Privacy Policy
Effective Date: April 7, 2024
At Ridgepeak Capital, we prioritize and safeguard the privacy of our website visitors and clients. We hold our clients' privacy in high regard and have crafted this Privacy Policy to underscore our dedication to privacy protection. This Privacy Policy, unless specified otherwise, outlines our practices concerning the handling of your information when you engage with our services. This encompasses content found on this website, other websites, pages, features, or content we manage or operate (collectively referred to as the "Sites"), third-party applications relying on API, and any related services (hereinafter collectively referred to as "Services").
The Sites target a general audience and do not knowingly collect personal or other information from minors below the age of 18 intentionally. If you are below 18, please do not use our sites. Should we determine that any information collected is indeed that of a person under the age of 18, we will promptly undertake to delete, aggregate, or anonymize such information. We encourage the reporting of any known usage of our services by individuals under 18 so appropriate measures to block access can be implemented.
Ridgepeak Capital operates as a marketplace aimed at facilitating small businesses in securing and managing capital effectively. This Privacy Policy is applicable to all individuals interacting with our Sites.
We advise you to review the Terms of Use associated with Ridgepeak Capital. In instances where your consent is necessary for the processing of your personal data, we will solicit your consent for the collection, utilization, and sharing of your personal information as detailed herein.
1. Types of Information Collected
We collect various types of information about you and your business when you access our Sites.
Our Sites collect information that identifies, relates to, describes, references, is reasonably capable of being connected with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device ("Personal Information"). Personal information does not encompass publicly accessible information from government records or deidentified or aggregated consumer information.
To set up an account and access our Services, we will ask you to supply us with essential information about you. This information is either mandated by law (e.g., for identity verification), required to provide the services requested (e.g., you will need to provide three months of banking statements), or is pertinent for specific purposes detailed more comprehensively below. Please be aware that if you opt not to provide certain information, we may not be able to serve you, or the quality of our Services may be affected.
1.1 Information We Collect Directly From You
Personal Identification Information: Full name, date of birth, demographic data (e.g., nationality, gender), signature, utility bills, photographs, phone number, home address, IP address, social security number, and email.
Formal Identification Information: Government-issued identification such as a Passport, Driver's License, National Identity Card, State ID Card, Tax ID number, and other information required for legal compliance under financial, consumer protection, and commercial financing laws.
Institutional Information: Employer Identification Number (EIN), evidence of legal formation (e.g., Articles of Incorporation), personal identification data for all principal beneficial owners.
Financial Information: Banking information, tax return data, Federal and State Tax ID, income and expenditure statements, credit score, business invoices, and payment instructions.
Transaction Information: Data about the transactions you conduct through our Services, including recipient names, amounts, and timestamps.
Employment Information: Workplace location, job title, and description of role.
Business Information: Business type, list of executives, members, or managers, incorporation documents, certificates of good standing, and ownership structure.
The documents and information collected are securely stored and protected. To fulfill our service commitments to you, you grant permission for us to share all information provided to or gathered by Ridgepeak Capital on your behalf with lenders, with other entities who may require this information to provide services to Ridgepeak Capital, for Ridgepeak Capital's business needs, or to fulfill legal and regulatory obligations. We will not disclose, transmit, or share these documents without your explicit consent, unless the disclosure is pursuant to legal and regulatory mandates that prohibit such notification.
1.2 Information We Collect from You Automatically
We acquire and store specific types of information by default when you engage with the Sites or utilize the Services. This information enables us to address customer support concerns, enhance the functionality of our Sites and applications, offer a seamless and personalized experience, and safeguard your account from fraudulent activities. Automatically collected information includes:
Online Identifiers: Geolocation/tracking details, browser fingerprint, operating system details, browser type and version, and/or device IP addresses.
Usage Data: Authentication data, security answers, click-stream data, content of public social networking posts, and other data collected via cookies and analogous technologies.
For instance, our server logs may automatically record information such as your navigation path to and usage of the Services, type of device and unique device identifier numbers, device event data (such as crashes, system activity, hardware settings, browser type, browser language, the date and time of your request, and referral URL), interaction details between your device and our Sites and Services, geographical location, and additional technical data collected through cookies, pixel tags, and other technologies that uniquely identify your browser.
1.3 Information Collected from Third Parties
Occasionally, we might acquire information about you from outside sources that are legally permissible. These external sources may encompass:
Public Databases & ID Verification Partners: We retrieve information about you from public databases and ID verification partners for purposes of verifying your identity in accordance with applicable law.
Credit Bureaus: With your consent, we retrieve information from credit bureaus, including your credit report. We will not disclose your credit report without your explicit consent. We retrieve your credit information to better provide our services to you, to match you with appropriate lenders, to validate your identity, and to prevent fraud.
Financial Entities: With your permission, we retrieve details directly from your financial institution, which includes account statements. This is crucial for assisting in service provision, particularly during the underwriting stages. To facilitate this, we use services such as Finicity and Ocrolus. Finicity's privacy practices are detailed at https://www.finicity.com/privacy/. Similarly, Ocrolus's privacy practices are detailed at https://www.ocrolus.com/privacy-policy/.
Collaborative Marketing Entities & Distributors: When not restricted by law, such partners may share insights with us so we can better ascertain which of our Services might interest you.
Promotional Networks & Analytic Service Providers: These providers offer us anonymized details about your discovery of our Sites and your interaction with our digital assets and Services, possibly before you set up an account.
1.4 Anonymization and Aggregation of Data
Anonymized and collective data may be utilized by us for any commercial objective. Data anonymization is a method that alters or removes personal information so it can't be linked with an individual. This Privacy Policy's other sections do not cover anonymized or aggregate customer information.
Ridgepeak Capital may deploy anonymized or aggregate data for business aims, such as understanding customer necessities and behaviors, enhancing our offerings, conducting market research, and security threat identification. We may conduct analytics on anonymized datasets or use third-party analytics services. Data types we may anonymize encompass transaction details, browsing data, performance metrics, and indicators of fraud. Furthermore, in compliance with applicable laws on personal information deletion, should you request your data to be purged, your data will be anonymized or aggregated.
2. How Information Is Gathered
We gather information about you during the funding application process, as well as through your interactions with our Sites. Where we require your consent to handle your personal information, we will seek your agreement to the gathering, usage, and sharing of your personal information as outlined in this policy. If you disagree with or are uncomfortable with any aspect of this Privacy Policy, you should immediately stop accessing or using our Services.
We gather the types of personal information listed below from the following sources: directly from you (for example, from forms you fill out or through our Products and Services), indirectly from you (for example, by observing your activities on our Sites), and from third parties (for example, from third-party services that you link to as part of using our Services).
During the Funding Application Process: To process your initial request for funding, we might require your name, address, telephone number, email address, and other personal details. We may also require the name of your company, its address, its federal and state tax ID, the kind of business, business location, average monthly sales, state of incorporation, and the name of your Landlord. Such information is primarily used to process your request or as otherwise mentioned here.
Emails and Telephone Calls: We ask for an email address from you when you sign up for our services. We use your email for transactional (e.g., funding application status, updates, confirmation) and promotional (e.g., newsletters, new service offerings, event notices, special third-party promotions) purposes. Email messages we send may include code that enables our database to track your interaction with the emails. If you prefer not to receive promotional emails from us, please refer to the section labeled "Choice/Opt-Out." We reserve the right to send you certain communications related to the Ridgepeak Capital services, such as service announcements and administrative messages, without offering you the chance to opt out of receiving them. We may also contact you via telephone or text message solely in connection with Ridgepeak Capital's services. We fully adhere to the U.S. CAN-SPAM Act, the Telemarketing Sales Rule, and the Telephone Consumer Protection Act (TCPA).
Log Files: Each time you visit any of our Sites, our servers automatically collect information from your browser (such as your IP addresses, browser type, Internet service provider, referring/exit pages, platform type, date/time stamp, and click count) to analyze trends, administer the Sites, prevent fraud, track visitor movement in the aggregate, and collect broad demographic information. We do not share the log files externally.
Cookies and Similar Technologies: "Cookies" are pieces of information that may be placed on your computer by a service for the purpose of facilitating and enhancing your communication and interaction with that service. We may use cookies (and similar items such as clear gifs, web beacons, tags, etc.) on our Service to customize your visit and for other purposes to make your visit more convenient or to enable us to enhance our Service. We may also use and place cookies on your computer from our third-party service providers in connection with the Service, such as an analytics provider. In addition, our advertisers and business partners may set cookies and similar items on your computer when you use our Service. You may stop or restrict the placement of cookies on your computer or flush them from your browser by adjusting your web browser preferences, in which case you may still use our Service, but it may interfere with some of its functionality. If you delete your cookies, change browsers, or use a different cookie, our cookie (or an opt-out cookie) may no longer work and you will have to reinput (or opt-out) again.
Analytics and Conversion Tracking: We may use analytics services that use cookies, javascript, and similar technologies to help us analyze how users use the Sites. The information generated by these services about your use of the Sites (including your IP address or a truncated version of your IP address) is transmitted to and stored by analytics service providers on their servers. For example, we use cookies on our sites for Google Analytics. The Analytics Service collects information anonymously and reports website trends without identifying individual visitors. You can opt out of Google Analytics without affecting how you visit our sites by visiting https://tools.google.com/dlpage/gaoptout. We may also use Google conversion tracking and/or similar services.
3. How Your Information Is Utilized
We utilize your information for several purposes, all of which support Ridgepeak Capital's Sites and Services, including to: provide Ridgepeak Capital services and process your data to deliver the Services to you; deliver service communications to keep you informed about our Services and notify you of relevant security issues or updates; offer customer service when you contact us to address questions, disputes, or troubleshoot issues; conduct research and development to better understand how you use and interact with our Services; improve your experience and provide a customized experience; facilitate corporate transactions such as acquisitions, mergers, or other corporate transactions; maintain legal and regulatory compliance; enforce our terms in our user agreement and other agreements; detect and prevent fraud; conduct quality control and staff training; and ensure network and information security.
4. Disclosure of Information to Third Parties
We may share your personal information as required by law, to deliver the Services, and for valid business reasons. We share your personal information by disclosing it to a third party for a legitimate business purpose. These disclosures for business purposes are made under written agreements that outline the uses, mandate the confidentiality of the personal information, and forbid the use of the disclosed information for any purpose other than executing the contract.
4.1 Disclosure by Law
You acknowledge and agree that we may share information you provide if necessary by law, at the request of a third party, or if we, in our sole judgment, determine that disclosure is reasonable to (1) comply with the law, requests or orders from law enforcement, or any legal process; and (2) protect or defend Ridgepeak Capital's, or a third party's, rights or property.
4.2 Lenders and/or Brokers
By registering for our services or submitting a request for a business financing product or service, you indicate your consent to the sharing of your information with lenders and/or brokers within our network. We will not conduct a credit check without your permission. Please be aware that the lenders, brokers, and/or other service providers with whom you are matched may retain your information, even if you do not enter into an agreement for their products or services. Please contact each such party directly regarding their privacy and information policies.
4.3 Disclosure to Trusted Third Parties
Upon completing a profile on the sites and filling out the entirety of the application, we will share your information with third-party service providers with whom you are matched. By accepting the Terms of Use, you agree to receive various marketing materials from our trusted third parties, including potential lenders and service providers. We are not liable for the content of the third parties or their actions. Your information may also be shared with third-party contractors that provide services to Ridgepeak Capital and are bound by this privacy policy. Your information will be treated as private and confidential by such third parties and not used for any other purpose than what you authorize. If you do not wish to receive offers from our trusted partners, you can change your email preferences at any time by following the steps outlined in the "Choice/Opt-Out" section below.
4.4 Service Providers
We share information with service providers under contract who assist with parts of our business operations. Our contracts demand these service providers to use your information only in relation to the services they provide for us and prohibit them from selling your information to anyone else. Examples of the types of service providers we may share personal information with include: network infrastructure, cloud storage, payment processing, transaction monitoring, security, document repository services, customer support, internet services, data analytics, information technology, and marketing.
4.5 Other Companies
We may share information with companies or other entities that we plan to merge with or be acquired by. Notice of any changes in applicable policies will be provided in advance.
4.6 Third-Party Advertising Sites and Providers
We may share certain personal information with, or make certain personal information available to, third-party advertising sites and providers, such as Usage Data and Online Identifiers, when you visit certain of our Sites or specific portions of our Sites.
4.7 Professionals
We may share information with our professional advisors who provide banking, legal, compliance, insurance, accounting, or other consulting services to complete third-party financial, technical, compliance, and legal audits of our operations or otherwise comply with our legal obligations.
4.8 Miscellaneous
We may disclose your personal information for any purpose with your consent.
5. Updating, Accessing, Retaining, and Deleting Your Information
You may choose to update, access, or delete your data; however, we may be legally required to retain your information to comply with the law.
You may update or access your contact information at any time by submitting a request to Ridgepeak Capital. You may delete your account under certain conditions by submitting a request to Ridgepeak Capital. In specific situations, Ridgepeak Capital is legally obligated to maintain the information in your account. Under these conditions, Ridgepeak Capital will place your account into a deactivated status, opt you out of all communications, and disable your access to the account.
In cases where Ridgepeak Capital can fulfill your request to delete your account, the data you provided will be retained in a commercially reasonable manner and in compliance with relevant lending laws. After your account is deleted, Ridgepeak Capital will not share your information and will use your data solely for internal research and marketing purposes.
We store your personal information securely for the duration of your Ridgepeak Capital Account. We will retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements or to resolve disputes. Our typical retention practices include: personal data collected for legal compliance under financial, consumer protection, and commercial lending regulations may be preserved following account termination for the duration mandated by such statutes; your contact details utilized for marketing activities are maintained indefinitely until you opt out; content you contribute to our sites may be stored post-account deactivation for auditing and fraud prevention objectives; and recordings of telephone calls may be kept for a period of up to six years.
Information collected via technical means such as cookies, webpage counters, and other analytics tools is kept for a period of up to one year from the expiry of the cookie.
Opting out of receiving electronic communications from us. If you no longer wish to receive promotional email communications from us, please follow the instructions provided in Section 7 below.
Your California privacy rights. If you are a California resident, please review our California Privacy Notice in Section 8 to learn more about the personal information we collect, use, and disclose, as well as your privacy rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).
6. Security
We have implemented measures to safeguard your information in a manner that is considered commercially reasonable. We employ comprehensive security protocols to prevent the loss, misuse, and alteration of the information under our care. These protocols include the application of industry-standard encryption techniques and restricted administrative access to site data, along with other proprietary security measures enforced across all storage and transmission channels for user data. However, it must be acknowledged that no transmission over the Internet can be deemed entirely secure, and thus we cannot guarantee or warrant the absolute security of any information transmitted to us online. For additional details, please consult our Terms of Use.
Should there be a data breach at Ridgepeak Capital, we will inform you as promptly as is feasible. We will advise you that a breach has occurred and provide any other pertinent details necessary to meet our obligations under applicable breach notification statutes and regulations.
It is crucial not to share your account login and/or password with others. The confidentiality of your account details is imperative, and disclosing your account details may increase the risk of unauthorized access to your account.
7. Choice / Opt-Out of Marketing
You have the option to cease receiving marketing communications from us. You may decide not to receive our newsletter or marketing emails by following the unsubscribe instructions included in these emails, or you can contact us at [email protected].
Choosing not to share specific information with us may result in an inability to access certain features of the sites and secure the services and products you seek.
Should you choose to discontinue our services after registration, and wish to no longer receive communications from lenders, brokers, or other third parties your information has been shared with, you can cancel your account as outlined herein. Once your account is canceled, we will no longer forward your information to lenders, brokers, or other third parties. However, this does not ensure that these entities will stop contacting you or using your information. It's important to directly contact all lenders, brokers, and/or other third parties to request they stop contacting you.
Due to specific federal and state laws, we are required to keep a record of your information for predetermined periods. Because of these regulations, we might be unable to entirely remove your data from our records until these legal storage durations have been met.
8. California Privacy Notice
Along with the rights outlined earlier, the information in this section is specifically for individuals residing in the State of California. This notice is created in adherence to the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (collectively referred to as the "CCPA"), and any terms defined in the CCPA hold identical meanings in the context of this Policy.
8.1 Categories of Personal Information Collected
We have collected the following categories of personal information from California residents within the last twelve months:
| Category | Examples |
|---|---|
| Identifiers | Includes an individual's full name, electronic mail address, contact number, residential address, social security number, driver's license, passport, or other identification issued by a government body; login and account information; Employer Identification Number (or an analogous identifier assigned by a governmental entity); alongside additional contact and identity verification details. |
| Personal information types as outlined in the California Civil Code § 1798.80(e) | Encompasses an individual's full name, contact number, residential address, signature, social security number, driver's license, passport, or other documentation issued by a government; financial transaction instruments information; banking details. |
| Internet or other electronic activity information | Includes digital identifiers like cookies, pixel trackers, integrated scripts; identifiers such as IP address, device ID, type of device, types of internet browsers and their versions, screen resolution, operating system details including name and version, device manufacturer and model, language preferences, as well as plugins; additionally, geographical location data, browsing patterns including duration on the Sites, pages viewed, links engaged with, language selections, usage trends, and the sources that directed or referred you to our Sites including specific Websites and Applications. |
| Protected classification characteristics under California or federal statutes | Date of birth; demographic details including nationality and gender among others. |
| Commercial information | Details on payment histories; account standings and activities; records of products and services purchased, acquired, or under consideration; utility billing information; profit and loss statements; income declarations; credit ratings and other credit-related details; data on transactions conducted through the Services; and/or other purchasing or consumption histories, tendencies, and preferences. |
| Geolocation data | Location information determined through the Global Positioning System ("GPS") based on your IP address. |
| Audio, electronic, or visual data | Imagery; audio recordings from interactions with our customer support. |
| Professional or employment-related details | Worksite location, position title, and/or job responsibilities. |
| Inferences drawn about you | Assumptions made from data regarding an individual to compile a profile about a consumer reflecting the consumer's preferences, traits, psychological trends, predispositions, behavior, attitudes, intelligence, capabilities, and aptitudes. |
Please be aware that due to the intersecting characteristics of the various categories of personal information delineated above, certain pieces of personal information we gather might aptly fall under several categories.
Sensitive Personal Information. A portion of the personal information we collect may be classified as "sensitive personal information" under California law, encompassing: social security, driver's license, state identification card, and/or passport numbers; account login details in conjunction with security codes or passwords; exact geographic location; racial and/or ethnic background; and data related to sex life or sexual orientation.
Ridgepeak Capital commits to not holding onto any information we collect from you for a duration exceeding what is considered reasonably necessary for the purposes disclosed. Our decision on specific retention periods is influenced by the duration of our ongoing relationship with you, any legal obligations we must adhere to, and whether retention is deemed prudent in view of our legal standing.
8.2 Utilization of Personal Information
Ridgepeak Capital may gather, employ, or reveal personal information regarding California residents for purposes enumerated in Section 3 of this Privacy Policy. The sensitive personal information gathered may be utilized for any of these outlined purposes.
8.3 Acquisition of Personal Information
Ridgepeak Capital may accumulate personal information concerning California residents from the categories of sources indicated in Sections 1.3 and 2 of this Privacy Policy.
8.4 Sharing of Personal Information
We may share your personal information to the categories of service providers and third parties specified in Section 4 of this Privacy Policy. This encompasses the sharing of your personal information with service providers for a business purpose. Whenever we share personal information for a business purpose, we enter a contract that delineates the purpose and obligates the recipient to maintain confidentiality.
Moreover, Ridgepeak Capital "sells"/"shares" specific personal information, as those terms are interpreted by the CCPA, for the aims of cross-contextual behavioral advertising. Over the last twelve months, we have "sold"/"shared" the following categories of personal information with advertising partners: Identifiers; Internet or other similar network activity data; Personal information types as specified in the California Civil Code § 1798.80(e); and Internet or other electronic activity data.
8.5 Your California Privacy Rights
As a California resident, under applicable California legislation, you possess the following rights concerning your personal information:
Right to Know: Up to twice in a 12-month period, you may request details about the personal information we collect, utilize, disclose, and/or sell.
Right to Delete: Under certain conditions, you may request the deletion of your personal information that we have collected.
Right to Opt-Out of Sale or Sharing: You may opt-out of the sale or sharing of your personal information, as defined under California law.
Right to Limit Use and Disclosure: You can request that the use or disclosure of your sensitive personal information be limited to necessary purposes for providing our products and services to you.
Right to Correct: You may request corrections to your inaccurate personal information.
Right to Non-Discrimination: You are entitled to not receive discriminatory treatment for exercising the privacy rights described herein.
How to Submit a Request: You can exercise your rights by completing our online form. Your request will undergo an identification and residency verification process as allowed by the CCPA. Verification requires providing your first name, last name, and email address.
Requests by Authorized Agents: If you are a California resident, you may designate an authorized agent for making requests on your behalf, who must provide proof of their authorization or evidence of power of attorney per the California Probate Code sections 4000 to 4465.
Household Data: We do not collect household data. Requests from household members under the age of 18 will be declined, as we do not collect information from minors.
Responses: We aim to respond within forty-five (45) days following receipt of a Verifiable Consumer Request, applicable for requests covering up to a twelve-month period and limited to two occasions per year. We reserve the right to extend the response period by an additional forty-five (45) days when necessary, with timely notification of such extension.
Direct Marketing by Third Parties: Ridgepeak Capital does not share personal information with third parties for their direct marketing purposes. California residents have additional rights to request information about such practices under California's "Shine the Light" law. If you are a California resident and would like to inquire further, please email [email protected].
8.6 Notification of Right to Opt-Out
Ridgepeak Capital engages in the "sale"/"sharing" of personal information with third parties for the aim of cross-context behavioral advertising, in accordance with the definitions provided by the CCPA. Should you prefer to opt-out of the "sale"/"sharing" of the specific personal information collected during your interactions with our Sites and Services for the purpose of cross-context behavioral advertising, you may do so by completing our online form.
9. Notice to Vermont Residents
Residents of Vermont are entitled to extra restrictions on the sharing of their personal information. Under Vermont law, we will not share information we gather about Vermont residents with external organizations apart from Ridgepeak Capital, except: (1) as the law allows; (2) with entities conducting marketing or providing services on our behalf; (3) names, contact details, and information related to transactions and experiences with other financial institutions under joint marketing agreements; or (4) upon receiving the explicit approval or consent from the Vermont resident. Furthermore, we will not divulge non-transactional data about Vermont residents obtained from our affiliates without the Vermont resident's explicit consent.
10. Notice to Nevada Residents
Under Chapter 603A of the Nevada Revised Statutes, residents of Nevada have the right to opt out of the sale of certain personal information. Ridgepeak Capital, which does not traditionally sell personal information, offers Nevada residents the option to prevent any potential sale of their personal information by submitting a request to [email protected]. Like our approach for Vermont residents, we ensure not to share Nevada residents' information with external parties except as law allows, with entities performing marketing or services on our behalf, under joint marketing agreements, or with the resident's explicit consent.
11. Amendments to the Privacy Policy
We reserve the right to modify this Privacy Policy and will inform you should such updates occur; nonetheless, we advise you to regularly check this policy for the most current updates. We may revise this privacy policy to mirror adjustments in our data handling practices. If there are any significant changes, we will inform you via email (sent to the email address listed in your account) or through a notice on the Sites. Any alterations to this Privacy Policy will be indicated by updating the revision date at the top of the Policy.
12. Contact Us
Should you have queries regarding this Privacy Policy or wish to exercise your privacy rights, please reach out to us at: [email protected]