Financial Privacy Notice

1. Scope

This Financial Privacy Notice supplements our Privacy Policy and explains how UnitedStatesCredit handles information collected in connection with a consumer's request for a financial product or service. We provide this notice to describe our practices under applicable federal and state financial-privacy laws.

2. Information We Collect

Depending on the service, financial information may include:

• name, address, email address, and telephone or mobile number;
• loan amount and purpose, income, employment, housing, and other application information;
• Social Security number, driver's-license number, bank-account or routing information, or similar identifiers when needed for lender transmission;
• transaction, routing, fraud-prevention, and request-status information; and
• the fact that an individual sought or obtained a financial service through UnitedStatesCredit.

3. Sensitive Information Handling

UnitedStatesCredit processes Social Security numbers, driver's-license numbers, and bank-account or routing information only as needed to transmit your requested loan application to participating lenders and financial-service providers involved in that request. We do not persistently retain those identifiers after transmission. We may retain limited contact, transaction, routing, consent, security, and suppression records for the purposes described in our notices, but those retained records do not include your Social Security number, driver's-license number, or bank-account or routing information.

4. Sharing to Process a Consumer-Requested Transaction

We may disclose application information to participating lenders or financial-service providers as necessary to effect, administer, process, or service the financial transaction the consumer requested. The recipient lender is independently responsible for its underwriting, credit reporting, final disclosures, loan agreement, and privacy practices.

5. Service Providers

We may provide information to companies that perform hosting, security, fraud prevention, communications, data processing, analytics, compliance, mailing, or other services for us. Where required, our agreements restrict the provider's use and disclosure of the information to authorized purposes.

6. Marketing and List Management

UnitedStatesCredit may retain limited first-party contact information collected directly from consumers for marketing activities permitted by law.

We may provide limited first-party contact records to contracted list-management and marketing companies. These companies may store the records in their own systems, actively manage the UnitedStatesCredit audience, select and deploy offers from multiple advertisers, administer authorized email or SMS campaigns, and measure campaign performance. Under our revenue-sharing arrangements, a manager may deduct agreed mailing or campaign expenses and pay UnitedStatesCredit a contractual share of the resulting revenue.

Under our list-management agreements, UnitedStatesCredit retains ownership or control of its underlying first-party marketing records. Our list managers are prohibited from selling, transferring, or independently using those records outside the services authorized by their agreements with UnitedStatesCredit and applicable law. A permitted subcontractor may process records only under applicable contractual restrictions. These arrangements do not limit consumers' privacy rights.

Our marketing and list-management records do not include Social Security numbers, bank-account or routing numbers, driver's-license numbers, consumer-report information, or other sensitive lender-application identifiers. We do not provide those fields to list managers, advertisers, email marketers, or SMS marketers for marketing purposes.

We provide records for these activities only where permitted by law and after obtaining any required authorization and honoring applicable privacy choices. Disclosing our marketing practices in this notice does not itself supply a consent that must be obtained separately.

Where federal or state financial-privacy law requires notice, an opt-out opportunity, or affirmative authorization before a particular disclosure, UnitedStatesCredit will apply the legally required process before making that disclosure.

7. Other Permitted Disclosures

We may disclose information where permitted or required by law, including for fraud prevention, security, legal process, regulatory examination, professional services, dispute resolution, audits, a business transfer, or other lawful purposes.

8. Former Consumers

Financial-privacy protections that apply to information do not necessarily end simply because a consumer is no longer actively using our service. We continue to protect retained information as required by applicable law and our policies.

9. Privacy Choices

Federal financial-privacy law gives consumers the right to limit certain disclosures of nonpublic personal information to nonaffiliated third parties. Before making a disclosure for which that law requires an opt-out opportunity, we will provide the required privacy and opt-out notices and a reasonable opportunity to opt out.

Different rules may apply to disclosures necessary to process a transaction you request, disclosures under a qualifying service-provider arrangement, and disclosures made with your valid consent or at your direction. We rely on an exception only when its requirements are satisfied. A service-provider label alone does not eliminate your rights.

You may exercise an available financial-privacy choice or revoke an applicable authorization using the instructions in the notice or authorization, through Your Privacy Choices, or by emailing info@bluekeel.com. We apply the request as required by law and explain any applicable limitation. California residents may have additional rights described in our California Financial Privacy Notice.

10. California Consumers

California financial privacy law may impose additional restrictions on disclosures of nonpublic personal information. Review our California Financial Privacy Notice. Any California consent acknowledgment required for a disclosure to a nonaffiliated third party will be presented as a separate authorization and is not replaced by this notice.

11. Security and Retention

We use administrative, technical, and physical safeguards designed to protect financial information and require appropriate safeguards from service providers where required by law. Information is retained only as reasonably necessary for the purposes described in this notice, applicable recordkeeping, consent evidence, fraud prevention, security, and legal obligations.

12. Contact