AvailableCards Notice to California Residents Regarding Privacy

Date Effective: May 1, 2025

This Notice fulfills the disclosure obligations stipulated by the California Consumer Privacy Act, as amended (CCPA). It pertains specifically to “personal information” governed by this legislation. While our overarching data management practices are detailed in our general Privacy Policy, this Notice addresses the specific handling of California residents’ personal information under the CCPA. This often involves data linked to financial products and services for businesses offered via our platform, such as business credit solutions or funding for small enterprises. This California Privacy Notice exists alongside and should be interpreted with our AvailableCards Privacy Policy and AvailableCards Terms of Service, both of which are incorporated herein.

  1. Categories of Personal Information Managed by AvailableCards

AvailableCards gathers particular categories of details about California consumers. We utilize this data, and at times share it with external parties, to facilitate our operations and for commercial aims. Consistent with standard online practice, we also enable certain external entities, including independent business collaborators, advertising networks, analytics firms, and other advertising vendors, to directly gather details concerning your online actions. This gathering occurs on our digital interfaces and across various web browsers and devices, leveraging technologies like cookies, web beacons, mobile identifiers, and similar tools.

These external parties may utilize this data to deliver customized online advertisements tailored to your individual interests and preferences across different browsers and devices. They might also employ it for purposes such as assessing advertising campaign effectiveness, conducting website analysis, identifying and mitigating fraud, and for their own business purposes. Under CCPA definitions, the acquisition of data by certain external parties in this manner could be classified as an exchange of personal information. Further details on these practices can be found in the “Third-Party Tracking Technologies” section of the AvailableCards Privacy Policy. Instructions on how to exercise your right to decline personal information exchange that may constitute such an exchange under the CCPA are provided in the “Your Privacy Choices” section below.

The types of personal information we handle include:

  • Identifiers, both personal and online, like names, email addresses, and unique online identifiers.
  • Private details, such as Social Security numbers, bank account numbers, and other financial data.
  • Attributes of protected classifications under California or federal law, like age or gender identity.
  • Transaction details related to commerce, such as specifics about financial products or services obtained through our offerings.
  • Details about internet or other electronic network activity, such as browsing history, site interactions, and service usage.
  • Location data.
  • Information related to profession or employment.
  • Educational information.
  • Deductions drawn from the data above, potentially including predictions about your characteristics and preferences.
  • Additional information about you connected to the personal information previously mentioned.
  1. Origins of Information

We obtain personal information from various sources. Primarily, we acquire information directly when you provide it to us. Additionally, with your permission, we might obtain information like credit reports or scores from consumer reporting agencies, or from third-party services that facilitate information transfer through application programming interfaces (APIs). You may also instruct us to retrieve personal information you maintain with other financial organizations. Furthermore, we might gather information about you through automated mechanisms, as described within our Privacy Policy.

  1. Rationale for Information Handling

The personal information we collect is utilized and disclosed to support our operations and for commercial purposes, as further explained in our Privacy Policy.

Our commercial purposes encompass activities such as marketing initiatives, advertising campaigns, authentication procedures, identity validation, fraud prevention measures, service delivery, and customer support.

Our operational purposes, in accordance with CCPA definitions, include activities such as audits, legal compliance, detection and prevention of security breaches, fraud, and unlawful activity, system troubleshooting, administrative functions, analytics, internal research, service maintenance and enhancement, and other operational requirements.

We may share the categories of personal information indicated above with categories of external parties, including vendors, lending institutions, referral partners, marketing collaborators, credit bureaus, financial data aggregators, governmental bodies, advertising networks, internet service providers, data analytics providers, operating system providers, professional service 1 firms, and social networks.

We also authorize external parties to gather information regarding your interaction with our digital platforms through third-party tracking tools. Data collected via these tools may be used to present targeted advertisements across different platforms, customized to your interests, or to measure the effectiveness of advertising campaigns.

  1. Privacy Options for California Residents

California residents possess specific options regarding their personal information. Subject to particular conditions and limitations, you have the following choices:

  • The option to request a list of the personal information we shared with external parties for their direct marketing purposes in the preceding calendar year, along with the identities of those parties.
  • The option to be informed about the classifications and specific elements of personal information we collect, utilize, disclose, or exchange about you; the origins from which we collect your personal information; the reasons for collecting or exchanging your personal information; the classifications of your personal information that we have disclosed or exchanged; and the classifications of external parties with whom we have disclosed or exchanged personal information.
  • The option to request the deletion of personal information we have obtained from you.
  • The option of data portability, enabling you to obtain and reuse your personal data for your own purposes.
  • The option to limit the use of your private personal information to particular, authorized purposes.
  • The option to rectify inaccurate personal information we possess about you.
  • The option to decline the exchange of your personal information.
  • The right not to be treated differently for exercising your CCPA rights.
  1. Data Retention Practices

Unless you specifically instruct us to remove your personal information, we retain it for the period necessary to fulfill our data retention obligations, deliver the services you’ve requested, and operate our business effectively. Even if you request removal, we might be obligated to keep your information to:

  • Satisfy legal or regulatory mandates.
  • Initiate, pursue, or defend legal claims.
  • Protect against fraudulent or abusive activity on our services.

This implies that we might maintain various types of information for different durations. If your account is closed due to inactivity, we could erase that information promptly.

Situations may arise where we cannot fully erase, anonymize, or de-identify your information due to technical, legal, regulatory, or operational limitations. In such instances, we will apply reasonable measures to secure your personal information and prevent further use until removal, anonymization, or de-identification becomes feasible.

  1. Exercising Your California Privacy Options

To Exercise Your Option to Request Information, Access, or Removal

To exercise your options to request information, access, or removal, please visit our Privacy Portal. You may also submit your CCPA request by sending a communication to [email protected] with the subject line “CCPA Request” and indicating the specific option you wish to exercise within the message.

To Decline the Exchange of Personal Information

To the extent that external-party information collection on our digital platforms constitutes an exchange of personal information, we offer mechanisms for you to exercise your option to decline certain tracking and data usage practices.

On certain of our digital interfaces, you can manage settings related to cookies and tracking mechanisms via a consent management tool. On other AvailableCards digital interfaces, you can exercise opt-out options by:

  • Visiting privacyrights.info to decline certain exchanges of personal information by external-party entities participating in the DAA’s CCPA Opt-Out Tool.
  • Modifying ad personalization preferences through your Google account at myaccount.google.com/data-and-personalization.
  • Following the guidelines provided in the “Third-Party Tracking Technologies” section of the AvailableCards Privacy Policy to decline interest-based advertising and other tracking practices.

To exercise any other CCPA options, please utilize the methods described above for requesting information, access, or removal.

  1. Verification of Submissions

We might need to ask for additional details from you to confirm your identity or comprehend the scope of your request. While account creation isn’t required for submitting a request, we will need to confirm your identity to proceed. Typically, we will ask you to provide details that we already have on file. In some circumstances, we might be unable to fulfill a request, particularly if we cannot adequately confirm your identity.

  1. Designated Representatives

You have the option to appoint a designated representative to submit a CCPA request on your behalf by reaching out to us via the contact details provided above. If we cannot confirm your identity when the representative submits the request, we may request further information from you. If you designate an entity to act on your behalf, the CCPA mandates that the entity be registered with the California Secretary of State.

  1. Information Regarding Minors

We do not knowingly exchange the personal information of individuals we are aware are under 16 years of age.

  1. Information Pertaining to Business Funding

When you provide personal information to us to seek business funding through our partners, you acknowledge that the provision of your personal information in connection with your request does not constitute an exchange of your personal information under the CCPA.