MyLoanAlly.com is owned and operated by XLT Media Solutions, LLC (“Company” “we” or “our”). We are committed to advising you of the right to your privacy, and strive to provide a safe and secure user experience. This Privacy Policy (together with our Terms of Use and any other documents referred to therein) provides an explanation of what information we collect, how we collect it and how it will be processed (and may be disclosed) by us. It also explains how we collect and use non-personal information. By accessing and using our Website, you explicitly accept, without limitation or qualification, the collection, use and transfer of the personal information and non-personal information in the manner described in this Privacy Policy.
This Privacy Policy only applies to our Website and does not apply to third party websites you may link to from this Website or third-party web pages or other online services which may be displayed on this Website. If you click on a link to a third-party website or service, or supply information to a third party website or service that is placed within our webpage, you are interacting with that third party and this Privacy Policy will not apply. We encourage you to review the privacy policies of those third-party websites and services.
Please read this Policy carefully, as it affects your rights and liabilities under the law. If you disagree with the way we collect and process personal and non-personal information, please do not use this Website.
When you are using the Website, we are aware of it and may gather, collect, and record the information relating to such usage, either independently or through the help of third-party services as detailed below. We collect the following types of information about you when you visit and use our Website.
“Personal information” is information that can be used to identify you or any other individual to whom the information may relate. This is information which you are prompted to provide to us. Such information may include your name, address, telephone number(s), mobile numbers, date of birth, and email address, or other unique information about you which you provide to us during the registration process, or through the course of communicating with us about the products and services provided on our Website.
“Demographic information” is information that may or may not be unique to you in the sense that it refers to selected population characteristics. Such information may include, but is not limited to, zip code, mobile phone carrier, age, gender, salary range, education and marital status, occupation, industry of employment, personal and online interests. When we can identify you through this information, it is Personal Information.
“Behavioral information” is information which is automatically collected pertaining to how you use our Website, the areas of our Website that you visit, what services you access, and information about your computer hardware and software, including your IP address, geographic location, browser preference, operating system type, domain names, times that you access the internet, and other websites you have visited.
“Third party collected information” is information about you that we acquire from a third party which may include personal, demographic, behavioral and indirect information. This collection may include, but not limited to, first party cookies, third party cookies, anonymous cookies, persistent identifiers, email opt in, and search engine keywords. We have no access or control over these cookies and other tracking devices used by data aggregators, third party advertisers and third-party networks. We have no responsibility or liability for the policies and practices of these parties.
“Web technology information” is information that may include personal or non-personal that we, or third parties we contract with to independently document users’ permission to be contacted. This site uses two services. ActiveProspect’sTrustedForm Script is embedded on this site and collects the following information when you interact with the web pages where the script is present. This technology will capture the page URL, mouse movements and clicks, contact information that user inputs on site, a snapshot of the webpages, IP address of the user’s computer, time on the webpages, date and time the TrustedForm Script was loaded, HTTP headers from the user’s browser. For information regarding ActivePropect’s data use and collection practices and policies please see TrustedForm. This site also embeds Jornaya’s LeadiD script which collects information such as browser type, internet service provider (ISP), referring and exit pages, platform type, date/time stamp, IP address, number of clicks including tracking users’ movements on the site (including the capture of visual snapshots of the users’ activity on the site). For information regarding Jornaya’s data use and collection practices and policies please see LeadiD. This information is combined with other aggregate data and assigned a unique identifier for that site visit.
No Information Collected from Children. We will never knowingly collect any Personal Information from children under the age of 13. If we obtain actual knowledge that we have collected Personal Information about a child under the age of 13, that information will be immediately deleted from our database. Because we do not collect such information, we have no such information to use or to disclose to third parties.
We, or third parties we contract with, may place and use tracking technologies on this site. This would include technologies such as cookies, web beacons, and java scripts to collect information. These technologies collect internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. This information is used to analyze trends, administer our Website, track user's movements through our Website and gather demographic information about our user base as a whole. We may receive reports based on these technologies on an individual or aggregated basis.
“Cookies” are a feature in your browser software. Cookies are small data files that are stored on your computer or device by your web browser. If enabled, cookies store small amounts of data on your computer about actions you take on the pages of our Website including the placement of identifiers. Cookies assist us in tracking which of our features you visit most often, and what content you viewed on past visits. When you visit this Website again, cookies allow us to remember your settings and may be used for authentication. We may use cookies to keep track of the number of return visits, accumulate and aggregate statistical information generally pertaining to our Website, and deliver specific content to you based on your past viewing history. You can disable cookies, although our Website may not function properly for you. Your browser preferences can be modified to accept or reject all cookies, or request a notification when a cookie is set. You may read more about cookies at http://cookiecentral.com. In order to use all of the features and functionality of our Website, you need to accept cookies.
Third Party Cookies. We allow third party vendors and advertisers to set their own cookies on and through our Website. We have no control over the practices of those third parties and are not responsible for their technology or tracking. We encourage you to review the policies of such persons or entities on their websites. We use AdWords Remarketing through Google which is a Remarketing and Behavioral Targeting service provided by Google Inc. that connects the activity on our Website with the AdWords advertising network and the DoubleClick cookie. That Cookie collects information regarding certain patterns in your browsing history. Opt-out of this tracking. We also participate in all of Google Analytics Advertising. This includes (i) Remarketing with Google Analytics; (ii) Google Display Network Impression Reporting; (iii) DoubleClick Campaign Manager integration; and (iv) Google Analytics Demographics and Interest Reporting. Google uses cookies to track activity performed by Google Analytics and its AdWords or DoubleClick cookie. Opt-out. We also use Google Analytics which is an analysis service also provided by Google Inc. Google utilizes the data collected through its cookies to track and examine the use of this site, to prepare reports on its activities, and to share them with other Google services. You may opt-out of the Google Analytics service using Google’s Browser Add-available.
Social Media Cookies/Plug-ins. Plug-ins for social media including Facebook, Twitter, LinkedIn, Yahoo, Windows and Google Plus may be integrated on our Website. By interacting with us through a social media plug-in, certain information will be transmitted to the social network and you permit us to have continued access to information from your profile. Social media features are either hosted by a third party or hosted directly on our Website. Your interactions with these features are governed by the privacy policy of the company providing it.Web Beacons.
We use electronic images known as Web Beacons (sometimes called single-pixel gifs, clear gifs or action tags) which allow us to collect information about your visit to our Website, measure and improve the effectiveness of advertisements and track delivery of advertising. Web Beacons collect only a limited set of information including a cookie number, time and date of page view, as well as a description of the page on which the Web Beacon resides. We may also use Web beacons in email messages sent to you. This allows us to determine if you opened or acted upon the email messages. Because Web beacons are the same as any other content request, you cannot opt out or refuse them. However, they can be rendered ineffective by either opting out of cookies or changing the cookie setup in your browser.
JavaScript. We may also use JavaScript. JavaScript is a computer language that enhances the functionality of websites, particularly with respect to pictures. We use it to analyze and improve our Website’s functions. You may deactivate JavaScript through your browser settings or activate it the same way. If you disable JavaScript, you will not be able to use some of the functions of our Website.
Providing Services and Products. We use the information we gather on our Website to provide you with the services and or products you have requested. This may include passing your information on to a third party to provide such services or products. Although our contractual arrangement limits how this party can use your information, we do not control the privacy practices of third parties. If you have any questions or wish to remove your information from the third-party databases, you will need to contact that party directly.
Improving Our Website. We use the information we gather to respond to any inquires you make, operate and improve the functionality of our Website, and deliver the products and services advertised on our Website. Our services include the display of personalized products, content, and advertising, relating to your experience and interests.
Targeted Advertising. Based on User Information, we may customize and target advertising to an individual. In our discretion, we may combine information to target advertising to an individual on the Site, in email and/or through direct mail. Such advertising may be different to the products or services offered or promoted on our Website.
Commercial Email. We may use your email address to promote goods and services of third parties that may be of interest to you and these may be different than the products or services offered or promoted on the Site.
Direct Mail. We may use User Information to advertise, directly or indirectly to individuals using postal mail.
If you do not wish to have your email address or other contact information used by the Company to promote our own or third parties’ products or services, you can opt-out by (1) clicking here to opt-out, (2) by sending us an email stating your request to opt-out to opt-out@xltmediasolutions.com, or (3) by clicking the “unsubscribe” link at the bottom of each email you receive from Company.
With your consent, we may send push notifications or alerts to your web browser or your mobile device. These notifications may include marketing messages from us or from third parties. You can deactivate these messages at any time by changing the notification settings on your mobile device or browser.
We will share your personal information with third parties in the following ways:
Product and Service Delivery. We share your Personal information with third parties who help us in the delivery of the products and services you have requested. If you have provided a telephone number, address, or email address with your request for more information from these third parties, you are agreeing that the third party may contact you at the number you provided via telephone, email, or text (including through automated and artificial voice means; e.g. automatic telephone dialing system, text and pre-recorded messaging). You also authorize these third parties to contact you even if your telephone number is currently listed on any state, federal, local, or corporate Do Not Call lists and/or registries. You may revoke your consent at any time by specifically making a request to the third party who has contacted you that you do not wish to be contacted any further in regards to your initial inquiry.
Website Functionality. We share your Personal and Non-Personal information with companies and individuals we employ to perform technical functions on our behalf. Examples include third parties who host our Website, analyze our data, provide marketing assistance, process credit card payments, and provide customer service.
Anonymous information. We share aggregated anonymous information about you, combined with other persons using our Website with third parties, so that they can understand the kinds of visitors that come to our Website, and how those visitors use our Website. This includes demographic information and behavioral information.
Third Party Products and Services. We share your Personal and Non-Personal Information with third parties who will provide you with their opportunities, products or services. This includes your personal and non-Personal information, and includes your interests and preferences, so they may determine whether you might be interested in their products or services.
Legal Process. We disclose and share your information if legally required to do so, or at our discretion, pursuant to a request from a governmental entity, or if we believe in good faith that such action is necessary to:
(a) conform to legal requirements or comply with legal process;
(b) protect our rights or property, or our affiliated companies;
(c) prevent a crime or protect national security;
(d) protect the personal safety of users or the public.
Acquisition or Merger. We may disclose and transfer your information to a third party who acquires any or all of our business, whether such acquisition is by way of merger, consolidation or purchase of all or a substantial portion of our assets. In the event we become the subject of an insolvency proceeding, whether voluntary or involuntary, we or our liquidator, administrator, receiver or administrative receiver may sell, license or otherwise dispose of, such information in a transaction approved by the court.
Third Parties collect and use information about you on or through our Website in the following ways:
Service Providers and Advertisers. Service Providers of the service or product you have requested, advertising agencies, advertising networks, and other companies who place ads on our Website, may use their own cookies, Web beacons, and other technology, to collect information about you. We do not control the use of such technology and have no responsibility for the use of such technology to gather information about you. Note that service providers may use such Personal information to perform a “soft” inquiry of credit, in connection with providing you with the requested service or product.
Hyperlinks. Our Website and email messages sometimes contain hypertext links to Websites owned by third parties. We are not responsible for the privacy practices or the content of such other Websites. These links are provided for your convenience and reference only. We do not operate or control any information, software, products or services, available on these third party Websites. The inclusion of a link on our Website does not imply any endorsement of the services, products or website, or its sponsoring organization.
Analytics. As described above, we use third parties to monitor, analyze and report on the traffic to, from and within our Website and email messages.
Disclaimer. We do not control the collection and use of any information collected by Third Parties. Please review their policies and terms before providing any information.
We store your Personal Information in servers owned or controlled by us, or processed by third parties on our behalf, by reputable cloud-service providers in the US.
We use industry standard precautions to safeguard your Personal Information from loss, theft and misuse including unauthorized access, disclosure, alteration and destruction. These precautions are technical, physical and managerial. We have security measures in place to protect against the loss, misuse, and alteration of Personal information under our control. The servers in which we store your information are kept in a secure physical environment. The servers have industry standard firewalls. Access to such servers is password protected and access by our employees is limited. Currently, we use Secure Socket Layer software ("SSL") to protect data and to secure any transactions. SSL encrypts information including credit card number(s), and names and addresses, as they are transmitted over the Internet. Please be advised that, although we take commercially reasonable technological precautions to protect your data, no data transmission over the Internet can be guaranteed to be 100% secure from improper actions of third parties not under our control; therefore, we cannot and do not warrant that your information will be absolutely secure. Any transmission of information through our Website or through email communications is at your own risk.
We retain Personal Information for the time necessary to fulfill the purpose for which you provided the information and retain it thereafter for a period permitted by law. We retain Non-Personal Information indefinitely as the same is used by us for any proper purpose, including but not limited to analysis, development and improvement of our Website, services and products.
We reserve the right to make material changes to the substance of this Privacy Policy. We will post those changes through a prominent notice on the Website, so that you will always know what information we gather, how we might use that information, and to whom we will disclose it.
California Resident Rights. California residents have the right to receive, once a year, information about third parties with whom we have shared information about you or your family for their marketing purposes during the previous calendar year, and a description of the categories of Personal information shared. In addition, California residents have the right to know if we respond to do not track signals or cookies. We do not respond to such signals or cookies.
As stated in this Policy, you have agreed to allow us to share information with third parties for their direct marketing purposes until you remove your information; and thus, you have agreed to this disclosure. California customers may request further information about our compliance with this law by sending us an email at privacy_mla@xltmediasolutions.com. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through this email address.
With your consent, we may send push notifications or alerts to your web browser or your mobile device. These notifications may include marketing messages from us or from third parties. You can deactivate these messages at any time by changing the notification settings on your mobile device or browser.
Unfortunately, we are not in a position to accept registrants who are not U.S. Citizens. The CASL and GDPR regulations, in particular, provide certain rights to their citizens which are not the same as the United States. For this reason, we do not accept registrations from any citizen outside the United States. Our services are specifically designed for United States citizens. We have expunged all European Union Member and Canadian Citizens data to the extent we have been made aware of the same. If you are a European Union Member, Canadian or any country outside of the United States citizen, please notify us at privacy_mla@xltmediasolutions.com.
If you are a California resident, California law may provide you with additional rights regarding our use of your Personal Information. To learn more about your California privacy rights, please read our CCPA PRIVACY NOTICE FOR CALIFORNIA RESIDENTS.
To submit a request to know or delete Personal Information, please complete the form provided here. Once we have received a request, we work with Consumers to verify their identities. As part of the verification process, we work with OneTrust. Depending on the type of request submitted, OneTrust may request information from the Consumer, such as an email address, phone number, or government issued identification card. More information about OneTrust’s identification process is found here. If a Consumer has asked an agent to exercise rights on the Consumer’s behalf, the agent’s identity will need to be verified by providing a writing from the Consumer designating the agent in addition to any information requested through OneTrust.
To opt-out of the sale of Personal Information, please complete the form located here.
This section of the Privacy Policy supplements the information contained elsewhere in our Privacy Policy, applies solely to website visitors, users, and others who reside in the Commonwealth of Virginia (“consumer” or “you”), and is adopted to comply with the Virginia Consumer Data Protection Act. We may update this Privacy Policy at any time and such revised Privacy Policy shall become effective as of its posting. This Privacy Notice describes the rights of Virginia consumers to: request information about the processing of their personal data; to request access to, or a copy of, their personal data; to correct inaccuracies; to delete their personal data; to opt out of certain processing; and to exercise rights on behalf of children under 13 years of age
Virginia Consumer Personal Data Rights
A consumer may request to exercise the following rights, or, as parent or legal guardian, may request to exercise the following rights on behalf of a child younger than 13 years of age:
1. to confirm whether or not we are processing the consumer’s personal data and to access such personal data;
2. to correct inaccuracies in the consumer’s personal data, taking into account the nature of the personal data and the purposes of the processing;
3. to delete personal data provided by or obtained about the consumer;
4. to obtain a copy of the consumer’s previously provided personal data in a portable and readily usable format to the extent technically feasible;
5. to opt out of the processing of the personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
Requests to Exercise Virginia Consumer Personal Data Rights
To submit a request to exercise one of your consumer rights, please complete the form provided here. We will authenticate such request using commercially reasonable efforts. If we are unable to authenticate the request, we shall not be required to comply and may request that the consumer provide additional information reasonably necessary to authenticate the request. If we decline your request, we shall inform you without undue delay within 45 days of receipt of the request, provide a justification for declining the request, and describe the appeal process which includes: Sending an email to privacy_mla@xltmediasolutions.com, with a subject line of "VCDPA" and explain why you feel the request is valid. If we are able to authenticate the request, we will respond to the consumer without undue delay within 45 days of the request. If reasonably necessary taking into account the complexity and number of the consumer’s requests, we may extend the response period by 45 additional days provided we inform you of the extension and the reason within the initial 45 day period. Our response to your request is provided free of charge up to twice annually. If your requests are unfounded, excessive, or repetitive, we may charge a reasonable fee to cover our administrative costs of replying or decline your request.
If we have obtained personal data about you from a source other than you, we may respond to your request for deletion by (i) retaining your deletion request and the minimum data required solely to ensure that your personal data remains deleted from our records and not used for any purpose, or, (ii) opting you out of the processing of your personal data for any purpose other than those exempted by law.
This section applies only to Colorado residents. Under the Colorado Privacy Act (CPA), you have the rights listed below. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.
• Right to be informed whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")
To submit a request to exercise one of your customer rights, please complete the form provided here. We will authenticate such request using commercially reasonable efforts. If we are unable to authenticate the request, we shall not be required to comply and may request that the consumer provide additional information reasonably necessary to authenticate the request. If we decline your request, we shall inform you without undue delay within 45 days of receipt of the request, provide a justification for declining the request, and describe the appeal process which includes: Sending an email to privacy_mla@xltmediasolutions.com, with a subject line of “CPA” and explain why you feel the request is valid. If we are able to authenticate the request, we will respond to the consumer undue delay within 45 days of the request. If reasonably necessary taking into account the complexity and number of the consumer’s requests, we may extend the respond period by 45 additional days provided we inform you the extension and the reason within the initial 45 day period. Our response to your request is provided free of charge up to twice annually. If your requests are unfounded, excessive, or repetitive, we may charge a reasonable fee to cover our administrative costs of replying or decline your request.
If we have obtained personal data about you from a source other than you, we may respond to your request for deletion by (i) retaining your deletion request and the minimum data required solely to ensure that your personal data remains deleted from our records and not used for any purpose, or (ii) opting you out of the processing of your personal data for any purpose other than those exempted by law.
This section applies only to Connecticut residents. Under the Connecticut Data Privacy Act (CTDPA), you have the rights listed below. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.
• Right to be informed whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")
To submit a request to exercise one of your customer rights, please complete the form provided here. We will authenticate such request using commercially reasonable efforts. If we are unable to authenticate the request, we shall not be required to comply and may request that the consumer provide additional information reasonably necessary to authenticate the request. If we decline your request, we shall inform you without undue delay within 45 days of receipt of the request, provide a justification for declining the request, and describe the appeal process which includes: Sending an email to privacy_mla@xltmediasolutions.com, with a subject line of “CTDPA” and explain why you feel the request is valid. If we are able to authenticate the request, we will respond to the consumer undue delay within 45 days of the request. If reasonably necessary taking into account the complexity and number of the consumer’s requests, we may extend the respond period by 45 additional days provided we inform you the extension and the reason within the initial 45 day period. Our response to your request is provided free of charge up to twice annually. If your requests are unfounded, excessive, or repetitive, we may charge a reasonable fee to cover our administrative costs of replying or decline your request.
If we have obtained personal data about you from a source other than you, we may respond to your request for deletion by (i) retaining your deletion request and the minimum data required solely to ensure that your personal data remains deleted from our records and not used for any purpose, or (ii) opting you out of the processing of your personal data for any purpose other than those exempted by law.If we have obtained personal data about you from a source other than you, we may respond to your request for deletion by (i) retaining your deletion request and the minimum data required solely to ensure that your personal data remains deleted from our records and not used for any purpose, or (ii) opting you out of the processing of your personal data for any purpose other than those exempted by law.
If you have any questions or concerns regarding this Privacy Policy, or how we
collect and use personal information, please contact us at support@xltmediasolutions.com.
You may write to us at:
XLT Media Solutions, LLC
Customer Care
PO Box 3551
Westlake Village CA 91359
