Privacy Policy

YSV Financial LLC, doing business as "Golt" ("Golt," "we," "us," and "our"), operates an outsourced financing service that helps home‑service contractors offer financing to their customers by connecting consumers with a network of third‑party lending partners and by providing related sales, support, and account‑management services. This online privacy policy ("Privacy Policy") applies only to the information Golt collects through the website located at getgolt.com, and all of the associated content, functionalities, and advertising (collectively, the "Services"). This Privacy Policy governs the Services regardless of how you access them. Some Services may have a specific, separate privacy policy that will govern the use of those Services. Undefined capitalized terms used in this Privacy Policy shall have the definition given in our Terms of Use.

Sections 1 through 15 of this Privacy Policy are directed to individual consumers who interact with the Services, including homeowners and other individuals who use or are referred to Golt's financing products. If you are a contractor, or a business customer of Golt, or a personnel member of such a business, Section 16 ("Additional Notice for Contractors") applies to you in addition to, and to the extent of any conflict in lieu of, the applicable provisions of Sections 1 through 15. If you are a California employee or job applicant of Golt, Section 17 ("Additional Notice for California Employees and Job Applicants") applies to you in lieu of the consumer‑directed provisions of this Privacy Policy.

Please see our Financial Privacy Notice for a summary of privacy options related to some of our services.

If you do not agree to the terms contained in this Privacy Policy, you must immediately exit the Services.

This Privacy Policy describes:

• The information we collect and how we collect it;
• What we do with the information we collect;
• How we share and disclose user information with third parties;
• Golt's use of online analytics and tailored advertising;
• California Do‑Not‑Track disclosure requirements;
• How you can access and update your information;
• How we protect information;
• Linked sites and advertisements;
• Use of the Services by users from outside the United States;
• Use of the Services by children;
• How to contact us;
• Text messaging originator opt‑in data;
• Your California privacy rights;
• No rights of third parties;
• Changes to this Privacy Policy;
• Assistance to victims of identity theft;
• Additional Notice for Contractors; and
• Additional Notice for California Employees and Job Applicants.

How we collect and store information depends on the pages of this website you visit, the activities in which you participate, and the Services you use. You can use some of the Services without providing any information other than that automatically collected as described below.

1.1 Information you provide

In addition to the individuals described elsewhere in this Privacy Policy, we also collect personal information about our employees and contractors, including information provided during onboarding (such as government‑issued identification numbers, banking and payroll information, benefits elections, and background check results), and about business contacts of our customers, vendors, and service providers.

We may collect information about you during your use of the Services, including your first name, last name, email address, requested financing amount, phone number(s), zip code, employment status, annual income, credit score/FICO range, and information you provide or post on our Services or allow us to access when you do certain things, such as:

• Enter registration information for one or more of our Services;
• Request information from Golt's lending partners regarding their financial products;
• Request certain features (e.g., newsletters, updates, and other products);
• Sign up to receive SMS (text message) notifications;
• Speak or communicate with a member of our support team by phone, email, or text;
• Connect with the Services or otherwise allow us to access certain information about you via a social networking site (SNS); or
• Post user‑generated content, including comments, to or on any of our Services.

Please be careful and responsible whenever you are online. Should you choose to voluntarily disclose information through the Services, such as via an SNS, on message boards, chat areas, or in advertising or notices you post, that information can be viewed publicly and can be collected and used by third parties without our knowledge and may result in unsolicited messages from other individuals or third parties.

1.2 Automatically‑collected information

1.2.1 Device/usage information

We may automatically collect certain information about the computer or devices (including mobile devices) you use to access the Services. For example, we may collect and analyze information such as (a) IP addresses, geolocation information (as described in the next section below), unique device identifiers, and other information about your mobile phone or other mobile device(s), browser types, browser language, operating system, and the state or country from which you accessed the Services; and (b) information related to the ways in which you interact with the Services, such as referring and exit pages and URLs, platform type, the number of clicks, domain names, landing pages, pages and content viewed and the order of those pages, the amount of time spent on particular pages, the date and time you used the Services, the frequency of your use of the Services, error logs, and other similar information. As described further below, we may use third‑party analytics providers and technologies, including cookies and similar tools, to assist in collecting and analyzing this information.

We may also capture other data, such as search criteria and results. In some cases, we will associate this information with a unique Golt identifier (that is not intended to be used by itself to identify you) for our internal use, in which case your Golt identifier will be considered Golt information and nothing in this Privacy Policy restricts how Golt may use this information.

1.2.2 Location information

We may collect different types of information about your location, including general information (e.g., IP address, zip code) and more specific information (e.g., GPS‑based functionality on mobile devices used to access the Services), and may use that information to customize the Services with location‑based information, advertising, and features. In order to do this, your location information may be shared with our agents, vendors, or advertisers. If you access the Services through a mobile device and you do not want your device to provide us with location‑tracking information, you can disable the GPS or other location‑tracking functions on your device, provided your device allows you to do this. See your device manufacturer's instructions for further details.

1.2.3 Cookies and other electronic technologies

When you use the Services, we use persistent and session cookies and other similar tracking technologies to: (a) analyze the usage of our sites and Services by collecting the information discussed in Section 1.2.1 above; (b) customize the Services to your preferences; and (c) control the advertising displayed by the Services, as well as advertisements that may be displayed on other websites or mobile applications. The cookies may reflect de‑identified data linked to or derived from data you voluntarily have submitted to us, e.g., a hashed version of your email address that we may share with service providers, solely in non‑human‑readable form. We and our vendors may also use other Internet technologies, such as web beacons or pixel tags and similar technologies, to deliver or communicate with cookies and track your use of the Services, as well as serve you ads when you are using our Services and/or when you are on other websites when those cookies can be accessed. We also may include web beacons in email messages or newsletters to determine whether the message has been opened and for other analytics. As we adopt additional technologies, we may also gather additional information through other methods.

Most browsers automatically accept cookies, but you can modify your browser setting to decline cookies by visiting the Help portion of your browser's toolbar. If you choose to decline cookies, please note that you may not be able to sign in, customize, or use some of the interactive features of the Services.

1.3 Information from third parties

We may obtain additional information about you from third parties such as service providers, credit bureaus, marketers, partners, researchers, and others. We may also receive information from lenders regarding the status of your application including, but not limited to, the amount or disposition of your loan. This information may include your Social Security number, FICO score, credit report, transaction history, payment history, name, phone number, email address, ZIP code, whether you have received loan offers, and which loan offers you have received. We may combine information that we collect from you with information about you that we obtain from such third parties and information derived from any other subscription, product, or service we provide.

Among these third parties, we obtain identity‑ and fraud‑related information from providers, and we obtain information about website visitors and prospective customers from marketing and analytics platforms.

1.4 Aggregate or de‑identified data

We may aggregate and/or de‑identify information collected by the Services or via other means so that the information is not intended to identify you. Our use and disclosure of aggregated and/or de‑identified information is not subject to any restrictions under this Privacy Policy, and we may disclose it to others without limitation for any purpose.

We use the information that we collect for the following purposes:

• For the purposes for which you provided it;
• To deliver the products and services you requested;
• To match you with lenders or provide you with lenders' conditional loan offers;
• To verify your identity;
• To protect against or identify possible fraudulent transactions;
• To send you information about your relationship or transactions with us;
• To send you alerts or other communications via SMS messages or other media or networks;
• To notify you about new features of the Services, special events, or products, services, and special offers;
• To process and respond to your inquiries and requests for customer support, including support provided by our team by phone, email, and text message;
• To contact you with information that we believe will be of interest to you;
• To attribute content that you make available through the Services;
• To generate and review reports and data about our user base and Service usage patterns;
• To perform analytics and research aimed at improving the accuracy, effectiveness, usability, or popularity of the Services;
• To improve the content and features of the Services or develop new Services;
• To personalize the content and advertising that you see on the Services and to understand how users interact with and use our advertisements and Services;
• To enforce the legal terms that govern your use of the Services;
• To administer and troubleshoot the Services;
• To associate your activities, customize content, or tailor advertising across different devices and browsers that you use to access the Services (for instance, computers, tablets, mobile devices, applications, and websites);
• To comply with legal and regulatory obligations, including under the Gramm‑Leach‑Bliley Act and applicable anti‑money‑laundering laws; and
• To manage our employees and contractors, including for payroll, benefits, and workforce management purposes.

We may send you commercial emails regarding products you may be interested in. Each such email we send you will have an opt‑out that you can use to stop receiving such communications. If you opt out of receiving commercial emails about products we think you may be interested in, we may still send you emails about any services you have requested or received from us.

We will make your information available to other companies, websites, applications, or people in the circumstances described below.

We may share your information with non‑affiliated third parties: (a) in order to provide services or products that you have requested or (b) as described in this Privacy Policy. Unless authorized, Golt will not share any personally identifiable information ("PII") or nonpublic personal information ("NPI") with non‑affiliated third parties. Golt will only share aggregated, de‑identified information with non‑affiliated third parties inside our platform. Please refer to Section 1.4 (Aggregate or de‑identified data).

We may share your information with any agent or company that is part of Golt in order to provide the Services or advertising or to communicate with you on our behalf.

In submitting an inquiry for a loan product or other service offered through this website, you are acknowledging and agreeing to the disclosure of information you have provided, or that we have received from third parties, to lenders in our network ("Lenders") with whom you are or may be matched. We may also use the information you provide, or that we obtain from third parties, to submit to credit reporting agencies to conduct a soft credit pull inquiry. Please note that no hard inquiry of credit will be performed by Golt or its network Lenders unless you authorize us to do so by submitting a completed loan request. NOTE THAT even if you do not provide your Social Security number, we may access your credit file to assist in the prevention of identity theft and to verify that your request is accurate and complete. Not all network Lenders will obtain your SSN, and each Lender has its own requirements, disclosures, and consent requirements. BE AWARE that the Lenders with whom you are matched may retain or use your information whether or not you use their services, and you should contact these Lenders directly concerning their privacy and information‑sharing practices, which may differ from Golt's.

When you express interest in other products, services, or promotions that we offer (by, for example, completing an inquiry for such services), we will share your request or expression of interest with the businesses with which we partner to offer you those products, services, and promotions, and, as applicable, with their affiliates and third‑party finder or marketing companies (collectively, "Business Providers"). When you choose to participate in a particular offer or program, you authorize us to provide information and other personally identifiable information to those Business Providers. Be aware that the Business Providers with whom we share your information may retain or use it whether or not you use their services, and you should contact these parties directly concerning their privacy and information‑sharing practices, which may differ from ours.

We may disclose your information in response to any subpoenas, court orders, or other legal process we receive, or to establish or exercise our legal rights or to defend against legal claims.

We may share your personal information with our authorized service providers that perform certain services on our behalf, including, but not limited to, service providers that perform services in connection with your request for a loan or the funding, sale, and/or servicing of your loan. These third parties include, without limitation, credit bureaus, marketing and customer service firms, and entities that provide business analysis or website support. These third parties may have access to information needed to perform their functions. We may also share your information with other third parties with whom we have a contractual relationship for their own direct marketing or advertising purposes.

These service providers fall into the following categories: identity and fraud verification; banking and financial services; communications; customer relationship management and sales; human resources, payroll, and benefits administration; cloud infrastructure; analytics and product; and security and compliance. All such service providers are subject to review under our vendor management policy prior to onboarding.

We may disclose your information when we believe in good faith that such disclosure is appropriate in order to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of this Privacy Policy or the Terms of Use for the Services you accessed, and/or to protect the rights and property of Golt, our employees, users, and the public. This may involve sharing your information with law enforcement, government agencies, courts, and/or other organizations.

We may disclose your information in connection with reporting required under state and/or federal licensing requirements. You authorize Golt to obtain any and all necessary information required from the Lender or Provider you choose in order to report back any and all required information relating to the disposition of your request. For example, whether the loan closed, whether you withdrew the request, and/or whether you were not approved. In addition, under current reporting requirements the Lender may provide to Golt the loan you selected, the terms of the same, fees, rate, APR, etc., in order to comply with current laws and regulations.

We may share your information in connection with any proposed or actual merger, reorganization, transfer of control, sale of some or all of Golt's assets, or a financing or acquisition of all or a portion of our business by another company.

We may aggregate and/or de‑identify your information so that it no longer relates to you individually. Our use and disclosure of such aggregated or de‑identified information is not subject to this Privacy Policy and may be disclosed to others without limitation and for any purpose.

We may employ third‑party session‑replay and product‑analytics tools to improve the quality of the Services. These tools may allow us to review a playback of your use of, and activity on, the Services. By using this site, you consent to our use of such tools. If you would like to opt out, please email us at support@getgolt.com.

If you are a contractor and were referred to us by a third‑party partner, we may share information about you, including but not limited to your account status, usage data, and information about any loans obtained or loan requests made by customers associated with your business.

If you are a consumer who uses the Services, we may share information about you with third parties, including but not limited to information about any loans obtained, loan requests made by you, and any loan options for which you may have prequalified, in an aggregated and/or de‑identified form.

4.1 Online analytics

We may use third‑party web analytics services on our Services, such as Google Analytics. These service providers use the sort of technology described in Section 1.2 to help us analyze how users use the Services, including by noting the third‑party website from which you arrive. The information (including your IP address) collected by the technology will be disclosed to or collected directly by these service providers, who use it to evaluate your use of the Services. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt‑out Browser Add‑on.

4.2 Tailored advertising

Golt maintains a cookie policy and may use a consent management platform ("CMP") to provide notice of, and to obtain and manage, cookie consent, including for visitors located in California and other states with applicable consent requirements. You can manage your cookie preferences at any time through the cookie preference tool available on our website (if available).

When you use the Services, Golt may serve you with ads based on various factors such as the content of the page you are visiting, information you provide, your searches, demographic data, and other information that you provide to us. These ads may be based on your current activity or your activity over time and may be tailored to your interests.

Third parties, including without limitation those whose products or services are accessible or advertised via the Services, may also place cookies or other tracking technologies on your device to collect information about your use of the Services in order to (i) inform, optimize, and serve ads based on past visits to our websites and other sites, and (ii) report how our ad impressions, other uses of ad services, and interactions with these ad impressions and services relate to visits to our websites and use of our Services. We also allow other third parties (e.g., ad networks and ad servers) to serve tailored ads to you on the Services and to access their own cookies or other tracking technologies on your device so that tailored ads may be delivered to you when you are using other websites. We also may share with third‑party advertisers a hashed version of your email address, solely in non‑human‑readable form, and content that you share publicly when using the Services (e.g., user‑generated content) for purposes of delivering tailored advertising on the Services and/or other websites.

Golt may deploy retargeting and remarketing pixels, which allow Golt and these platforms to show you advertisements based on your prior visits to our website. You may opt out of such retargeting advertising using the mechanisms described below or through your cookie preferences.

We neither have access to, nor does this Privacy Policy govern, the use of cookies or other tracking technologies that may be placed on your device by non‑affiliated, third‑party ad technology, ad servers, ad networks, or any other non‑affiliated third parties. Those parties that use these technologies may offer you a way to opt out of ad targeting as described below. If you are interested in more information about tailored browser advertising and how you can generally control cookies from being put on your device to deliver tailored advertising, you may visit the Network Advertising Initiative's Consumer Opt‑Out link or the Digital Advertising Alliance's Consumer Opt‑Out link to opt out of receiving tailored advertising from companies that participate in those programs.

To opt out of Google Analytics for display advertising or to customize Google display network ads, you can visit the Google Ads Settings page. Please note that, to the extent advertising technology is integrated into the Services, you may still receive advertisements even if you opt out of tailored advertising. In that case, the ads will just not be tailored. We do not control any of the above opt‑out links and are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms.

When using a mobile application, you may also receive tailored in‑application advertisements. Each operating system provides its own instructions on how to prevent the delivery of tailored in‑application advertisements. Please review the support materials and/or privacy settings for the respective operating systems in order to opt out.

To ensure that you have some control over the information we have about you, you may review and update certain user profile information by logging in to the relevant portions of the Services where such information may be updated (available on some Services and not others) or by contacting us at support@getgolt.com.

Contractors and customers using the Golt platform may update certain personal information, such as contact details and bank account information, directly within the platform or by contacting our support team. Employees may update their personal information by contacting Golt's People Operations team.

We have implemented a variety of administrative, technical, and physical security measures to protect against unauthorized access, destruction, or alteration of your information, including as required by applicable federal law. These safeguards vary based on the sensitivity of the information that we collect, process, and store and the current state of technology. Although we take measures to safeguard against unauthorized disclosures of information, we cannot guarantee that information we collect will never be disclosed in a manner that is inconsistent with this Privacy Policy.

The Services may contain links to third‑party websites. We are not responsible for the privacy practices or the content of those third‑party websites.

We have relationships with third‑party providers to provide content, products, services, and functionality through the Services. When you visit sites or use any Services provided in conjunction with one or more of these third‑party providers and the brands of those providers appear on the site or Services in connection with such content, products, services, or functionalities, we may share any information you provide, or that is collected during your use of those Services, with those providers. In some cases, the provider may collect information from you directly, in which case the provider's privacy policy (which may differ from this Privacy Policy) would apply. If you have any questions regarding the privacy policy of any of our providers, you should contact the provider directly for more information.

The Services are hosted in the United States and are governed by United States law. If you are using the Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our databases are operated. The data protection and other laws of the United States and other countries might not be as comprehensive as those in your country. By using the Services, you consent to your information being transferred to our facilities and to the facilities of those third parties with whom we share it as described in this Privacy Policy, and processed in those facilities.

The Services are not intended for persons under the age of 18. We require that only persons 18 years of age or older use the Services. By using the Services, you represent that you are at least 18 years old. Some third parties, such as platform providers like the Apple App Store or Google Play, may provide age‑based ratings on some of the Services. These ratings shall have no bearing on this limitation.

If you have any questions, comments, or concerns regarding our Privacy Policy or practices, please send an email to support@getgolt.com or write to us at:

Text messaging originator opt‑in data and consent will not be shared with any third parties, excluding aggregators and providers of the text message services.

This section applies to any California residents — and only to California residents — about whom we have collected personal information from any source, including through your use of our website(s), by using our products or services, or by communicating with us electronically, in paper correspondence, or in person (collectively, "you").

For purposes of this section, "personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer/resident or household. Personal information does not include publicly available information or information that has been de‑identified or aggregated.

13.1 What information we may collect

We may collect the following categories of personal information about you:

• Identifiers, which include real name and alias; postal address; unique personal identifier; online identifiers as detailed above; Internet Protocol ("IP") address; email address; telephone number; account number, name, and password; Social Security number; driver's license number, passport number, state or other government‑issued identification card number; and/or other similar identifiers;
• Commercial information, which includes records of personal property; products or services purchased, obtained, or considered; account balances, payment history, or account activity; bank account information and other information relating to your financial institution; credit application, credit checks, and information from credit reporting agencies; information related to housing costs; information related to home improvement services; information related to potential financial products, including prequalified personal loan APRs, principal amounts, monthly payments, terms, and the identity of the prequalifying lender; monthly housing payment information; information regarding potential home improvement projects or other potential uses for financing; and/or other purchasing or consumer histories or tendencies;
• Internet or other electronic network activity information, which includes cookie identifiers, web beacons, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, clickstream data, device platform, device version, and/or other device characteristics including your choice of settings such as Wi‑Fi, Bluetooth, and GPS;
• Geolocation data, which includes GPS data; locational information based upon your IP address; cell network data; and/or other similar locational data;
• Audio, electronic, or visual information, which includes records of calls to or from our support team; and/or video surveillance information;
• Professional or employment‑related information, such as your current and previous employers; job title and responsibilities; assets; income; and/or other information related to your work history and/or prospective employment;
• Education information;
• Inferences about you;
• Information related to characteristics protected under California or federal law, which includes gender; race and ethnicity; nationality; marital status; military service / veteran status; and/or date of birth;
• Other personal information described in California Civil Code § 1798.80(e), which includes signature; physical characteristics or description; insurance policy number; and/or bank account number, credit card number, debit card number, and other financial information; and
• Financial information protected under the Gramm‑Leach‑Bliley Act, which includes bank account and routing numbers, financial transaction data, income and revenue data, and credit‑related information collected in connection with financing applications and payments.

13.2 What we do with your information

Other than the purposes for which you have provided separate express consent, we may also collect or use personal information from you for the following purposes:

• Internal analytics;
• Assessing third‑party vendors / service providers;
• Audit, compliance, policy, procedures, or regulatory compliance;
• Billing, payment, and fulfillment;
• Customer claims and fraud investigation and prevention;
• Customer communications;
• Customer relationship management;
• General business administration, including that of our service providers;
• Marketing our products and services;
• Marketing the products and services of others;
• Financial reporting and accounting;
• Website optimization and maintenance; and
• Systems and data security.

13.3 Sources of collected information

We may collect personal information from the following categories of sources:

• Our customers, potential customers, users of our websites and mobile applications, commercial counterparties, and other individuals, including via our websites, mobile applications, telephone, text message, postal mail, social media, forums, message boards, or other means;
• Our service providers, including customer relationship management providers, analytics providers, website hosting providers, systems administrators, and communications delivery services;
• Nonaffiliated companies with which we have a business relationship, including lending partners and promotional and joint marketing partners;
• Other third parties, including operators of other websites and mobile applications, online advertising partners, and other data suppliers;
• Things that other third parties may post publicly about you or otherwise provide to us; and
• Employees, job applicants, and potential job applicants.

As of the date of this Privacy Policy, we do not have operating affiliates or subsidiaries to which we transfer personal information.

13.4 Who we share information with

We do not sell personal information. We may share your personal information with the following categories of third parties:

• Service providers with whom you have expressly consented to share information, including Lenders;
• Companies offering similar products and services;
• Advertising and marketing companies;
• Social media companies;
• Technology companies; and
• Nonaffiliated companies with which we have a business relationship, such as lenders, brokers, insurance carriers, or insurance brokers.

Other than with respect to information covered by the Gramm‑Leach‑Bliley Act, we may disclose any of the categories of information listed in Section 13.1, from any of the sources listed in Section 13.3, for any of the business purposes listed in Section 13.2, to any of the parties identified in Section 13.4.

Your privacy rights

If you are a California resident, subject to applicable law, you may have the following rights under California law with respect to your personal information:

• Right to Know. You have the right to request what personal information about you we collect, use, disclose, and/or sell, as applicable.
• Right to Delete. You have the right to request the deletion of certain personal information that is collected or maintained by us.
• Right to Correct. You have the right to request correction of inaccurate personal information that we maintain about you.
• Right to Opt‑Out of Sale/Sharing. California provides you with a right to opt out of the sale or sharing of your personal information. To be clear, Golt does not sell your personal information.
• Right to Non‑Discrimination. You have the right not to receive discriminatory treatment for the exercise of the privacy rights described above.

Proxy Authorization: You may authorize someone to exercise the above rights on your behalf by sending a certified letter, including a fully executed power‑of‑attorney signed by you, detailing such request to the address listed below.

Verification: The above rights are subject to our being able to reasonably verify your identity and authority to make these requests. These rights are also subject to various exclusions and exceptions under applicable laws. Any such requests must include sufficient information for us to reasonably verify your identity, which may include your full name, email address, phone number, date of birth, and the last four digits of your Social Security number.

If you are a California resident and wish to exercise your Right to Know, Right to Delete, or Right to Correct, please reach us in one of the following ways:

• By email: support@getgolt.com
• By phone: (248) 222-8448
• By mail: YSV Financial LLC (d/b/a Golt), Attn: Privacy Team, 24681 Northwestern Hwy

The CCPA also provides you with certain rights related to opting out of any "data sale." Because Golt does not engage in any "data sale" as that term is defined in applicable law, there is no link on this website to opt out of such sales.

13.5 No rights of third parties.

This Privacy Policy does not create rights enforceable by third parties.

Golt reserves the right to change this Privacy Policy at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. Please check this page periodically for changes. Your continued use of the Services following the posting of changes to this Privacy Policy will mean you accept those changes.

If you suspect that someone has had unauthorized access to your information, you should report this crime to your local law enforcement agency and to the Federal Trade Commission (FTC). To speak with a trained FTC telephone counselor, call toll‑free 1‑877‑IDTHEFT (1‑877‑438‑4338), or visit https://www.identitytheft.gov to report identity theft and get a recovery plan. The site also provides links to consumer education materials.

This Section 16 applies to contractors and other business customers of Golt, and to the owners, employees, and other personnel of such businesses, who interact with the Services in a business capacity (collectively, "Contractors"). This Section 16 supplements, and to the extent of any conflict supersedes, the consumer‑directed provisions of Sections 1 through 15 as applied to Contractors.

16.1 Information we collect about Contractors.

In connection with a Contractor's use of the Services, we collect: (a) business contact information, such as business name, EIN, business address, phone number, and email address; (b) account credentials and usage data; (c) financial and payment information, including bank account and routing numbers, used to facilitate payments and financing; (d) information the Contractor submits about its own customers (including homeowners) in connection with financing applications, quotes, invoices, or scheduling; and (e) records of communications between the Contractor and Golt, including calls, emails, and text messages.

16.2 How we use Contractor information.

We use Contractor information to: operate and provide the Services (including support, account management, financing facilitation, and performance reporting); process and facilitate financing applications submitted on behalf of a Contractor's customers; detect and prevent fraud; provide customer support; market Golt's products and services to the Contractor; and comply with applicable law.

16.3 How we share Contractor information.

We share Contractor information with lending partners to facilitate financing offers to the Contractor's customers, with the service providers described in Section 3 of this Privacy Policy, and, where authorized by the Contractor, with other personnel or sub‑accounts associated with the Contractor's business. We do not sell Contractor personal information.

16.4 Retention.

We retain Contractor information for as long as necessary to provide the Services and maintain the business relationship, and thereafter as necessary to comply with applicable legal, tax, and recordkeeping requirements.

16.5 Contractor rights.

Contractors who are individuals, and personnel of business Contractors, located in California or another state with an applicable consumer privacy law may have rights similar to those described in Section 13 of this Privacy Policy with respect to their personal information. Contractors may submit a request to exercise such rights using the contact methods described in Section 11.

This Section 17 is provided in accordance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CPRA"), and applies to California‑based current, former, and prospective employees of Golt (collectively, "California Personnel"). This Section 17 supplements, and to the extent of any conflict supersedes, the consumer‑directed provisions of Sections 1 through 15 as applied to California Personnel.

17.1 Categories of personal information collected.

In the past twelve (12) months, we have collected the following categories of personal information about California Personnel: identifiers (name, address, email, phone number, Social Security number); characteristics protected under California or federal law (e.g., date of birth, veteran status, disability status, to the extent voluntarily provided or required for benefits administration); commercial information (compensation and benefits elections); internet and electronic network activity on Golt systems; professional and employment‑related information (job title, employment history, performance information); education information; and inferences drawn from the foregoing. We also collect sensitive personal information, including Social Security numbers, driver's license numbers, and financial account information (for payroll and direct deposit purposes), and, where applicable, health information collected in connection with benefits administration. We use sensitive personal information only for the limited business purposes permitted under the CPRA, such as administering payroll, benefits, and tax withholding, and do not use it to infer characteristics about California Personnel.

17.2 Sources of personal information.

We collect personal information about California Personnel directly from them; from our human resources, payroll, and benefits administration vendors; from our background check vendor; from healthcare and benefits providers; and, for job applicants, from references and prior employers.

17.3 Purposes for collection and use.

We collect and use California Personnel personal information to administer employment, payroll, and benefits programs; to comply with applicable employment, tax, and labor laws; to maintain workplace safety and security, including through IT access and security monitoring; and to conduct background checks in connection with hiring.

17.4 Disclosure of personal information.

We disclose California Personnel personal information to our human resources, payroll, and benefits vendors, and to our IT and security vendors, each for the business purposes described above, and to government agencies where required by law. We do not sell or share (as "share" is defined under the CPRA) California Personnel personal information, and we do not use or disclose sensitive personal information of California Personnel for purposes beyond those permitted under the CPRA.

17.5 Retention.

We retain California Personnel personal information for the duration of the employment relationship and thereafter for the period necessary to comply with applicable legal, tax, and recordkeeping obligations or to establish, exercise, or defend legal claims, consistent with our internal data retention policy.

17.6 Your rights.

Subject to certain exceptions under the CPRA applicable to employment records, California Personnel have the right to: (a) know what personal information we have collected, used, disclosed, and retained about them; (b) request deletion of their personal information; (c) request correction of inaccurate personal information; (d) limit the use of sensitive personal information beyond what is necessary to perform services reasonably expected in the employment relationship; and (e) not be discriminated or retaliated against for exercising any of these rights.

17.7 How to submit a request.

California Personnel may submit a request to exercise the rights described in this Section 17 by contacting Golt's People Operations team or by using the contact methods described in Section 11 of this Privacy Policy. We will verify the identity of the requestor before responding, consistent with the verification procedures described in Section 13.