Privacy Policy

1. Introduction

Blue Mountain Loans ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (bluemountainloanusa.com) or use our services.

Blue Mountain Loans is a brand of Loan Spot, a wholly owned subsidiary of Kashia Services, a wholly owned economic arm and instrumentality of the Kashia Band of Pomo Indians of the Stewarts Point Rancheria, a federally recognized sovereign Indian tribe. As a tribal entity, we operate under tribal and federal law.

2. Information We Collect

We collect several types of information from and about users of our services:

2.1 Personal Information You Provide

When you apply for a loan or contact us, we collect personal information that you voluntarily provide, including:

• Identity Information: Full name, date of birth, Social Security Number, government-issued ID information
• Contact Information: Email address, phone number, residential address, mailing address
• Financial Information: Bank account details (routing number, account number), income information, employment details
• Employment Information: Employer name, work phone number, job title, length of employment, income details
• Loan Information: Loan amount requested, loan purpose, repayment preferences

2.2 Information We Collect Automatically

When you access our website, we automatically collect certain information about your device and browsing activity:

• Device Information: IP address, browser type and version, operating system, device identifiers
• Usage Information: Pages visited, time spent on pages, links clicked, referring website
• Location Information: General geographic location based on IP address
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Credit Bureaus: Credit reports and scores from Clarity Services, Experian, TransUnion, FactorTrust, DataX, Equifax, and other consumer reporting agencies
• Identity Verification Services: Information to verify your identity and prevent fraud
• Banking Verification Services: Information to verify your bank account details
• Public Records: Publicly available information such as bankruptcy records, liens, judgments

3. How We Use Your Information

We use the information we collect for various business purposes, including:

3.1 Processing Your Loan Application

• Evaluating your creditworthiness and ability to repay
• Making lending decisions
• Verifying the information you provide
• Processing and funding approved loans
• Communicating with you about your application

3.2 Managing Your Loan Account

• Processing loan payments and managing your account
• Sending payment reminders and account notifications
• Providing customer service and support
• Handling inquiries, complaints, and disputes
• Reporting payment activity to credit bureaus

3.3 Fraud Prevention and Security

• Detecting and preventing fraud, identity theft, and other illegal activities
• Protecting the security and integrity of our systems
• Investigating suspicious activities
• Complying with anti-money laundering and know-your-customer requirements

3.4 Legal and Regulatory Compliance

• Complying with federal, tribal, and applicable state laws and regulations
• Responding to legal process, subpoenas, and government requests
• Enforcing our terms and conditions
• Maintaining records required by law

3.5 Business Operations and Improvement

• Analyzing website usage and improving our services
• Conducting market research and data analytics
• Developing new products and services
• Training staff and quality assurance

3.6 Marketing and Communications

• Sending you promotional materials and offers (with your consent)
• Providing information about our products and services
• Conducting customer surveys
• Sending transactional emails and service notifications

4. Information Sharing and Disclosure

We may share your personal information with third parties in the following circumstances:

4.1 Service Providers and Business Partners

We share information with third-party service providers who perform services on our behalf, including:

• Credit Reporting Agencies: We share information with credit bureaus to verify your credit and report your payment activity
• Payment Processors: To process loan disbursements and collect payments
• Identity Verification Services: To verify your identity and prevent fraud
• Technology Providers: For website hosting, data storage, and IT services
• Customer Service Providers: To provide customer support
• Marketing Services: To conduct marketing campaigns (with your consent)

4.2 Legal Requirements and Law Enforcement

We may disclose your information when required by law or in response to:

• Subpoenas, court orders, or other legal process
• Government or regulatory requests
• Law enforcement investigations
• Legal proceedings or litigation
• Requirements to comply with applicable laws and regulations

4.3 Business Transfers

If we are involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.4 With Your Consent

We may share your information with third parties when you provide explicit consent for such sharing.

4.5 Aggregated or De-identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you for business purposes, including market research and analytics.

5. Data Security

We take the security of your personal information seriously and implement various technical, administrative, and physical safeguards to protect it:

5.1 Technical Safeguards

• Encryption: We use 256-bit SSL/TLS encryption to protect data transmitted between your browser and our servers
• Secure Servers: Our servers are protected by firewalls and security software
• Access Controls: We implement role-based access controls and authentication measures
• Security Monitoring: We continuously monitor our systems for suspicious activity
• Vulnerability Testing: Regular security assessments and penetration testing

5.2 Administrative Safeguards

• Employee Training: Staff are trained on data privacy and security practices
• Background Checks: Employees with access to sensitive data undergo background checks
• Confidentiality Agreements: Employees sign confidentiality agreements
• Access Restrictions: Only authorized personnel have access to personal information
• Incident Response Plan: We maintain procedures for responding to data breaches

5.3 Physical Safeguards

• Secure data centers with restricted access
• Physical security controls including surveillance and access logs
• Secure disposal of physical records containing personal information

6. Your Privacy Rights

You have certain rights regarding your personal information:

6.1 Right to Access

You have the right to request access to the personal information we hold about you. You can log into your account to view your loan information or contact us to request a copy of your data.

6.2 Right to Correction

If your personal information is inaccurate or incomplete, you have the right to request correction. You can update certain information through your online account or by contacting us.

6.3 Right to Deletion

You may request deletion of your personal information, subject to certain exceptions. We may need to retain certain information to:

• Complete the transaction for which the information was collected
• Comply with legal obligations
• Exercise or defend legal claims
• Detect and prevent fraud
• Maintain records required by law

6.4 Right to Opt-Out of Marketing

You have the right to opt out of receiving marketing communications from us. You can:

• Click "Unsubscribe" in any marketing email
• Reply "STOP" to any marketing text message
• Contact us at support@bluemountainloanusa.com
• Call us at (877) 689-7747

6.5 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights.

6.6 How to Exercise Your Rights

To exercise any of these rights, please contact us:

• Email: privacy@bluemountainloanusa.com
• Phone: (877) 689-7747
• Mail: Blue Mountain Loans, Privacy Department, PO Box 11781, Santa Rosa, CA 95406-1781

We will respond to your request within 45 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activity on our website.

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and improve your experience.

7.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly (e.g., session management, security)
• Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics)
• Functionality Cookies: Remember your preferences and settings
• Advertising Cookies: Used to deliver relevant advertisements and track campaign effectiveness

7.3 Third-Party Cookies

We may allow third-party services to set cookies on our website for analytics and advertising purposes. These third parties have their own privacy policies.

7.4 Managing Cookies

You can control cookies through your browser settings:

• Block all cookies
• Delete existing cookies
• Allow cookies only from specific websites
• Set preferences for third-party cookies

Note that blocking cookies may affect website functionality and your user experience.

7.5 Do Not Track Signals

Some browsers offer "Do Not Track" (DNT) signals. We do not currently respond to DNT signals, but we comply with applicable privacy laws regarding tracking.

8. Third-Party Services and Links

8.1 Third-Party Links

Our website may contain links to third-party websites, including educational resources and alternative financial services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies.

8.2 Third-Party Services We Use

We work with various third-party service providers who may collect information through our website:

• Google Analytics: Website analytics and user behavior tracking
• Payment Processors: To process loan payments securely
• Customer Support Tools: To provide customer service
• Email Service Providers: To send emails and newsletters

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

8.3 Social Media

Our website may include social media features and widgets. These features may collect information about your visit and are governed by the privacy policies of the respective social media companies.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

9.1 Active Loans

While you have an active loan with us, we retain all information related to your account, including:

• Application information
• Loan agreement and terms
• Payment history
• Communications with you

9.2 After Loan Payoff

After you pay off your loan, we retain your information for:

• Legal Compliance: To comply with record-keeping requirements under federal and tribal law (typically 7 years)
• Fraud Prevention: To prevent fraud and protect our business
• Legal Claims: To defend against potential legal claims
• Future Applications: To facilitate faster processing if you apply again

9.3 Denied Applications

If your application is denied, we retain your information for a shorter period (typically 1-3 years) for regulatory compliance and to prevent fraudulent reapplications.

9.4 Marketing Data

If you opt out of marketing communications, we will retain your email address or phone number on a suppression list to ensure we don't contact you again.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

To apply for a loan, you must be at least 18 years old (or the age of majority in your state). If we discover that we have collected information from someone under 18, we will delete that information immediately.

If you believe we have collected information from a minor, please contact us immediately at privacy@bluemountainloanusa.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

11.1 Notification of Changes

When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this policy
• Post a notice on our website homepage
• Send an email notification to registered users (for significant changes)
• Obtain your consent if required by law

11.2 Your Continued Use

Your continued use of our services after we post changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the changes, please stop using our services and contact us to close your account.

11.3 Review Regularly

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

12.1 Response Time

We will respond to privacy-related inquiries within 45 days. For complex requests, we may extend this period by an additional 45 days with notice to you.

12.2 Complaints

If you have a privacy complaint that we have not adequately addressed, you may have the right to file a complaint with:

• The Kashia Lending Commission
• The Consumer Financial Protection Bureau (CFPB)
• Your state Attorney General's office