3.4 Rate, Inc., will only use and disclose personal information as reasonably necessary for the matters described in paragraphs 3.1 and 3.2, above. We do not use or disclose your personal information other than as authorized pursuant to Section 7027 of the CCPA regulations (Cal. Code. Regs., tit. 11, § 7027 (2022)). We will not collect additional categories of personal information, use or disclose the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

3.5 Sharing Personal Information: All financial companies need to share personal information to run their everyday business and provide the Services you hope to obtain. Financial companies must also abide by the privacy requirements set by Gramm-Leach-Bliley Act (“GLBA”). Financial companies choose how to share your information, and federal law sets forth your ability to limit such sharing. Our GLBA Privacy Notice describes the reasons we can share nonpublic personal information and whether you can limit sharing. This notice applies to all users of our services regardless of where you may reside in the US. Please read our GLBA Privacy Notice carefully. If you are a customer of Guaranteed Rate Affinity, LLC, please read our Guaranteed Rate Affinity, LLC GLBA Privacy Notice carefully. We also comply with other federal laws, including the Fair Credit Reporting Act (FCRA).

• Third parties you authorize, or direct us to share your information. We will share your information with a third party with your consent.
• Affiliates, subsidiaries, and businesses under our control. We may share your information with our affiliates, subsidiaries, and companies under our control for the reasons outlined above in 3.1, 3.2 and 3.3. For example, we may share your information internally to provide you with enhanced services from us and other products and services you use, to understand how you engage with our products to help make our services better for you and everyone, and to help us build services tailored to your preferences.
• Service providers, contractors, and third parties. We may share information with service providers, vendors, or contractors, or they may share, collect, store, access, transfer, or otherwise process your information on our behalf to help us carry out our Services or run our business. We require service providers, vendors and contractors to implement reasonable organizational controls to maintain the privacy and security of personal information provided to them.
• Marketing partners. We may share information with third parties, marketing affiliates, or subsidiaries for marketing purposes, analytics, (ex: Adobe Analytics, Google Analytics) and to jointly market products, services, promotions, and events. We may receive your information from a third party you authorized to share or sell your information.
• Government, regulatory and legal entities. We share your online information with government, regulatory and legal entities to response to their inquiries, enforce our terms and conditions, exercise or defend a claim or if we determine disclosure is necessary or appropriate to protect the life, safety or property of ourselves or others.
• Business transfers and corporate change of control. We may share, receive, or transfer your personal information in connection with a sale, merger, acquisition, dissolution, divestiture, joint venture, bankruptcy, or any similar transaction where the control and responsibility of your information changes to or from us. We may transfer or have transferred to us, all information collected about you to merge, transition or wind-down a company’s activities.

4. YOUR RIGHTS AND CHOICES, EXERCISING THEM UNDER CALIFORNIA LAW

The California Consumer Privacy Act provides consumers with specific rights regarding their personal information. Please review this Section for a description of those rights and how you may exercise your choices.

4.1 Access to Specific Information and a Copy of Personal Information (Right to Know)

Under the California Consumer Privacy Act Regulation, you have the right to request that we disclose certain information to you about our collection of your personal information, the use of your personal information and a copy of the specific pieces of personal information that we have collected about you. Those rights include:

• Collection: right to know about the personal information a business collects about them and how it is used and shared (also called “data portability request”);
• Correction: you have the right to request that we correct inaccuracies in your personal information;
• Deletion: you have the right to request we delete personal information collected from them (with some exceptions);
• Do-Not-Sell or Share Rights: you have the right to opt out of the sale or sharing of your personal information by us.
• limit the use and disclosure of your sensitive personal information; and
• non-discrimination for exercising your California privacy rights.

4.2 Right to Limit Processing of Sensitive Personal Information

In California, you have the right to direct us to limit certain uses and disclosures and our processing of your Sensitive Personal Information which go beyond those specifically authorized pursuant to the CCPA, including only uses which are necessary to perform the services or provide the goods reasonably expected by an average consumer who requests such goods or services. Consistent with the purposes described in paragraph 3.3, above, we do not use and disclose sensitive personal information about California residents beyond the CCPA authorized purposes. When we collect your Personal Information, we collect and use that information to perform the services or provide the goods for which that information is necessary and as reasonably expected by you.

4.3 Right to Opt-Out of Sale of Personal Information

California law requires certain disclosures for companies that "sell" personal information pursuant to the respective state's privacy law. In California, the "sale" of personal information means certain scenarios in which Rate, Inc., in exchange for valuable consideration, shares personal information it collects from you with third parties or Affiliates. Except as permitted by law for the purposes identified in paragraph 3, above, we do not “sell” your personal information we collect about you with non-Affiliated companies. For example, we may share information to service your mortgage loan, or with your consent. Also, within the purposes identified in paragraph 3.5, above, we will limit sharing with our Affiliates to the extent required by California law. Although we disclose your personal information to third parties as we have described above, we do not “sell” your personal information.

4.4 Exercising the Right to Opt-Out

California law requires that you be provided with the right to opt out of the "sale" of personal information at any time. You have the Right to Opt-Out by visiting our Do Not Sell My Personal Information webpage. Although we disclose your personal information to third parties as described above, we do not “sell” your personal information. Also, again, as mentioned above, we do not knowingly collect, sell or share personal information about individuals under the age of 17.

4.5 Right to Opt-Out of Personal Information Being Shared or Used In Targeted Advertising California requires that we notify you if we “share” your personal information with third parties for cross-context behavioral advertising. Further, “cross-context behavioral advertising” means targeting of advertising to you based on your personal information obtained from your activity across businesses, websites, apps, and services other than our Services. We "share" and use your information for Targeted Advertising. Specifically, we share your identifiers and internet or other network activity with our advertising partners. We also provide you with the right to Opt-Out of such sharing, subject to exceptions which the law provides, if we share your personal information to third parties for such purposes. You have the right to opt out of "sharing" or Targeted Advertising by accessing our Do Not Sell or Share my Information webpage.

4.6 Right to Non-Discrimination California consumers also have the right to exercise their CCPA rights without being subject to discriminatory treatment or retaliation, and to receive transparent disclosures about any financial incentives a business offers them with regard to the collection, use and disclosure of their personal information. Discrimination may exist where a business takes or suggests that it will take the following actions in response to a consumer exercising rights under the CCPA, unless doing so is reasonably related to the value provided to the consumer by the consumer’s data:

• Deny access to or use of goods or services.
• Charge different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide a different level or quality of goods or services.

4.7 Submitting Request to Know/Access, Correct, and Delete

When you make a request, we may require that you provide information and follow procedures so that we can verify the request and your jurisdiction before responding to it. The verification steps we take may differ depending on the request you make. We will match the information that you provide in your request to information we already have on file to verify your identity. If we can verify your request, we will process it. If we cannot verify your request, we may ask you for additional information to help us verify your request.

Consumers will be required to submit their first and last name and email address and may also be asked to provide their telephone number or address so that we can verify the request. Please provide as much of the requested information as possible to help us verify the request. We will only use the information received in a request for the purposes of responding to the request.

California law permits California consumers to use an authorized agent to make privacy rights requests. We require the authorized agent to provide us with proof of the California consumer’s written permission (for example, a power of attorney) that shows the authorized agent has the authority to submit a request for the California consumer. An authorized agent must follow the process described below to make a request. The authorized agent must also verify his/her own identity. We will confirm the agent’s authority with the California consumer about whom the request was made.

• To exercise your right to know/access, correct or delete, as described above, please submit a verifiable consumer privacy rights request to us by either:
• Completing our Data Subject Access Request (“DSAR”) form here
• Calling us at 866-934-7283
• Emailing us at privacy@rate.com
• Sending us a letter to:

Rate, Inc. Attn: Compliance Officer 3940 N. Ravenswood Chicago, IL 60613

California Verifiable Client Requests

Applicable California law requires that a business must verify the identity of the requesting individual and respond. Absent an extension, applicable California law requires a business substantively respond to a consumer request to know, delete, and/or correct inaccurate information within 45 days of receipt of the request. On average, we process and respond to each request in less than ten days. Please be aware that a verifiable consumer privacy rights request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We will take steps to verify your request and to identify from our relevant records that contain your personal information. We will process your request based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. In some cases, we may request additional information in order to verify your request or where necessary to process your request. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

4.9 California’s Shine the Light Law

Under California Civil Code Section 1798 (California’s Shine the Light Law), California residents with an established business relationship with us can request information once a year about sharing their personal data with third parties for the third parties’ direct marketing. If you are a California resident and want to request information from us based on the Shine the Light Law, you can do so via the Contact Information below.

4.10 California Financial Incentive Disclosure

California’s privacy law requires that we notify you if we provide you a program, benefit, or other offering, related to the collection, deletion, or sale of personal information, which it defines as a “financial incentive.” We may offer you certain financial incentives that may result in different prices, rates, or quality levels (for example, contests and referral programs). Through these offerings, consumers provide us with some personal information (e.g., names, emails, phone numbers) when they opt-in to our programs. There is no obligation to opt-in and consumers may opt-out at any time. The details of each program are contained in the program offering. We offer these programs, among other things, to enhance our relationship with you so you can enjoy more of our products/services at a lower price. We invest heavily in our marketing and brands, in part, so we can provide programs to our customers. Consumer data is valuable to our business only when it is combined with a sufficient number of other consumer data and after it is enhanced by our efforts herein described. The value to our business of any individual consumer's personal information is dependent on a number of factors, including, for example, whether and to what extent you take advantage of any offerings, whether and to what extent you opt out of any offerings, and whether we are able to enhance the data through our efforts herein described. Our ability to create any value from the programs is heavily based on our ability to leverage said intellectual properties. We do not calculate the value of consumer data in our accounting statements.

5. DO NOT TRACK

Certain web browsers allow you to instruct your browser to respond to Do Not Track signals to websites you visit, informing those sites that you do not want your online activities to be tracked. Rate, Inc., and its Affiliates and other parties not affiliated with us may collect personally identifiable information about your online activities over time and across different websites when you use our website or the services offered on our website. We do not have any protocol that offers you the choice to Opt-Out of internet tracking. At the present time, the website is unable to respond to “DO NOT TRACK” signals from your internet browser. If you have any questions regarding our internet tracking methods, please email us at privacy@rate.com.

6. NOTICE TO JOB APPLICANTS AND FORMER EMPLOYEES

If you are a California resident and you have applied for a job or your employment with us has ceased, please read our California Applicant and Former Employee Privacy Notice here.

Applicable California law requires that a business must verify the identity of the requesting individual and respond. Absent an extension, applicable California law requires a business substantively respond to a consumer request to know, delete, and/or correct inaccurate information within 45 days of receipt of the request. On average, we process and respond to each request in less than ten days.

7. EXCEPTIONS TO THESE RIGHTS

California law acknowledges and provides for certain exceptions to the rights described above. We reserve the right to avail ourselves of these exceptions where applicable.

8. CHANGES TO OUR PRIVACY NOTICE

Rate, Inc. reserves the right to amend this privacy California Privacy Notice at our discretion and at any time. When we make changes to this privacy California Privacy Notice, we will post the updated Notice on the Websites and update the Notice’s effective date. Your continued use of our Websites following the posting of changes constitutes your acceptance of such changes.

9. CONTACT INFORMATION

If you have any questions or comments about this California Privacy Notice, the ways in which Rate, Inc. collects and uses your information described above, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Phone: 866-934-7283
Email:privacy@rate.com
Sending a letter to us at:

Rate, Inc.
Attn: Compliance Officer
3940 N. Ravenswood
Chicago, IL 60613