LAST UPDATED SEPTEMBER 17, 2024
EnFin (“EnFin,” “we,” “our,” or “us”) values the privacy of your information. This Privacy Policy describes how we collect, use, and safeguard the information you provide to us in Your privacy is important to us at EnFin Corp. (collectively “EnFin,” “we,” “us,” or “our”), and we are committed to safeguarding, preserving, and respecting your privacy rights. This online privacy policy (the “Policy”) describes how we collect, use, disclose, and secure the personal information we gather about you through our website, including but not limited to, (the “Site”), when you use our site and when you otherwise interact with us (collectively, the “Services”).
For purposes of this Policy, personal information means data that classifies as personal information, personal data, personally identifiable information, or similar terms under applicable data privacy and security laws and regulations. It does not include data excluded or exempted from those laws and regulations, such as aggregated, anonymized, or deidentified data. Nothing in this Policy will constitute an admission or evidence that any particular data privacy or information security law or regulation applies to EnFin generally or in any specific context.
In providing our Services, EnFin may collect personal information on behalf of and as a service provider for third parties. This Policy does not govern any information we collect on behalf of third parties, and you should consult their privacy policies to become familiar with their data collection and usage practices.
This Policy expressly incorporates any privacy notices we may issue to supplement this Policy. You should review any other applicable privacy policy or notice for more information on any other rights you may have under those notices. For example, while this Policy describes information if you have an account with us, you should see our GLBA Privacy Notice for information regarding the rights you may have relating to information regulated by the Gramm-Leach-Bliley Act (“GLBA”).
You should read this Policy carefully, so that you understand our privacy practices and our Terms of Use. By accessing, browsing, downloading, or otherwise using the services, you confirm that you have read, understood, and agreed with this Policy. If you do not agree to this Policy, you may not use the services.
This Policy and the Terms of Use apply regardless of how the Services are accessed and will cover any technologies or devices by which we make the Services available to you.
We may provide you with additional privacy notices where we believe it is appropriate to do so. It is important that you read this Policy together with any other privacy notice or terms we may provide on specific occasions, so that you are fully aware of how and why we are using your data. This Policy supplements these other notices and is not intended to override them.
If you have any questions or concerns about our personal information policies or practices, you can contact us in the methods described in the “Contact Us” section below.
We collect information you voluntarily provide directly to us, information collected automatically when you interact with the Services, and information collected from third parties. The categories of personal information that we collect and the purposes for which we collect that information are described below.
We use cookies to collect information about your browser, device, geolocation (by country level), IP address, and interactions with the Services, Site, or emails. For more information, please view the “How We Use “Cookies” and Other Tracking Technologies” section below.
We collect this cookies information for the purposes of analytics and research, customer service, and website security and maintenance. We also collect this information for internal use, such as administering the Services, analyze trends, and identify problems with our Site.
We collect certain information when you create a solar financing account with us, including first name, last name, email address, phone number, username, password, gender, social security number, driver’s license number, income information, credit report and credit score, bank account information (for ACH set -up), account number, and date of birth.
We collect this information when you provide it directly to us such as applying for EnFin’s solar financing services to finance your solar project, requesting information about EnFin services, creating an account, or filling out a form.
We collect this information for the purposes of customer service relating to the solar project you financed with us, advertising, and analytics and research.
If you engage with the chatbot feature on our Site, we will record the conversation. Please note that the information relating to your communications may be shared with our service provider. We collect this information for the purposes of providing customer service, administering the Services, and identifying problems with our Site.
We share this information with our chatbot service provider.
If you finance your solar project with us, we collect certain payment and commercial information from you including name, address, phone number, income information, credit report and credit score, bank account information (for ACH set up), third-party payment service provider-related information, debit or credit card information, purchase and participation history, or other payment processing information.
We collect this information for the purposes of customer service and administering the Services.
When you respond to surveys and questionnaires, we collect information you provide to us when you respond to marketing materials, promotions, contests, or other surveys, including those at conferences.
We collect this information for the purposes of marketing and advertising (which may include targeted advertising and sales), analytics and research, and customer service.
If you post, upload, comment, or otherwise submit content on the Services, we may collect certain information about you such as your name and email address and products you may have purchased. Be aware that as a default, any information you post on the Services, including without limitation reviews, comments, and text, may be available to and searchable by all users of the Services.
We collect this information when you engage with our accounts on social media, click on the social media icons on our Site, or otherwise interact with us on a blog on a social media platform.
We collect this information for the purposes of analytics and research, and recruitment.
We may also reserve the right to collect, use or share personal information for the following purposes:
To Provide the Services. We will use your personal information to provide the Services, including to improve operations and offerings, and for security purposes.
To Present the Site. We will use personal information to present our Site and its contents in a suitable and effective manner for you and your device.
For Legal Purposes. We reserve the right to cooperate with local, provincial, state, federal and international officials in any investigation requiring either personal information or reports about lawful or unlawful user activity on the Site. We also reserve the right to share your personal information to establish, exercise, or defend our legal and property rights, including providing information to others for the purposes of fraud prevention. We may also share your personal information with any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.
If we are ordered by a legal process or government to provide data about one or more individual users, we will notify those users of our compliance with that order, to the extent permitted by law.
Business Partners and Affiliates. We may collect personal information from and share personal information with our business partners and affiliates, including legal advisors and financial advisors, co-branded partners, and other third parties. We may combine that information with other information we collect about you, but we will always use the information as described in this Policy. We may also share information with our affiliates, subsidiaries, joint ventures or other companies under common control.
Business Transactions or Mergers. We reserve the right to share your personal information to third parties as part of any potential business or asset sale, merger, acquisition, investment, round off funding, or similar type of transaction. Additionally, if we are entering into a corporate transaction with a third party, we may receive personal information in connection with the diligence. If we close a transaction, the third party may transfer personal information, which we would use as described in this Policy.
Bankruptcy or Insolvency. In the event of bankruptcy, insolvency, or dissolution proceedings, we may share your personal information with third parties as part of the sale or reorganization process.
Customer Service. We will use your personal information, to provide you with customer service to troubleshoot issues and respond to requests, questions, or comments.
Provide Information and Opportunities. We will use your personal information to advertise opportunities, promotions ,products, events, or Services that we think may be of interest to you.
Service Providers. We use service providers to perform various functions on our behalf. Such service providers will be under contractual obligations to safeguard your personal information and only process it in accordance with our instructions, or as otherwise permitted by applicable laws. We may also receive personal information from service providers.
We may send one or more cookies to your computer or other device. These technologies can collect data regarding your operating system, browser type, device type, screen resolution, IP address, and other technical information, as well as navigation events and session information as you interact with our Services. This information allows us to understand how you use the Services.
Cookies are small files created by websites, including our Services, that reside on your computer’s hard drive and that store information about your use of a particular website. When you access our Services, we use cookies and other tracking technologies to:
· Estimate our audience size and usage patterns;
· Store information about your preferences, allowing us to customize our Services according to your individual needs; and
· Recognize when you return to our Services.
We set some cookies ourselves and others are set by third parties. You can manage your cookies reference as described in the “Managing Your Cookies” section below.
The following chart lists the different types of cookies that we and our service providers use on the Services, examples of who serves those cookies and links to the privacy notices and opt-out information of those cookie servers. Because the specific cookies we use may vary over time, as well as differ by the specific page you are browsing, the below chart is illustrative only.
We do not use analytical tools in a manner that discloses to third parties that a specific person viewed specific video materials.
Some cookies operate from the time you visit the Services until the end of that particular browsing session. These cookies, which are called “session cookies” expire and are automatically deleted when you close your internet browser.
Some cookies will stay on your device between browsing sessions and will not expire or automatically delete when you close your internet browser. These cookies are called “persistent cookies” and the length of time they will remain on your device will vary from cookie to cookie. Persistent cookies are used for a number of purposes, such as storing your preferences so that they are available for your next visit and to keep amore accurate account of how often you visit the Services, how your use of the Services may change over time, and the effectiveness of advertising efforts.
You can manage your cookies by clicking through “Customize Consent Preferences”. Please note that the use of certain popup blockers or privacy settings can impact the functionality or visibility of the “Customize Consent Preferences”
It may also be possible to block cookies by changing your internet browser settings to refuse all or some cookies. If you choose to block all cookies (including essential cookies), you may not be able to access all or parts of the Services.
You can find out more about cookies and how to manage them by visiting https://ico.org.uk/for-the-public/online/cookies/.
At this time, our website does not respond differently based on a Do Not Track Signal.
Under certain privacy laws, some state residents are entitled to various privacy rights. Although they may not all apply to EnFin, the states with privacy laws applicable to EnFin that will be in effect in 2024 include California and Oregon. Please note that these privacy laws do not apply to information regulated by the GLBA. To see information about your rights under the GLBA, please see our GLBA Privacy Notice.
The chart below explains these rights, although some exceptions may apply. To exercise any of the following rights listed in the chart below, please email us using the information set forth in the “Contact Us” section below.
We disclose personal information in the following categories: identifiers, personal information, commercial information, internet or other similar network activity, geolocation data, and inferences with service providers. We disclose content posted on our social media platforms (e.g.if a consumer “comments” on a story) with other consumers. Such posts may include information in the category of personal information and identifiers, but the content depends on the individual posts.
We will process Sensitive Data (as the term or its equivalent is defined by applicable privacy laws) in accordance with any applicable privacy laws. In some instances, that means we will not collect Sensitive Data without first obtaining your consent or providing you with the right to opt out.
If we process Sensitive Data as defined by California law, we will only do so for the purposes specifically authorized by California law and in a manner that is necessary and proportionate for those purposes. As such, we do not perform any processing for which a Right to Limit request is available.
If you wish to exercise one of the above rights, please visit our Make a Data Subject Request page or email at support@enfin.com, call us at 833-586-3677, or mail us at 300 Spectrum Center Drive, Suite 500, Irvine, CA 92618.
If necessary, we may request additional information reasonably necessary to authenticate you and your request.
In certain circumstances, you may make a request on behalf of another such as if you are an authorized agent or the parent or guardian of a child on behalf of whom you wish to exercise their rights.
We will respond to access, deletion, correction, and portability requests, if applicable, within 45 days of receipt of the request and without undue delay. If we need to extend this period, we will notify you of the delay and explain the reasonably necessary justifications for our delay.
We will provide responses to your requests free of charge unless certain exclusions apply, depending on the state in which you reside.
To ensure the protection of your personal information, we may need to verify that the individual submitting a request is the consumer to whom the request relates prior to processing the request, or an authorized agent. To verify a consumer’s identity, we may request up to three pieces of personal information about you to compare against our records when you make a request.
Making a verifiable consumer request does not require you to create an account with us. However, we may require that you access a previously existing account where necessary to submit the request.
We will only use personal information provided in your request to verify your identity and will delete any information you provide after processing the request. We reserve the right to take additional steps as necessary to verify the identity of consumers where we have reason to believe a request is fraudulent.
You may choose a person or business that you authorize to act on your behalf to submit your requests (“Authorized Agent”). If you choose to use an Authorized Agent, we require that you provide the Authorized Agent with written permission to allow them to submit your request and that you verify your identity directly with us. Failure to do so may result in us denying your request.
If we deny or fail to take action on your request to exercise your applicable consumer privacy rights, you may appeal our decision. To do this, you may email us at support@enfin.com. In the email appeal, please specify the right(s) you requested to exercise and the date you made such a request.
We will inform you in writing within 45 days of any action taken or not taken in response to the appeal. We will also provide a written explanation of the reasons for our decisions regarding your request(s).
You have the right not to receive discriminatory treatment for exercising the privacy rights conferred by law. We will not discrimination against you because you exercised any of your privacy rights, including, but not limited to, by: denying goods or services to you; charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; providing a different level of quality of goods or services to you; or suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
In the preceding 12 months, we have collected personal information from the following categories identified in Section 2, which are described using the terms identified under the California Consumer Privacy Act, Cal. Civ. Code § 1798.100 et seq. as amended by the California Privacy Rights Act and implementing regulations (collectively “CCPA”): identifiers, personal information, commercial information, internet or other similar network activity, professional or employment related information, inferences and sensitive personal information. We process these categories of personal information for the purposes identified in Section 2. Finally we may disclose your personal information as described under Section 2. We will retain information in accordance with the “How Long Your Personal Information Is Kept” section below. Your personal information will not be kept for longer than is necessary for fulfilling the purposes listed in this Policy.
We disclose personal information in the following categories: identifiers, personal information, commercial information, internet or other similar network activity, geolocation data, and inferences with service providers. We disclose content posted on our social media platforms (e.g.if a consumer “comments” on a story) with other consumers. Such posts may include information in the category of personal information and identifiers, but the content depends on the individual posts.
In the preceding 12 months, we have not sold the personal information of any consumer for monetary consideration.
In the preceding 12 months, we have not knowingly collected or processed personal information pertaining to children under the age of 16.
We respect your rights in how your personal information is used and shared. We may communicate with you via email, telephone, postal mail, and/or your mobile device about our products and services. If at any time you would like to unsubscribe from receiving future marketing emails, you can email us at support@enfin.com or follow the instructions at the bottom of each applicable email, and we will promptly remove you from those marketing correspondences that you choose to no longer receive. Please note, however, that we may still need to contact you regarding other matters.
We will retain your personal information until the personal information is no longer necessary to accomplish the purpose for which it was provided. We may retain your personal information for longer periods for specific purposes to the extent that we are obliged to do so in accordance with applicable laws and regulations, to protect you, other people, and us from fraud, abuse, an unauthorized access, as necessary to protect our legal rights, or for certain business requirements.
We will delete your personal information when it is no longer necessary for the purpose for which it was collected, or upon your request, subject to exceptions as discussed in this Policy or under applicable law, contract, or regulation.
You can access and update certain personal information we hold about you at any time by logging into your account via the Services.
The security of your personal information is important to us. We take various reasonable organizational, administrative, and technical measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. If required by law to do so, we will notify you and/or the relevant supervisory authority in the event of a data breach.
However, we cannot and do not guarantee complete security, as it does not exist on the internet.
We process personal information on our servers in the United States of America, and may do so in other countries. If you use our Services or otherwise provide us with information from outside of the United States, you expressly consent to the transfer of your data to the United States, the processing of your data in the United States, and the storage of your data in the United States.
We may transfer your information outside of your jurisdiction for processing. While your personal information is held outside of your jurisdiction, it may be accessed by the courts, law enforcement, and national security authorities of the processing jurisdiction.
Our Services may contain links to third-party websites. When we provide links, we do so only as a convenience and we are not responsible for any content of any third-party website or any links contained within. It is important to note that this Policy only applies to our Services. We are not responsible and assume no responsibility for any personal information collected, stored, or used by any third party as a result of you visiting third-party websites. We also advise that you carefully read the privacy notice of any third-party websites you choose to visit.
Protecting the privacy of the very young is especially important. Our Services are not intended for children under 16 years of age, and we do not knowingly collect personal information from children under 16. In the event that we learn that we have collected personal information from a child underage 16 without verification or parental consent, we will immediately delete that information. If you believe that we might have any information from or about a child under 16, please contact us using the information provided in the “Contact Us” section below.
This Policy may change from time to time. If we need to change this Policy at some point in the future, we will post any changes on this page. If we make a significant or material change to this Policy we will notify you via email. You should check these terms when you use the Site. Your continued use of the Services constitutes acceptance of the most current version of this Policy.
If you have any questions about this Policy, please contact us by email at support@enfin.com, call us at 833-586-3677, or mail us at 300 Spectrum Center Drive, Suite 500, Irvine, CA 92618.