California Privacy Policy

This California Privacy Policy contains disclosures required by the California Consumer Privacy Act ("CCPA") and applies only to "personal information" that is subject to that law. Most of our data collection, use, and sharing practices are governed by our Gramm-Leach-Bliley Privacy Policy, however, if you are a California resident, CCPA may apply to our Services as they relate to business products featured on our site (for example, business credit cards and small business loans). This California Privacy Policy should be read in conjunction with the NerdWallet Privacy Policy and NerdWallet Terms of Use, which are incorporated herein by reference.

A. Personal Information We Collect, Disclose for a Business Purpose, and Sell

We collect the categories of personal information about California consumers identified in the chart below and use and disclose to third parties this information for business or commercial purposes. In addition, as is common practice among companies that operate online, we allow certain third parties, including non affiliated business partners, advertising networks, analytics providers, and other advertising providers, to directly collect information about your online activities on the Site and across your browsers and devices using cookies, web beacons, mobile advertising identifiers and other technologies.

B. Categories of Sources

We collect this personal information directly from you. We may also, at your direction, receive credit reports or scores from consumer reporting agencies such as TransUnion or Equifax, or third-party services that provide a mechanism to share information you have provided to the third party through the use of an application program interface (API), such as Facebook Connect or the Twitter API.

C. Why We Collect, Use, and Share California Information

We use and disclose the personal information we collect for our commercial and business purposes, as further described in this Privacy Policy.

Commercial purposes include, without limitation: marketing, advertising, authentication, identity resolution, fraud prevention, fulfillment services, and fulfilling the requests of our customers.

Business purposes, as identified in the CCPA, include: audits and related activities; legal compliance; detecting and protecting against security incidents, fraud, and illegal activity; debugging services and systems; administrative and support services such as processing orders and payments and analytics; internal research and operations; activities to maintain and improve our Services; and other one-time uses.

D. Your Rights Regarding Personal Information

California residents have certain rights with respect to the personal information collected by businesses. If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:

• The right to request a list of what personal information we disclosed to third parties for their own direct marketing purposes.
• The right to know the categories and specific pieces of personal information we collect, use, disclose and sell about you.
• The right to request that we delete the personal information we have collected from you.
• The right to data portability, meaning you have the right to obtain and reuse personal data covered by the CCPA.
• The right to limit the use of your sensitive personal information to specifically permitted purposes.
• The right to correct inaccurate personal information we have on you.
• The right to opt out of our sale(s) or sharing of your personal information.
• The right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA.

E. Our Retention of Your Personal Information

Unless you specifically ask us to delete your personal information, we retain your personal information as long as it is necessary to comply with our data retention requirements and provide you with the Services you have requested. However, even if you request a deletion, we may be required to maintain your information for as long as necessary to:

• Comply with our legal or regulatory compliance needs;
• To exercise, establish or defend legal claims; and/or
• To protect against fraudulent or abusive activity on our Services.

F. How to Exercise Your California Consumer Rights

To Exercise Your Right to Request, Know or Delete

To exercise your California consumer rights to request, know or delete, please visit our Privacy Preferences page. You may also submit your CCPA request by:

• Sending us an email with the subject line "CCPA Request" and the relevant right identified in the body of the email, or
• Navigating to our contact page, clicking "Submit a Question," then selecting "Other Questions or Concerns" from the drop-down menu and submitting with "CCPA Request" in the subject line.

G. Verification Process and Required Information

Note that we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled.

H. Authorized Agent

You may designate an authorized agent to make a CCPA request on your behalf by writing to us at the contact information provided above. Note, if designating an entity to act on your behalf, the CCPA requires that such entity must be registered with the California Secretary of State.

I. Minors' Right to Opt-In

We do not sell the personal information of consumers we know to be under 16 years of age.

J. Small Business Loan Information

From time to time, you may provide us with your personal information for the purpose of requesting small business loans from one or more of our partners. You agree that the disclosure of your personal information in connection with your request is not a sale of your personal information under the CCPA.