Although your data is generally stored within the United States, an international data transfer may occur if third party, cloud-based storage companies that Nelnet Campus Commerce employs use servers located outside the United States. Nelnet Campus Commerce uses appropriate technical and organizational security measures including encryption of personal data and follows various industry standards and best practices to protect your personal data. Additionally, Nelnet Campus Commerce requires its vendors and processors to abide by the European Union General Data Protection Regulation and to apply adequate security and technical safeguards. We will not transfer your data to or store your data in countries that have not been awarded an adequacy decision by the European Commission.</p> <p>For general processing purposes, Nelnet Campus Commerce will store your personal data for a period of seven years.