PRIVACY POLICY
Last Updated: October 26, 2026
This Privacy Policy (“Policy”) describes how Merchants Bonding Company (Mutual) and Merchants National Bonding, Inc. dba Merchants National Indemnity Company in California, (collectively, "Merchants," “we,” “us,” or “our”) collect, use, and disclose personal information when you interact with us.
This includes when you:
- Use our websites or digital platforms;
- Apply for or obtain insurance and bond products, or related products;
- Submit or respond to bond claims; or
- Engage with us as a bond principal, indemnitor, obligee, claimant, producer, job applicant, employee, former employee, board and advisory members, contractor, vendor, or temporary worker.
This Policy applies to personal information collected in both consumer and employment contexts, as applicable, and applies to personal information collected both online and offline.
Categories of Personal Information We Collect
“Personal information” means information that identifies, relates to, describes, or could reasonably be linked with a particular individual.
Depending on your relationship with us, we may collect:
- Audio, Electronic, or Visual Information: recorded calls, meeting recordings, security video
- Biometric Information: fingerprints collected in connection with background checks for certain positions, where required for regulatory compliance
- Commercial Information: bond history, transaction records, payment history
- Education Information (Non-Public): academic transcripts or records
- Geolocation Data: approximate location inferred from IP address
- Identifiers: name, signature, address, email, phone number, Social Security number, driver's license number
- Internet or Network Activity: browsing activity, device identifiers, website interaction data
- Professional or Employment Information: work history, licensing credentials, compensation information, payroll and tax information, benefits enrollment information, background screening results
- Protected Classification Characteristics: age, gender, marital status
- Sensitive Personal Information (as defined under California law): government identification numbers, account credentials, payroll and financial account information, health and benefits information, background check information, and biometric identifiers collected for regulatory compliance purposes
We collect and use personal information only as reasonably necessary for the purposes described below.
Sources of Personal Information
We collect personal information from:
- Directly from you
- Insurance producers and brokers
- Indemnitors and business partners
- Service providers and vendors
- Consumer reporting agencies (where permitted by law)
- Public records and government agencies
- Employers, professional references, and other parties providing information for background screening or credential verification
- Other insurers or parties involved in claims or litigation
- Your interactions with our websites and digital services
How We Use Personal Information
We use personal information for legitimate business purposes, including:
- Providing quotes, underwriting, issuing, and servicing bonds or insurance products
- Evaluating and enforcing indemnity agreements
- Investigating and resolving claims
- Verifying identity, licensure, and qualifications
- Complying with legal and regulatory obligations
- Preventing fraud and maintaining security
- Managing producer, vendor, and business relationships
- Administering recruitment, employment, payroll, and benefits
- Conducting background checks where required
- Improving website functionality and internal analytics
- Exercising or defending legal claims
We do not use personal information for cross-context behavioral advertising. However, certain third-party technologies (such as embedded content or analytics tools) may collect information that could be considered “sharing” under California law.
Use of Sensitive Personal Information
We use Sensitive Personal Information only for purposes permitted by applicable law, including those necessary to perform services, comply with legal obligations, and ensure security.
We do not use Sensitive Personal Information for profiling or advertising purposes.
Disclosure of Personal Information
In the preceding 12 months, we have disclosed for business purposes the categories of personal information described above to:
- Service providers and contractors
- Insurance producers and brokers
- Consumer reporting agencies and background screening providers
- Regulatory authorities and government agencies
- Legal advisors, auditors, and investigators
- Successors or counterparties in corporate transactions
These disclosures are made to support the business purposes described in this Policy.
We require recipients to use personal information only for permitted purposes and to maintain appropriate safeguards.
Sale or Sharing of Personal Information
We do not exchange personal information for monetary compensation.
Under California law, certain disclosures involving online tracking technologies may be characterized as a “sale” or “sharing.” In the preceding 12 months, personal information may have been disclosed through third-party technologies used on our websites and in our digital communications (such as emails), including analytics tools and embedded content providers. These disclosures may involve:
- Identifiers
- Internet or Network Activity
- Approximate Geolocation
These disclosures:
- Are generally limited to interactions with our websites and digital communications (such as emails);
- Do not apply to underwriting, claims handling, insurance servicing, or employment-related personal information; and
- Are not used by us for advertising or remarketing purposes. Third-party providers may process limited information collected through their technologies in accordance with their own privacy practices.
You may opt out of the sale or sharing of personal information by using the “Manage Cookies” settings on our websites or by enabling a recognized opt-out preference signal such as Global Privacy Control. See the “Opt-Out Preference Signals” and “Automated Data Collection and Cookies” sections below for more information:
Opt-Out Preference Signals
We recognize and honor Global Privacy Control (GPC) and similar recognized opt-out preference signals. When detected, we treat the signal as a request to opt out of the sale or sharing of personal information for that browser or device and honor that request without requiring additional steps.
Automated Data Collection and Cookies
We and our service providers use cookies and similar technologies to collect information about website usage, including device identifiers, browsing activity, and approximate geolocation.
You may also manage your cookie preferences at any time by selecting the cookie preferences icon available on our websites, typically located in the lower corner of the webpage.
Embedded Third-Party Video Content
We may embed video content hosted by third parties (such as YouTube) for informational purposes.
Videos are embedded using privacy-enhanced configurations designed to limit data collection prior to user interaction. If you choose to play an embedded video:
- Your browser may connect directly to the provider’s servers;
- The provider may collect device and interaction data; and
- The provider may set cookies necessary for playback and security.
We do not enable advertising features in connection with embedded videos.
Information collected by the provider is governed by that provider’s privacy practices.
Use of AI Tools
AI-enabled tools are used to support analysis and operational efficiency and do not independently make decisions producing legal or similarly significant effects without appropriate human review. We do not use personal information to train or improve AI models
Retention of Personal Information
We determine retention periods based on the nature of the information, legal requirements, and operational needs. We retain personal information only as long as reasonably necessary for:
- Bond and insurance transaction purposes
- Compliance with legal or regulatory obligations
- Risk management and fraud prevention
- Exercising and defending legal claims
Children’s Privacy
Our Services are not intended for children under the age of 16. We do not knowingly collect or maintain personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take reasonable steps to delete that information. If you believe a child has provided personal information to us, please contact us at privacy@merchantsbonding.com or 800-678-8171 so we can promptly investigate and take appropriate corrective action.
Your California Privacy Rights
If you are a California resident, you may have the right to:
- Know and access personal information we have collected
- Request deletion of personal information (subject to statutory exceptions)
- Request correction of inaccurate personal information
- Opt out of sale or sharing of personal information
- Not be discriminated against for exercising your right
We do not use Sensitive Personal Information for profiling advertising purposes or in a manner that would trigger a right to limit under California law.
How to Exercise Your Rights
You may submit a request by:
We may need to verify your identity before responding. Authorized agents may submit requests on your behalf in accordance with applicable law. We respond to requests within the timeframes required by law.
External Links
Our Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices, content, or security of such external sites. These external sites have separate and independent privacy policies, and we encourage you to review their privacy notices before providing personal information.
Changes to This Policy
We may update this Policy periodically. The “Last Updated” date will reflect the effective date of revisions.
Contact Us
Merchants Bonding Company
Attn: Compliance Officer
PO Box 14498
Des Moines, IA 50306-3498
Email: privacy@merchantsbonding.com
Phone: 800-678-8171