This is a thoughtful pre-launch draft, not legal advice or a substitute for review by counsel familiar with lending lead generation, telemarketing, advertising, privacy, and the states where RateHarbor will operate.
Information we collect
We may collect information you submit, including vehicle and current-loan details, estimated credit range, employment and income ranges, housing status, location, name, email address, telephone number, contact preference, and your consent choices. We also may collect device and request information such as IP address, browser or device data, referring page, landing page, timestamps, and advertising attribution parameters.
How we use information
We may use information to operate and secure the service; evaluate, score, and route requests; match consumers with participating financial-service or insurance providers; communicate about a request; measure advertising and form performance; prevent fraud and abuse; comply with law; and improve our services.
How we disclose information
We may disclose request information to participating providers and service vendors that help us host, secure, analyze, communicate, and route leads. A provider that receives information may use it under its own privacy policy. We may also disclose information for legal, safety, fraud-prevention, corporate-transaction, or consented purposes.
Sale, sharing, and targeted advertising
Compensation received for transferring or making a lead available may be considered a sale or sharing of personal information under some state laws. Where applicable, RateHarbor will provide required notices and methods to opt out of sale, sharing, or targeted advertising before operating in that state. Advertising pixels and analytics tools will not be enabled until a consent and opt-out design is finalized.
Retention and security
Consent and request records may be retained for legal, operational, dispute-resolution, and partner-accountability purposes. Final retention periods must be documented before launch. We use reasonable administrative, technical, and physical safeguards, but no system can guarantee absolute security.
Your choices and rights
Depending on your state, you may have rights to access, correct, delete, or obtain a copy of personal information and to opt out of certain sales, sharing, targeted advertising, or profiling. The final policy will include verified request methods, appeal procedures where required, and authorized-agent instructions.
Children
RateHarbor is intended for adults and is not directed to children under 13. The service should require users to confirm they are at least 18 before public launch.
Contact and policy changes
Final business identity and privacy-contact information must be inserted before launch. Material policy changes should be dated and communicated as required. Consent evidence must retain the text and version presented at submission.
Operational requirement: insert verified business and consumer-request contact details before public launch.