For California residents
California Privacy Policy and Notice at Collection
Effective and last updated: October 19, 2026
This notice supplements our Privacy Policy for California residents. All Finance treats the compensated transfer of a submitted lead to a company identified on our Partners page as a sale for purposes of providing clear notice and choice.
Notice at collection
We collect the categories below for the listed purposes. When live submission is enabled, we sell the categories marked “Yes” to the companies identified on our Partners page for personal-loan consulting, brokerage, matching, and follow-up. We do not currently share personal information for cross-context behavioral advertising.
| Category | Examples collected | Purposes | Sold to listed partners? |
|---|---|---|---|
| Identifiers | Name, postal address, email, telephone number, IP address | Operate and secure the site; respond to and refer requests; communicate; honor rights | Yes, except technical identifiers not included in the lead |
| California customer-record information | Contact details, employment and financial information | Evaluate, route, and respond to the loan inquiry; compliance and recordkeeping | Yes |
| Protected classifications | Confirmation that the applicant is at least 18 | Eligibility and legal compliance | Yes |
| Commercial information | Requested loan amount, purpose, and referral/funding status | Provide and measure the referral service; administer compensation | Yes |
| Internet or network activity | Pages requested, browser/device details, referring domain, security events , and application-page content and interaction events used to create a consent certificate | Deliver, secure, troubleshoot, and monitor site availability | No |
| Professional or employment information | Employment status, income, and pay frequency | Respond to and refer the loan inquiry | Yes |
| Inferences | Potential eligibility or routing indicators derived from form answers | Present and refer potentially relevant services | Yes, if included with the lead |
We retain information under the criteria described below. To opt out, visit Do Not Sell or Share My Personal Information before submitting a request.
Sensitive personal information
The form collects financial information such as income, debt amount, and an estimated credit-score range. These details are sensitive in the ordinary sense. The form does not currently request the categories that trigger California’s right to limit, such as Social Security numbers, financial-account login credentials, precise device geolocation, racial or ethnic origin, religious beliefs, union membership, message contents, genetic data, biometric identification, health information, or sex-life or sexual-orientation information. We do not use or disclose statutory sensitive personal information for purposes requiring a right to limit.
Sources
We collect information directly from you; automatically from your browser and website infrastructure; from service providers that operate or secure the site; and, when reporting is enabled, from a company identified on our Partners page about referral and funded-loan status.
Business and commercial purposes
- providing and improving the website and referral service;
- selling and disclosing a submitted lead to the companies identified on our Partners page;
- responding to and communicating about a consumer’s request;
- security, fraud prevention, debugging, and quality assurance;
- administering compensation and auditing referral outcomes;
- honoring consent, suppression, and privacy choices; and
- legal, contractual, and recordkeeping compliance.
Recipients
We disclose personal information to infrastructure, security, address suggestion, and other service providers for business purposes. When live submission is enabled, we sell lead information to the companies identified on our Partners page. A listed partner may separately disclose information to its service providers and potential lenders under its own privacy policy. We may also disclose information for legal process, safety, or a qualifying business transaction.
ActiveProspect processes application-page content, field inputs, interaction events, IP address, browser and operating-system details, and timing information as our service provider to issue a TrustedForm consent certificate. Financial and address fields are designated sensitive so their raw values are hashed rather than stored in the certificate. We do not sell this consent-record information to ActiveProspect.
During the 12 months preceding this notice, the prelaunch form did not transmit completed leads. Beginning October 19, 2026, All Finance stores validated submissions in its encrypted first-party database. The current storage system does not transfer or sell a completed lead to a listed partner. All Finance is disclosing the intended lead sale now so consumers receive notice before that separate processing is enabled.
Retention
We retain each category only as long as reasonably necessary to complete and audit the referral; administer compensation; maintain consent, do-not-contact, and opt-out records; handle privacy requests; secure the service; resolve disputes; and comply with legal and contractual obligations. We consider the sensitivity and volume of the information, the risk of harm, and whether the purpose can be achieved another way. We retain a minimal suppression record when necessary to continue honoring a choice.
The current lead and consent record is scheduled for deletion five years after submission unless we delete it sooner or a legal, fraud-prevention, dispute, suppression, or other documented obligation requires a different period.
Our current free TrustedForm Certify configuration does not include paid long-term retention. Unretained certificates are generally available for 72 hours and may remain available for up to 90 days when a form submission is detected.
Your California rights
Subject to applicable exceptions, California residents may request:
- Know/access: the categories and specific pieces of personal information collected, sources, purposes, and recipient categories.
- Delete: deletion of personal information.
- Correct: correction of inaccurate information.
- Opt out: that All Finance stop selling or sharing personal information.
- Limit: limitation of certain uses of sensitive personal information, if such processing begins in the future.
- Non-discrimination: equal treatment for exercising privacy rights, subject to permitted differences reasonably related to the value of information.
How to exercise your rights
For sale and sharing choices, use our interactive privacy-choice page or an enabled opt-out preference signal such as Global Privacy Control. We process a recognized signal for the browser or device and any profile we can reasonably associate with it.
For access, deletion, correction, or application of an opt-out to lead information already associated with you, use our Contact Us page. Include your request and the name, email, telephone number, and postal address you used. Do not send a Social Security number or identity document unless specifically requested through a permitted verification process.
We may verify access, correction, and deletion requests by matching information and asking follow-up questions. We do not require a verified request to honor an opt-out unless permitted to address suspected fraud. An authorized agent may submit a request with proof of authority; we may confirm the request directly with the consumer where allowed.
Global Privacy Control
We treat a recognized Global Privacy Control or other legally valid opt-out preference signal as an opt-out for the browser or device. The privacy-choice page displays whether the signal or stored preference has been honored. Because no login account connects browsers and offline lead records, use our Contact Us page if you also want the choice applied to information previously submitted from another browser or device.
Contact
For questions about this notice or to submit a California privacy request, visit our Contact Us page.