NMC will not share the nonpublic personal information of current or former members with non-affiliated third parties except in these cases:

• As permitted by law. For example, providing information to industry regulators, to law enforcement agencies, for fraud prevention, to credit bureaus and to third parties that assist us in processing the transactions you authorize and in mailing materials to you.
• With parties that assist NMC in promoting our own products and services, such as printers, mail houses, and list management companies. It is NMC’s policy to include confidentiality and data protection provisions in the contracts we make with these companies. We provide them with the limited information they need to perform their services for NMC, such as names and addresses collected through our transactions.
• With alliance companies engaged in value added services. These are companies whose products/services are endorsed and offered by NMC, such as companies engaged in travel reservations and discount programs. NMC shares data with these alliance companies to ensure that NMC and its members are receiving the benefits of the relationship. We provide them only identifying information, such as your name, address and phone number and work together to avoid unnecessary mailings. NMC's alliance companies are also contractually required to protect the confidentiality and security of the information we provide.

NMC collects the following information about customers and former customers and may share it within NMC’s family of companies:

• Information you provide to us on applications and other forms.
• Information about your transactions with us.
• Your status as a customer with our alliance companies.
• Information from industry databases, researchers and marketing data providers.
• On our web site, we collect site usage and the previous web site addresses.

NMC maintains policies and practices that protect the security and confidentiality of our member information. The policies provide for:

• Access to member records being restricted to employees who we determine need the information in order to perform their job duties.
• Maintaining and protecting information through security-enhancing software such as virus and intrusion detection software.
• Physical security at our buildings.
• Password protection on database access for both employees and members.
• Employee training.
• Backup and recovery procedures.