Privacy Policy

Overview

This Privacy Policy ("Policy") explains how Concord Capital ("Concord Capital," "we," "us," or "our") collects, uses, shares, and protects information about you when you visit our website (the "Site"), apply for financing, or otherwise interact with us as a direct lender.

This Policy is organized into three parts:

  • Part 1 sets out our general U.S. privacy practices.
  • Part 2 is our California Supplement, addressing rights under the California Consumer Privacy Act ("CCPA"), as amended.
  • Part 3 is our Multi-State Supplement, addressing rights available to residents of other states with comprehensive privacy laws.

If you are a resident of a state not specifically addressed below, please contact us using the information at the end of this Policy and we will do our best to honor applicable requests consistent with the law of your state.


Concord Capital does not sell your personal information, and we do not share SMS opt-in consent with any third party for marketing purposes.


Part 1: General U.S. Privacy Policy

Information We Collect

Depending on how you interact with us, we may collect:

  • Contact details – name, business name, email address, mailing address, phone number
  • Financial information – bank statements, average balances, personal and business credit history, payment history, bank account and routing numbers, tax ID/EIN
  • Identity information – Social Security number, date of birth, driver's license or other government ID
  • Login credentials – username, password, and similar unique identifiers
  • Business information – entity type, industry, size, and years in operation
  • Beneficial ownership information, where required by law, collected solely to verify identity and comply with anti-money-laundering regulations
  • Device and usage data – IP address, browser type, and activity on our Site
  • Beneficial ownership and underwriting data obtained from credit bureaus, banking data aggregators, and similar verification vendors

We may collect this information directly from you, automatically through your use of the Site, or from third parties such as credit reporting agencies, bank-data verification services, and public records.


How We Use Your Information

As a direct lender, we use the information we collect to:

  • Evaluate, underwrite, and fund your loan application
  • Verify your identity and conduct required diligence (including "Know Your Customer" and anti-fraud checks)
  • Service your account, including processing payments and disbursements
  • Communicate with you about your application, account, or our services
  • Improve our Site, products, and customer experience
  • Comply with applicable lending, banking, and consumer-protection laws
  • Produce de-identified or aggregated analytics that do not identify you


How We Share Your Information

Concord Capital does not sell your personal information. We may share it only as follows:

  • Service providers who help us operate our business (e.g., payment processors, underwriting and verification vendors, cloud hosting, customer support tools), bound by confidentiality obligations
  • Funding and capital partners involved in originating, purchasing, or servicing your loan
  • Credit bureaus and reporting agencies, as required for underwriting or regulatory reporting
  • Affiliates, for internal business and financial-reporting purposes
  • Government or regulatory authorities, when required by law, subpoena, or legal process
  • Successors, in the event of a merger, acquisition, or sale of assets, with notice to you as required by law
  • Any other party, only with your prior consent

If, at any time, we wish to share your basic contact information with a business partner for marketing purposes, we will offer you the ability to opt out beforehand.


Cookies and Tracking Technologies

We and our service providers use cookies and similar technologies to operate the Site, remember preferences, and analyze traffic. You can control cookies through your browser settings; disabling cookies may limit certain Site features. Learn more about cookies generally at www.allaboutcookies.org.


Log Files

Like most websites, we automatically collect certain technical data (IP address, browser type, referring pages, timestamps) in log files to maintain and improve the Site and to detect fraud or abuse.


Online Advertising

We may work with third parties to display advertising based on your browsing activity. If you prefer not to receive interest-based ads, you may use available opt-out tools; you will still receive generic advertising.


Data Security

We use industry-standard safeguards, including encrypted transmission (TLS) of sensitive data such as bank account numbers, to protect your information. Access to bank information you provide is read-only — Concord Capital employees cannot view your online banking credentials or modify your accounts.


Data Retention

We retain personal information for as long as your account is active or as needed to meet legal, accounting, or business purposes, after which it is securely deleted or de-identified.


Third-Party Links

Our Site may link to third-party websites with their own privacy practices. We encourage you to review the privacy policy of any site you visit.


Testimonials and Public Content

Any testimonials or comments you submit for public posting may be viewed and used by others. Contact us if you wish to have a testimonial updated or removed.


Children's Privacy

Our services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from children.


Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated via email or a prominent notice on the Site prior to taking effect.


Part 2: California Supplement (CCPA)

This section applies to California residents and supplements Part 1.


Categories of Personal Information Collected

Consistent with CCPA categories, we may collect: identifiers (name, address, SSN/Tax ID, IP address); financial and commercial information; protected classifications (e.g., age); internet or network activity; geolocation data (for fraud prevention); audio recordings of customer service calls (for quality and training); professional/employment information; and inferences drawn from the above for underwriting and fraud analysis.


We do not collect publicly available government records, de-identified/aggregated data, or information already regulated under laws such as HIPAA, FCRA, or GLBA as "personal information" under the CCPA.


Sources of Information

We obtain this information directly from applicants, from your authorized agents, through your use of our Site, and from third parties such as referral sources, credit bureaus, and verification vendors.


Sale or Sharing of Personal Information

Concord Capital does not sell personal information, and we do not share your information for cross-context behavioral advertising in a manner that constitutes a "sale" or "share" under the CCPA.


Your California Rights

Subject to certain exceptions, California residents may request to:

  • Know/Access the categories and specific pieces of personal information we have collected, the sources, purposes, and categories of third parties with whom it was shared
  • Delete personal information we have collected, subject to legal exceptions (e.g., completing your loan transaction, fraud prevention, legal compliance, internal lawful uses consistent with your relationship with us)
  • Correct inaccurate personal information
  • Data Portability of information provided in a usable, transferable format
  • Non-Discrimination for exercising any of these rights


Requests may be made twice within any 12-month period and must include enough detail for us to verify your identity and understand your request. We will respond within 45 days (extendable to 90 days with notice). There is no fee unless a request is excessive or repetitive.

To exercise these rights, contact us using the information below.


Part 3: Multi-State Supplement

A number of states beyond California have enacted comprehensive consumer privacy laws — including, among others, Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, and others as they take effect. While these laws differ in scope, residents of these states generally have rights similar to the following, subject to each law's specific exceptions and financial-services exemptions:

  • Right to Confirm and Access the personal data we hold about you
  • Right to Correct inaccuracies in your personal data
  • Right to Delete personal data you have provided or that we have collected
  • Right to Data Portability in a portable format
  • Right to Opt Out of the sale of personal data, targeted advertising, or certain profiling — Concord Capital does not sell personal data or use it for targeted advertising
  • Right to Appeal a denied request, where applicable


Because Concord Capital is a financial institution, much of the data we collect for underwriting, servicing, and fraud-prevention purposes is subject to the Gramm-Leach-Bliley Act and similar federal financial-privacy frameworks, which may be exempt from certain state comprehensive privacy laws. Where an exemption does not apply, we will honor valid requests from residents of these states in accordance with applicable law.


To submit a request under your state's law, please contact us using the information below. We will verify your identity before processing any request and will respond within the timeframe required by your state's law.


Contact Us

If you have questions about this Policy or wish to exercise any privacy rights described above, please contact us at:

Concord Capital
Email: info@concordcap.biz