LAF CALIFORNIA, LLC PRIVACY POLICY

Last modified: September 29, 2026

Loans made or arranged pursuant to a California Financing Law license.

Introduction

LAF California, LLC (“LAF California,” “we,” “us,” or “our”) offers commercial loans in California pursuant to California Lenders License No. 60DBO-166781. Our fixed-term commercial loans provide growing businesses with fast access to working capital for expansion, cash flow management, and other business needs. We respect your privacy and are committed to protecting it through our compliance with this Privacy Policy.

This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit the website www.lafcalifornia.com (our “Website”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Privacy Policy applies to information we collect:

It does not apply to information collected by:

Because we make commercial loans to businesses, the information we collect through the Website generally relates to businesses and to the individuals who act on their behalf, such as business owners, officers, representatives, and guarantors, as well as to general visitors to the Website. Our loans are business-purpose loans and are not offered for personal, family, or household purposes.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you agree to the terms of this Privacy Policy.

Children Under the Age of 18

Our Website is intended for businesses and the individuals who act on their behalf, and is not intended for children under 18 years of age. No one under age 18 may provide any information to or on the Website. We do not knowingly collect Personal Information from children under 18. If you are under 18, do not use or provide any information on this Website or through any of its features. If we learn we have collected or received Personal Information from a child under 18 in a manner subject to applicable children’s privacy laws, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at info@lafcalifornia.com.

Information We Collect About You and How We Collect It

We may collect several types of information from and about users of our Website, including information:

We may collect this information:

Information You Provide to Us

The information we collect on or through our Website may include:

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

We may use these technologies to collect information about your online activities over time and across third-party websites or online services. Where required by applicable law, we treat a recognized opt-out preference signal, such as the Global Privacy Control, that we detect from your browser or device as a valid request to opt out of targeted advertising and the sale or sharing of Personal Information from that browser or device. You may also contact us at info@lafcalifornia.com for information on how you can opt out of behavioral tracking on this Website.

Some of the information we collect automatically may constitute Personal Information under applicable privacy laws, and we treat it accordingly. We may maintain this information or associate it with other Personal Information we collect or receive from third parties to help us improve our Website and to deliver a better and more personalized service, including by enabling us to:

The technologies we use for this automatic data collection may include:

How We Use Your Information

We may use information that we collect about you or that you provide to us, including any Personal Information:

We may also use your information to contact you about our own and third-parties’ goods and services that may be of interest to you. If you do not want us to use your information in this way, please contact info@lafcalifornia.com.

Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction. We may disclose Personal Information that we collect or that you provide, as described in this Privacy Policy:

We may also disclose your Personal Information:

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the Personal Information you provide to us. We have created mechanisms to provide you with the following control over your information:

We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative on its website.

Residents of certain states, including California and other states that have enacted comprehensive consumer privacy laws, may have additional Personal Information rights and choices. Please see Your State Privacy Rights below.

Accessing and Correcting Your Information

You may send us an email at info@lafcalifornia.com to request access to your Personal Information, to correct inaccurate Personal Information that we maintain about you, or to request deletion of Personal Information that you have provided to us, subject to the exceptions permitted by applicable law. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Your State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their Personal Information. To learn more about California residents’ privacy rights, please see the Privacy Policy for California Residents below.

A growing number of states have enacted comprehensive consumer privacy laws that provide their residents with rights regarding the Personal Information or data that businesses process about them. The rights available and the entities covered depend on the state in which you reside and the effective date of that state’s law. The specific rights available and the businesses covered vary by state. Some of these laws apply only to residents acting in an individual or household context; others also cover individuals whose information we process in a commercial or business context.

Subject to the conditions and exceptions in the applicable state law, residents of these states may have the right to:

Where required by the applicable state law, we obtain consent before processing sensitive personal data, and we will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at info@lafcalifornia.com. If we decline to take action on your request, you may appeal that decision by contacting us at info@lafcalifornia.com. We will respond to your appeal within the timeframe required by the applicable state law, and if your appeal is denied you may contact your state Attorney General to submit a complaint.

Nevada law gives its residents a limited right to opt out of certain sales of Personal Information. We do not sell Personal Information as defined under that law. Nevada residents may nonetheless submit an opt-out request to: info@lafcalifornia.com.

Data Retention

We retain each category of Personal Information for as long as reasonably necessary to fulfill the purposes described in this Policy, including to provide our products and services, maintain our business relationship with you, comply with our legal, tax, accounting, and regulatory obligations (including recordkeeping obligations under the California Financing Law), resolve disputes, and enforce our agreements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, whether we can achieve those purposes through other means, and applicable legal requirements. When Personal Information is no longer needed, we will delete, deidentify, or aggregate it, or securely store it and isolate it from further use until deletion is possible.

Data Security

We have implemented and maintain reasonable administrative, technical, and physical safeguards designed to protect your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure, appropriate to the volume and nature of the Personal Information we process. In the event of a data breach affecting your Personal Information, we will notify you and applicable regulators as required by, and within the timeframes prescribed by, applicable law. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted to our Website. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any security measures contained on the Website.

Changes to Our Privacy Policy

We may amend this Privacy Policy, including the Privacy Policy for California Residents, at any time. We will post any changes on this page and update the date shown at the top. Your continued use of the Website after we post changes constitutes acceptance of those changes.

Contact Information

To ask questions or comment about this Privacy Policy and our privacy practices, contact us at: info@lafcalifornia.com

LAF CALIFORNIA, LLC PRIVACY POLICY FOR CALIFORNIA RESIDENTS

This PRIVACY POLICY FOR CALIFORNIA RESIDENTS supplements the information contained in the LAF California Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California. We adopt this notice to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (the “CCPA”). Terms defined in the CCPA have the same meaning when used in this notice.

Scope of this notice. The CCPA applies to the Personal Information of California residents (“consumers”), including individuals whose information we process in a business or commercial context, such as business owners, officers, representatives, and guarantors because the CCPA’s former exemptions for business-to-business and employment-related Personal Information expired on January 1, 2023. Certain activity involving personal information that is subject to the federal Fair Credit Reporting Act (FCRA), for example, our use of a consumer credit report on an individual guarantor, is exempt from the CCPA to the extent, and only to the extent, that the activity is regulated by the FCRA (except with respect to the data-breach provisions of Civil Code Section 1798.150). Except as so limited, this notice applies to the Personal Information we collect about California residents.

Information We Collect

Our Website may collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device (“Personal Information,” as used in this notice). Personal Information does not include:

Our Website may obtain Personal Information from the following categories of sources:

In the preceding twelve (12) months, we have collected the following categories of Personal Information:

We retain each category of Personal Information as described under Data Retention in our Privacy Policy above.

Use of Personal Information

We may use or disclose the Personal Information we collect for one or more of the following purposes:

We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Sharing Personal Information

We disclose Personal Information to third parties for business purposes under the written contract terms described under Disclosure of Your Information in our Privacy Policy above. In the preceding twelve (12) months, we have disclosed the categories of Personal Information identified under Information We Collect above for a business purpose to the following categories of recipients: service providers and contractors that provide website hosting, data storage and analytics, payment and bank data verification, underwriting and fraud prevention, marketing and communications, and legal, accounting, and other professional advisory services. We do not sell or share Personal Information, and in the preceding twelve (12) months we have not sold or shared Personal Information. As used here, “share” has the meaning given in the CCPA and refers to disclosing Personal Information to a third party for cross-context behavioral advertising. Because we do not sell or share Personal Information, we are not required to provide a “Do Not Sell or Share My Personal Information” link; however, where required by law we honor opt-out preference signals, such as the Global Privacy Control, that we detect.

Your Rights and Choices

The CCPA provides consumers (California residents) with specific rights regarding their Personal Information, including the right to know, the right to delete, the right to correct inaccurate Personal Information, the right to opt out of the sale or sharing of Personal Information, the right to limit the use and disclosure of sensitive Personal Information, and the right to non-discrimination for exercising these rights. This section describes your CCPA rights and explains how to exercise those rights. These rights do not apply to information that is exempt from the CCPA, such as information whose use is regulated by the FCRA, as described above.

Right to Know and Data Portability

You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the twelve (12) months preceding your request. You may also request information beyond that twelve (12) month period for Personal Information collected on or after January 1, 2022, unless doing so proves impossible or would involve a disproportionate effort. Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete below), we will disclose to you:

Right to Delete

You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete below), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

  1. Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
  2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
  3. Debug products to identify and repair errors that impair existing intended functionality.
  4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
  5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.).
  6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
  7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
  8. Comply with a legal obligation.
  9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will delete or deidentify Personal Information not subject to one of these exceptions from our records and will direct our service providers to take similar action.

Right to Correct

You have the right to request that we correct inaccurate Personal Information that we maintain about you, taking into account the nature of the Personal Information and the purposes of the processing. Once we receive your request and confirm your identity, we will use commercially reasonable efforts to correct the inaccurate Personal Information as directed, subject to the exceptions permitted by the CCPA.

Right to Limit the Use of Sensitive Personal Information

The CCPA gives you the right to direct us to limit the use and disclosure of your “sensitive Personal Information” to those uses authorized by the CCPA. Sensitive Personal Information includes, for example, your Social Security, driver’s license, state identification, or passport number; your account log-in, or a financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; and your precise geolocation. We use and disclose sensitive Personal Information only for purposes permitted by the CCPA that do not trigger the right to limit, and we therefore are not required to provide a “Limit the Use of My Sensitive Personal Information” link. If our practices change, we will update this notice and provide the choices required by law.

Exercising Your Rights to Know or Delete

To exercise your rights to know or delete described above, please submit a request by contacting us at info@lafcalifornia.com.

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your Personal Information. To designate an authorized agent, please contact us at info@lafcalifornia.com.

You may only submit a request to know twice within a twelve (12) month period. Your request to know or delete must:

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. You do not need to create an account with us to submit a request to know or delete. However, we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Information associated with that specific account. We will only use Personal Information provided in the request to verify the requestor’s identity or authority to make it.

Response Timing and Format

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within ten (10) business days, please contact us at info@lafcalifornia.com. We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another forty-five (45) days), we will inform you of the reason and extension period in writing. Unless you request a longer period as described under Right to Know and Data Portability above, any disclosures we provide will cover only the twelve (12) month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

Other California Privacy Rights

California’s “Shine the Light” law (Civil Code § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to info@lafcalifornia.com.

Complaints

If you have a complaint regarding a loan transaction or our activities as a licensed California finance lender, you may contact the California Department of Financial Protection and Innovation (DFPI) at 866-275-2677 or file your complaint online at www.dfpi.ca.gov.

Contact Information

If you have questions or comments about this notice, or wish to exercise your rights under California law, please do not hesitate to contact us at info@lafcalifornia.com. If you need this notice in an alternative format due to a disability, please contact us at the same address.