Privacy Policy

This Privacy Policy describes the practices of Headway Sales Inc. dba Acorn Finance (“Acorn Finance,” “Acorn,” “the Company,” “we,” “us,” or “our”), regarding any and all information collected from visitors (our “Users”) to the Acorn Finance website, acornfinance.com, (the “Site”). It describes what information is collected, how that information is used, and under what circumstances that information may be disclosed to others in the course of providing our services to you (the “Services”) and otherwise operating our business. Please read this Privacy Policy closely, as it describes your privacy rights with respect to such information.

By using the Site, you acknowledge that you have read this Privacy Policy and accept its terms. If you do not agree to the Privacy Policy after your close and careful reading, you should not access or use the Site. You must be 18 years or older to use the Site.

We may modify this Privacy Policy at any time as necessary to stay current with laws and regulations, new technologies and standards, by posting a revised version to the Site. If we do so, we will post a notice of change on the Site. Any modification will be effective on the effective date that appears at the bottom of the page of the amended Privacy Policy. You acknowledge and agree that it is your responsibility to review this privacy policy from time to time. By continuing to use our Site or Services after the modified version of this Privacy Policy has been published, you agree to the changes made to this Privacy Policy. Depending on your place of residence, applicable data privacy laws may require Acorn to provide you with prior notice of material changes to our Privacy Policy. If you are a resident of such place, and we make a material change to how we treat your personal information, we will notify you of such a change by email at the primary email address you specified in your account or through a notice on the website home page. If we make a material change, you will have an opportunity to withdraw consent for any further and materially different collection, processing, or transfer practices related to your personal information collected after such material change (Invididuals located in Canada, please refer to section “Provisions Specific to Individuals Located in Canada” for additional information on the right to withdraw consent). You are responsible for ensuring we have an up-to-date active and deliverable email address for you and for visiting our website and this Privacy Policy to check for updates.

This Privacy Policy applies to acornfinance.com and all websites owned and/or operated by the Company on which this Privacy Policy is displayed (such sites are hereafter referred to as the “Acorn Finance site,” or simply the “Site”, whether individually or collectively).

Information We Collect

Personally Identifiable Information (“PII”): Subject to your specific knowledge and consent, we collect personally identifiable information that can identify you such as your name, address, social security number, telephone number, cell phone number, and email address. PII could also include information you may provide on others, such as co-signers.

Non-Personally Identifiable Information (“NPII”): We also collect demographic data, online activity data, and other information which could not be used to identify you.

PII and NPII are collectively referred to as “Information.”

How We Collect Information and What Type of Information is Collected

Information Collected Automatically: We use third party server log analysis tools (such as Google Analytics) to gather statistics from your computer, mobile phone, or other access device regarding the Site’s usage, such as the number of hits received and errors experienced through browsers and platforms used to connect to our Site. The Site may place and/or store code or other types of information and/or devices (e.g., “cookies”) on your computer, mobile or other device (collectively “Local Device Storage”). We may use Local Device Storage for any lawful business purpose, including without limitation to determine which of our messages have been opened by recipients so we can gauge the effectiveness of marketing campaigns, to track usage patterns, the movements of individual users, and your geographic location, to help diagnose problems with our servers, to gather broad demographic information, to analyze trends, to conduct research, to deliver editorial content, to record registration and personalization information, and to otherwise administer the Site and/or Service.

The following are examples of information about you that we may collect whenever you visit the Site:

The Internet Protocol (IP) address and domain used. (The IP address is a unique numerical identifier assigned either to your Internet service provider or directly to your computer.)
Type of browser and operating system used
Device type and ID
Date and time of your visit to the Site
Web pages you visited
Actions you performed or attempted, including clickstream data
Codes that correspond to the status of your actions
The geographic location of the computer or mobile device you use to access the Site
We may also capture your email address when you enter it on one of our application forms, regardless of whether you submit the entire form

The above information is used to improve the content and/or layout of the Site. We do not sell or rent any information we collect automatically. We also do not share this information with third parties; provided, however, that we may share information with our service providers in order to process any Services you have requested or other everyday business purposes, such as fraud prevention. We may also engage in geo-tracking and/or geotagging activities.

We may combine this automatically collected log information with other Information we collect about you. You may choose to set your web browser to refuse cookies or Local Device Storage, or to alert you when cookies are being sent. If you do so, please note that some parts of our Site may not function properly.

In addition to Local Device Storage, we may use web beacons, web bugs, clear gifs, and similar technologies (collectively, together with Local Device Storage, the “Tracking Technologies”). We use Tracking Technologies for all or some of the same lawful business purposes we describe above for use of Local Device Storage. For more information, please consult “Interest-Based and Third-Party Advertising” section below.“

Information You Provide to Us: We may collect, store, and use personal or financial information you provide to us when using the Site or our Services. This Information could be provided via an online form, over the phone, or via other means in which you interact with our Services. Financial information includes any information you have provided using the Site regarding your bank accounts, credit or debit cards, or other financial relationships or circumstances. We may use information you provide to:

process any Services you have requested;
for fraud prevention purposes;
to make the Site more useful and easier to use; and
for everyday purposes in operating our business.

We may share the information you provide with our service providers in connection with any of the foregoing uses. We do not sell or rent such information to third parties and, except as described in this paragraph, we do not share such information with third parties.

Information from Service Providers and other Third Parties: In the course of providing our Services, Information about you may be collected from third party service providers, such as contractors, social networks, credit bureaus, and other data vendors who have data on your financial profile or other demographic information. Any Information we collect through these sources is treated the same as Information we collect automatically and Information you provide to us.

How We Use Your Information

We may use your Information to:

Deliver the Services you requested and otherwise operate our business
Improve our Site and customize your experience
Improve customer service
Communicate with you about your online Acorn Finance account (“User Account”), credit requests, or other products or services that may be of interest to you

We may also use your Information for certain legal reasons. We reserve the right to access, use, preserve, transfer or disclose, at any time without notice to you, to the extent allowed by applicable laws, any Information (including PII) as reasonably necessary to:

Enforce our Terms of Use, including investigating potential violations
Protect the rights, safety, and security of our Users, our Services or equipment, or any third party partner or service provider
Detect, prevent, investigate, or otherwise mitigate fraud, security or technical issues related to our Services or our business partners
Comply with any applicable law, regulation, subpoena or legal process; respond to any governmental requests; and/or cooperate with law enforcement, if we believe such action is required or permitted by law

Acorn does not collect, use, or sell personal information for the purpose of training large language models.

Who Do We Share Your Information With?

Network Partners: Network Partners include credit brokers and similar third parties who provide products and services to our Users. When you submit your Information to us on the Site, you agree that Acorn Finance may share your Information with these Network Partners so that they can provide or assist in providing the products or services you requested. Our Network Partners may submit your Information to lenders that they partner with to provide the products or services you requested. The Network Partners with whom we share your Information may retain or use your Information whether or not you buy their products or use their services. You should contact these Network Partners directly to learn about their own privacy and information sharing practices.

Acorn Finance Vendors and Contractors: To the extent necessary, we may share your Information with vendors that perform certain services on our behalf. Vendors may include, but are not limited to, credit and other types of data bureaus, marketing companies, business analysis firms, and technology providers. We may also share your Information with our partner contractors to the extent necessary to provide the Services offered through the Site.

When you publicly post information or content: We may provide opportunities on the Acorn Finance Site for you to publicly post reviews, comments, or other content, which may include Personal or User Profile Information, like your name or username. Please carefully consider what you decide to share in these public forums.

Other Situations: We may also disclose your Information in the following circumstances, at our sole discretion and in compliance with applicable laws:

In response to a court order, subpoena, or similar investigative demand; a request for cooperation from a law enforcement agency, self-regulatory body, or other governmental agency; to establish or exercise our legal rights or defend against legal claims; or as we reasonably believe is required by law. In such cases, we may raise or waive any legal objection or right available to us.
When we believe disclosure is appropriate in order to detect, prevent, investigate, or otherwise take action against actual or suspected illegal activity or other wrongdoing, including fraud; to protect and defend the rights, property, or safety of our company, Users, employees, or others; or to enforce Acorn Finance agreements or policies, including our Terms of Use.
In order to detect, prevent, or otherwise address security or technical issues related to our Services or the services of our Providers or other partners.
In connection with state, provincial or territorial and/or federal licensing and registration requirements which may require the reporting of Information from loan inquiries we receive from you. You authorize Acorn Finance to obtain any and all required information from Providers whose products or services you have purchased in order for us to comply with current laws and regulations, as well as with any requests from state or federal regulators. This information could include, but is not limited to, the terms of the loan you selected.
In connection with a corporate transaction, such as a sale, divestiture, merger, consolidation, asset sale, or bankruptcy of Acorn Finance or any entity, brand or division thereof.

Except if you are located in Canada, we may share NPII with third parties, at our sole discretion.

There may also be certain situations in which we share your PII after receiving your express consent.

Unsubscribe

If you no longer wish to receive marketing communications from Acorn Finance, you may use the unsubscribe link at the bottom of emails that we send to you.

Interest-Based and Third-Party Advertising

Third-Party Advertisers: We may allow third parties to display advertising on the Site. We may share your information with such third-party advertisers in accordance with this Privacy Policy. Those parties may also collect information about you, or about others using your computer, through their own tracking technologies. To understand how such third parties may use the information they collect, you will need to review the particular advertiser’s own privacy policy.

In addition, some of our third-party vendors and business partners are advertising networks, marketers, publishers, and other entities who conduct analytics and advertise our products and services on websites with which we are not affiliated (“Advertising Vendors”). In connection with such services, we or our Advertising Vendors may use cookies, web beacons, and other similar technologies to record your preferences, track the use of our Site or other websites, and collect Information in order to perform marketing and other analytics, or to serve you advertisements that are more likely to be of interest (“Interest-Based Advertisements”). In doing so, these third parties may collect non-personally identifiable data including for example the make, model, settings, specifications (e.g., CPU speed, connection speed, browser type, operating system, device identifier) and geographic location of your computer, mobile or other device, as well as date/time stamp, IP address, pages visited, time of visits, content viewed, ads viewed, the site(s), application(s), destination(s), and/or service(s) you arrived from, and other clickstream data. The use of Tracking Technologies by third parties is subject to their own privacy policies, not this Privacy Policy, and we have no responsibility or liability in connection therewith. If you have any questions about the use of Tracking Technologies by third parties, you should contact the responsible provider directly.

How to Opt-Out of Third Party Tracking: For those Advertising Vendors who are members of the Network Advertising Initiative, you may opt out of future advertisements by visiting: http://optout.networkadvertising.org/#!/. Other Advertising Vendors may allow opt out through the Digital Advertising Alliance opt-out program (http://optout.aboutads.info/#!/).

Disclosure Regarding Google Analytics Tracking and Advertising Features: In addition to services from other analytics and advertising vendors, we use Google Analytics to analyze traffic on the Site. Google Analytics collects information including details about your web browser and the computer you use to access our Site, such as the hostname, browser type, referrer, language, and screen resolution. Google Analytics also sets and reads first-party cookies to obtain user session and ad campaign information from your page request.

Google provides users an opportunity to opt-out of Google Analytics Features through Google Ads Settings and their web browser opt-out plugin (https://tools.google.com/dlpage/gaoptout/). For additional information on opting out of interest-based ads by Google, please visit https://support.google.com/ads/answer/2662922?hl=en&ref_topic=2941003.

Do Not Track Signals: Our Site does not currently respond to automated signals regarding online tracking, such as “do not track” instructions from your web browser. Please note that blocking cookies may affect your browsing experience on the internet, and may limit your use of certain parts of our Services, including many of the personalized offers and other customized features we may provide.

Other Third-Party Content: We may display other third-party content or links to third-party websites or applications on the Acorn Finance site. Such content could include features that allow you to connect your Acorn Finance User Account with your social media, financial institution, and other third-party accounts. Please be advised that when you leave our Services or interact with a third-party feature, you should read the applicable privacy policies and terms of service of those parties so that you understand their own information collection and sharing practices.

Accessing and Updating Your Information on the Site

The method(s) for accessing and updating your Information, if any, will depend on the Acorn Finance Services you have used. You may have the ability to access and make changes to certain Information by logging in to your User Account through our Site and updating your information. You can also update your Information by contacting our Customer Care Department by email at support@acornfinance.com.

You are responsible for maintaining the accuracy of the information you provide to us, such as your User Profile information.

Deactivating Your User Account

If you decide you no longer want to use our Services, you can deactivate your User Account by contacting our Customer Care Department by email at support@acornfinance.com.

Due to regulatory recordkeeping and information retention requirements, we do not delete your Information when you deactivate your User Account. We will, however, disable your account and stop sending you communications.

How We Protect Your Information

For Canadian residents, please consult “Provisions Specific to Individuals Located in Canada”.

We maintain what we believe to be industry standard technical, physical and administrative security procedures and practices to protect your PII against unauthorized access, disclosure, destruction, use, alteration, or disclosure. We use encryption in the transmission of your Information between your system and ours, and we use firewalls and other intrusion detection and prevention controls to help prevent unauthorized persons from gaining access to your Information. We require any service providers that may have access to your PII to implement and maintain industry standard security procedures and practices. We also require employees to comply with information security safeguards.

Because no data transmission is completely secure, and no system of physical or electronic security is impenetrable, however, we cannot guarantee the security of the information you send to us or the security of our servers, networks or databases, and by using the Service you agree to assume all risk in connection with the information sent to us or collected by us when you access, visit and/or use the Service, including without limitation your personally identifiable information or other information, and we are not responsible for any loss of such information or the consequences thereof.

Moreover, if you elect to store information, such as your personally identifiable information or other user account information, where others may access it, we are not responsible for any loss of such information or the consequences thereof. If you lose a computer, mobile or other device, or it is stolen, that contains your personally identifiable information or other information, it is up to you to take all the steps necessary to protect yourself.

In the unlikely event that we believe that the security of your information in our possession or control may have been compromised, we may seek to notify you. If notification is appropriate, we may notify you via your computer, mobile or other device.

If you are, or believe you have become, a victim of identity theft, or if you become aware that your personal information has been compromised, you may want to contact one of the three nationwide credit reporting agencies identified below to report possible fraudulent activity under your name and learn more about fraud alerts and security freezes that you can place on your credit reports, your right to obtain a free copy of your credit report from each of the credit reporting agencies, and other preventive measures you can take now to help detect and prevent the improper use of your information:

Equifax
1-800-525-6285
P.O. Box 105788, Atlanta, GA 30348
https://www.equifax.com/personal/identity-theft-protection

Experian
1-888-397-3742
P.O. Box 9554, Allen, TX 75013
https://www.experian.com/help/identity-theft-victim-assistance.html

TransUnion
1-800-680-7289
P.O. Box 6790, Fullerton, CA 92834-6790
https://www.transunion.com/identity-theft

You may also visit the website of the Federal Trade Commission at https://www.identitytheft.gov for free information to help you guard against identity theft and for guidance on the recovery steps you can take if you have been the victim of identity theft, including information on how to file an identity theft complaint.

If you are located in Canada:

Equifax Canada Co.
1-800-871-3250
Box 190 Saint-Léonard, QC H1S 2Z2 Canada
https://www.equifax.ca/personal/dispute-credit-report

TransUnion Canada
1-800-663-9980
P.O. Box 338, LCD1 Hamilton, ON L8L 7W2 Canada
https://www.transunion.ca/assistance/credit-report-disputes

Visiting our Site From Outside the United States

The Site is governed by the laws of the United States, and is intended for use only by residents of the United States. We make no representation that the Site is governed by, or operated in accordance with, the laws of any other nation or jurisdiction. This is not applicable if you are located in Canada.

Compliance with Children’s Online Privacy Protection Rule

Our Services and Site are not intended for children under the age of 18. We do not deliberately or knowingly collect, use, or disclose PII from anyone under the age of 18. If we determine that a User is under this age, we will not use or maintain their PII without consent from a parent or guardian. If we become aware that we have collected PII from a child under the age of 18, we will make reasonable efforts to delete such information from our systems and records.

State Law Privacy Rights

This section does not apply if you are located in Canada.

If you are a resident of California, please see the California Consumer Privacy Act section of this Privacy Policy.

For residents of other states, you may have additional rights regarding our collection and use of your personal information. Depending on your state of residence, you may have the right to:

Confirm whether we process their personal information.
Access your personal information.
Require us to delete your personal information in certain contexts.
Correct inaccuracies in personal information we have about you.
Obtain a copy of your personal information in a portable format.
Opt-out of personal data processing for certain purposes, including targeted advertising, the sale of your personal information, and profiling in furtherance of decisions that produce legal or similarly significant effects
Obtain a list of the specific third parties to which we have disclosed your personal data.
Either limit (opt-out of) or require consent to process sensitive personal data.

The exact scope of these rights may vary by state. To exercise any of these rights please emails us at support@acornfinance.com or submit a Privacy Policy Support Request through our chat widget at the bottom right of the screen when you click this link:

https://your.acornfinance.com/apply

We will take reasonable steps to verify the identity of the person making the request. You may designate an authorized agent to exercise your state privacy rights on your behalf. When permitted by law, we may require that you or the authorized agent provide proof that you gave the agent signed permission to submit the request. We may also require you to do either of the following: (1) Verify your own identity directly with the business; or (2) Directly confirm with the business that you provided the authorized agent permission to submit the request.

We will respond to any request to exercise your rights within a reasonable timeframe or as required by applicable law. If you believe we have denied your request, you can appeal the results of your request by emailing us at support@acornfinance.com or by submitting a Privacy Policy Support Request through our chat widget at the bottom right of the screen when you click this link:

https://your.acornfinance.com/apply

If your appeal is unsuccessful and depending on the state where you live, you may have the right to raise a concern or lodge a complaint with your state attorney general or another state agency.

Further, you have the right to not to receive discriminatory treatment if you exercise your data privacy rights. We will not discriminate against you if you exercise your rights.

California Consumer Privacy Act

This section does not apply if you are located in Canada.

If you are a California resident, the California Consumer Privacy Act (“CCPA”) provides you certain rights and choices regarding how we collect, share, use, and protect your “personal information” and how you can exercise those rights. The CCPA defines “personal information” as information that identifies, relates to, describes, or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

We do not sell or share “personal information,” as defined by the CCPA, nor have we sold or shared it in the last 12 months.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Exceptions

Certain information that we collect may be exempt from the CCPA because it is considered public information or covered by financial privacy laws, such as the Gramm-Leach Bliley Act, the California Financial Information Privacy Act, the Health Insurance Portability and Accountability Act, or the Fair Credit Reporting Act.

To the extent that we collect “personal information” that is subject to the CCPA, that information, our practices, and your rights are described below.

Collection of Personal Information

Acorn Finance has collected the following categories of “personal information” under the CCPA in the preceding 12 months:

Identifiers: Name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers;
- Acorn has not shared this category of personal information with third parties in the preceding 12 months.
- Acorn has disclosed this category of personal information to third parties for a business purpose in the preceding 12 months. We have disclosed this information to the following categories of third parties for a business purpose: lending partners, credit bureaus, and software vendors.
Personal Information described in subdivision (e) of Section 1798.80: Name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit or debit card number, other financial information, medical information, health insurance information;
- Acorn has not shared this category of personal information with third parties in the preceding 12 months.
- Acorn has disclosed this category of personal information to third parties for a business purpose in the preceding 12 months. We have disclosed this information to the following categories of third parties for a business purpose: lending partners, credit bureaus, and software vendors.
Commercial information: Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies;
- Acorn has not shared this category of personal information with third parties in the preceding 12 months.
- Acorn has disclosed this category of personal information to third parties for a business purpose in the preceding 12 months. We have disclosed this information to the following categories of third parties for a business purpose: lending partners, credit bureaus, and software vendors.
Protected classification characteristics under California or federal law: Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
- Acorn has not shared this category of personal information with third parties in the preceding 12 months.
- Acorn has disclosed this category of personal information to third parties for a business purpose in the preceding 12 months. We have disclosed this information to the following categories of third parties for a business purpose: lending partners, credit bureaus, and software vendors.
Internet or other similar network activity: Browsing history, search history, information on consumer’s interaction with a website, application, or advertisement.
- Acorn has not shared this category of personal information with third parties in the preceding 12 months.
- Acorn has disclosed this category of personal information to third parties for a business purpose in the preceding 12 months. We have disclosed this information to the following categories of third parties for a business purpose: lending partners, credit bureaus, and software vendors.
Professional or employment-related information.
- Acorn has not shared this category of personal information with third parties in the preceding 12 months.
- Acorn has disclosed this category of personal information to third parties for a business purpose in the preceding 12 months. We have disclosed this information to the following categories of third parties for a business purpose: lending partners, credit bureaus, and software vendors.
Inferences drawn from any of the information identified in the CCPA to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
- Acorn has not shared this category of personal information with third parties in the preceding 12 months.
- Acorn has disclosed this category of personal information to third parties for a business purpose in the preceding 12 months. We have disclosed this information to the following categories of third parties for a business purpose: lending partners, credit bureaus, and software vendors.
Sensitive personal information – Personal information that reveals: (A) A consumer’s social security, driver’s license, state identification card, or passport number; (B) A consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (C) A consumer’s precise geolocation; (D) A consumer’s racial or ethnic origin, citizenship or immigration status; (E) The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication.
- Acorn has not shared this category of personal information with third parties in the preceding 12 months.
- Acorn has disclosed this category of personal information to third parties for a business purpose in the preceding 12 months. We have disclosed this information to the following categories of third parties for a business purpose: lending partners, credit bureaus, and software vendors.

We collect the categories of Personal Information identified above from the following categories of sources:

Directly from you when you provide it to us by filling in forms or applications through our website, or through search queries on our website. This includes information provided at the time of registering to use our website, applying for our service, requesting further services from us.
From correspondence between you and us if you contact us.
From details of transactions you carry out and services you obtain through our website.
Automatically as you navigate through our website.
Communications that we exchange with you.
From credit reporting agencies.

We collect the categories of Personal Information identified above for the following business or commercial purposes:

For everyday business purposes, such as to process your transactions and maintain your accounts.
To present our website and its contents to you.
For us send you marketing communications by email regarding our products and services that may interest you. Our marketing emails to you will include instructions for how you can opt-out of future marketing emails.
To provide you with information, products, or services that you request from us.
To fulfill any other purpose for which you provide it, including to process any inquiry or application that you may submit.
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us.
To notify you about changes to our website or any products or services we offer or provide through it.
In any way we may describe when you provide the information.
For any other purpose with your consent.

For any of the categories of personal information that Acorn has identified above as information disclosed for a business purpose to third parties, Acorn discloses such information to third parties for the following business or commercial purposes:

To provide you with information, products, or services that you request from us.
To fulfill any other purpose for which you provide it, including to process any inquiry or application that you may submit.
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us.
In any way we may describe when you provide the information.
For any other purpose with your consent.

Under the California Consumer Privacy Act, California residents have the following rights:

Right to Know and Data Portability: You have the right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you. You also have the right in some cases to receive a portable copy of your personal information. Once we receive your request and confirm your identity, we will provide you with required information. Collectively, this is referred to as the “Right to Know.”
Right to Delete: You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive your request and confirm your identity, we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request as allowed by law. We will delete or de-identify personal information when required by law and will direct our service providers to take similar action.
Right to Correct: You have the right to request that we correct inaccurate Personal Information that we may maintain.
Right to Opt-Out of Sharing/Notice of Right to Opt-Out of Sharing: Acorn does not and will not sell or share your personal information. The CCPA provides consumers with the right to opt-out of the sale or sharing of your personal information. For purposes of this California Privacy Policy, “share” means the disclosure of Personal Information to a third party for cross-context behavioral advertising. Acorn does not “share” Personal Information for cross-context behavioral advertising. Therefore, because we do not sell, share, or otherwise disclose your Personal Information for this purpose, you do not have a right to such opt-out at this time.
Right to Limit Use and Disclosure of Sensitive Personal Information: Under the CCPA regulations, a business is only required to provide a right to limit the use and disclosure of sensitive personal information when such use does not fall within the list of exemptions outlined in the CCPA regulations § 7027, subsection (m). Our use and disclosure of Sensitive Personal Information falls within this list of exceptions and we do not use or disclose Sensitive Personal Information for other purposes. Therefore, we do not provide any such right to limit at this time.

You may submit a CCPA request to know, delete, or correct by providing your first name, last name, email address, telephone number and ZIP code via one of the following methods:

Emailing us at: compliance@acornfinance.com

Calling us toll-free at 855-501-0800 and leaving a message with the above information and your specific CCPA request as described above.

You may also designate an authorized agent to make such requests on your behalf by mailing a signed Power of Attorney to Acorn Finance: 2600 Capitol Ave, Suite 320

Sacramento CA 95816

Only you, a person authorized by you to act on your behalf, by a person who has power of attorney or is acting as a conservator for the consumer, or an entity registered with the California Secretary of State and authorized by you to act on your behalf, may make a verifiable consumer request to know, delete, or correct your personal information. You may also make a verifiable consumer request on behalf of your minor child.

The verifiable consumer request to know, delete, or correct must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

We will not discriminate against you because you exercise any of the rights as described in this section.

Data Retention

If you are located in Canada, please refer to the “Provisions Specific to Individuals Located in Canada”.

We will retain your personal information as reasonably necessary for the disclosed purpose. The retention periods for each category of personal information vary depending on compliance with relevant laws, your request for deletion, and our retention policies. For example, we may need to retain your personal information to comply with our legal or reporting obligations in accordance with the laws or to defend against claims. Consequently, it is not possible for us to provide a definitive length of time. Our retention periods are determined by using and balancing the following criteria:

The volume, nature, and sensitivity of your information;
The potential risk of unauthorized access, use or disclosure, or misappropriation;
The purposes for which we process your personal information; and
The retention obligations under applicable legal requirements.

Nevada Residents: Nevada residents have the right to opt out of the sale of certain pieces of their information. We do not sell “personal information” of Nevada residents, but, if you are a Nevada resident who has questions or who wants to make this type of request, please send your email to (compliance@acornfinance.com).

Provisions Specific to Individuals Located in Canada

Transfer of Your Information to Countries Other Than Canada: Some of our external third-party service providers are based outside of Canada, including in the United States, and their processing of your Information will therefore result in the transfer of Information outside of Canada. Organizations based outside of Canada may not be subject to privacy laws that provide you with the same rights and protections as in Canada. As a result, your Information may be subject to the laws of a foreign jurisdiction, including any law that permits or requires the disclosure of information to law enforcement or national security authorities upon request.

Withdraw your consent. You may withdraw your consent to the collection, use and disclosure of your Information in accordance with this Privacy Policy at any time by sending us a request in accordance with the information provided in the “How to Contact Us” section below, subject to legal or contractual restrictions. Withdrawal of your consent may affect the provision of the Services you receive or would like to receive and/or Site, as the continued use and disclosure of your Information may be necessary to make the Service or Site available to you. In some circumstances, legal requirements may prevent you from withdrawing your consent.

Retention of Personal Information: We will retain your personal information only for as long as is reasonably necessary for the purposes set out in this Privacy Policy or to comply with our legal obligations. The retention periods for each category of personal information vary depending on compliance with relevant laws, your request for deletion, and our retention policies.

Protection of Your Information: We maintain what we believe to be industry standard technical, physical and administrative security procedures and practices to protect your PII against loss and unauthorized access, disclosure, destruction, use, alteration, or disclosure. We use encryption in the transmission of your Information between your system and ours, and we use firewalls and other intrusion detection and prevention controls to help prevent unauthorized persons from gaining access to your Information. We require any service providers that may have access to your PII to implement and maintain industry standard security procedures and practices. We also require employees to comply with information security safeguards.

Individuals Rights: The method(s) for accessing and updating your Information, if any, will depend on the Acorn Finance Services you have used. You may have the ability to access and make changes to certain Information by logging in to your User Account through our Site and updating your Information. You can also update and rectify your Information by contacting our Customer Care Department by email at support@acornfinance.com.

You are responsible for maintaining the accuracy of the information you provide to us, such as your User Profile information.

How to Contact Us

If you have any questions about this Privacy Policy, our business practices, or your relationship with Acorn Finance, please contact us at:

Compliance Officer
Acorn Finance
2600 Capitol Ave, Suite 320
Sacramento CA 95816
or by email at compliance@acornfinance.com

Date of last update: February 3, 2026