Decision block 01
Security starts with data minimization
- Collect only information needed for request routing, verification, fraud prevention, legal obligations or disclosed service operations.
- Do not ask users to send passwords, full account credentials or sensitive documents through ordinary email.
- Use secure transmission and access controls appropriate to the sensitivity of financial information.
- Limit employee, vendor and partner access to legitimate business purposes.
- Retain information only for purposes and periods supported by the Privacy Policy, legal requirements, security and dispute needs.
Decision block 02
Before you submit sensitive information
| Step | Why | User action |
|---|---|---|
| Check the page | Make sure you are on the intended CTCLoans request page. | Avoid entering request data into copied forms or unknown third-party pages. |
| Read the links | Privacy, Terms, E-Consent and Credit Authorization should be available before submission. | Know who may receive the information and why. |
| Check the redirect | A lender or network may operate a different domain after routing. | Confirm the new company identity and privacy policy before continuing. |
| Protect your account | Use secure devices and protect access to email/phone used for financial requests. | Fraud often starts outside the lender website. |
Decision block 03
Privacy controls are separate from security
ControlPurpose
Privacy PolicyExplains categories of information, purposes, sharing and rights.
Privacy ChoicesProvides available opt-out, access, delete, correct or sensitive-data controls where applicable.
Marketing PartnersExplains the partner categories or current partner list used for request routing/marketing.
UnsubscribeControls future marketing communications from CTCLoans where supported.
Decision block 04
Report a security or privacy concern
- Do not include passwords or full financial-account credentials in a general support message.
- Describe what happened, when it happened, the page or communication involved, and a safe way to contact you.
- If the issue concerns a lender or third-party site, contact that company directly as well.
- If you believe identity theft occurred, consider appropriate consumer-report and identity-theft resources.