California privacy notice

Last Updated: December 31, 2019

1. Scope of Disclosures.

This additional California Notice (the “CA Notice”) supplements the information contained in our Privacy Policy and applies solely to individual residents of the State of California (“consumers” or “you”).

This CA Notice provides additional information about how we collect, use, disclose and otherwise process personal information of individual residents of the State of California, either online or offline, within the scope of the California Consumer Privacy Act of 2018 (“CCPA”).

Unless otherwise expressly stated, all terms in this CA Notice have the same meaning as defined in our Privacy Policy or as otherwise defined in the CCPA.

2. Personal Information Disclosures.

When we use the term “personal information” in this CA Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include aggregated or anonymized deidentified information that is maintained in a form that is not capable of being associated with or linked to you.

2.1. Collection and Use of Personal Information

In the last 12 months, we have collected the following categories of personal information from the following sources of personal information for the following purposes, which reference the personal information, sources and purposes described in What Personal Information We Collect and How We Collect It and The Way We Use Personal Information sections of our Privacy Policy:

Category of Personal InformationCollectedCategories of SourcesCommercial or Business Purpose
Identifiers, such as business name, first name, last name, email address, SSN, etc. You
Your Device
Service Providers
Loan Servicing Partners
Auditing consumer interaction & transactions
Detecting/protecting against security events
Debugging existing intended functionality
Direct marketing (email, etc.)
Internal analytics and reporting
Maintaining and enhancing the product and services
Providing customer service and support
Provide effective and efficient customer support
Product development/ improvement
California Customer Records (Cal. Civ. Code § 1798.80(e)), such as telephone number, address, bank account details, bank statements, tax returns, etc. You
Service Providers
Loan Servicing Partners
Auditing consumer interaction & transactions
Detecting/protecting against security events
Debugging existing intended functionality
Direct marketing (email, etc.)
Internal analytics and reporting
Maintaining and enhancing the product and services
Provide effective and efficient customer support
Providing the product and services
Product development/ improvement
Protected Classification such as age, and date of birth.You
Service Providers
Auditing consumer interaction & transactions
Detecting/protecting against security events
Direct marketing (email, etc.)
Internal analytics and reporting
Maintaining and enhancing the product and services
Provide effective and efficient customer support
Providing the product and services
Product development/ improvement
Commercial Information such as transaction history, business age, business industry, etc.You
Service Providers
Loan Servicing Partners
Auditing consumer interaction & transactions
Detecting/protecting against security events
Direct marketing (email, etc.)
Internal analytics and reporting
Maintaining and enhancing the product and services
Provide effective and efficient customer support
Providing the product and services
Product development/ improvement
Internet/Network Information, such as device information, and your interaction with our website, application, or promotion.You
Your Device
Service Providers
Auditing consumer interaction & transactions
Detecting/protecting against security events
Debugging existing intended functionality
Direct marketing (email, etc.)
Internal analytics and reporting
Maintaining and enhancing the product and services
Provide effective and efficient customer support
Providing the product and services
Product development/ improvement
Geolocation Data, such as IP address, your general geographic location based on the address you provide us or more precise location when permitted by law.You
Your Device
Service Providers
Loan Servicing Partners
Auditing consumer interaction & transactions
Detecting/protecting against security events
Debugging existing intended functionality
Direct marketing (email, etc.)
Internal analytics and reporting
Maintaining and enhancing the product and services
Provide effective and efficient customer support
Providing the product and services
Product development/ improvement
Sensory Information, such as recordings of calls or interviews. You
Service Providers
Auditing consumer interaction & transactions
Debugging existing intended functionality
Direct marketing (email, etc.)
Internal analytics and reporting
Maintaining and enhancing the product and services
Provide effective and efficient customer support
Providing the product and services
Product development/ improvement
Profession/Employment Information, such as employment status, business demographic, business address, number of employees, etc. You
Service Providers
Loan Servicing Partners
Direct marketing (email, etc.)
Internal analytics and reporting
Maintaining and enhancing the product and services
Provide effective and efficient customer support
Providing the product and services
Product development/ improvement
Education Information, such as education history, etc.YouDirect marketing (email, etc.)
Internal analytics and reporting
Maintaining and enhancing the product and services
Provide effective and efficient customer support
Providing the product and services
Product development/ improvement
Other Personal Information, such as information you decide to provide to us in connection with your loan application.
YouAuditing consumer interaction & transactions
Internal analytics and reporting
Maintaining and enhancing the product and services
Provide effective and efficient customer support
Providing the product and services
Product development/ improvement
Inferences, including our predictions about your interests and preferences and related information based on the information you decide to provide to us. You
Your Device
Service Providers
Loan Servicing Partners
Auditing consumer interaction & transactions
Detecting/protecting against security events
Debugging existing intended functionality
Direct marketing (email, etc.)
Internal analytics and reporting
Maintaining and enhancing the product and services
Providing the product and services
Product development/ improvement

2.2. Disclosure of Personal Information

In the last 12 months, we have disclosed for a business purpose and sold the following categories of personal information, which reference the categories of personal information described above:

Category of Personal InformationDisclosure for a Business PurposeSold*
Identifiers
California Customer Records (Cal. Civ. Code § 1798.80(e))
Protected Classification Characteristics
Commercial Information
Internet/Network Information
Geolocation Data
Sensory Information
Profession/Employment Information
Education Information
Other Personal Information
Inferences

*Note about “Sales” of information: We utilize third-party providers to engage in online analytics and advertising involving the collection of personal information, including Identifiers, Internet/Network Information, and Geolocation Data, directly from your browser or device through cookies or related technologies when you visit or interact with our online services or otherwise engage with us online. We use these third-party providers to analyze and optimize our online services, provide more relevant content and ads to users of our online services and other third parties, and perform other services related to analytics or advertising consistent with this CA Notice and our Privacy Policy. These third-party businesses may use the information they collect directly from you for their own purposes in accordance with their own privacy notices, which may include using this information for services provided to other third parties, including other parties operating in advertising networks.

To the extent that these practices qualify as “sales” under the CCPA, you may have the right to opt out as described below. Please see the Cookies and Other Data Collection Technologies section of our Privacy Policy for more information about the choices and opt-out options you may have in relation to those practices.

2.3. To Whom We Disclose Personal Information

As described in The Way We Use Personal Information section of our Privacy Policy, we share personal information within Fundbox and with a variety of recipients for business purposes.

In addition to the categories of recipients identified in The Way We Use Personal Information section of our Privacy Policy, we disclose personal information to, or allow access to personal information by, the following categories of recipients:

  • Broker and Loan Provider Partners
  • Customer Service Vendors
  • Cloud Computing Service Providers
  • IT and Quality Assurance Vendors
  • Marketing and Advertising Partners
  • Payment and Auditing Processors
  • Security Safety Vendors and Service Providers

3. Your California Privacy Rights

As a California resident, you may be able to exercise the following rights in relation to the Personal Information about you that we have collected (subject to certain limitations at law):

The Right to Know

You have the right to request any or all of the following information relating to the personal information we have collected about you or disclosed in the last 12 months, upon verification of your identity:

  • The specific pieces of personal information we have collected about you;
  • The categories of personal information we have collected about you;
  • The categories of sources of the personal information we have collected about you;
  • The categories of personal information that we have disclosed about you to third parties for a business purpose, and the categories of recipients to whom this information was disclosed;
  • The categories of personal information we have sold about you, and the categories of third parties to whom this information was sold; and
  • The business or commercial purposes for collecting or selling personal information about you.

The Right to Request Deletion

You have the right to request the deletion of personal information that we have collected from you, subject to certain exceptions.

The Right to Opt Out

The right to direct us not to sell personal information we have collected about you to third parties.

The Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising any of the rights described above.

However, please note that if the exercise of the rights described above limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you our products or services or engage with you in the same manner.

“Shine the Light”

California residents that have an established business relationship with us have rights to know how their information is disclosed to third parties for their direct marketing purposes under California’s “Shine the Light” law (Civ. Code § 1798.83).

3.1. How to Exercise Your Right to Know or Right to Deletion

To exercise your right to know and right to deletion, please submit a request by:

  • Emailing support@fundbox.com with the subject line “California Rights Request,” or
  • Calling (855) 572-7707.

We will need to verify your identity before processing your request. In order to verify your identity, we will generally either require the successful login to your account or the matching of sufficient information you provide us to the information we maintain about you in our systems.

Although we try to limit the personal information collected in connection with a request to exercise the right to know and the right to deletion, certain requests may require us to obtain additional personal information from you. In certain circumstances, we may decline a request to exercise the right to know and right to deletion, particularly where we are unable to verify your identity.

3.2. How to Exercise Your Right to Opt Out

To the extent our third-party providers’ collection of information from visitors of our website constitutes a “sale” under the CCPA, you can access additional information about the choices and opt-out options you have in relation to those practices by clicking the following link to be brought to the “Cookies and Other Data Collection Technologies” section of our Privacy Policy: Do Not Sell My Personal Information.

3.3. Minors Under Age 16

We do not sell the personal information of consumers we know to be less than 16 years of age, unless we receive affirmative authorization (the “Right to Opt In”) from either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age.

3.4. “Shine the Light”

California Civil Code Section 1798.83 permits our customers who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to support@fundbox.com. Please note that we are only required to respond to one request per customer each year.

3.5. Authorized Agent

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf where (i) you provide sufficient evidence to show that the requestor is an authorized agent with written permission to act on your behalf and (ii) you successfully verify your own identity with us.

4. Financial Incentives.

We do not offer any financial incentives in exchange for the retention or sale of personal information. If we do offer any financial incentives in the future, we will provide a summary of the incentive offered the categories of personal information implicated, how a consumer can opt-in and an explanation of why the financial incentive is permitted under the CCPA.

5. Updates to This California Notice.

We will update this CA Notice from time to time. When we make changes to this CA Notice, we will change the "Last Updated" date at the beginning of this CA Notice. All changes shall be effective from the date of publication unless otherwise provided in the notification.

6. Questions.

We are committed to protecting your privacy. Protecting your privacy online is an evolving area, and we are constantly evolving our Service to meet these demands. If you have any comments or questions regarding this CA Notice, our Privacy Policy, or your Personal Information that we may be storing and using, please contact us at support@fundbox.com.