COLORADO PRIVACY NOTICE

Section 1.01 Purpose. This Colorado Privacy Notice describes the privacy rights that we extend to Colorado residents with respect to personal data collected through www.loanamerica.com and our outreach to school and institutional contacts. It supplements our Website Privacy Policy.

Section 1.02 Financial Institution Data. The Colorado Privacy Act, Colorado Revised Statutes Section 6-1-1301 and following, contains exemptions for financial institutions and affiliates subject to the Gramm-Leach-Bliley Act, and for personal data collected and maintained in connection with activity regulated by that Act and by the Fair Credit Reporting Act. Information that we collect in connection with a consumer loan application or account is governed by our GLBA Privacy Notice. We extend the rights below to Colorado residents with respect to other personal data, whether or not the Colorado Privacy Act requires us to do so.

Section 1.03 Product Availability. This Notice describes how we handle personal data. It does not indicate that any loan product is available in Colorado or in any other particular state.

Section 2.01 Categories. We process the categories of personal data listed in Article II of our Website Privacy Policy, which are identifiers and contact details, school and program information, financial details that you choose to enter, partner and institutional submissions, communications, device and usage data, and the approximate location associated with your Internet Protocol address.

Section 2.02 Purposes. We process personal data for the purposes listed in Article III of our Website Privacy Policy. We do not process personal data for targeted advertising, and we do not sell personal data. We do not process sensitive data outside of an application.

Section 2.03 Recipients. We disclose personal data to the categories of recipients listed in Article IV of our Website Privacy Policy.

Section 3.01 Rights. Colorado residents may: (a) confirm whether we are processing their personal data and access it; (b) correct inaccuracies in personal data; (c) delete personal data; (d) obtain a portable copy of personal data they previously provided; and (e) opt out of the processing of personal data for targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in the first two of the opt-out activities. Decisions on credit applications are made under the Gramm-Leach-Bliley Act and consumer credit laws and are described in the documents that accompany an application.

Section 3.02 Universal Opt-Out Mechanism. We recognize a Global Privacy Control signal as a valid request to opt out of targeted advertising and the sale of personal data.

Section 3.03 How to Submit a Request. Submit a request at www.loanamerica.com/privacy-request, by email to [email protected], or by telephone at (213) 818-7729. We will respond within forty-five days and may extend that period once by up to forty-five additional days where reasonably necessary, with notice to you. We will verify your identity before acting. An authorized agent may submit an opt-out request on your behalf.

Section 4.01 Right to Appeal. If we decline to act on your request, you may appeal within a reasonable period after you receive our decision by writing to [email protected] with the subject line "Colorado Privacy Appeal." We will inform you in writing of our response within forty-five days after we receive the appeal, which we may extend by up to sixty days where reasonably necessary, and we will explain the reasons for our decision.

Section 4.02 Attorney General. If your appeal is denied, you may contact the Colorado Attorney General at the Department of Law, Consumer Protection Section, to submit a complaint.

Section 5.01 Contact Information. Questions may be sent to [email protected] or to American Originations LLC, 350 S Rampart Street, Suite 200, Las Vegas, Nevada 89145.