LendingOne Privacy Policy

This Privacy Policy was last updated on: May 19, 2026.

This Privacy Policy (this “Policy”) applies to LendingOne, LLC, LendingOne CRE, LLC, REI Loans, LLC and other wholly-owned subsidiaries of LendingOne, LLC (collectively, “LendingOne,” “we” or “us”), and is designed to help you understand how we collect, process, use and may disclose your Personal Information that you or any third party provides to us, either (i) on our websites (www.lendingone.com, https://app.lendingone.com, www.landlordloans.com, www.lendingonecre.com, broker.lendingone.com, start.lendingone.com (together, the “Websites”)), (ii) through offline means, such as over the telephone, in person, by email,  SMS (text message), regular mail or facsimile, or through any other means (the “Offline Services,” and, together with the Websites, the “Services”).

Please also read the Terms of Use at the end of this Policy.  The Terms of Use are incorporated by reference and thus form an integral part of this Policy. This Privacy Policy and Terms of Use do not apply to information collected through third-party websites, or services that you may access through the Services, or to which the Services might link, or to information that you provide to third parties, or that third parties collect from you, using third-party cookies, web beacons or other third-party services.

References to “you” and “your” throughout this Policy apply to any individuals whose Personal Information we may obtain, including without limitation, principals of business entities and guarantors.

BEFORE YOU ACCESS OR USE THE SERVICES, OR OTHERWISE PROVIDE INFORMATION TO US, PLEASE REVIEW THIS PRIVACY POLICY AND THE TERMS OF SERVICE CAREFULLY. By using the Websites, accessing the Services, or otherwise providing us with information about yourself, you consent to our collection, processing, use, retention and disclosure of your information in accordance with the terms that are set forth in this Privacy Policy and Terms of Use. 

Privacy policy supplements, specifically developed and maintained for residents of certain states, are found within this Privacy Policy in the “Your State Privacy Rights[JM1] ” section.

IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY POLICY OR OUR TERMS OF USE, YOU SHALL NOT ACCESS OR USE THE WEBSITES OR THE SERVICES OR OTHERWISE PROVIDE US WITH YOUR INFORMATION.

  1. What Personal Information do we collect about you?

“Personal Information” means information that is associated with, or may be used to identify you, or contact you specifically. In connection with our loan products and services, we may ask you to provide us with Personal Information, including but not limited to:

  • Your name;
  • Your email address;
  • Your mailing address;
  • Your telephone number;
  • Your credit card information;
  • Your Social Security Number or Tax ID Number;
  • Your employment information;
  • Your salary information;
  • The location and value of the property related to the requested loan products or services;
  • Certain financial information, including but not limited to, bank statements, credit card statements, your average bank balance, personal and business credit history, payment behavior, insurance information, and bank account information;
  • Other information that identifies you, such as a copy of your passport and/or other forms of identification; and
  • Tax returns.

By requesting a loan on behalf of your business, you authorize us to obtain one or more credit reports and to conduct a background check on you, and you authorize us to use the information contained in such credit reports or background checks to process your loan application. We may also obtain one or more credit reports and conduct background checks on any individuals who are designated to be guarantors in connection with any request for a loan. 

In addition, once your business becomes a LendingOne customer, we may obtain additional Personal Information about you, either in connection with data processing, servicing or maintaining your loan, or if you decide to renew your loan or enter into other loans.

By accessing the Services, you warrant and represent to Us that you will not provide Us with any Personal Information relating to anyone other than you, without first obtaining all necessary consents. If you provide Us with any Personal Information from anyone else besides you, we will assume that you have obtained such consent.

  1. Other Information

“Other Information” means any other information that, by itself, does not generally identify you as a specific individual. When you visit our Websites, we also collect Other Information, such as the internet protocol (“IP”) address of the computer or mobile device that you use to connect to the Services, your browser language and type, computer operating system and version, and your Internet Service Provider (“ISP”).  In addition, we gather information such as what browser and which version of it you are using, the type of operating system you have, and which site you came from or advertisement you viewed or clicked on. This device information helps us provide an online experience that matches your device and to manage our online advertising.  We may also collect details of your visits to the Websites, including traffic data, location data, logs and other communication data and the resources that you access and use on the Websites.

  • How do we collect information from you?

How we collect and process your information depends on your use of, and access to, the Services.

  1. Personal Information. We may collect Personal Information from you directly when:
  1. You provide us with any information about yourself (whether you provide that information on our Websites or through the Offline Services), submit a loan application, subscribe to a newsletter, or respond to a survey. 
  2. Third parties, such as credit reporting agencies, provide it to us.
  • Other Information. We automatically collect Other Information about you (e.g., IP addresses, your use of our Websites, etc.) every time you access our Websites. For more information on our use of cookies, see Section G below.
  • Why and how do we use the information we collect about you?

We may use the information we collect about you in various ways, including to:

  • Provide you with our Services;
  • Personalize your user experience, and to allow us to deliver the type of content and product offerings in which you are most interested;
  • Manage your preferences;
  • Improve our Websites;
  • Allow us to better service you in responding to your customer service requests;
  • Administer a contest, promotion, survey or other site features;
  • Process your transactions;
  • Send periodic emails regarding your order or other products and services;
  • Compile, save, use and analyze your Personal Information in both a personally-identifiable form and an aggregated, non-personally identifiable form;
  • Verify your identity;
  • Register you as a user and identify you when you sign in to your account;
  • Determine whether your business qualifies for one of our loan products;
  • Process your account;
  • Send order confirmations, respond to customer service requests, send marketing communications, and send account update notifications;
  • Comply with and enforce legal requirements, contractual obligations, industry standards and our policies; and
  • Any other purposes that we may disclose to you at any time you provide any information to us, or from time to time as we may notify you.

Email Addresses: When you provide your email address, we will use it to send you general notices or important news about your account, to send you marketing material, or to request your feedback or opinions.  If you do not want to receive marketing materials by email, just indicate your preference by clicking on the “unsubscribe” link provided in our marketing emails.  We will continue to notify you by email regarding your account.

Mobile Communications: By providing your phone number and agreeing to receive communications from LendingOne on your mobile phone or other devices, you are consenting by electronic signature to allow LendingOne to contact you via voice call, AI voice call, text messaging, or other automated means. Your carrier’s message and data rates may apply. Message frequency varies. You may opt out of receiving SMS text messages from LendingOne at any time by texting the word STOP in response to a text from LendingOne. LendingOne will not share information you provide via SMS or MMS with third parties for marketing purposes.   

  • With whom do we share and/or disclose your information?

We may share and disclose your Personal Information and Other Information with certain third parties, which may include (without limitation):

  • Our affiliates, subsidiaries and joint marketing partners (see more information below);
  • Credit reporting agencies (see more information below);
  • Our non-affiliated service providers who provide your statements, process your payments, service your loan, or perform other services relating to your account;
  • Our non-affiliated service providers, to the extent necessary to effect, administer or enforce any transaction that is requested or authorized by you;
  • Other financial institutions as permitted or required by laws regulating loan securitization;
  • Auditors and examiners (either internal or external);
  • Governmental authorities, regulators and law enforcement, as necessary or as permitted by the laws of any jurisdiction in which we operate, including in response to a subpoena, court order, investigative demand, request for cooperation, or similar request from a self-regulatory body or government agency, entity or official; and
  • Third parties as necessary to comply with a law, regulation or a legal process (such as court orders, subpoenas, search warrants or law enforcement requests).

If we make a loan to your business, we may share certain information associated with your loan with our investors, as disclosed in your Loan Application Form and related executed loan documents.  We may also share your Personal Information with our lenders.

Credit Reporting Agencies:  Once you have submitted a loan application, we may obtain information about you from credit reporting agencies (including Meridian, TransUnion, Experian and Equifax).  We both receive and transmit data to credit reporting agencies. This is done as part of our regular underwriting, fraud prevention and loan servicing processes.  Information about you that we collect from credit reporting agencies may include, but is not limited to:

  • Information about open and closed credit accounts, including the date opened, the date closed (if applicable), the latest reported monthly balance and monthly payment;
  • Information about credit inquiries;
  • Information about late payments and collection actions on open and closed credit accounts;
  • Information regarding public records of bankruptcy, judgments, tax liens and other payment-related information; and
  • The credit score produced by the credit bureau providing the report.

Information related to your creditworthiness is maintained by the credit reporting agencies.  If you find that there is an error, or if you want to dispute any information in your credit report, please contact the credit reporting agencies directly.  We are not responsible for any errors or omissions in any credit reports created or maintained by credit reporting agencies.

We may also obtain information about you from other sources, such as real estate brokers, other lenders, and other third parties who identify potential customers.

Affiliates and Joint Marketing Parties:  LendingOne and its affiliates may share your personal information with each other, and we may also share your Personal Information with our joint marketing partners (which are other financial institutions with whom we jointly market a financial product or service).  

Others:  In addition, we may employ or use service providers such as title companies, appraisers, consultants, temporary workers, web hosting service providers, and third party software developers, to complete a business process or provide a service on our behalf.  For example, we may use service providers to enhance our website technology, to deliver products, or to send emails. When we employ service providers, we may need to share your Personal Information with them.  We cannot and do not guarantee the safeguards, if any, employed by any such or other third-party service provider with respect to information as provided to them.

We may provide Other Information to other parties for marketing, advertising, or other uses.

Please refer to the summary table below, regarding the types of information we share, and whether you can limit such sharing.

Reasons we share your information with third-partiesDo we share?Can you limit this sharing?
For everyday business purposes—such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit reporting agencies.YesNo
For our marketing purposes—to offer our products and services to you.YesNo
For joint marketing with other financial companies.YesNo
For our affiliates’ everyday business purposes—information about your transactions and experiences.YesNo
For our affiliates’ everyday business purposes—information about your creditworthiness.YesYes.
To limit our sharing, email us at info@lendingone.com.
For our affiliates to market to you.NoN/A
For non-affiliates to market to you.NoN/A
  • How do we protect your Personal Information?

We maintain reasonable safeguards to keep your Personal Information secure. 

When we provide Personal Information to our affiliates or third-party service providers as discussed in this Privacy Policy, we require that these parties agree to process such information in compliance with our Privacy Policy, or in a manner that complies with applicable privacy laws. Any third-party service provider/s use of your Personal Information is subject to that third party’s own privacy policy.

We have implemented reasonable organizational, technical, and administrative security measures to protect the security of all Personal Information submitted through the Services. However, the security of information transmitted through the internet is never guaranteed. We are not responsible for the interception or interruption of any communications through the internet, or for changes to, or losses of, data. You must use caution when submitting Personal Information to us. Users of our Services must maintain the security of any passwords or other form(s) of authentication involved in obtaining access to password protected or secure areas of any of our Services.

  • Your rights to request to know and delete your Personal Information.
  1. Verifiable Consumer Requests

A “Verifiable Consumer Request” is a request that is made by a consumer, by a consumer on behalf of the consumer’s minor child, or by a natural person or a person registered with the Secretary of State authorized by the consumer to act on the consumer’s behalf, and that we can reasonably verify, to be the consumer about whom we have collected Personal Information.

To submit a request to know or a request to delete to us, as provided below, you must submit a Verifiable Consumer Request by writing us at the mailing address below, calling us at the toll-free number below, or sending an email to the email address below.

LendingOne

777 Yamato Road, Suite 510

Boca Raton, FL 33431

Attn:  Legal

Toll-Free Telephone Number: (855) 954-2382  

Email:  privacyrequests@lendingone.com

The verifiable consumer request must:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or that person’s authorized representative.  Specifically, you must provide the following information with your request: 
    • Your full legal name;
    • Your date of birth;
    • Your email address that we have in our records; and
    • The last four digits of your Social Security Number.
  • Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it.

Only you, or someone legally authorized to act on your behalf, may make a Verifiable Consumer Request related to your Personal Information.  You may make a Verifiable Consumer Request on behalf of your minor child.  We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.  To verify your identity or authority to make the request, we may match data points you provide with your request, with data points that we maintain.

If you choose to use an authorized agent to submit a request to know or a request to delete to us, we will require that you (i) provide us with a copy of the written permission you gave the authorized agent to submit the request to us; and (ii) verify your own identity directly with us.  We may deny a request from an agent that does not submit proof that such agent has been authorized by you to act on your behalf.

If you submit a request in a manner that is not one of the designated methods of submission described above, or if your request is deficient in some manner unrelated to the verification process, we will either: (i) treat the request as if it had been submitted in accordance with our designated manner, or (ii) provide you with specific directions on how to submit the request or remedy any deficiencies with the request, if applicable.

Making a Verifiable Consumer Request does not require you to create an account with us.  We will only use Personal Information provided in a Verifiable Consumer Request to verify your  identity or authority to make the request.

  • Requests to Know

Through a Verifiable Consumer Request, you may request disclosure of:

  • Specific pieces of Personal Information that we have about you.
  • Categories of Personal Information that we have collected about you.
  • Categories of sources from which the Personal Information is collected.
  • Categories of Personal Information that we “sold” or disclosed for a business purpose about you.
  • Categories of third parties to whom the Personal Information was sold or disclosed for a business purpose.
  • The business or commercial purpose for collecting or selling Personal Information.

You may only submit a request to know twice within a 12-month period.  

  • Requests to Delete

Through a Verifiable Consumer Request, you may request that we delete your Personal Information that we have collected and retained, subject to certain exceptions.  Once we receive and confirm such a Verifiable Consumer Request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies.

Nevertheless, we may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

  • Complete a transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
  • Detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, or prosecute those responsible for such activities.
  • Debug to identify and repair errors that impair existing intended functionality.
  • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
  • Comply with applicable law.
  • Enable internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
  • Comply with a legal obligation.
  • Make other internal and lawful uses of that information that are compatible with the context in which it has been provided to us.
  • Response Timing and Format

Upon receiving a Verifiable Consumer Request, we will confirm receipt of it within 10 days and provide information about whether and how we will process the request.

We will deliver our written response either by mail or electronically. We will endeavor to respond to a Verifiable Consumer Request within 30 days of its receipt.  If we require more time (up to 30 additional days), we will inform you of the reason and extension period in writing. 

Any information we deliver in response to your request may be delivered by mail or electronically.  If it is provided electronically, we will take reasonable steps to provide that the information will be portable and, to the extent technically feasible, in a readily useable format that would allow you to transmit the information to another entity without hindrance. 

Any disclosures we provide will only cover the 12-month period preceding the date we received the Verifiable Consumer Request. 

We do not charge a fee to process or respond to your Verifiable Consumer Request unless the Verifiable Consumer Request is excessive, repetitive or manifestly unfounded.  If we determine that the Verifiable Consumer Request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

  • Do we use “Cookies”?

Yes.  Cookies are small text files that a site or its service provider transfers to your computer’s hard drive through your web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information.  For instance, we use cookies to help us remember and process the items, understand your preferences based on previous or current site activity, which enables us to provide you with improved services, and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future, keep track of advertisements.

These technologies are used in analyzing trends, administering the Websites, tracking users’ movements around the Websites and to gather demographic information about our user base as a whole.  We may receive reports based on the use of these technologies on an individual as well as an aggregated basis.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. If you disable cookies, some features of our Websites may become disabled, and some aspects of the Websites may not function properly. 

Deleting cookies does not delete Flash objects. You can learn more about Flash objects – including how to control and disable them – through the Adobe interface.  If you choose to delete Flash objects from our Websites, then you may not be able to access and use all or part of the Websites or benefit from the information and services offered.

We also may use pixel tags – tiny graphic images also known as clear GIFs or web beacons – to tell us what parts of our Websites that you have visited, to measure the effectiveness of any searches you may do on our Websites, or to interact with analytical tools or other marketing tools that gather data and customer usage information.

  • Third-Party links.

We currently do not include or offer third-party products or services on our Websites.

In the future, our Websites may contain links to other sites that may collect your Personal Information. We are not responsible for the privacy practices or the content of any other sites that may be linked to our Websites. Any Personal information that may be collected on other parties’ websites is not covered by this Policy.  Unless stated otherwise, the policies of those parties will govern the collection, use, disclosure and security of your Personal Information. 

  1. Website usage data.

Our Websites track usage data, including, for example, your IP address, your browser type and version, which pages you view, which page, if any, linked you to our site, and which link, if any, you follow off of our Websites.  We use this data in the aggregate and on an individual level to better understand website activity to improve our site offerings, to reconstruct activity from a session or by a user, for troubleshooting and issue resolution purposes. We may also use this data to provide you a more personalized website experience, assistance with technical support questions, and to send you special offers, product and service updates, or other promotional materials that are relevant and tailored to your interests.  If you do not want to receive these offers or promotions, simply indicate your contact preferences during the registration process, or within any future communications.

  • Do our Websites respond to “do not track” signals?

We do not respond to “do not track” signals or similar mechanisms – where a visitor to our Websites requests that we disable the collection of information about the visitor’s online activities, including navigation around our website and the service. We may also permit third parties to collect aggregate usage information on our Websites, and they may also not respond to “do not track” signals.

  • Do our Websites allow third party behavioral tracking?

We may use third party advertising companies to collect non-personally identifiable information for online behavioral advertising to provide targeted display advertisements through participating publishers and advertisers. Such information may include non-personally identifiable information (e.g., click stream information, browser type, time and date, subject of advertisements clicked or scrolled over) through the use of cookies and other technology.

  • Contacting us by telephone.

If you communicate with us by voice telephone, we may monitor or record the call.  This is done for reasons such as maintaining the integrity of your account, providing effective and timely service, improving our products, and assessing the performance of our employees.

  • YOUR STATE PRIVACY RIGHTS

If you are a California resident, California law may provide you with additional rights regarding our use of your Personal Information. To learn more about your California privacy rights, please see our Privacy Policy Supplement for California Residents Only (“CA Supplement”) at the end of this Privacy Policy.

Other consumer privacy laws in other states may provide their residents with additional rights regarding our use of their Personal Information. This State Privacy Notice applies to “consumers” as defined under state privacy laws, including Colorado, Connecticut, Delaware, Florida, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah and Virginia (collectively the “State Privacy Laws.”) This State Privacy Notice is a supplement to the Privacy Policy. If there are any conflicts between the Privacy Policy and this State Privacy Notice, this State Privacy Notice will prevail for consumers and their rights under appliable State Privacy Laws.

The purpose of this State Privacy Notice is to provide you with notice of our data practices and procedures with respect to the Websites and Offline Services that are now in effect. This State Privacy Notice addresses our collection, use and disclosure under the applicable State Privacy Laws, consumers’ rights with respect to their Personal Information under the applicable State Privacy Laws, and how to contact us in relation to our practices and procedures that pertain to Personal Information. This State Privacy Notice does not apply to data that is not treated as Personal Information under any State Privacy Law, or to the extent that any such data is subject to an exemption under applicable law.

Please review the general Privacy Policy above for information regarding the Personal Information that you provide to us and/or that we collect when you use our Services. 

Disclosure of your Personal Information.  We encourage you to review Section D above (“With whom do we share and/or disclose your information?) in the Privacy Policy to learn more about how we disclose and share your Personal Information with a variety of third parties for business purposes (subject to your rights set forth in this State Privacy Notice).

In the last 12 months, we may have disclosed all of the Personal Information that we collect, as explained in the Privacy Policy in Section D, for a legitimate business purpose. This Personal Information includes or may include all Personal Information that we identified in Section D above.

Notwithstanding anything to the contrary contained in this State Privacy Notice, we may work with certain third-party service providers to collect and disclose your Personal Information, which may be obtained through the methods we identified in Section A (“What Personal Information do we collect about you?”) in the Privacy Policy above. We encourage you to review Section A for more information on how third parties may collect and use certain information about you.  Notwithstanding anything to the contrary here, we may collect, use and disclose your Personal Information required by, or pursuant to, applicable law.

We do not knowingly share or sell the Personal Information of Consumers who are under the age of 16.

Collection and Disclosure Implicating Sale, Sharing and Targeted Advertising.  When a consumer provides us with his or her Personal Information so that we can provide the consumer with our products and Services, or facilitate the consumer’s relationship with third parties that may provide products or services to that consumer, this may, under certain State Privacy Laws, constitute a sale or sharing by LendingOne. We do not currently knowingly engage in the sale of Personal Information as defined under any State Privacy Laws.

When a consumer provides us with his or her Personal Information for (A) targeted advertisements, (B) facilitating the consumer’s relationship with third parties that may provide products or services to that consumer, or (C) analysis of advertising and marketing initiatives, it may, under certain State Privacy Laws, constitute a sale or processing of the consumer’s Personal Information for targeted advertising.

You also have the right to know if we have maintained Personal Information for longer than the last 12 months. If you want to know whether we have maintained Personal Information about you for longer than the last 12 months, and what we have maintained, you may either provide a specific date range to us, or you can request that we disclose all of the Personal Information that we have maintained. Please note that any such requests only apply to information that we have maintained since on or after January 1, 2022.

Consumer Rights Requests.  The rights set forth in this Section M are provided for consumers who are residents of certain of the listed states, subject to those consumers satisfying the requirements for Verifiable Consumer Requests as provided in this Privacy Policy.

We will not complete certain “Right to Know,” “Right to Delete” or “Right to Correct” requests, as required under State Privacy Laws, unless you provide the information sufficient for us to process a Verifiable Consumer Request.

Consumer Privacy Rights Under State Privacy Laws.

  1. Appeal Rights.  Consumerswho are residents of Colorado, Connecticut, Florida, Montana, Oregon, Texas and Virginia have the right to appeal our decision regarding a Verifiable Consumer Request. Those consumers may exercise this right by responding to the correspondence that we send to that consumer regarding our decision on a Verifiable Consumer Request.
  2. Right to Correct.  With the exception of consumers in Iowa, certain consumers in the states subject to the State Privacy Laws have the right to request that we correct any inaccuracies that such consumer discovers with respect to the consumer’s Personal Information that we retain.   
  3. Non-Discrimination.  We will not discriminate against any consumer if that consumer decides to exercise the rights available to him or her under any applicable State Privacy Laws.

Additional Nevada-Specific Privacy Rights

Nevada residents who are consumers of the Websites or Services have the right to submit to us a verified request that we will not sell your “covered information,” as that term is defined in Nevada Revised Statutes Chapter 603(A). To submit a verified request, please contact us at the address at the end of this Privacy Policy. Please note, however, that we currently do not sell data triggering that statute’s opt-out requirements.

Additional Vermont-Specific Privacy Rights

Unless the law allows, we will not share non-public Personal Information we collect about Vermont consumers with any non-affiliated third parties, unless the law allows.  For example, we may share information with your consent, to service your accounts, or under joint marketing agreements with other financial institutions with which we have joint marketing agreements. We will not share information about your creditworthiness within our corporate family except with your consent.  We may share information about our transactions or experiences with you within our corporate family without your consent.

  • Sale of Personal Information.  We do not sell your Personal Information to anyone.
  • Children.

We do not knowingly collect Personal Information from individuals under the age of 18.  By using the Websites or by otherwise communicating with us, you represent and warrant to us that you are at least 18 years of age.  Individuals under the age of 18 may not share any of their Personal Information with us.

  • Change of control.

Your Personal Information may be transferred in connection with a sale, merger, transfer, exchange or other disposition (whether of assets, stock or otherwise) of all or a portion of LendingOne’s businesses.  Your Personal Information may also be transferred to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information that we hold about our Website users is among the assets transferred.

  • Information regarding international data transfers.

We are based in the United States and our computer servers are located in the United States.  Accordingly, all personal data in our possession and control is collected and processed by us in the United States.  Any party that provides personal data to us is thereby transferring such data to the United States, and is consenting to the transfer of their personal data to the United States.  Please note that the United States may have data privacy and data protection laws that are less stringent than  those of your home country.  Individuals who access the Websites from outside the United States do so on their own initiative and are responsible for compliance with local laws, rules and regulations.  In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in other countries may be entitled to access your Personal Information.

  • Questions or concerns.

If have any questions or concerns regarding this Privacy Policy, please contact us. Our mailing address and email address are:

LendingOne, LLC

777 Yamato Road, Suite 510

Boca Raton, FL 33431

Attn:  LegalEmail: jmarcus@lendingone.com

Version 1:  Adopted as of March 20, 2018

Version 2:  Adopted as of January 1, 2020

Version 3:  Adopted as of April 26, 2022

Version 4: Adopted as of January 18, 2024

Version 5: Adopted as of March 25, 2025

Version 6: Adopted as of July 30, 2025

Version 7: Adopted as of May 19, 2026

PRIVACY POLICY SUPPLEMENT FOR CALIFORNIA RESIDENTS ONLY

Last Updated as of:  March ___, 2026.

This Privacy Policy Supplement for California Residents Only (this “Supplement”) supplements the Privacy Policy of LendingOne, LLC, REI Loans, LLC, LendingOne CRE, LLC and certain other wholly-owned subsidiaries of LendingOne, LLC (collectively, “LendingOne,” “we” or “us”), and applies solely to individuals who reside in the State of California (such individuals, ”Consumers” or “you”). This Supplement addresses your rights under the California Consumer Privacy Act of 2018 (“CCPA”).  This Supplement does not apply to individuals who are not residents of the State of California.

The CCPA does not govern the following data, and therefore this Supplement does not apply to any such data:

  • Personal Information collected, processed, sold, or disclosed pursuant to the federal Gramm-Leach-Bliley Act (Public Law 106-102), and implementing regulations, or the California Financial Information Privacy Act (Division 1.4 (commencing with Section 4050) of the Financial Code).
  • Personal Information We Collect and Use

The CCPA defines “Personal Information” as information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.  The table below states whether or not we have collected the following categories of such “Personal Information” from consumers within the last twelve months:

CategoryExamplesCollected?If Collected, Business or Commercial Purpose for Collection
A. Identifiers.  A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.Yes  (A) it is necessary for our legitimate interests;  (B) we need to comply with legal or regulatory obligations; and (C) performance of any contract we are about to enter into or have entered into with you.
B. Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).  A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.  Some Personal Information included in this category may overlap with other categories.Yes  (A) it is necessary for our legitimate interests;  (B) we need to comply with legal or regulatory obligations; and (C) performance of any contract we are about to enter into or have entered into with you.
C. Protected classification characteristics under California or federal law.  Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).Yes(A) it is necessary for our legitimate interests;  and (B) we need to comply with legal or regulatory obligations.
D. Commercial information.Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.Yes(A) it is necessary for our legitimate interests;  (B) we need to comply with legal or regulatory obligations; and (C) performance of any contract we are about to enter into or have entered into with you.
E. Biometric information.  Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.No 
F. Internet or other similar network activity.Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.Yes(A) it is necessary for our legitimate interests;  and (B) we need to comply with legal or regulatory obligations.
G. Geolocation data.Physical location or movements.No 
H. Sensory data.Audio, electronic, visual, thermal, olfactory, or similar information.No 
I. Professional or employment-related information.Current or past job history or performance evaluations.  Yes(A) it is necessary for our legitimate interests;  (B) we need to comply with legal or regulatory obligations; and (C) performance of any contract we are about to enter into or have entered into with you.
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.  No 
K. Inferences drawn from other Personal Information.Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes.No 

‌ We obtain the categories of Personal Information from the following categories of sources:

  • Directly from you.
  • Indirectly from you (for example, from observing your actions on our websites).
  • From consumer reporting agencies and other third parties from which we obtain credit reports and other background check information.
  • From our affiliates and joint marketing parties.
  • From property records, the internet or other public sources.
  • Collection and Use of Personal Information

‌We may collect and use the Personal Information we collect about you for the following purposes:

  1. Using Our Websites and Providing Products and Services to You

We collect and use Personal Information in connection with your use of our products and services or our websites.  In addition, we may contact you to request feedback about our products and services in the form of online or postal communications.  We use your feedback to monitor the quality of our products and services.

  • Loan Processing, Servicing, Securitization and Enforcement

We collect and use Personal Information in connection with the processing, servicing, securitization and enforcement of loans.

  • Insight and Analysis

We analyze your Personal Information that we collect from your interactions with our websites, our communications to you, and in connection with our products and services.  The data we collect and analyze may include IP addresses; session ID information, information regarding your personal or professional interests, demographics, your experience with our products and services, and your contact preferences.  By collecting and analyzing this data, we seek to measure the effectiveness of our content and how visitors use our websites and use our products and services.  We also use this information for marketing purposes.

  • Protecting Our Rights and Responding to Legal Requests

We may collect or use your Personal Information without your consent if we believe in good faith that such action is necessary (i) to protect and defend the rights, property or safety of us or our employees, affiliates, or the public; or (ii) to satisfy any applicable law, regulation, legal process, court order, subpoena, or other governmental or regulatory (including law enforcement) request.

  • Job Recruitment

We may collect or use your Personal Information to assess your suitability for any position of employment for which you may apply with us.  Such data may include education history, employment history and professional designations, information regarding your work authorization status, and other information about your background and qualifications. 

You may communicate with us or apply for a job with us via a third party service (e.g., LinkedIn or Indeed) or via recruiting firms or staffing firms.  In these instances, such third parties will share your Personal Information with us.

  • Business Transactions

We may collect or use your Personal Information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us is among the assets transferred.

  • Other Purposes

In addition to the above, we may collect or use your Personal Information for other purposes for which we will provide notice to you at the time of collection, or as otherwise permitted under the CCPA or other applicable law.

We will not collect additional categories of Personal Information or use the Personal Information we collect for materially different, unrelated or incompatible purposes without providing you notice.

  1. Sharing of Personal Information for a Business Purpose

We share your Personal Information with third parties when it is necessary for a business purpose.  When we share Personal Information to third parties for a business purpose, we require that the recipient not further collect, sell or use such Personal Information except as necessary for the business purpose.

We may share your Personal Information with the following categories of third parties: (i) our service providers; (ii) credit reporting agencies and other third parties from which we obtain credit reports and background check information; (iii) our non-affiliated service providers who provide your statements, process your payments, service your loan, or perform other services relating to your account; (iv) our non-affiliated service providers, to the extent necessary to effect, administer or enforce any transaction that is requested or authorized by you; (v) other financial institutions as permitted or required by laws regulating loan securitization; (vi) our affiliates and our joint marketing partners; (vii) our auditors and examiners (either internal or external); (viii) law enforcement, regulators and other government bodies; (ix) third parties as necessary to comply with a law, regulation or a legal process (such as court orders, subpoenas, search warrants or law enforcement requests); and (x) our investors and lenders.

During the preceding twelve months, we have shared the following categories of Personal Information to third parties for a business purpose:

Category A: Identifiers.

Category B: California Customer Records Personal Information categories.

Category C: Protected classification characteristics under California or federal law.

Category D: Commercial information.

Category F: Internet or other similar network activity.

Category I: Professional or employment-related information.

  1. “Selling” Personal Information

During the preceding 12 months, we have not “sold” Personal Information (as the term “sell” is defined in the CCPA).

  • Your Rights Under the CCPA

‌The CCPA provides California residents with certain rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

See above main Privacy Policy for your rights to request to know and delete your personal informal that is collected.

  • Shine The Light

California’s “Shine the Light” law (Civil Code § 1798.83) and the California Consumer Privacy Act of 2018 (Civil Code § 1798.100, et. sec.) permits consumers who are California residents to request certain information regarding, and or opt out of, our disclosure of their Personal Information (as defined in the Shine the Light law), to third parties for direct marketing purposes.  If applicable, such consumers may have the right to receive the categories of Personal Information that we shared with third parties for their direct marketing purposes during the previous calendar year and the names and physical addresses of those third parties. Consumers may make such a request by submitting the request by email to the email address at the end of the CA Supplement or writing to us at the mailing address at the end of this Policy.

Unless the law allows, we will not sell, share, transfer or otherwise disclose non-public Personal Information of California consumers to or with any non-affiliated third parties, without the prior consent of the California consumer to whom the non-public Personal Information relates.  We may share information with your consent, or to service your accounts. We will also limit sharing within our corporate family to the extent required by California law.

  • Enhanced “Right to Know”

California residents are entitled to know if we have disclosed your Personal Information to any third parties, service providers or contractors within the last 12 months. If we have not disclosed your Personal Information to third parties, service providers or contractors in the last 12 months, we will disclose that to you. If we have disclosed your Personal Information to any third parties, service providers or contractors in the last 12 months, we will identify the Personal Information disclosed and the specific business purpose for doing so.

You also have the right to know if we have maintained Personal Information for longer than the last 12 months. If you want to know whether we maintained Personal Information about you for longer than the last 12 months, and what we have maintained, you may either provide a specific date range to us, or you can request that we disclose all the Personal Information that we have maintained.  Please note that any such requests apply only to information that we have maintained since on or after January 1, 2022.

  • Non-Discrimination

‌We will not discriminate against you for exercising any of your CCPA rights.  Unless permitted by the CCPA, we will not:

  • Deny you goods or services.
  • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
  • Provide you a different level or quality of goods or services.
  • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
  • Changes to This Supplement

‌We reserve the right to amend this Supplement at our discretion and at any time.  When we make changes to this Supplement, we will post the updated notice on our websites and update the Supplement’s effective date.  Your continued use of our products and services and your continued use of our websites after the posting of changes constitutes your acceptance of such changes.

  • Contact Information

‌If you have any questions or concerns regarding this Supplement, please contact us at:

LendingOne

777 Yamato Road, Suite 510

Boca Raton, FL 33431

Attn:  LegalEmail: ccparequests@lendingone.com

Version 1:  Adopted as of January 1, 2020

Version 2:  Adopted as of April 26, 2022

Version 3: Adopted as of January 18, 2024

Version 4:  Adopted as of July 30, 2025

Version 5:  Adopted as of May 19, 2026