Last Updated: December 23, 2022
This Privacy Policy for California Residents supplements the information contained in Lendmark’s Terms of Use and Privacy Policy and discusses our collection and use of “personal information”, as defined under the California Privacy Laws (as defined below). This California Privacy Policy applies solely to all visitors, users, and others who reside in the State of California that use or interact with our personal lending and other financial services, website, physical branches, and other applications ("consumers" or "you"). Lendmark Financial Services, LLC, its subsidiaries and/or affiliates (as defined in the Lendmark’s Terms of Use and Privacy Policy) ("We" , "us" , "our" , or "Lendmark") adopt this California Privacy Policy to comply with applicable California data privacy and protection laws and regulations, including the California Consumer Privacy Act of 2018 ("CCPA") as amended by the California Privacy Rights Act ("CPRA") effective January 1, 2023, and any implementing regulations adopted by the California Privacy Protection Agency (CPRA as amended by the CPRA, and any implementing regulations are collectively referred to as "California Privacy Laws"). Capitalized terms not defined herein shall have the same meaning as the California Privacy Laws when used in this California Privacy Policy. “Personal Information” in both capitalized or lower case form shall have the same meaning as “personal information” ascribed to it under the California Privacy Laws.
A Spanish version of this California Privacy Policy is available at: https://www.lendmarkfinancial.com/disclosures/cpra
We currently collect the following categories of personal information listed in the chart below:
Category of Personal Information | Description | Collected (Yes/No) |
Identifiers |
Examples: A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, Social Security number, or other similar identifiers. Sold or Shared? We do not sell or share this category of personal information. Retention Period. We will retain and use this category of Personal Information for an appropriate period of time as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to provide our Services, and other purposes to the extent provided in this California Privacy Policy. We take reasonable steps to delete this category of Personal Information when (1) we have a legal obligation to do so; (2) we no longer have a purpose or obligation for retaining the information; or (3) if you ask us to delete the information unless there is an applicable exception to deleting the information under California Privacy Laws. We will retain and use this category of Personal Information for an appropriate period of time as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to provide our Services, and other purposes to the extent provided in this California Privacy Policy. We take reasonable steps to delete this category of Personal Information when (1) we have a legal obligation to do so; (2) we no longer have a purpose or obligation for retaining the information; or (3) if you ask us to delete the information unless there is an applicable exception to deleting the information under California Privacy Laws. |
Yes |
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) |
Examples: A name, signature, Social Security number, address, telephone number, employment, employment history, bank account number, debit card number, or any other financial information. Some personal information included in this category may overlap with other categories. Sold or Shared? We do not sell or share this category of personal information. Retention Period. We will retain and use this category of Personal Information for an appropriate period of time as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to provide our Services, and other purposes to the extent provided in this California Privacy Policy. We take reasonable steps to delete this category of Personal Information when (1) we have a legal obligation to do so; (2) we no longer have a purpose or obligation for retaining the information; or (3) if you ask us to delete the information unless there is an applicable exception to deleting the information under California Privacy Laws. We are required to maintain records of Consumer requests submitted under California Privacy Laws, which may include this category of Personal Information, and how we responded to such requests for at least twenty-four (24) months. Such information related to Consumer requests is retained only for recordkeeping purposes. |
Yes |
Protected classification characteristics under California or federal law |
Examples: Age (40 years or older), gender, race, ethnicity or national origin, or veteran or military status. Sold or Shared? We do not sell or share this category of personal information. Retention Period. We will retain and use this category of Personal Information for an appropriate period of time as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to provide our Services, and other purposes to the extent provided in this California Privacy Policy. We take reasonable steps to delete this category of Personal Information when (1) we have a legal obligation to do so; (2) we no longer have a purpose or obligation for retaining the information; or (3) if you ask us to delete the information unless there is an applicable exception to deleting the information under California Privacy Laws. We are required to maintain records of Consumer requests submitted under California Privacy Laws, which may include this category of Personal Information, and how we responded to such requests for at least twenty-four (24) months. Such information related to Consumer requests is retained only for recordkeeping purposes. |
Yes |
Commercial Information |
Examples: Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. Sold or Shared? We do not sell or share this category of personal information. Retention Period. We will retain and use this category of Personal Information for an appropriate period of time as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to provide our Services, and other purposes to the extent provided in this California Privacy Policy. We take reasonable steps to delete this category of Personal Information when (1) we have a legal obligation to do so; (2) we no longer have a purpose or obligation for retaining the information; or (3) if you ask us to delete the information unless there is an applicable exception to deleting the information under California Privacy Laws. We are required to maintain records of Consumer requests submitted under California Privacy Laws, which may include this category of Personal Information, and how we responded to such requests for at least twenty-four (24) months. Such information related to Consumer requests is retained only for recordkeeping purposes. |
Yes |
Biometric Information |
Examples: Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. |
No |
Internet or other similar network activity |
Examples: Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. Sold or Shared? We do not sell or share this category of personal information. Retention Period. We will retain and use this category of Personal Information for an appropriate period of time as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to provide our Services, and other purposes to the extent provided in this California Privacy Policy. We take reasonable steps to delete this category of Personal Information when (1) we have a legal obligation to do so; (2) we no longer have a purpose or obligation for retaining the information; or (3) if you ask us to delete the information unless there is an applicable exception to deleting the information under California Privacy Laws. We are required to maintain records of Consumer requests submitted under California Privacy Laws, which may include this category of Personal Information, and how we responded to such requests for at least twenty-four (24) months. Such information related to Consumer requests is retained only for recordkeeping purposes. |
Yes |
Geolocation data |
Examples: Physical location or movements. Sold or Shared? We do not sell or share this category of personal information. Retention Period. We will retain and use this category of Personal Information for an appropriate period of time as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to provide our Services, and other purposes to the extent provided in this California Privacy Policy. We take reasonable steps to delete this category of Personal Information when (1) we have a legal obligation to do so; (2) we no longer have a purpose or obligation for retaining the information; or (3) if you ask us to delete the information unless there is an applicable exception to deleting the information under California Privacy Laws. We are required to maintain records of Consumer requests submitted under California Privacy Laws, which may include this category of Personal Information, and how we responded to such requests for at least twenty-four (24) months. Such information related to Consumer requests is retained only for recordkeeping purposes. |
Yes |
Sensory Data |
Examples: Audio, Electronic, visual, thermal, olfactory, or similar information. Sold or Shared? We do not sell or share this category of personal information. Retention Period. We will retain and use this category of Personal Information for an appropriate period of time as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to provide our Services, and other purposes to the extent provided in this California Privacy Policy. We take reasonable steps to delete this category of Personal Information when (1) we have a legal obligation to do so; (2) we no longer have a purpose or obligation for retaining the information; or (3) if you ask us to delete the information unless there is an applicable exception to deleting the information under California Privacy Laws. We are required to maintain records of Consumer requests submitted under California Privacy Laws, which may include this category of Personal Information, and how we responded to such requests for at least twenty-four (24) months. Such information related to Consumer requests is retained only for recordkeeping purposes. |
Yes |
Professional or employment-related information |
Examples: Current or past job history. Sold or Shared? We do not sell or share this category of personal information. Retention Period. We will retain and use this category of Personal Information for an appropriate period of time as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to provide our Services, and other purposes to the extent provided in this California Privacy Policy. We take reasonable steps to delete this category of Personal Information when (1) we have a legal obligation to do so; (2) we no longer have a purpose or obligation for retaining the information; or (3) if you ask us to delete the information unless there is an applicable exception to deleting the information under California Privacy Laws. We are required to maintain records of Consumer requests submitted under California Privacy Laws, which may include this category of Personal Information, and how we responded to such requests for at least twenty-four (24) months. Such information related to Consumer requests is retained only for recordkeeping purposes. |
Yes |
Non-public education information |
Examples: Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. Sold or Shared? We do not sell or share this category of personal information. Retention Period. We will retain and use this category of Personal Information for an appropriate period of time as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to provide our Services, and other purposes to the extent provided in this California Privacy Policy. We take reasonable steps to delete this category of Personal Information when (1) we have a legal obligation to do so; (2) we no longer have a purpose or obligation for retaining the information; or (3) if you ask us to delete the information unless there is an applicable exception to deleting the information under California Privacy Laws. We are required to maintain records of Consumer requests submitted under California Privacy Laws, which may include this category of Personal Information, and how we responded to such requests for at least twenty-four (24) months. Such information related to Consumer requests is retained only for recordkeeping purposes. |
Yes |
Inferences |
Examples: Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
No |
Sensitive Personal Information |
Examples: (1) Social Security number, driver’s license number, state identification number, passport number; (2) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (3) precise geolocation information; (4) racial or ethnic origin, religious, or philosophical believes, or union membership; (5) contents of mail, email, and text messages unless the business is the intended recipient of the communication; (6) genetic data; (7) biometric data for the purposes of uniquely identifying a consumer; (8) health information; (9) sex life or sexual orientation information. **We only collect Sensitive Personal Information for legitimate business purposes appropriate for the use and disclosure of Sensitive Personal Information as defined in the California Privacy Laws, and not otherwise use it to infer characteristics about you. Sold or Shared? We do not sell or share this category of personal information. Retention Period. We will retain and use this category of Personal Information for an appropriate period of time as is necessary to fulfill the purposes for which it was collected, to comply with our business requirements and legal obligations, to provide our Services, and other purposes to the extent provided in this California Privacy Policy. We take reasonable steps to delete this category of Personal Information when (1) we have a legal obligation to do so; (2) we no longer have a purpose or obligation for retaining the information; or (3) if you ask us to delete the information unless there is an applicable exception to deleting the information under California Privacy Laws. We are required to maintain records of Consumer requests submitted under California Privacy Laws, which may include this category of Personal Information, and how we responded to such requests for at least twenty-four (24) months. Such information related to Consumer requests is retained only for recordkeeping purposes. |
Yes |
Business or Commercial Purposes: We use the categories of personal information listed above provide our products and services to you, to operate, manage, and maintain our business, and to accomplish the following business and commercial purposes, including the following:
Other Processing Activities: As permitted by applicable law, we may use all of the personal information that we collect in order to:
Additional Data Collection and Uses:
We will not collect categories of personal information other than those discussed above and we will not use your personal information for any other purposes that are incompatible with those disclosed above without providing you notice as may be required under the California Privacy Laws.
Exclusions from Personal information: Personal information does not include:
Personal Information Collected: As described in this California Privacy Policy, we have collected the categories of personal information listed below during the preceding 12 months:
Categories of Sources: We have collected the categories of personal information identified in this California Privacy Policy from the following categories of sources:
Business and Commercial Purpose for Collecting: We have collected the categories of personal information identified for the purposes listed in the “Business or Commercial Purposes” section above.
Categories of Personal information Disclosed for a Business Purpose: We have disclosed the following categories of personal information to service providers or contractors for a business purpose, or upon your consent to third parties during the preceding 12 months:
Prior to disclosing any personal information to a third party, service provider, or contractor for a business purpose, we enter into a written contract which describes, without limitation, the specific business purposes which the personal information can be used by the third party, service provider, or contractor to perform the services specified in the contract, requires the third party to both keep any personal information confidential, prohibits the third party receiving the personal information from retaining, disclosing, or using the personal information outside the direct business relationship, prohibits the third party from selling or sharing any personal information, provides us the right to take reasonable and appropriate steps to ensure that they use Personal Information in accordance with contractual terms, among other regulatory requirements. The categories of Personal Information identified above were disclosed to the following categories of third-party recipients: (1) corporate parents, subsidiaries, and affiliates; (2) advisors (accountants, attorneys); (3) investors; (4) service providers or contractors (data analytics, data storage, mailing, marketing and advertising, payment processing, website and platform administration, technical support, security monitoring; and operating systems and platforms); and (5) third parties to which you have authorized us to disclose your Personal Information in connection with services, products or online platforms that we made available for your use or access. With respect to these third parties, please review our Cookie Policy at https://www.lendmarkfinancial.com/Disclosures/Terms
Categories of Personal Information Sold or Shared to Third Parties: We have not sold or shared any categories of personal information to third parties in the preceding 12 months.
Personal Information Excluded from Scope of California Privacy Laws
The California Privacy Laws provide for certain exemptions which excludes certain personal information from the California Privacy Laws’ scope. Among these exemptions is personal information collected, processed, sold, or disclosed pursuant to the Gramm-Leach-Bliley Act (“GLBA”). Therefore, for example, if you have submitted an application for a loan with Lendmark or are a customer of Lendmark, any information you provided in that application and in connection with your Lendmark account is covered under the GLBA and the information contained in the following federal privacy notice pertains to you: GLBA Privacy Notice.
The California Privacy Laws provide consumers with certain rights regarding their personal information. You may submit these requests to us as described below, and we honor these rights where they apply.
1. Right to Know
As described below, you have the right to request that we disclose personal information that we have collected, sold, or shared about you. This includes a request for the following:
2. Right to Delete: You have the right to request that we delete any personal information that we have collected, sold, or shared about you.
3. Right to Opt-Out of Sale/Sharing: You have the right to direct a business that sells or shares personal information about you to third parties to stop doing so. We do not sell or share any personal information as defined by the CPRA. Therefore, we include this disclosure of information for informational purposes only.
4. Right to Non-Discrimination: We will not discriminate against you, in terms of price or services that we offer, if you submit one of the rights requests listed above.
5. Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you. Our goal is to keep your personal information accurate, current, and complete.
5. Right to Limit: In limited circumstances, a Consumer has the right to limit the use and disclosure of Sensitive Personal Information. Our use of your Sensitive Personal Information is solely for Business Purposes, and not for those purposes for which a Consumer may exercise right to limit the use or disclosure under the California Privacy Laws. Therefore, we include this disclosure for informational purposes only.
These rights to not apply to personal information collected or disclosed under certain exemptions under California Privacy Laws. This includes, but is not limited to, personal information collected, processed, sold, or disclosed subject to the GLBA. Therefore, rights such as the Right to Know and Right to Delete do not apply to personal information collected, processed, sold, or disclosed pursuant to these exemptions.
Submission Instructions: You may submit a request to know by calling 1-866-413-8340, visiting one of our branches, or submitting a request through our website (www.lendmarkfinancial.com/contact).
Response Process: Upon receiving a request to know, request to delete, or request to correct, we will confirm receipt of the request within ten (10) business days and provide information about how we will process your request. The information provided will describe our verification process and when you should expect a response from us. In general, we will respond to the request within forty-five (45) calendar days from the day we receive it; but, if necessary, we may take up to an additional forty-five (45) calendar days to respond to your request. If an extension is needed, we will notify you of the extension and explain the reasons that responding to your request will take more than forty-five (45) calendar days.
Once verification is complete, we will associate the information provided by you in the verifiable consumer request to any personal information previously collected by us about you. We will promptly take steps to disclose and deliver, free of charge to you, the information requested. We will provide an individualized response to requests regarding categories of personal information as required by applicable law, but, we may refer you to our general practices outlined in this California Privacy Policy when our response would be the same for all consumers and all the information that is otherwise required to be in a response is presented here.
Delivery: Except as otherwise provided by applicable law, the information will be provided in writing or through our website. We will respond by mail. If we do not take action on your request, we will, without delay and, at the latest, within the time period permitted for our response, inform you of the reasons that we did not take action and any rights you may have to appeal the decision.
Limitations: We are committed to responding to your requests to exercise Consumer rights in accordance with applicable law and the California Privacy Laws. However, your rights are subject to certain limitations:
We are not required to delete your personal information if it is reasonably necessary for us, our service providers, or our contractors to maintain the personal information in order to:
Denials: If we deny a verified request to exercise Consumer’ right under the California Privacy Laws, in whole or in part, because of a conflict with federal or state law, or an exception under applicable law, we will inform the requestor and explain the basis for the denial. We will take action, in accordance with your request and California Privacy Laws, for those categories of personal information not subject to those exceptions.
Verification Procedures. We are required by the CPRA to verify the identity of individuals who submit a request to know, request to delete, or request to correct. In accordance with our internal policies and in compliance with the California Privacy Laws, we will take steps to verify your identity before granting you access to such Personal Information or acting on your request to exercise your rights, as outlined below:
To determine whether the individual making the request is the consumer about whom we collected information, we will verify your identity by matching the identifying information provided by you in the request to the personal information that we already maintain about you. As part of this process, you will be asked to provide your full name, address, and phone number. We will inform you if we cannot verify your identity.
Authorized Agents: You may designate an authorized agent to make requests on your behalf by sending us written authorization in writing at Privacy Policy Manager, 2118 Usher Street, Covington, GA 30014. If you use an authorized agent to submit a request to know or a request to delete, we may require you to: (1) provide the authorized agent with written permission to do so; and (2) verify your identity directly with us. However, we will not require these actions if you have provided the authorized agent with power of attorney pursuant to the California Probate Code. We may deny a request from the agent that does not submit proof that they have been authorized by the consumer to act on their behalf.
Excessive Requests: If requests from a consumer are manifestly unfounded or excessive, in particular because of their repetitive character, we may either (1) charge a reasonable fee, or (2) refuse to act on the request and notify the consumer of the reason for refusing the request. If we charge a fee, the amount will be based upon the administrative costs of providing the information or communication or taking the action requested.
We will not discriminate against you for exercising any of your CPRA rights including, but not limited to, by:
We reserve the right to amend, add to, change, update, or modify this California Privacy Policy at our discretion and at any time. When we make changes to this California Privacy Policy, we will notify you by email or through a notice on our website homepage. If we make material changes to how we treat your personal information, we will also notify you through a notice on the home page of the website for a reasonable period of time. Any such changes, updates, or modifications shall be effective immediately upon posting this California Privacy Policy. The data on which this policy was last modified is identified at the beginning of this California Privacy Policy.
If you have any questions or comments about this California Privacy Policy, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to lodge a complaint with us, you may contact us using the information below and we will do our best to assist you. Please note, if your communication is sensitive, you may wish to contact us by postal mail or telephone:
In Writing: Privacy Policy Manager, 2118 Usher Street, Covington, GA 30014
By Telephone: 1-866-413-8340