CCPA Privacy Notice / Notice At Collection

Maintaining the privacy and security of your personal information is Service Finance Company’s (“SFC”) highest priority.
In doing so, we want to provide transparency regarding how and why your data is collected, how it is used, with whom it may be shared, and how long it is kept.
This notice, as well as SFC’s Consumer Privacy Notice and Statement of Online Privacy Practices informs consumers how we will interact with your personal information.
The purpose of this Notice at Collection and CCPA Privacy Notice (“Notice”) is to provide you with timely notice, at or before the point of collection, of the details about our practices concerning
the privacy of your personal information. This Notice is directed to consumers who reside in the state of California (“consumers” or “you”) and relates to personal information covered by the
California Consumer Privacy Act (CCPA). Specifically, this Notice provides comprehensive information about our online and offline practices, along with details concerning how you may exercise your
California privacy rights and make requests to access, correct or delete the information that SFC holds about you. We will not collect additional categories of personal information without
providing you a new Notice at Collection disclosing these categories.
Please note that SFC adheres to an exemption within the CCPA for data collected pursuant to the Gramm-Leach-Bliley Act (GLBA). This Notice and the rights described do not apply to information we collect
when you apply for or obtain our financial products and services for personal, family, or household purposes,
which is subject to SFC’s Consumer Privacy Notice.
The following charts provide specifics about SFC’s practices related to the collection, use and selling or sharing of personal information:
General Personal Information:
Categories of Personal Information Collected & Disclosed | Purpose for Collection | Purpose for Disclosure |
---|---|---|
A.Identifiers: For example, real name or alias, address, online identifier, IP address, email address, account name, SSN, driver’s license number, passport number, or other similar identifiers. |
|
|
B. Personal Information Categories from Cal. Civ. Code § 1798.80I: For example, name, signature, SSN, physical characteristics or description, address, phone number, passport number, driver’s license or state ID card number, account numbers, education, employment, employment history, credit or debit card numbers, or any other financial, medical or health insurance information. |
|
|
C. Characteristics of CA or Federal Protected Classifications: For example, race, religion, national origin, age (40 and over), gender, sexual orientation, medical condition, ancestry, pregnancy (includes childbirth, breastfeeding and/or related medical conditions), familial status, disability, veteran status, or genetic information. |
Manage hiring and ongoing employment needs | All purposes from the “Purpose for Collection” |
D. Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
Respond to product applications | All purposes from the “Purpose for Collection” |
E. Biometric Information: For example, physiological, biological or behavioral characteristics that can be used to establish individual identity, including fingerprints or facial features. |
For secure sign-on methods on your device | SFC does not store or disclose this information |
F. Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement |
To analyze our site usage and enhance the user’s experience, including:
|
All purposes from the “Purpose for Collection” |
G. Geolocation Data: For example, information that can be used to determine a device’s physical location |
Protect against risks to security:
|
All purposes from the “Purpose for Collection” |
H. Sensory Data or Recordings: For example, audio, electronic, visual, thermal, olfactory, or similar information that can be linked or associated with a particular consumer or household |
|
All purposes from the “Purpose for Collection” |
I. Professional or Employment-Related Information: For example, compensation, evaluations, performance reviews, personnel files and current and past job history. |
|
All purposes from the “Purpose for Collection” |
J. Education Information:
(defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99)): Education records directly related to a student maintained by an education institution or party acting on its behalf, for example, non-public information that can be used to distinguish or trace an individual’s identity in relation to an educational institution either directly or indirectly through linkages with other information. |
Manage hiring and ongoing employment needs | All purposes from the “Purpose for Collection” |
Sensitive Personal Information:
Categories of Sensitive Personal Information | Purpose for Collection | Purpose for Disclosure |
---|---|---|
SSN, Driver’s License, State ID Card, Passport Number |
|
|
Account Login, financial account, debit or credit card number when provided with any security or access code, password or credentials allowing access to an account |
|
All purposes from the “Purpose for Collection” |
Precise geolocation |
Protect against risks to security:
|
All purposes from the “Purpose for Collection” |
Racial or ethnic origin | Manage hiring and ongoing employment needs | All purposes from the “Purpose for Collection” |
Contents of a consumer’s mail, email and text messages (unless SFC is the intended recipient) | SFC does not collect contents of a consumer’s mail, email and text messages if SFC is not the intended recipient | N/A |
Genetic Data | SFC does not collect genetic data | N/A |
Biometric information for the purpose of unique identification | For secure sign-on methods on your device | SFC does not store or disclose this information |
Health information | Manage ongoing employment needs, such as benefits | All purposes from the “Purpose for Collection” |
Information concerning sex life or sexual orientation | SFC does not collect information concerning sex life or sexual orientation | N/A |
What we Sell to Third Parties or Share with Third Parties for Cross-Context Behavioral Advertising and What we Share with Third Parties for Business Purposes
SFC does not “sell” or “share” information for cross-contextual behavioral advertising under California law. We have shared personal information for business purposes with third parties in the preceding 12 months as disclosed in the table below.
General Personal Information:
Categories sold to or shared with third parties over the last 12 months | Categories of third parties to whom this category of personal information has been sold or shared | Categories of Third Parties to whom the information was shared for business purposes |
---|---|---|
A.Identifiers: | N/A |
|
B.Personal Information Categories from Cal. Civ. Code § 1798.80(e) | N/A |
|
C. Characteristics of CA or Federal Protected Classifications | N/A |
|
I. Professional or Employment-Related Information | N/A | Affiliates and other entities in the SFC family |
J. Education Information | N/A | Affiliates and other entities in the SFC family |
Sensitive Personal Information:
Categories sold to or shared with third parties over the last 12 months | Categories of third parties to whom this category of personal information has been sold or shared | Categories of Third Parties to whom the information was shared for business purposes |
---|---|---|
Social Security Number, Driver’s License, State Identification Card, or Passport Number | N/A |
|
Racial or ethnic origin | N/A | Affiliates and other entities in the SFC family |
Health information | N/A | Affiliates and other entities in the SFC family |
Other Information
- Directly from you or your guardians/representatives
- Service providers that support our business operations (e.g., data analytics providers)
- Websites and mobile applications
- Our affiliates
- Outside merchants or business partners such as dealer associations or manufacturers
- Public records or publicly available data
- Data brokers
- Government entities
Right to Know / See Data Request
You have the right to request that SFC disclose categories or specific pieces of information we have collected about you over the last 12 months, the categories of sources from which that information was collected, the business or commercial purpose(s) for which the information was collected, sold, or shared with third parties for cross context behavioral advertising, and the categories of third parties with whom we share personal information.
Right to Correct
You have the right to request correction of inaccurate information maintained by SFC. In many instances, such updates are best made by logging into your online account or employee portals or calling 866-703-3140, and some corrections may require specific documentation to be provided as required by law. If you provide us documentation, it will only be used or maintained for the purpose of correcting the information and complying with our recordkeeping requirements under the CCPA. SFC also provides links and the privacy request line as described below.
Right to Delete
You have the right to request deletion of personal information that SFC has collected, subject to certain exceptions. For example, we may deny your request if retaining the information is necessary for us to complete a transaction you requested or comply with our legal obligations.
- To submit a request for yourself, click here
- To submit a request on behalf of another individual, click here
All requests must be verified prior to receiving a response, using SFC authentication protocols. Requesters will be asked to supply certain basic Personal Information to enable us to verify the request against our records, such as name, Social Security number, and address. Information submitted for verification purposes will only be used to verify the requestor’s identity and/or authority to make a request on another’s behalf.
Requests made on another person’s behalf can only be accepted upon receipt of documentation that the requestor is an authorized agent, parent, or legal guardian of the consumer whose information is being requested. This will require the submission of a valid Power of Attorney, Birth Certificate, approved SFC authorization form, Guardianship Order, or other court order granting authority to receive information, as appropriate.
Upon submission of a request, consumers will receive an initial confirmation of receipt within 10 days. We will respond to your request within 45 days (unless an extension of up to 45 additional days is requested, upon which the consumer will receive notice and an explanation for the extension).