Information collected
When you submit a form, NPP receives the information you provide. Depending on the form, this may include your name, business name, email address, phone number, merchant ID, current payment provider, business needs, Square products or pricing options of interest, and notes. Referral forms also collect information about the referring merchant and the business being referred. Only submit another person's information when you are authorized to share it.
Signed-in agent forms may collect agent account details, referral attribution, merchant qualification details, and information used to administer agent access.
The site and its service providers also collect technical and activity information. This can include the page or link visited, referring page, date and time, browser and device information, IP address, user agent, advertising click identifiers, campaign and experiment identifiers, and events such as form submissions or outbound Square signup clicks.
Following an NPP link to Square does not require you to give NPP an email address or phone number. If you voluntarily submit a separate NPP help or lead form, the form explains what it collects and asks separately before contact details are used for advertising measurement.
How information is used
- To respond to your request.
- To prepare a Square hardware or service setup recommendation.
- To discuss payment-processing options and onboarding next steps.
- To review agent access requests and route merchant referrals.
- To operate, secure, troubleshoot, measure, and improve the site and its signup journeys.
- To attribute referrals, advertising, and signup activity and to maintain operational records.
- To reconcile consented paid-ad visits with signed-merchant records and report verified outcomes to advertising systems.
- To compare conversion performance between controlled site variants and detect duplicate, invalid, or test conversion records.
Service providers and connected systems
NPP uses Resend to deliver form notifications and related email. Form content and recipient information are provided to Resend as needed to deliver those messages.
NPP uses its NPP Titan AI operations system to receive and maintain certain referral, campaign, click-attribution, and signup-interest records. Those records may contain form details, pseudonymous journey or campaign identifiers, referral context, and technical information associated with a request or click.
When a separate NPP form offers advertising measurement and you choose it, the website normalizes the submitted email and optional phone number on NPP's server. Titan receives only one-way SHA-256 and keyed HMAC fingerprints, consent metadata, and related advertising and NPP click identifiers—not the plaintext email or phone number. Google may receive protected one-way hashes to match that consented submission to an ad and measure conversions.
NPP may compare those protected fingerprints with contact details in the Square signup report available to NPP. A confirmed match can be recorded as a signed application attributed to the applicable advertising campaign. NPP may provide the protected SHA-256 contact fingerprints, advertising identifiers, and conversion details to Google as an offline or enhanced conversion. Advertising click identifiers are deterministic evidence when available; campaign parameters without a real click identifier are retained for analysis but are not treated as deterministic Google Ads credit.
When you follow a Square application or signup link, the destination is operated by Square. Attribution parameters such as campaign, advertising click, or NPP journey identifiers may be included in the link. Information you enter on Square's site is handled by Square under its own terms and privacy practices.
Analytics, advertising, and browser storage
This site uses cookie-free Plausible Analytics to understand site use. Google Ads helps measure advertising results and support follow-up ads. Where these tools are allowed, Google may receive page and event data, technical request information, and campaign or advertising identifiers, and may use cookies, pixels, or similar technologies according to its own privacy practices.
Privacy settings depend on the region identified for your visit. In identified United States states other than Maryland, and in Washington, D.C., optional Google Ads tools are enabled unless you reject them or send a recognized browser opt-out signal. In Maryland, outside the United States, or when your country or state cannot be identified, advertising and analytics storage stay denied until you allow the tools. You can use the Do Not Sell or Share / Privacy choices control at any time to review or change your settings. An automatic notice is not shown when the site uses an opt-out setting or honors a browser opt-out signal.
Google Ads tags load in advanced consent mode. When optional advertising is denied, Google may still receive limited cookieless measurement signals. Plausible remains cookie-free regardless of your advertising choice.
NPPsquare.com also uses browser local storage to retain attribution information such as UTM parameters, ad click identifiers, campaign context, landing variants, pseudonymous campaign-recipient identifiers, and an NPP click identifier. This helps keep attribution attached as you move between pages and outbound signup links. The site separately stores your privacy choice in local storage and an essential preference cookie so it can be honored on later visits and shared between nppsquare.com and start.nppsquare.com. Rejecting optional advertising does not remove this first-party attribution context. You can clear this information through your browser settings.
A separately submitted, consented NPP form may set a secure, HttpOnly, host-specific cookie containing only an opaque signed token. The cookie does not contain contact details or identity fingerprints. Square signup links themselves do not require a contact form or this identity token.
NPP is testing the canonical nppsquare.com site and the start.nppsquare.com variant. Attribution records include the controlled host and variant so signed applications can be evaluated separately. NPP does not place an email address, phone number, protected identity fingerprint, or internal identity-capture identifier in Plausible events, Google browser-event URLs, or the Square handoff URL.
Retention and security
Retention periods vary by record and business need. NPP and its providers may retain information for as long as reasonably needed to respond to requests, administer referrals and accounts, measure performance, maintain business records, prevent abuse, resolve disputes, and meet applicable obligations.
NPP uses administrative and technical safeguards intended to protect information, but no internet transmission or storage system can be guaranteed to be completely secure.
First-party attribution tokens are currently configured to expire within 90 days. NPP may retain conversion evidence and audit records as needed to operate, reconcile, deduplicate, and document campaign reporting. A failure in optional advertising measurement does not prevent a visitor from continuing to Square.
Your choices
You can limit cookies and similar technologies through your browser, the NPPsquare privacy choices below, and the controls offered by Google and other providers. Rejecting optional advertising tools denies Google advertising storage, advertising user data, and ad personalization. If those tools were enabled, rejecting reloads the page to apply the change. You can still browse and continue to Square without allowing optional advertising. Clearing site data in your browser removes locally stored NPPsquare attribution information and privacy preferences from that browser.
The site honors Global Privacy Control (GPC) as an opt-out of optional advertising in every region. This signal overrides a previously allowed choice and saves a rejection preference. The Allow control stays unavailable while the signal is active. If you later turn off GPC, the saved rejection remains until you change it through Privacy choices.
Providing a phone number lets NPP respond to your request by phone. Unless a form separately asks for and records your consent, providing a phone number does not authorize automated marketing texts or WhatsApp messages.
To ask about information you submitted, or to request a correction or deletion, contact NPP at info@nationalpaymentprocessing.com. Some information may need to be retained for legitimate business, security, or legal reasons.
Children
This business-services site is not directed to children under 13, and NPP does not knowingly seek information from children through these forms.
Updates to this notice
NPP may update this notice as the site, connected services, or data practices change. The date above identifies the current version.
Contact
Questions about this notice can be sent to info@nationalpaymentprocessing.com.
For the primary NPP website, visit National Payment Processing.