Privacy Policy and Notices

We may update the Bread Privacy Policy from time to time. If we do this, we will post the changed Bread Privacy Policy on the Site and will indicate at the top of the page when this policy was last revised. If any such changes impose additional obligations on you or if we deem any of the change to be material, we will inform you of these changes. Your continued use of the Bread Services or the Site after we have made any such changes will constitute your acceptance of the new Bread Privacy Policy.

We may change this Privacy Policy. If you continue to use the Bread Services or the Site, you are agreeing to the new Bread Privacy Policy. The date on the top shows when the Bread Privacy Policy was last updated.

Information We Collect About You

When you register to use the Bread Services by applying for a loan (including pre-qualification for a loan) on a merchant website or registering on the Site, we collect your name, your email address, your phone number, date of birth, an identification number, and home or business street address. We may collect additional information from you in order to enable us to verify your identity. As part of your continued use of the Bread Services, we may also collect financial information about your bank account or your debit card information.

In order to help us further identify you, we may also gather information about the device you are using to access the Bread Services or the Site, including any information about the device, its location, the device’s IP address and any other information sent to us by the device. We may also gather information about your use of our Site or any merchant website, including your interaction with the loan application, your past use of the Bread Service, any past purchases that you’ve made using the Bread Service and any actions you have taken relating to your application.

We may also obtain information about you from third party sources. For example, we work with identity verification companies that will help us identify you. As part of the credit underwriting process, we will obtain information about you, including your personal information and credit report, from credit reporting agencies.

We ask for and collect information about you. This information is used for many purposes, including verifying who you say you are and assessing your creditworthiness. We may also verify the information you provide with third party sources. These parties may also give us additional information about you.

Web Information Collection

We use cookies or other anonymous identifiers to collect information about you. We may also gather and store information about the type of browser you are using, your internet service provider, or your operating system. We may use this information to remember your settings when you use the Bread Service or access the Site, to analyze trends, to help with our marketing efforts and to otherwise improve our services. We may share this information with our partners and vendors. You can control the use of cookies at the individual browser level. If you reject cookies, you may still use the Bread Services or access the Site.

We may collection information about how you use the Bread Services or the Site and share this with our partners and vendors.

Retaining Your Information

We will retain your information for as long as your account is active or as needed to provide you the Bread Services or as required by law. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

For legal and other reasons, we need to retain the information we collect about you. We will only use this information for limited purposes.

How and When Your Information Is Shared With Other Parties

We work with many vendors and partners that help us with our operations generally and help us perform services on behalf of the Bank. These vendors and partners include identity verification services, credit reporting agencies and other data providers, servicing companies and electronic payment service providers. We may share your information with any one of these vendors and partners to allow them to perform the services they have agreed to provide us. In each case, we have an agreement with the vendor or partner that will require them not to disclose or sell you information to a third party (unless required for them to provide services to us or if required by law).

We may share your information with the merchant on whose website you are using the Bread Services.

We may also share your information in response to a judicial proceeding, court order, or legal process or for the purposes of preventing fraud or criminal activity, as required by law or to protect our legal rights.

Cross River Bank will have access to any information you provide to us. Please see Cross River Bank’s privacy notice below.

We may share your information with vendors and partners or our affiliates who help us provide our services. We may share your information with the merchant on whose website you are using the Bread Services. We may also share your information in response to a legal inquiry, if needed. Cross River Bank will have access to the information you provide to us.

How We May Use Your Information

Some of our employees and representatives may have access to your information. We have in place policies and strong safeguards to ensure that your information is protected and kept confidential.

We will use your information for our everyday business purposes, including working with the Bank to assess your eligibility and creditworthiness for obtaining a loan, processing transactions with you, collecting repayment amounts on your loan, resolving disputes, and otherwise maintaining your account with us. We may also use your information to reduce the risk of fraudulent transactions and to better assess credit risk. For these reasons, some of our employees and representatives and agents working on our behalf may have access to your personal information. In each case, any employee, representative, or agent with access to your information will be required to comply with our policies on safeguarding your information and keeping your information confidential.

We will use your information for our everyday business purposes. As discussed above, we may share your information with vendors and partners and affiliates. We may also share your information with the merchant partner where you used the Bread Services.

How We Safeguard Your Information

We maintain strong security safeguards to ensure the security and confidentiality of your personal information, protect against any anticipated threats to the security of your personal information, protect against unauthorized access to your information, and ensure the proper disposal of your personal information. We have adopted a comprehensive security policy that complies with law and regulations and reflects industry standards.

Our security policy requires us to consistently monitor the risk of any threats to the administrative, technical, and physical safeguards we have put in place to protect your information. The safeguards include, at a minimum, firewalls and data encryption and restricting access to your personal information only to those employees who have a need to know such information to carry on our operations. Further, access to our physical office is restricted only to our employees and representatives. These safeguards are reviewed and adjusted periodically based on ongoing risk assessments.

We have strong security safeguards to ensure the privacy of your information and a security policy to consistently monitor risks. We take safeguarding your information very seriously.

Other Sites

The Bread Privacy Policy only covers your use of the Bread Services or access to the Site. Our merchant partners may have different privacy policies with respect to the handling of your information when you interact with the merchant’s website. You should consult their privacy policies to understand how any information you may have provided to merchants, or that the merchant may have accessed, will be handled.

This policy only covers the Bread Services and this Site. The merchant with whom you use the Bread Services will likely have their own privacy policies.

How You Can Correct Your Information

You can access all of your personal information by logging into your account at www.getbread.com/borrowerportal. You can update your password, cellular phone number, email address, physical address, phone number and bank account information at any time, and if you need to change any other information in your profile you can contact us at support@getbread.com.

You can, and should, update your information by logging into your account.

Compliance with State and Federal Laws

The Bread Privacy Policy may not constitute your entire set of privacy rights, as these may also vary from state to state. To be certain of your privacy rights, you may wish to contact the appropriate agency in your state that is charged with overseeing privacy rights of consumers. Certain regulations issued by state and/or federal government agencies may require us to maintain and report demographic information on the collective activities of our membership. We may also be required to maintain your personal information for at least seven years in order to be in compliance with applicable federal and state laws regarding recordkeeping, reporting and audits.

This policy may not contain your entire set of privacy rights, which may vary from state to state. We may need to retain and use your information for certain purposes to comply with federal and state laws.

Confidentiality, Security, and Integrity of Customer Information

Employees of Bread are very educated about the importance of confidentiality and privacy. Management will take steps necessary to ensure only employees with a legitimate business reason for knowing personally identifiable customer information shall have access to such information. To the extent practicable, access will be limited by computer access codes and granting limited access to areas in which sensitive customer information is retained. Employees will be informed at the time of their initial employment of these standards. Violation of this policy through misuse of sensitive information will result in disciplinary action against the offending individual.