Advantafirst Capital Financial Services, LLC

Advantafirst Privacy Policy

EFFECTIVE DATE: February 5, 2026

This Privacy Policy describes how Advantafirst Capital Financial Services, LLC and its affiliates (“Company”) collect, protect, share, and use your information. This includes information you provide in connection with an application to us, on our websites (“Sites”), and through other ways you may interact with us online and offline. This policy applies only to Company and the Sites where it appears.

If you are a California resident, click here to view “Your California Privacy Rights” in Section 5, and our notice at collection for information provided pursuant to California law. For Advantafirst’s financial privacy disclosures and related notices, please visit: GLBA Privacy Policy

Quick Guide to Contents

1. INFORMATION WE COLLECT.

We may collect, receive, and develop several categories of personal information about you, depending on the nature of your interactions with us. For example:

We collect Contact and Demographic Information.We collect contact information and identifiers such as your name, email, telephone number, and address. We may also collect information such as your gender, birth date, and age. We collect information about your general location using your zip code.

We collect Payment and Credit Information.If you apply for a loan from us, we collect your credit report, an OFAC report, and your Social Security number. We also collect non-credit related information, such as information about your affiliated companies, their corporate structure, and distributorship arrangements with affiliates.

We collect other information you submit or send. We collect information you provide to us about you or your company, where you operate, and your services, websites, sales, sales channels, and funding. We may collect other information you provide to us about your business, including why you want to work with us and documents related to you, your company, and your services.

Sensitive Information. Some of the information described above may be considered “sensitive” under the laws of certain jurisdictions (including Social Security numbers and credit information) (“Sensitive Information”). Whether information is Sensitive Information will depend on the laws of your jurisdiction.

2. SOURCES OF PERSONAL INFORMATION

We collect personal information about you directly and indirectly, including from the following sources:

Directly from you. We collect information from your application. We also collect any personal information you provide if you make a request, contact us, or provide feedback.

From our affiliates, vendors, and other third parties. We collect information from reports we receive from consumer reporting agencies or credit bureaus. We also collect information from current and previous transactions or experiences with us or our affiliates. Vendors that host or maintain our Sites or help us conduct due diligence may also send us information about you.

3. HOW WE USE THE INFORMATION WE COLLECT

We use the categories of personal information referenced above for the following purposes:

We use information to provide you with loans and related services, and respond to your questions and requests. We use Contact Information and Payment and Credit Information to provide you with certain services, including to evaluate your application for a loan. We also use these categories of information to verify your identity, and to communicate with you, including about our relationship, your loans, your activities, in our discretion, changes to any of our policies.

We use information to conduct due diligence and transact with you. We use Contact Information and Payment and Credit Information to conduct due diligence regarding your application and our relationship.

We use information to evaluate and operate our services. We may use Demographic Information to conduct general analytics, to facilitate the performance of services, and for aggregate use. We may use this information to keep our services functional, to provide materials, and to troubleshoot problems.

We use information for security purposes. For example, we may use all categories of personal information to protect our company, our customers, and our business partners. We also may use personal information to protect our company, our Sites, or our services, as well as to detect and investigate activities that may be illegal, unauthorized, or prohibited (such as cyberattacks or fraud).

We use information to verify requests made pursuant to this Privacy Policy. We will use certain pieces of personal information, such as Contact Information, to verify your identity if you make requests pursuant to this Privacy Policy. The verification steps and the pieces of personal information that we request may vary depending on the sensitivity and nature of your request.

We use Sensitive Information for necessary or reasonably expected purposes – specifically, to provide you with products and services (i.e., to issue loans), to evaluate your application, for tax purposes, and as authorized by law.

We may use information as otherwise disclosed or permitted by law, or as we may notify you. We also use information as otherwise permitted or required by law, regulation, or court order; or if a government agency or investigatory body requests it. We may use de-identified or aggregated data for any purpose, unless prohibited by law. We do not attempt to re-identify de-identified data, except as permitted or required by law.

4. SHARING OF INFORMATION

We share information within our family of companies. This means we share information with our affiliates for our and our affiliates’ everyday business purposes. We share information about your transactions, experiences, and creditworthiness with our affiliates.

We share information with vendors providing services on our behalf. This includes vendors who help us process your transactions, maintain our account(s), and communicate with you.

We share information to comply with the law, or to protect ourselves, our business partners, and others. This includes sharing to respond to court orders and subpoenas and to comply with regulatory requirements. It also includes sharing information where we believe in good faith that the law or a governmental authority requires it, if a government agency or investigatory body requests it, to verify requests or enforce our terms, and to address fraud or security issues.

We may share information with a successor business. In the event that we are involved in a bankruptcy, merger, acquisition, reorganization or sale of assets, any or all categories of personal information may be sold or transferred as part of that transaction. We may also share personal information with others as they conduct due diligence as part of our corporate changes.

We may share personal information for other reasons we may describe to you from time to time, with your consent, or as permitted or required by law. We may share de-identified or aggregated data for any purpose, unless prohibited by law.

5. YOUR PRIVACY RIGHTS.

You may have certain rights under financial privacy laws. If you work with Advantafirst, please review the financial privacy disclosures and other notices available at GLBA Privacy Policy.

You can control certain cookies and tracking tools. Your browser or device may give you the ability to control cookies or other tracking tools. How you do so depends on the browser. To control flash cookies, you can go here. Why? Because flash cookies cannot be controlled through your browser settings. If you block or reject cookies and tracking tools, certain features on our Sites may not work, and not all of the tracking describe in this Privacy Policy will stop.

Our Do Not Track Policy: Some browsers have “do not track” features that allow you to tell a website not to track you. We will respond to opt-out preference signals to the extent required by law for your browser or device, but we do not respond to generic “do not track” signals. Your selections are specific to the device, website, and browser you are using, and are deleted whenever you clear your browser’s cache.

Your California Privacy Rights.

Shine the Light. If you reside in California, you may have the right to ask us one time each year if we have shared personal information with third parties for their direct marketing purposes. Please note that we do not share personal information with third parties for their direct marketing purposes.

CCPA. If you reside in California, you have the right to make the following more specific requests with respect to your personal information. We will not discriminate against you for making any of these requests.

Additional information: California residents can exercise these rights, if applicable, by emailing us at usb2bprivacy@grupobimbo.com. or writing to us at Advantafirst Capital Financial Services, LLC, 5525 N. MacArthur Blvd, Suite 850, Irving, TX 75038. We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain personal information as permitted by law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate requests. We will take reasonable steps to verify your identity prior to responding to certain verifiable requests. The verification steps will vary depending on the sensitivity of the personal information and whether you have an account with us. California residents may designate an authorized agent to make a request on their behalf. When submitting the request, please ensure the authorized agent is identified as an authorized agent.

Additional disclosures: For purposes of exercising the rights in this Section 5, please note the following regarding how we collect and use your personal information as described in this Privacy Policy:

6. CHILDREN.

Our Sites are not directed to children under 18. We do not knowingly collect, use, sell, share, or disclose personally identifiable information from anyone under 18 years of age. If you think your child has provided us with personal information, please contact us at usb2bprivacy@grupobimbo.com.

7. SECURITY AND RETENTION OF YOUR INFORMATION.

We use standard security measures, but the Internet is not 100% secure. We cannot promise that your use of our Services will be completely safe. We encourage you to use caution when using the Internet. This includes not sharing your passwords.

We will retain information for as long as it is reasonably needed or permitted in light of the purposes for which we collected it. We also retain information as required by law. The criteria we use to determine our retention policies include the length of our relationship with you, your requests, your continued use of our Sites, ongoing obligations such as contracts and services, and our legal obligations.

8. OTHER SITES.

Our Sites may contain links to other sites that we do not own or operate. are not responsible for these sites or their privacy practices. You should also independently assess any site and its privacy policies.

9. CHANGES.

We may update this Privacy Policy to reflect changes to our information practices. If we make any material changes we will notify you by either email (sent to the e-mail address you have provided) or by means of a notice on our Site prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

10. CONTACT US.

If you have any questions or concerns about this Privacy Policy, our privacy practices, or your experiences with the Sites, please contact us at usb2bprivacy@grupobimbo.com.