Privacy Policy

Effective October 30, 2026. Until then, the previous version remains in effect.

Effective Date: October 30, 2026
Last Updated: October 23, 2026

For members who registered before the Effective Date, certain advertising uses of previously collected contact information begin later, as described in Section 5 (“Members who joined before the Effective Date”).

National Purchasing Partners, LLC and its affiliates (together, “NPP,” “we,” “us,” or “our”) operate a group purchasing organization that gives organizations and their employees access to supplier contracts and programs. This Privacy Policy explains what personal information we collect, how we use and share it, the choices you have, and the rights you may have under state privacy laws. It applies to mynpp.com and the other websites we own and operate that link to this policy (the “Sites”), to membership registration and services, and to our related communications, events and programs (together, the “Services”).

Our program for government agencies, educational institutions and nonprofit organizations, NPPGov, has its own privacy policy at nppgov.com/privacy-policy. This policy does not apply to the websites, products or services of our supplier partners or other third parties, even if you reach them through a link on our Sites. Those parties have their own privacy policies, and we encourage you to read them.

1. Information We Collect

Information you give us

• Registration and profile information: name, job title, organization name, business email address, business mailing address, phone number, member ID, username and password.
• Professional and organization information: purchasing responsibilities, professional certifications, industry, organization type, and the suppliers, products or programs you express interest in.
• Communications: information you submit through feedback forms, support requests, surveys, contests, events and correspondence with us.
• Communication preferences: your choices about email, text messages, sharing with supplier partners and advertising use.

Information we receive from supplier partners

Supplier partners may give us information about your organization’s participation in their programs, such as enrollment status, member ID and purchase volume, so that we can verify eligibility, track and report administrative fees, and support the program. We use this information only as permitted by our agreements with those supplier partners and by applicable law, including telecommunications customer-information rules. We do not provide information that a supplier partner gives us in confidence, such as account, line, usage, rebate or purchase-volume details, to advertising platforms, except as that supplier’s agreement permits and only for that supplier’s program.

Information from other sources

We may supplement the information we hold with business information from commercially available data providers and public sources, such as company name, industry classification, organization size, location, website, and business contact details. We use this information to keep our records accurate, understand which programs are relevant to your organization, and tailor our communications.

Information collected automatically

When you use our Sites or open our emails, we and our service providers collect information such as IP address, approximate location derived from IP address, browser and device type, pages visited, referring pages, dates and times of visits, links clicked, scrolling and mouse movements on our pages, and email opens and clicks. If you are a registered member or have otherwise given us your contact information, we may associate this activity with your record. We collect this information through cookies, pixel tags, scripts and similar technologies, as described in Section 5.

2. How We Use Information

We use personal information to:

• register and manage memberships, verify eligibility, and provide the Services you request;
• send confirmation, welcome, account, service and other transactional messages;
• tell you about NPP and about supplier programs, offers and events that may interest you, by email, phone, mail or (with your consent) text message;
• advertise NPP and supplier programs on our Sites and on third-party platforms, as described in Section 5;
• track and report administrative fees and administer our agreements with supplier partners;
• analyze and improve our Sites, Services and marketing, including through analytics, A/B testing, heatmaps and session recordings, and by measuring how our advertising performs;
• protect the security and integrity of our Sites and Services, prevent fraud, and keep security audit logs; and
• comply with law, enforce our Terms and Conditions, and protect our rights and the rights of others.

Tailored communications. We may use your activity on our Sites, such as viewing a particular supplier offer, together with your membership record to make our emails more relevant to you. We send text messages prompted by that activity only if you have opted in to our text-messaging program.

We may also create aggregated or de-identified information that does not identify you and use it for any lawful purpose. When we do, we will not attempt to re-identify it.

3. How We Share Information

We share personal information as follows:

• Service providers. We share information with companies that perform services for us, such as hosting, customer relationship management and marketing automation, email and text delivery, analytics and website optimization (including session recording), data enrichment, marketing and advertising agencies, and customer support. They are permitted to use the information only to provide services to us and must keep it secure and confidential.
• Supplier partners. We share your contact information with a supplier partner when you click through to that supplier from our Sites or emails, express interest in that supplier’s program (for example, during registration), or enroll in its program. Subject to your choices in Section 6, we may also share business contact information with selected supplier partners so that they can market their products and services to you directly.
• Advertising and analytics partners. We work with advertising platforms such as Google and LinkedIn as described in Section 5. Under some state laws, disclosures to these partners for targeted advertising may be considered “sharing” or “selling” personal information. You can opt out as described in Sections 6 and 10.
• Affiliates and association partners. We may share information with our corporate affiliates for the purposes described in this policy. If your organization is affiliated with one of our association partners, we may share general purchasing volume information with that partner.
• Co-branded and sponsored programs. When we offer co-branded, private-label or sponsored programs, or contests or surveys with a sponsor, we may share information with the co-branding party or sponsor for that program.
• Legal and safety. We may disclose information if required by law, subpoena, court order or other legal process, in response to a lawful request by a government agency, or when we believe disclosure is needed to protect our rights or property or the safety of others.
• Business transfers. We may transfer information in connection with a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, in which case the information will remain subject to protections at least as strong as those in this policy.

We do not collect payment card information through the Sites, and we do not share payment card information with supplier partners or advertisers.

4. Text Messages

If you provide your mobile number and opt in, you agree to receive recurring automated and manual text messages from National Purchasing Partners at the mobile number you provide. These include account and membership notices, reminders, follow-ups from NPP account representatives, automated notifications about relevant supplier offers and savings based on your activity on our Sites, and promotional messages about NPP programs, supplier offers and events. Messages may be sent using automated technology.

Consent to receive text messages is not a condition of membership or of any purchase. We ask for it separately from acceptance of our Terms and Conditions.

Message frequency varies. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

Reply STOP to any message to opt out. We will send one message confirming your opt-out and will not send further marketing texts unless you opt in again.

Reply HELP for help, or contact customerservice@mynpp.com or 800.810.3909.

You represent that you are the account holder or authorized user of the mobile number you provide, and you agree to tell us if you change or stop using that number.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are excluded from all sharing described in this policy, except with service providers that help us deliver our text-messaging program. The program may not be available in all areas or with all carriers.

SMS TERMS OF SERVICE

By opting into SMS notifications through a web form or any other medium, you agree to receive text messages from NPP. These messages include updates and follow-ups regarding the service. To view our privacy policy, visit https://mynpp.com/privacy-policy/. Message frequency varies, and message and data rates may apply. Text HELP for assistance. Reply STOP to any message to opt out.

A. Opt-In Disclosure

By opting into SMS, you acknowledge and agree to the following:

You consent to receive SMS messages from NPP as described above.

• Message & data rates may apply.
• Message frequency may vary.
• You can opt out of SMS communications by replying “STOP.”
• You can get help by replying “HELP.” Alternatively, help can be obtained directly from us at https://mynpp.com.

B. Help and Opt-Out Messages

HELP Message: If you text HELP, you will receive the following message: “Thank you for contacting NPP. You can find help online at https://mynpp.com.”

STOP Message: If you text STOP, you will receive the following confirmation message: “You will no longer receive messages from NPP. To opt back in at any time, reply START.”

5. Cookies, Advertising and Similar Technologies

Cookies and pixels

Cookies are small data files stored by your browser. Pixel tags (also called web beacons or clear GIFs) are small pieces of code that record when a page is viewed or an email is opened. We use these technologies to keep you signed in, remember your preferences, understand how the Sites are used, measure email and advertising performance, and show you relevant advertising. Some cookies are placed by third parties, such as analytics and advertising providers.

Cookie categories and consent

We group these technologies into the categories below, which also appear in our cookie banner and in “Cookie Preferences” at the bottom of every page. Except for Strictly Necessary technologies, we do not activate them until you consent through the banner, and you can change your choices at any time.

Category	Purpose	Examples
Strictly Necessary	Keep you signed in, remember your privacy choices, and secure the Sites	NPP session and preference cookies
Analytics & Optimization	Measure traffic and performance; test page versions (A/B testing); produce aggregated heatmaps of clicks and scrolling	Google Analytics; Zoho PageSense
Session Recording	Record how visitors navigate and interact with pages so we can find and fix usability problems	Zoho PageSense session recording
Marketing & Advertising	Associate Site activity with known contacts for tailored communications; measure and deliver advertising on other platforms	Salesforce Marketing Cloud Account Engagement (Pardot); Google Ads tag; LinkedIn Insight Tag

Analytics, optimization and session recording

We use Google Analytics and Zoho PageSense to understand how visitors use our Sites and to improve them, and Salesforce Marketing Cloud Account Engagement (Pardot) to measure engagement with our emails and Sites. These providers process information on our behalf under contracts that restrict their use of it, and we configure them to limit what they collect, including by not storing full IP addresses in reports.

If you consent to Session Recording, Zoho PageSense captures a reconstruction of your visit, including pages viewed, clicks, scrolling, mouse movements, device type and approximate location. We configure session recording to mask text typed into form fields and other page elements that display personal information, and to exclude account, login, registration and password pages. Recordings are available only to authorized NPP personnel and are deleted after 90 days.

You can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout).

Online advertising

We advertise NPP and our supplier programs on third-party platforms, including Google and LinkedIn. In connection with that advertising, we may:

• Use advertising tags on our Sites. Tags such as the Google Ads tag and the LinkedIn Insight Tag allow those platforms to collect information about your visits so that we can measure results and show ads to people who have visited our Sites.
• Use member lists for matching. We may upload business email addresses or other contact information that we collected from you, after converting it to a hashed (coded) form, so that the platform can match it to its own users. We use matched lists to (a) avoid showing ads to members who, according to NPP’s own records of activity on our Sites, have already enrolled in or taken an offer, (b) measure whether our advertising led to registrations, enrollments or other results, (c) help the platform find other organizations that may be interested in our Services, and (d) show ads to members on those platforms.
• Use organization lists. We may give advertising platforms lists of organization names and websites, without personal information, so that ads can be shown to people the platform associates with those organizations.
• Limit what we upload. We upload only contact information that we collected directly from you or your organization. We do not upload contact information obtained from third-party data providers; we use that business information only internally to tailor our communications. We do not upload account, usage or purchase details that supplier partners provide to us in confidence, except as described in Section 1.
• Hashing. Hashing protects contact information in transit and storage, but a hashed identifier can still be matched to you. We therefore treat hashed identifiers as personal information and apply the choices described below to them.
• Limited-use settings. Where a platform offers settings that limit its use of our information to providing services to us (for example, Google’s restricted data processing), we use them for exclusion and measurement.

Members who joined before the Effective Date

For contact information collected from members before the Effective Date: we may use it for exclusion and measurement (uses (a) and (b) above) after we notify members of this update; we will use it to help platforms find similar organizations (use (c)) only on or after November 23, 2026, at least 30 days after that notice; and we will use it to show ads to a member on third-party platforms (use (d)) only after that member has accepted the updated Terms and Conditions and this Privacy Policy. We will not use it for uses (b) through (d) for any member who has opted out of all marketing, of sharing with supplier partners, or of advertising.

The advertising platforms process this information under their own terms and privacy policies. You can learn about and manage how they use your information at Google’s My Ad Center (myadcenter.google.com) and in LinkedIn’s advertising settings (linkedin.com/psettings/advertising).

Your controls

• Opt out of targeted advertising by NPP. Use the “Do Not Sell or Share My Personal Information” / “Your Privacy Choices” link at the bottom of our Sites, change your advertising preference in your account under “MY ACCOUNT,” or email us at privacy@mynpp.com. If you opt out, we will stop using advertising tags for you on that browser and will exclude your information from lists we upload to target ads or to find similar audiences. We may still include your hashed contact information in an exclusion list used only to prevent ads from being shown to you, and only with platforms that limit their use of it to providing services to us.
• Global Privacy Control. Our Sites recognize the Global Privacy Control (GPC) browser signal as a request to opt out of the sale or sharing of personal information for that browser, and, if you are signed in or otherwise known to us, for your account.
• Cookie Preferences. Accept or reject the Analytics & Optimization, Session Recording and Marketing & Advertising categories at any time through “Cookie Preferences” at the bottom of every page.
• Browser and industry tools. You can block or delete cookies through your browser settings, though some features of the Sites may not work properly. You can also learn about interest-based advertising and opt out of it through the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org).
• Do Not Track. Other than GPC, our Sites do not currently respond to browser “Do Not Track” signals.

6. Your Choices

• Marketing emails. You may unsubscribe from NPP marketing emails using the link in any marketing email or by adjusting your email preferences under “MY ACCOUNT.” Even if you unsubscribe, we may still send non-marketing messages about your membership.
• Sharing with supplier partners. You may choose not to have your contact information shared with supplier and affiliate partners for their own marketing by updating your preferences under “MY ACCOUNT” or contacting Member Support.
• Advertising. You may opt out of targeted advertising by NPP as described in Section 5.
• Text messages. Reply STOP to any NPP text message.
• All marketing. You may opt out of all marketing communications and all marketing-related sharing at once by contacting Member Support or emailing privacy@mynpp.com.

Your choice to opt out of one kind of communication or use does not automatically opt you out of the others. We will honor your request within a reasonable time, and in any event within the time required by law. Messages or ads already in process when you make your request may still reach you for a short time. Choices made after you express interest in a supplier partner apply going forward and override that earlier expression of interest.

7. Data Retention

We keep personal information for as long as your membership is active and afterward for as long as reasonably necessary for the purposes described in this policy, including administrative-fee reporting and auditing under our supplier agreements, resolving disputes, enforcing agreements, and meeting legal, tax and accounting obligations. When information is no longer needed, we delete or de-identify it. Session recordings are deleted after 90 days, and analytics data is retained for up to 14 months.

8. Security

We use reasonable administrative, technical and physical safeguards to protect personal information. Sensitive information sent to us online is encrypted in transit. Access to member information is limited to employees and service providers who need it to perform their jobs. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Children

Our Services are intended for organizations and their adult employees. We do not knowingly collect personal information from children under 16, and we do not sell or share the personal information of consumers we know to be under 16.

10. California and Other State Privacy Rights

Depending on where you live, you may have rights under state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”). California law applies to personal information collected in a business-to-business context, including business contact information.

Notice at collection

In the past 12 months we have collected the categories of personal information below, from the sources and for the purposes described in Sections 1 and 2.

Category	Examples	Disclosed for a business purpose to / sold or shared with
Identifiers	Name, business email, phone, mailing address, member ID, IP address, online identifiers	Service providers; supplier partners; affiliates. Shared with advertising partners (Google, LinkedIn) for targeted advertising.
Customer records (Cal. Civ. Code § 1798.80(e))	Name, address, phone number, employment information	Service providers; supplier partners; affiliates.
Commercial information	Programs enrolled in, offers taken, purchase volume	Service providers; affiliates; association partners (volume only). Shared with advertising partners for exclusion and measurement: offer status recorded by NPP’s own systems only; supplier-provided purchase or account details are not shared.
Internet or other electronic activity	Browsing on our Sites, session recordings and heatmap data, email opens and clicks, ad interactions	Service providers (including Google, Zoho and Salesforce). Shared with advertising partners for targeted advertising.
Geolocation (approximate)	City or region derived from IP address	Service providers. Shared with advertising partners for targeted advertising.
Professional or employment information	Job title, employer, purchasing responsibilities, certifications	Service providers; supplier partners; affiliates.
Inferences	Program interests drawn from the information above	Service providers.
Sensitive personal information	Account login credentials (username and password)	Service providers. Not sold or shared.

The only sensitive personal information we collect is account login credentials, which we use only to provide the Services and as otherwise permitted by law, and not to infer characteristics about you. Disclosure of contact information to supplier partners for their own marketing may be considered a “sale” under some state laws, and you may opt out of it as described below. We keep each category of information for the period described in Section 7.

Your rights

Subject to certain exceptions, you have the right to:

• Know and access the categories and specific pieces of personal information we have collected about you, the sources, our purposes, and the categories of third parties to whom we disclosed it;
• Delete personal information we collected from you;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of your personal information, including for targeted advertising, and of disclosure to supplier partners for their own marketing; and
• Not be discriminated against for exercising these rights.

Residents of other states with comprehensive privacy laws may have similar rights, including rights to access, delete, correct and opt out of targeted advertising, sale and profiling, and to appeal a denial of a request. To appeal, reply to our response or email privacy@mynpp.com with the subject line “Privacy Appeal.”

How to exercise your rights

Submit a request by emailing privacy@mynpp.com, calling 800.810.3909, or using the “Do Not Sell or Share My Personal Information” / “Your Privacy Choices” link on our Sites. We will verify requests to know, delete or correct by matching information you provide with information in our records. Opt-out requests do not require verification. You may use an authorized agent, who must provide proof of your signed permission; we may also ask you to confirm your identity directly with us.

We respond to verified requests within 45 days. If we need more time, we may extend that period by up to 45 additional days where the law permits and will tell you why.

11. Links to Other Sites

Our Sites and emails contain links to supplier partners and other third-party sites. NPP is not responsible for their privacy practices or content. Please read the privacy policy of each site you visit.

12. Changes to This Policy

We may update this policy from time to time. We will post the updated policy on this page with a new “Last Updated” date. If we make material changes to how we use or share personal information, we will provide notice on the Sites or by email before the change takes effect, and where the law requires, we will obtain your consent.

13. Contact Us

National Purchasing Partners, LLC
Attn: Privacy
17930 International Blvd., Suite 900
SeaTac, WA 98188
800.810.3909
privacy@mynpp.com (general inquiries: customerservice@mynpp.com)