Privacy Policy

Last Updated: October 6, 2025

1. Privacy Policy Overview

Credit Corp Solutions Inc., and its affiliates (“Credit Corp”, “we”, “us” or “our”) are committed to protecting the privacy and the security of the information it receives. Protecting your private, nonpublic personal information regarding our customers is a top priority.

Pursuant to the requirements of the Gramm-Leach-Bliley Act (the “Act”) and guidelines established by the Securities Exchange Commission regarding the Privacy of the Consumer Financial Information (Regulation P) this policy (the “Policy” or “Privacy Policy”) and the related procedures contained herein are designed to comply with applicable privacy laws, including the Act and Regulation P, and to protect nonpublic personal information of customers. In the event that new privacy-related laws or regulations affecting the information practices of Credit Corp are adopted by federal or state regulations, this Policy will be revised as necessary and any changes will be disseminated and explained to all personnel.

2. Scope

This Privacy Policy covers the practices of Credit Corp and applies to all nonpublic personally identifiable information. All financial companies need to share personal information to run their everyday business. This Privacy Policy lists the reasons financial companies can share personal information, the reasons Credit Corp chooses to share and whether you can limit this sharing.  

Credit Corp’s Website can be found at www.creditcorponline.com (its “Website”). The Website is not intended for individuals under the age of eighteen (18) and Credit Corp does not knowingly collect data relating to individuals under the age of eighteen. Your access to and use of the Website is conditional upon your acceptance of and compliance with this Policy. This Policy applies to everyone, including, but not limited to visitors, users, and others, who wish to access or use the Website. By accessing or using the Website, you agree to be bound by this Policy.

Nothing in this Privacy Policy is intended to contradict your rights under the Fair Debt Collection Practices Act (“FDCPA”). Credit Corp will not disclose any information to third parties that is otherwise prohibited by the FDCPA.

3. Customer Defined

A “customer” is a consumer who has a “customer relationship” with the institution. A “customer relationship” means a continuing relationship with the debt buyer or the “financial institution.”

4. What is Public Personal Information?

“Public Personal Information” information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual that can be disseminated without restriction under the Act and regulations. Public Personal Information includes federal, state, or local government records made available to the public such as motor vehicle ownership, drivers’ license information (in some states) and real estate ownership data derived from public records, addresses and phone numbers from paper or electronic, and information obtained from any website which can be accessed by anyone without restriction (paying a fee for this information is not a restriction). Information about a debtor that is publicly available in court records (e.g., banks successfully garnished for a debtor; employers successfully garnished for a debtor; existence of a debtor’s Chapter 7 or Chapter 13 filings) are examples of “public personal information” not subject to this regulatory scheme.

This “public” data can be exchanged with third parties without privacy notices because the data is not “nonpublic personal information.” However, as a debt collector under the Fair Debt Collection Practices Act, there are other restrictions on disclosure of any data about a debtor and their debt that are not supplanted or superseded by the privacy regulations.

5. What is Nonpublic Personal Information?

Nonpublic personal information is defined as any personally identifiable financial information provided by the consumer to a financial institution; resulting from any transaction with the consumer or any service performed for the consumer; or otherwise obtained by the financial institution. For example: a Social Security number; driver’s license number (in some states); place of employment or work telephone number; non-listed home phone; where the consumer banks; details about the particular account. Other examples of nonpublic personal information include: account balances; payment histories; transaction history; or any information that disclosures that this individual has a financial relationship with the institution. This type of information is governed and restricted by the Act.

6. Privacy Notice

Privacy notifications will be sent to every account that Credit Corp has purchased and whereby a “customer relationship” has been created. All active accounts that maintain a “customer relationship” according to the Act’s definition will receive annual privacy and opt out notifications.

7. What Information We Collect.

We may have collected the following categories of personal information from consumers within the last 12 months. Inclusion of a category indicates that we may collect some information in that category. It does not mean that we collect all information listed in that category in all situations.

Categories of Personal Information	Examples of Specific Types of Personal Information Collected	Collected	Purpose
Identifiers	A real name, alias, postal address, email address, telephone numbers, internet protocol address, account number, Social Security number, date of birth, or other similar identifiers	Yes	a. Necessary to provide the services b. Necessary to comply with a legal obligation c. Necessary for our legitimate business interests d. Prevent Fraud
Personal Information Categories	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	Yes	a. Necessary to provide the services b. Necessary to comply with a legal obligation c. Necessary for our legitimate business interests d. Prevent Fraud
Protected classification characteristics	Age (40 years or older), veteran or military status	Yes	a. Necessary to provide the services b. Necessary to comply with a legal obligation c. Necessary for our legitimate business interests
Commercial Information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	Yes	a. Necessary to provide the services b. Necessary to comply with a legal obligation c. Necessary for our legitimate business interests
Internet or other electronic network activity information	Information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.	Yes	a. Necessary to provide the services b. Necessary to comply with a legal obligation c. Necessary for our legitimate business interests
Geolocation data	Physical location.	Yes	a. Necessary to provide the services b. Necessary to comply with a legal obligation c. Necessary for our legitimate business interests
Sensory Data	Audio, electronic, visual.	Yes	a. Necessary to provide the services b. Necessary to comply with a legal obligation c. Necessary for our legitimate business interests
Professional or employment related information	Current or past job history.	Yes	a. Necessary to provide the services b. Necessary to comply with a legal obligation c. Necessary for our legitimate business interests
Non-public education information (per the Family Educational Rights and Privacy Act [20 U.S.C. Section 1232g, 34 C.F.R. Part 99])	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	Yes	a. Necessary to provide the services b. Necessary to comply with a legal obligation c. Necessary for our legitimate business interests
Sensitive Personal Information	Government-issued identifying numbers, such as a driver’s license, passport or social security number, financial account details that allow access to an account, such as a credit card number and access code, contents of mail, email, chat, or text messages.	Yes.   Sensitive Personal Information is not collected or processed with the purpose of inferring characteristics about a customer.	a. Necessary to provide the services b. Maintain and service your account c. Process Payments d. Ensure security and integrity regarding the use of such personal information e. Verify or maintain the safety and quality of the services f. Necessary to comply with a legal obligation g. Necessary for our legitimate business interests.

8. How We Collect Your Personal Information. 

Credit Corp collects your personal identifiable information when you update your personal information on the Website and when you make a payment. Credit Corp collects most of your personal identifiable information directly from sellers of portfolios of debt, as well as from you by telephone, written correspondence through the mail, email, SMS, chat or fax, by viewing the public social media/network pages, or other information available online. Credit Corp may also collect information:

• From publicly accessible sources (e.g., property records or court records);
• From your interactions with us;
• From your transactions with us;
• From our service providers (e.g., letter vendor, location vendors, payment processing vendors, call analytics vendor, and/or electronic signature service provider);
• Directly from a third party (e.g., third parties contacted during location activities pursuant to 15 U.S.C. § 1692b, such as your friends, neighbors, relatives, and/or employer);
• Credit reporting agencies (CRAs);
• From a third party with your consent (e.g., your authorized representative and/or attorney); and
• From activity on our Website.

9. Authorized Access to Customer Information

Access to “customer” information is restricted to legitimate Credit Corp business and is limited to only those employees’,  agents, and service providers (e.g., attorneys, auditors, and other financial institutions) that have legitimate business purposes. We require assurances that the confidentiality of nonpublic information they obtain from or through us is maintained. All unauthorized access to customer information is strictly prohibited.

10. How We Use Your Personal Information. 

Credit Corp will only use your information if we have your permission or we have another legal reason for using it. These reasons may include:

• To pursue our legitimate business interests;
• To provide you with information or services that you request from us;
• Where required by law;
• To comply with legal process;
• To respond to requests from public and government authorities as required by law;
• To enforce our Terms and Conditions and this Privacy Policy;
• To protect our operations or services, or those of any of our affiliates;
• To protect our rights, privacy, safety or property, and/or that of our affiliates, you, or others;
• To ensure security and integrity to the extent personal information is reasonably necessary and proportionate to these purposes;
• To verify or maintain the quality or safety of the services or account, or to prevent fraud; and
• To establish, utilize, or defend our legal rights.

Credit Corp may also use your personal information for authentication purposes, to update your contact information and to process payments on your account(s). Credit Corp will retain your personal data in line with its retention policy and will delete the information or anonymize the information once it is no longer needed.

Personal Information is collected for the purpose of debt recovery in a lawful manner and remains part of our records until we determine the information is no longer needed, or we are required by law to delete such information. We will collect the minimum amount of data necessary to collect a debt.

Sensitive personal information is collected only as necessary to perform our services, process payments, maintain or service your account(s), to ensure security and integrity regarding the use of such personal information, and to verify or maintain the safety and quality of the Services. Sensitive personal information is not collected with the purpose of inferring characteristics about you. We do not collect “sensitive” personal information as that term is defined in certain states.

Credit Corp will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice. We do not sell and will not sell your personal information. We also do not “share” your personal information as that term is defined in the California Privacy Rights Act (“CCPA”).

11. How We Share Your Personal Information. 

Credit Corp does not disclose personal information it obtains about you, except as provided in this Privacy Policy. Credit Corp may share personally identifiable information obtained on its Website with financial institutions, such as banks, credit unions or clearing houses.

Credit Corp may share personally identifiable information it collects with its employees who need to know that information to service your account. Except as provided below, Credit Corp does not share or disclose any personally identifiable information to any company or marketing group external to Credit Corp. Credit Corp may share your personal information with third parties to the extent it is reasonably necessary to manage or service your account, verify employment, determine location, process payment, fulfill a transaction, provide customer service, or as otherwise authorized by law. Aggregated information may be derived from your personal data, but does not directly or indirectly reveal your identity.

Further, Credit Corp may disclose personally identifiable information (i) to another entity with which Credit Corp enters or reasonably may enter into a corporate transaction, such as, for example, a merger, consolidation, acquisition, or asset purchase, (ii) to a third party pursuant to a subpoena, court order, or other form of legal process or in response to a request by or on behalf of any local, state, federal, or other government agency, department, or body, whether or not pursuant to a subpoena, court order, or other form of legal process, or in connection with litigation brought against, or on behalf of, Credit Corp, where appropriate, (iii) to a third party if determined by Credit Corp in its sole judgment that such disclosure is appropriate to protect the life, health, or property of Credit Corp or any other person or entity, all in compliance with applicable law, (iv) to third parties as authorized or designated by you, or (v) to conduct any other legitimate business activity not otherwise prohibited by law. The foregoing is not intended to obviate or displace any legal obligations or duties applicable to Credit Corp.

Except as necessary for Credit Corp to provide the services, information, or products requested by a website user, or except for the disclosures identified in the preceding paragraphs, the user may opt out of having his or her personally identifiable information, which has been voluntarily provided to Credit Corp through or from its website, prospectively retained by Credit Corp, used by Credit Corp for secondary purposes, or disclosed by Credit Corp to third parties.

Emails posted or sent to Credit Corp may not be secure against interception by  unauthorized individuals. To protect against interception by unauthorized individuals, or because we cannot verify your identity, we may be unable to respond to e-mail requests concerning accounts placed for collections unless you have requested or authorized us to do so.

12. Sharing your information with Consumer Reporting Agencies

Consumer Reporting Agencies (CRAs) collect and maintain information on consumer and business credit profiles on behalf of organizations in the United States. We may share information about you with CRAs and may carry out periodic searches with them to verify your identity or manage your account.

Details of your account(s) with Credit Corp may be sent to CRAs and recorded by them. This information may be supplied by CRAs and may be used and searched by us and other organizations, such as debt collection agencies, in order to locate debtors and recover debts; and manage your account(s).

Credit Corp may furnish information to Experian, Equifax, and TransUnion. You have a right to obtain an annual copy of your credit file from CRAs by visiting https://www.annualcreditreport.com.

13. External Websites and Online Services

Our Website may contain links to enable you to visit other websites of interest easily. We do not have control over any other websites or online services. Any access to and use of such third-party websites and online services is not governed by this Privacy Policy. Therefore, Credit Corp does not accept any responsibility or liability for (the operation, content, and/or privacy practices of) services and/or websites or online services of third parties. You should exercise caution and look at the privacy policy applicable to the website or online services in question.

14. Using Cookies

Credit Corp may collect certain computer and browser information through automated technologies such as cookies and web beacons when you visit our Website. Cookies are pieces of information that are sent to your browser when you visit the website to identify the browser or to store information or settings in the browser. They are then stored on the hard disk or in the memory of your equipment. The browser can send this information back on your next visit to the website. The cookies placed via the website cannot damage your equipment or the files stored on it. Web beacons (also known as internet tags, pixel tags, flash shared files, HTML 5 logical storage, HTML 5 minidatabases, or clear GIFs) link web pages to web servers and their cookies may be used to transmit information collected back to web server.

15. How We Protect Information

Credit Corp has implemented physical, electronic, and procedural security safeguards to protect against the unauthorized release of or access to personal information. We employ internal and external system safeguards designed to protect confidentiality and security of personal information.

The confidentiality of any communication or material transmitted to or from Credit Corp via the Website or via e-mail cannot be, and is not, guaranteed. You acknowledge that the technical processing and transmission of the website’s content may be transferred unencrypted and involve: (a) transmissions over various networks; and (b) changes to confirm and adapt to technical requirements of connecting networks or devices.

We will collect the IP Address of all visitors to the Credit Corp website for internal security and other proprietary purposes. We do not release this data outside of our corporate team nor utilize the data other than for internal purposes with exception to use for legal process.

If any questions arise about security, please contact Credit Corp using the information provided below.

16. We do not sell and will not sell your personal information

We do not sell and will not sell your personal information. We also do not “share” your SMS opt-in permission nor your personal information as that term is defined in the California Privacy Rights Act (“CCPA”).

17. Information Retention

Credit Corp will retain your personal data until we determine the information is no longer needed to fulfill the business or legal purposes described in this Privacy Policy, or as otherwise required for legal compliance purposes. Credit Corp may maintain aggregated or anonymized information indefinitely as it does not directly or indirectly reveal your identity.

18. Your Choices

Credit Corp offers you certain choices in connection with the personal data it collects from you. You may review, update, correct, change, or update your account information by doing one of the following:

• Calling us, toll-free, at (800)-483-2361; or
• Emailing us at contact@creditcorponline.com; or
• Writing to us at 121 W Election Road, Suite 200, Draper UT 84020. 

Your Choice to Decline Cookies: You may adjust your browser setting to decline cookies if you do not want to accept Credit Corp cookies. However, declining cookies may affect proper operation of Credit Corp’s Website.

Your Payments: You can elect not to utilize the payment portal of Credit Corp’s Website and make payments via ACH, credit card, or check.

If you have any questions regarding any of these choices, please contact Credit Corp.

The contact address is:

Credit Corp Solutions
121 W Election Road,
Suite 200,
Draper UT 84020 

19. Your Options

• Request to access personal information: You may submit a verifiable request for access to your personal information that we collected about you, subject to certain exceptions. This may include the categories and specific pieces of information collected, the sources of that information and the business or commercial purpose for the collection or disclosure of that information.
• Request correction of personal data we hold about you: This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Request deletion of personal information: You may request that we delete your personal information, however, state and federal law may prohibit us from deleting personal information, which Credit Corp will disclose to you. You may also request to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law.
• Object to processing of your personal data: Where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms, you may object to processing of such data. You also may object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
• Request restriction of processing of your personal data: This enables you to ask us to suspend the processing of your personal data in the following scenarios:

(a) if you want us to establish the data's accuracy;
(b) where our use of the data is unlawful but you do not want us to erase it;
(c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
(d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

• Request the transfer of your personal data to you or to a third party: We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Withdraw consent at any time where we are relying on consent to process your personal data: This will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
• Automated decision making and profiling: 'Automated Decision Making' refers to credit decisions regarding consumer lending terms or conditions predicated solely on the creditor’s automated processing of personal data. This means credit decisions may be made by a creditor, for example, using software code or an algorithm which does not require human intervention. We do not extend credit or make credit decisions for any person and we do not use your personal data as part of any such automated decision making or profiling when servicing your account.
• Non-discrimination: We will not discriminate against you if you exercise any of these rights.
• Authorized agent: You can designate an authorized agent to make any of these requests by providing your express written authorization. We must be able to verify your identity and the authorization must include the authorized agent’s name, address, telephone number, and email address (for providing the personal information collected or to respond to a request for deletion).

If you wish to exercise any of these options right, please contact Credit Corp by doing one of the following:

• By mailing a request to Credit Corp: 121 W Election Road, Suite 200, Draper UT 84020; 
• By calling us Toll-free Telephone Number: (800)-483-2361; or
• By sending an email to: customercare@creditcorponline.com.

If you choose to contact Credit Corp directly by email/phone/in writing, you may need to:

• Provide us with enough information to identify you (e.g., your full name, address, and customer or matter reference number);
• Provide us with proof of identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
• Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf. To prevent anyone other than you, or your authorized agent, from exercising the options to know or to delete with respect to your personal information, we follow procedures to verify you, or your agent’s, identity. These procedures seek to confirm that the person making a request is the person about whom we have collected personal information or that person’s authorized agent. The verification procedures involve matching data points that you provide with your request against information about you we already have in our records and that we have determined to be reliable for purposes of verifying your identity. We will use information you provide in your completed request form to verify your identity, and we may request additional information if necessary to complete the verification process.

20. SMS/Text Messaging

Credit Corp does not sell, share, or transfer mobile information, including phone numbers, text messaging originator opt-in data, and consent information.

For more information, please visit our Terms and Conditions on the Website.

21. Data Controller

Credit Corp is the data controller and responsible for your personal data. Questions, comments, and complaints about Credit Corp’s data practices can be submitted to:

Attn: Customer Care
Credit Corp Solutions
121 W Election Road,
Suite 200,
Draper UT 84020 

22. Right to Change Privacy. 

Credit Corp reserves the right at any time to modify, alter or update this Privacy Policy. Notice of any new or revised Privacy Policy, as well as the location of the new or revised policy, will be posted on the website after the change. It is the obligation of users visiting the website before the change to learn of changes to the Privacy Policy since their last visit. Your use of the Website following any changes means that you agree to follow and be bound by the Privacy Policy as changed. Any change to this Privacy Policy shall be effective as to any visitor who has visited the website before the change was made. If there are material changes to the privacy policy or in how we will use your personal data, we will notify you by prominently posting a notice of such changes before they take effect or by directly sending you a notification.

23. Questions and Contacts

If you have questions about this Privacy Policy, our practices concerning this Website, or your dealings with Credit Corp, you can contact us at customercare@creditcorponline.com or by U.S. mail at the address below:

Credit Corp Solutions
121 W Election Road,
Suite 200,
Draper UT 84020