- Protect the rights, property, or safety of National Access, our users, or the public
- Detect, prevent, or address fraud, security, or technical issues
- Respond to claims that content violates the rights of third parties
4.5 With Your Consent
We may share information for other purposes with your explicit consent or at your direction.
4.6 Aggregated and De-Identified Information
We may share aggregated or de-identified information that cannot reasonably be used to identify you. This information is not considered personal information under applicable privacy laws.
5. Your Privacy Rights and Choices
5.1 Universal Rights
Regardless of your location, you have the following rights regarding your personal information:
- Access: Request confirmation of whether we process your personal information and access to such information
- Correction: Request correction of inaccurate or incomplete personal information
- Deletion: Request deletion of your personal information (subject to certain exceptions)
- Opt-Out of Marketing: Unsubscribe from marketing emails or text messages at any time
5.2 How to Exercise Your Rights
To exercise any of these rights, you may:
- Email: privacy@natlaccess.com
- Phone: (855) 997-2535
- Mail: National Access, LLC, Privacy Team, 8791 So. Redwood Road, Suite 150, West Jordan, UT 84088
- Online Form: [Link to request form]
Verification: To protect your privacy, we will verify your identity before processing requests. We may require additional information to verify your identity, such as matching information you provide with information we have on file.
Response Time: We will respond to verified requests within 45 days (or as otherwise required by applicable law). If we need additional time, we will notify you and explain the reason for the delay.
Authorized Agents: You may designate an authorized agent to make requests on your behalf. We require written authorization from you before accepting requests from agents.
Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
6. State-Specific Privacy Rights
6.1 California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
Additional Rights:
Right to Know: You have the right to request specific details about the personal information we have collected about you in the past 12 months, including:
- Categories of personal information collected
- Categories of sources from which information was collected
- Business or commercial purpose for collecting information
- Categories of third parties with whom we share information
- Specific pieces of information collected about you
Right to Delete: You have the right to request deletion of personal information we collected from you (subject to certain exceptions)
Right to Correct: You have the right to request correction of inaccurate personal information
Right to Opt-Out: You have the right to opt-out of:
- Sale of personal information
- Sharing of personal information for cross-context behavioral advertising
- Profiling in furtherance of decisions that produce legal or similarly significant effects
Right to Limit Use of Sensitive Personal Information: You have the right to limit our use and disclosure of sensitive personal information to purposes necessary to provide services or goods you requested
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
Our Data Practices:
- We do not sell personal information
- We do not share personal information for cross-context behavioral advertising through this Website
- We do not use or disclose sensitive personal information for purposes other than those permitted under CCPA
Do Not Sell or Share My Personal Information:
[Link to opt-out preference center]
Global Privacy Control (GPC): We honor Global Privacy Control signals as valid requests to opt-out of the sale or sharing of personal information.
Categories of Personal Information Collected (Past 12 Months):
- Identifiers (name, email, phone, IP address)
- Commercial information (inquiries, service interests)
- Internet/electronic activity (browsing history, usage data)
- Geolocation data (general location from IP address)
- Professional/employment information (business name, role)
California Shine the Light: California residents may request information about disclosures of personal information to third parties for direct marketing purposes. Contact us at privacy@natlaccess.com.
6.2 Virginia Residents (VCDPA)
Virginia residents have the right to:
- Confirm whether we process your personal data and access such data
- Correct inaccuracies in your personal data
- Delete personal data provided by or obtained about you
- Obtain a copy of your personal data in a portable format
- Opt out of targeted advertising, sale of personal data, and profiling for decisions with legal effects
6.3 Colorado Residents (CPA)
Colorado residents have the right to:
- Confirm whether we process your personal data and access such data
- Correct inaccuracies in your personal data
- Delete personal data you provided to us
- Obtain a copy of your personal data
- Opt out of targeted advertising, sale of personal data, and profiling for decisions with legal effects
6.4 Connecticut Residents (CTDPA)
Connecticut residents have the right to:
- Confirm whether we process your personal data and access such data
- Correct inaccuracies in your personal data
- Delete personal data you provided to us
- Obtain a copy of your personal data in a portable format
- Opt out of targeted advertising, sale of personal data, and profiling
6.5 Utah Residents (UCPA)
Utah residents have the right to:
- Confirm whether we process your personal data and access such data
- Delete personal data you provided to us
- Obtain a copy of your personal data
- Opt out of targeted advertising and sale of personal data
6.6 Other States
Residents of Montana, Oregon, Texas, and other states with comprehensive privacy laws have similar rights. Please contact us at privacy@natlaccess.com for information specific to your state.
Appeals Process: If we deny your privacy rights request, you may appeal our decision by contacting privacy@natlaccess.com within a reasonable period. We will respond to your appeal within 60 days (or as required by applicable state law).
7. Data Security
7.1 Security Measures
We implement appropriate technical and organizational security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:
Technical Safeguards:
- Encryption of data in transit using TLS/SSL protocols
- Encryption of sensitive data at rest
- Secure authentication and access controls
- Regular security monitoring and logging
- Firewall protection and intrusion detection systems
- Regular security testing and vulnerability assessments
Organizational Safeguards:
- Access to personal information limited to authorized personnel on a need-to-know basis
- Confidentiality agreements with employees and contractors
- Regular security training for personnel
- Incident response and breach notification procedures
- Regular review and update of security practices
Physical Safeguards:
- Secure facilities with restricted access
- Environmental controls and protections
7.2 Third-Party Security
We require third-party service providers to maintain appropriate security measures and protect personal information in accordance with industry standards and applicable laws.
7.3 Limitations
While we strive to protect your personal information, no security system is impenetrable. We cannot guarantee the absolute security of information transmitted over the internet or stored electronically. You acknowledge that you provide information at your own risk.
7.4 Data Breach Notification
In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities in accordance with applicable laws, typically within 72 hours of becoming aware of the breach when required by law.
8. Data Retention
8.1 Retention Periods
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Specific Retention Periods:
Contact and Inquiry Information:
- Retained for 3 years from the date of last contact or inquiry
- May be retained longer if you become a Portal user
Marketing Communications:
- Retained until you opt out or withdraw consent
- Suppression lists retained indefinitely to honor opt-out requests
Website Usage Data:
- Analytics data aggregated and retained for 26 months
- Log files retained for 90 days for security purposes
Legal and Compliance:
- Information required for legal compliance retained for 7 years or as required by applicable laws and regulations
8.2 Deletion
When we no longer need your personal information or upon your valid deletion request, we will:
- Securely delete or destroy the information
- De-identify the information so it can no longer be associated with you
- Retain only as necessary to comply with legal obligations
8.3 Exceptions
We may retain information beyond stated retention periods when:
- Required by law, regulation, or legal process
- Necessary for pending or threatened litigation
- Necessary to enforce our rights or defend against claims
- You have consented to longer retention
9. Cookies and Tracking Technologies
9.1 What Are Cookies?
Cookies are small text files placed on your device when you visit a website. Similar technologies include web beacons, pixels, and local storage.
9.2 Types of Cookies We Use
Strictly Necessary Cookies:
- Essential for website functionality and security
- Cannot be disabled without affecting website operation
- Retention: Session or up to 1 year
Performance and Analytics Cookies:
- Help us understand how visitors use the Website
- Collect anonymous or aggregated usage data
- Examples: Google Analytics
- Retention: Up to 26 months
Functionality Cookies:
- Remember your preferences and settings
- Enhance user experience
- Retention: Up to 1 year
Marketing and Advertising Cookies:
- Used to deliver relevant advertisements
- Track effectiveness of marketing campaigns
- Examples: Google Ads, Facebook Pixel
- Retention: Up to 24 months
9.3 Your Cookie Choices
Cookie Consent: When you first visit our Website, you will see a cookie consent banner. You can accept or reject optional cookies.
Cookie Preference Center: You can manage your cookie preferences at any time through our Cookie Preference Center: [Link to preference center]
Browser Controls: You can set your browser to refuse cookies or alert you when cookies are being sent. Note that some Website features may not function properly if cookies are disabled.
Browser Settings Guides:
Opt-Out Resources:
9.4 Do Not Track Signals
Some browsers have a "Do Not Track" (DNT) feature that signals websites you visit that you do not want to have your online activity tracked. Our Website does not currently respond to DNT signals. However, we honor Global Privacy Control (GPC) signals as valid opt-out requests under applicable state privacy laws.
9.5 Third-Party Analytics
We use third-party analytics services, including Google Analytics, to collect and analyze usage information. These services use cookies and similar technologies to help us understand how visitors interact with our Website.
Google Analytics: To learn more about Google Analytics and how to opt out, visit: https://policies.google.com/technologies/partner-sites
10. Children's Privacy
10.1 Age Restriction
Our Website is not directed to, and we do not knowingly collect personal information from, children under 13 years of age. If you are under 13, please do not use the Website or provide any information to us.
10.2 COPPA Compliance
We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent.
10.3 Parental Rights
If you are a parent or guardian and believe that your child under 13 has provided personal information to us, please contact us immediately at privacy@natlaccess.com. We will:
- Verify the request
- Delete the information from our systems
- Take steps to prevent future collection