Privacy Policy

Summit Fundings, LLC (hereinafter referred to as "Summit Fundings," "Company," "we," "our," or "us") is committed to protecting the privacy, confidentiality, and security of your personal and business information. This Privacy Policy (hereinafter referred to as "Policy") describes in detail the types of information we collect from and about you when you visit our website located at summitfundings.com (the "Site"), submit an application, or otherwise interact with our business funding brokerage services (collectively, the "Services"). This Policy further describes how we use, disclose, store, retain, and safeguard such information, and the rights and choices available to you regarding your information.

This Policy applies to all information collected through the Site and Services, as well as any information collected through related email, text, or other electronic communications sent through or in connection with the Site and Services. By accessing or using the Site or Services, or by providing any information to us, you acknowledge that you have read, understood, and agree to the collection, use, disclosure, and processing of your information as described in this Policy. If you do not agree with the practices described herein, please do not access or use the Site or Services.

This Policy should be read in conjunction with our Terms of Service, which are incorporated herein by reference. Capitalized terms used but not defined in this Policy shall have the meanings ascribed to them in the Terms of Service.

In the course of providing the Services and operating the Site, we may collect the following categories of information:

We use the information we collect for the following purposes and on the following legal bases:

• Performance of Services and Contractual Necessity: To process, evaluate, and facilitate your business funding application; to match you with appropriate Lending Partners; to communicate with you regarding the status of your application; to verify your identity and the accuracy of your Application Information; and to fulfill our obligations under our Terms of Service.
• Legitimate Business Interests: To operate, maintain, improve, and optimize the Site and Services; to analyze usage patterns and trends; to develop new products, services, and features; to conduct internal audits, research, and analytics; to detect, prevent, and address fraud, security incidents, and technical issues; to enforce our Terms of Service and protect our rights, property, and safety and those of our users and the public.
• Legal Compliance: To comply with applicable federal, state, and local laws, rules, regulations, and orders; to respond to lawful requests, subpoenas, court orders, or other legal process; to cooperate with regulatory authorities, law enforcement agencies, and governmental bodies; and to exercise or defend legal claims.
• Consent: Where required by applicable law, we may process your information based on your prior express consent, including for purposes such as sending you marketing communications, conducting certain types of credit inquiries, or sharing your information with specific third parties. You may withdraw your consent at any time as described in Section 8 below, provided that such withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal.

We may disclose the information we collect to the following categories of third parties, for the purposes described herein:

We do not sell, rent, lease, or otherwise commercially distribute your personal information to third parties for their own direct marketing purposes without your explicit prior consent.

We implement and maintain commercially reasonable administrative, technical, and physical security measures designed to protect the confidentiality, integrity, and availability of your information against unauthorized access, alteration, disclosure, destruction, or loss. Such measures include, without limitation:

• Encryption of data in transit using industry-standard Transport Layer Security (TLS/SSL) protocols
• Encryption of sensitive data at rest using AES-256 or equivalent encryption standards
• Access controls and role-based permissions limiting access to information on a need-to-know basis
• Multi-factor authentication (MFA) for internal systems and administrative access
• Regular security assessments, vulnerability scans, and penetration testing
• Employee training on data privacy, security awareness, and incident response procedures
• Secure server infrastructure hosted in SOC 2 Type II certified data centers
• Incident response and breach notification procedures

Notwithstanding the foregoing, no method of transmission over the Internet or method of electronic storage is completely secure, and the Company cannot guarantee absolute security. While we strive to protect your information using commercially acceptable means, we cannot warrant or guarantee that unauthorized access, hacking, data loss, or data breach will never occur. You acknowledge and accept these inherent risks and agree that the Company shall not be liable for any unauthorized access to, alteration of, or loss of your information that occurs despite our implementation of reasonable security measures.

The Site uses cookies, pixel tags (also known as web beacons or clear GIFs), local storage objects, and similar tracking technologies to collect information about your browsing activities, personalize your experience, analyze Site traffic and usage patterns, and serve targeted advertisements. The types of cookies and tracking technologies we use include:

• Strictly Necessary Cookies: Essential for the operation of the Site, enabling core functionality such as page navigation, secure access, and form submissions. These cookies cannot be disabled.
• Performance and Analytics Cookies: Collect anonymized or aggregated information about how visitors use the Site, including pages visited, traffic sources, and error reports. We may use third-party analytics services, such as Google Analytics, which use cookies and similar technologies to collect and analyze usage data.
• Functional Cookies: Enable the Site to remember choices you make (such as language preferences or region) and provide enhanced, more personalized features.
• Advertising and Targeting Cookies: Used to deliver advertisements relevant to you and your interests, limit the number of times you see an advertisement, and measure the effectiveness of advertising campaigns. These cookies may be placed by third-party advertising networks.

You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site and may prevent you from accessing or using certain features of the Services. For more information on managing cookies, you may visit www.allaboutcookies.org.

We honor Do Not Track ("DNT") browser signals where technically feasible. However, as there is no industry-standard interpretation or response mechanism for DNT signals, we cannot guarantee uniform responsiveness to all DNT signals at this time.

Depending on your jurisdiction and applicable law, you may have certain rights regarding the personal information we hold about you, including but not limited to:

• Right of Access: The right to request confirmation of whether we process your personal information and, if so, to request a copy of the specific personal information we hold about you.
• Right to Rectification: The right to request correction or update of inaccurate, incomplete, or outdated personal information.
• Right to Deletion (Right to be Forgotten): The right to request that we delete your personal information, subject to certain exceptions as permitted by applicable law (e.g., where retention is necessary for legal compliance, exercise of legal claims, or legitimate business purposes).
• Right to Restriction of Processing: The right to request that we restrict or limit the processing of your personal information under certain circumstances.
• Right to Data Portability: The right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and the right to transmit such data to another controller.
• Right to Object: The right to object to the processing of your personal information for certain purposes, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw such consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.
• Right to Opt Out of Marketing: The right to opt out of receiving promotional or marketing communications by following the unsubscribe instructions contained in such communications or by contacting us directly.

To exercise any of these rights, please submit a verifiable request to us using the contact information provided in Section 13 below. We may require you to verify your identity before processing your request. We will respond to your request within the timeframe required by applicable law, but in no event later than forty-five (45) days from receipt of a verifiable request, unless an extension is permitted by law.

We will not discriminate against you for exercising any of your privacy rights. Specifically, we will not deny you goods or services, charge you different prices, provide a different quality of service, or suggest that you may receive a different price or quality of service as a result of your exercise of any privacy right.

If you are a California resident, you are entitled to additional rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA"), including:

• Right to Know: You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting or selling the information, the categories of third parties with whom we share the information, and, if applicable, the categories of personal information sold or disclosed for a business purpose and the categories of third parties to whom the information was sold or disclosed.
• Right to Delete: You have the right to request that we delete any personal information about you that we have collected, subject to certain exceptions provided by law.
• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out of Sale or Sharing: You have the right to direct us not to sell or share your personal information. As stated in Section 4 above, we do not sell your personal information. However, to the extent any sharing of information with third parties for targeted advertising purposes constitutes a "sale" or "sharing" under the CCPA, you may opt out by contacting us.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit our use and disclosure of your sensitive personal information to uses necessary to perform the Services.
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising any of your CCPA rights.

To submit a verifiable consumer request under the CCPA, please contact us using the information provided in Section 13 below. Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf as your authorized agent, may make a verifiable consumer request related to your personal information.

If you have any questions, comments, concerns, complaints, or requests regarding this Privacy Policy, our data collection and processing practices, or if you wish to exercise any of your privacy rights as described herein, you may contact us at:

We will endeavor to respond to all legitimate inquiries within a reasonable timeframe and in accordance with the requirements of applicable law. If you believe that your privacy rights have been violated, you may also have the right to file a complaint with the appropriate supervisory authority or regulatory body in your jurisdiction.