Privacy Policy

1. Information We Collect

We collect the following categories of personal information directly from you, automatically when you use the Site, and from third parties:

a. Identifiers

• Full name (first and last)
• Email address
• Mobile phone number and work phone number
• Mailing/street address, city, state, ZIP code
• Date of birth
• Social Security number (SSN)
• Driver’s license number and issuing state
• Internet Protocol (IP) address
• Device identifiers (browser, operating system, device type)

b. Financial Information

• Bank name
• Bank account type (checking or savings)
• Bank routing number
• Bank account number
• Length of time with current bank and account open date
• Direct deposit status
• Requested loan amount and loan purpose
• Monthly and annual income (self-reported)
• Consumer credit report and credit-related information obtained from consumer reporting agencies pursuant to the Fair Credit Reporting Act (FCRA)

c. Employment Information

• Employer name
• Job title
• Employment status (full-time, part-time, temporary, benefits, disability benefits)
• Employment start date
• Pay frequency and next pay date
• Pay method (direct deposit or check)

d. Residence Information

• Residence type (rent or own)
• Length of time at current address

e. Internet/Network Activity

• Pages viewed, time on page, click paths, referring URLs
• Form interaction data (which steps were completed, at what time)
• Tracking tokens and consent records (e.g., Jornaya LeadiD, ActiveProspect TrustedForm)

f. Inferences

• Inferences drawn from the above to create a profile reflecting creditworthiness signals, loan-matching attributes, and marketing preferences

g. Sensitive Personal Information (as defined under California and other state laws)

• Social Security number
• Driver’s license number
• Account log-in / financial account number in combination with required security/access codes
• Precise geolocation (only if explicitly enabled by the user’s device)

2. Sources of Information

We collect personal information from three primary sources:

1. Directly from you, when you fill out the application form, contact us, or otherwise interact with the Site.
2. Automatically, through cookies, pixels, tags, and similar technologies when you visit the Site.
3. From third parties, including consumer reporting agencies, identity verification vendors (e.g., GeniusVerify, SuperVerify), our Partners, marketing partners, and publicly available sources.

3. How We Use Personal Information

We use the personal information we collect for the following business purposes:

• To match your application with Partners who may offer loan products or financial services
• To verify your identity and prevent fraud, including obtaining consumer reports as authorized by you and permitted under the Fair Credit Reporting Act
• To facilitate the routing, scoring, and auctioning of your application to participating Partners
• To communicate with you about your application, our Service, marketing offers from us and our Partners, and changes to this Policy, including via SMS, email, automated phone calls, and pre-recorded messages where you have consented
• To operate, maintain, secure, and improve the Site
• To analyze use of the Site, measure advertising effectiveness, and conduct internal research
• To comply with legal obligations, respond to legal process, and enforce our Terms of Use
• With your consent, for any other purpose disclosed at the point of collection

We use Sensitive Personal Information only as reasonably necessary to perform the services you have requested (identity verification, fraud prevention, lender matching), to comply with legal obligations, or as otherwise permitted by California Civil Code §1798.121 and equivalent state laws. We do not use or disclose Sensitive Personal Information for purposes of inferring characteristics about you for unrelated marketing.

4. How We Share Personal Information

We disclose the categories of personal information listed in Section 1 to the following categories of recipients:

a. Lending and Financial Services Partners

We share your application data with participating lenders, debt-relief companies, credit-counseling services, and intermediary marketplaces who may extend a loan offer or other financial product to you. Current categories of Partners include, without limitation:

• Direct lenders and consumer finance companies
• Loan marketplace aggregators (for example, ML Enterprise Inc. d/b/a Engine by MoneyLion)
• Identity-verification and consent-tracking vendors (for example, GeniusVerify, SuperVerify, Jornaya, ActiveProspect TrustedForm)
• Credit-counseling and debt-relief providers
• Up to five (5) Partners per application, depending on the routing outcome

A current list of categories of Partners is available on request to [PRIVACY EMAIL].

b. Service Providers

We use service providers and contractors to operate the Site and provide our Service. Categories include hosting providers, analytics providers (e.g., Google Analytics, Microsoft Clarity), email/SMS delivery providers, customer support tools, payment processors (if applicable), and fraud-prevention vendors. Service providers are contractually restricted to processing personal information only for the purposes we specify.

c. Advertising and Marketing Partners

We share identifiers, internet activity, and inferences with advertising networks and marketing platforms to measure the performance of our campaigns and to deliver relevant offers. This category of sharing may constitute a “sale” or “sharing for cross-context behavioral advertising” under California law. See Section 7 for your rights.

d. Legal, Safety, and Compliance Recipients

We may disclose information to law enforcement, regulators, courts, or other parties when we believe disclosure is required by law, necessary to enforce our Terms of Use, or necessary to protect the rights, property, or safety of any person.

e. Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, personal information may be transferred as part of that transaction.

We do NOT sell personal information for monetary consideration in exchange for short-term, transactional personal data brokerage outside of the lender-matching context described above. We DO share personal information with Partners who pay us a referral fee — depending on jurisdiction, this may be considered a “sale” or “sharing” under applicable state privacy law, and you have the right to opt out (see Section 7).

5. GLBA Notice (Financial Information)

Because we collect nonpublic personal financial information from consumers in connection with a financial product or service, the federal Gramm-Leach-Bliley Act (“GLBA”) applies to certain of our activities. This section serves as our initial GLBA privacy notice.

Categories of nonpublic personal information (“NPI”) we collect: information from applications (name, address, SSN, income, assets), information about transactions with us, and information from consumer reporting agencies.

Categories of NPI we disclose: all of the above, to the categories of Partners and service providers described in Section 4.

Categories of affiliates and nonaffiliated third parties to whom we disclose NPI: lenders, identity-verification vendors, marketing partners, service providers, and others described in Section 4.

Our information sharing practices: we share NPI with nonaffiliated third parties as permitted by law and as necessary to perform the lender-matching service you have requested. You authorize this sharing when you submit an application. Under GLBA §502(b), this sharing is permitted to perform services for us, including marketing of our own products and services, and to process and service transactions you request.

Confidentiality and security: we maintain physical, electronic, and procedural safeguards designed to protect NPI, as described in Section 9.

To opt out of GLBA-permissible sharing where you have a statutory right to do so, contact us at [PRIVACY EMAIL].

6. Cookies, Pixels, and Tracking Technologies

The Site uses cookies, web beacons, pixel tags, software development kits (SDKs), and similar technologies (collectively, “Tracking Technologies”). Categories include:

• Strictly necessary: required for the Site to function (e.g., session cookies)
• Analytics: Google Analytics, Microsoft Clarity, and similar tools that measure Site usage
• Advertising and marketing: Google Tag Manager, Facebook Pixel, lender-network conversion pixels, and similar tools
• Consent capture: Jornaya LeadiD, ActiveProspect TrustedForm, which create an evidentiary record of your consent for TCPA/FCRA purposes

You can control cookies through your browser settings. Disabling cookies may impair Site functionality. For California, Colorado, Connecticut, and other states that recognize universal opt-out mechanisms, we honor the Global Privacy Control (GPC) browser signal as an opt-out of sale/sharing.

Global Privacy Control (GPC)

We recognize and honor the Global Privacy Control (GPC) browser signal as a valid opt-out request under the California Consumer Privacy Act (CCPA), the Colorado Privacy Act, the Connecticut Data Privacy Act, the Oregon Consumer Privacy Act, the Delaware Personal Data Privacy Act, and similar state privacy laws.

When your browser or browser extension sends the GPC signal (currently supported by Firefox, Brave, DuckDuckGo, OptMeowt, and other privacy tools), we automatically:

• Stop sharing your personal information with advertising and marketing partners for cross-context behavioral advertising
• Block third-party advertising pixels and tags from firing on your session
• Flag any application you submit so it is not routed to lender auctions where compensation would constitute a “sale” under applicable state law
• Honor your opt-out without requiring you to submit a separate request

The GPC signal applies to your specific browser and device. If you want your opt-out to apply across all devices and browsers, please also submit a request through our Do Not Sell or Share My Personal Information form.

You can learn more about Global Privacy Control at globalprivacycontrol.org.

7. Your Rights and Choices

a. Rights available to all U.S. residents

Regardless of where you live, you may:

• Opt out of marketing emails using the unsubscribe link in any email we send
• Opt out of SMS messages by replying STOP to any text message
• Request information about how we use your data by emailing [PRIVACY EMAIL]
• Withdraw consent for ongoing communications and ongoing sharing by emailing [PRIVACY EMAIL] or by mailing [PHYSICAL ADDRESS]

b. California (CCPA/CPRA) rights

If you are a California resident, you have the following rights:

• Right to know what personal information we have collected, used, disclosed, and sold/shared in the last 12 months
• Right to delete personal information we have collected from you, subject to legal exceptions
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information
• Right to limit the use and disclosure of Sensitive Personal Information
• Right to non-discrimination for exercising your rights
• Right to designate an authorized agent to exercise rights on your behalf

To exercise these rights, use one of the following methods:

• Submit a request through our privacy portal at [URL — e.g., /privacy-request]
• Email [PRIVACY EMAIL]
• Call our toll-free number at [TOLL-FREE NUMBER]

We will respond to verifiable consumer requests within 45 days (extendable by another 45 days with notice). We may need to verify your identity before fulfilling a request — for sensitive requests (deletion, correction, knowing specific pieces), this may require matching you to two or three data points on file.

c. “Do Not Sell or Share My Personal Information” and “Limit the Use of My Sensitive Personal Information”

We provide two dedicated links in our footer and at the point of collection:

• Do Not Sell or Share My Personal Information — submits a request to stop sharing your information with Partners for the purposes of cross-context behavioral advertising and for lender-matching to the extent it constitutes a sale
• Limit the Use of My Sensitive Personal Information — restricts our use of SSN, driver’s license number, and financial account numbers to the minimum necessary to provide the requested service

Important: submitting a “Do Not Sell or Share” request will prevent us from matching your application with lenders, because matching is the principal business purpose of the Service. We will tell you this before processing the opt-out.

d. State-specific rights (Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Delaware, Iowa, Montana, Tennessee, Indiana, New Hampshire, New Jersey, Minnesota, Maryland)

Residents of these states have rights substantially similar to California’s, generally including access, deletion, correction, portability, opt-out of targeted advertising / sale / profiling, and the right to appeal a denial. To exercise any of these rights or to appeal, contact us using the methods in Section 7(b).

e. Nevada

Nevada residents may opt out of the sale of certain covered information under NRS 603A by contacting [PRIVACY EMAIL].

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Typical retention periods:

After the applicable retention period, we will delete, anonymize, or de-identify the information so it can no longer reasonably be associated with you.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information from loss, misuse, and unauthorized access. Measures include:

• Encryption in transit using 256-bit TLS
• Encryption at rest for SSN, financial account numbers, and other Sensitive Personal Information
• Access controls and role-based permissions
• Vendor security reviews
• Incident response and breach-notification procedures

No method of transmission or storage is 100% secure. If we become aware of a breach affecting your personal information, we will notify you and applicable regulators as required by law.

10. Children’s Privacy

The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it. Under California law, we also do not knowingly sell or share personal information of consumers under the age of 16 without affirmative authorization (opt-in).

The Service is intended for adults age 18 and older. By using the Site, you represent that you are at least 18.

11. International Users

The Site is operated from the United States and is intended for U.S. residents only. If you access the Site from outside the U.S., your information will be transferred to and processed in the U.S. We do not knowingly accept applications from outside the U.S.

12. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will (a) update the “Last Updated” date, (b) post a notice on the Site at least 14 days before the change takes effect, and (c) where required by law, notify you by email or other direct means. Your continued use of the Site after the effective date constitutes acceptance of the updated Policy.

13. Contact Us

For privacy questions, requests, or to exercise any of your rights:

• Email: privacy@bestpersonalloansnearme.com
• Mail: Kickoff Advertising LLC, Attn: Privacy Officer, 1499 South Federal hwy Boynton beach 33435
• Toll-free: +1 (561) 501 8682
• Privacy request portal: https://bestpersonalloansnearme.com/contact/

California residents: you may also contact the California Privacy Protection Agency at cppa.ca.gov.