Decision block 01
1. Information we may collect
CategoryExamples
Identifiers and contactName, email, phone, postal/address information, date of birth or other identifiers presented in the request flow.
Loan-request and financialRequested amount, purpose, income/employment details, banking/direct-deposit information or other financial details needed by the live partner flow.
Sensitive identifiersThe live request flow may request information such as Social Security or other government identifiers when required for routing/verification. Collection must match the actual form.
Device and usageIP address, device/browser information, referral/attribution data, cookies and interaction logs.
Consent and support recordsTerms/E-Consent/communications choices, privacy requests, support messages and complaint records.
Decision block 02
2. How information may be used
- Provide, operate and improve the request-routing service.
- Match or route a request to participating lenders, lender networks or other disclosed financial-service partners.
- Verify information, detect fraud, secure the service and troubleshoot errors.
- Communicate about a submitted request, the service, support, privacy choices or marketing when permitted by the applicable consent.
- Comply with legal obligations, respond to valid requests and enforce site terms.
- Measure traffic, attribution and product performance.
Decision block 03
3. How information may be shared
| Recipient | Why | Key limit |
|---|---|---|
| Participating lenders / networks | To evaluate or route the submitted request under their own policies. | Their privacy practices apply after transfer/redirect. |
| Marketing / financial-service partners | When disclosed and permitted by the user’s consent or applicable law. | May result in additional communications or offers. |
| Service providers | Hosting, analytics, security, communications, form technology, compliance or support. | Should receive only information needed for the service they provide. |
| Legal / safety | Authorities or other parties when legally required or needed to protect rights, safety or prevent fraud. | Use only when a valid basis exists. |
| Business transaction | If ownership or assets change, information may be transferred subject to applicable law and notice requirements. | Future owners remain subject to privacy obligations. |
Decision block 04
4. Consumer reporting and credit data
CTCLoans does not make the credit decision. Participating lenders or their service providers may obtain consumer reports or verification data as permitted by law and the authorization shown in the live flow.
- A hard inquiry may occur depending on partner policy.
- CTCLoans should not promise “soft only” unless the integration is verified.
- If a lender takes adverse action based on a consumer report, lender/FCRA notices may apply.
Decision block 05
5. Cookies, advertising and attribution
- CTCLoans may use cookies or similar technology for security, preferences, analytics, referral attribution and advertising.
- Some state privacy laws use broad definitions of “sale,” “share,” or targeted advertising. Available opt-out rights should be provided through Privacy Choices where applicable.
- Browser or device signals should be handled according to the actual implemented privacy-control mechanism.
Decision block 06
6. Retention and security
- Retention periods can vary by purpose, legal obligations, contracts, fraud/security needs and dispute requirements.
- Sensitive financial-request data should be protected with administrative, technical and physical safeguards appropriate to the risk.
- No internet system can be promised as perfectly secure; users should avoid sending passwords or unrelated sensitive data through general support channels.
Decision block 07
7. Your privacy choices
ChoiceHow it works
Access / knowRequest information about categories or specific personal data where an applicable law provides the right.
DeleteRequest deletion subject to legal, fraud, security, contractual or GLBA/FCRA exceptions where applicable.
CorrectRequest correction of inaccurate personal information where applicable.
Opt out of sale/share or targeted advertisingUse the Privacy Choices page where this right applies to the implemented data practices.
Limit sensitive informationRequest applicable limits where provided by state law and supported by the service.
Marketing opt-outUse Unsubscribe and message-specific STOP/opt-out tools for future marketing communications.
Decision block 08
8. Third-party sites and partners
When CTCLoans redirects you to a lender, network or other partner, that company operates under its own terms and privacy policy. CTCLoans is not responsible for the privacy practices of an independently operated third-party site.
Decision block 09
9. Children, changes and contact
- The service is intended for adults and is not directed to children.
- This Policy may be updated as data practices, partners, technology or law change; the updated date should be shown prominently.
- Questions and applicable privacy-rights requests should be routed through the Contact and Privacy Choices pages.