California Supplemental Privacy Statement for California Residents ONLY

REVISED: January 2026

POLICY/PROCEDURE

This Privacy Notice for California Residents (“PNCR”) supplements the information contained in HOVG, LLC dba Bay Area Credit Services’ (“BACS”) Privacy Policy and applies solely to individuals who reside in the State of California (“individuals” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and any terms defined in the CCPA have the same meaning when used in this notice.

The purpose of this PNCR is to provide individuals with a description of BACS’ online and offline practices regarding the collection, use, disclosure, and sale of personal information and of their rights regarding their personal information.

Categories of Personal Information Collected

The specific categories of personal information we may have collected about you is dependent on a variety of factors including, but not limited to, the circumstances surrounding why we may have been in contact with you. Generally, we collect personal information about individuals who are our employees, job applicants, prospective clients, customers of our clients, individuals who may be able to provide location information for customers of our clients, or individuals who have visited our website(s). Accordingly, in the preceding twelve (12) months, BACS may have collected the following categories of personal information about you, as applicable:

  • Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers;
  • Personal information, including but not limited to, signature, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information;
  • Characteristics of protected classifications under California or federal law;
  • Biometric information;
  • Geolocation data;
  • Professional or employment-related information;
  • Education information; and/or

If applicable, BACS collected, utilized, and shared these categories of personal information in accordance with BACS’ general Privacy Policy, as described above.

Your Rights Under the CCPA

This section describes your rights under the CCPA and explains how to exercise those rights.

1. Right to Know About Your Personal Information

You have the right to request that we disclose to you certain details about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

  • The categories of personal information we collected about you.
  • The categories of sources for the personal information we collected about you.
  • Our business or commercial purpose for collecting that personal information.
  • The categories of third parties with whom we share your personal information, if applicable.
  • The business or commercial purpose for which we disclosed the category of personal information

2. Right to Delete Your Personal Information

You have the right to request that we delete any of your personal information that we collected and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

  • Complete the transaction for which we collected the personal information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform your contract with our client.
  • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code  1546 et. seq.).
  • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us and/or our clients.
  • Comply with a legal obligation.
  • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Submitting a Request Under the CCPA

To exercise your rights described above, you will need to submit a verifiable consumer request. We offer two (2) methods to submit your request:

Click on this link to submit online form or

Call us toll free at (800) 895-3116

Only you may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request twice within a 12-month period. The verifiable consumer request must:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We will be unable to respond to a request, or provide you with personal information, if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. The type of information needed to verify your identity is dependent on the circumstances surrounding why we may have been in contact with you. Generally and for most individuals, however, your name, address, phone number, and your BACS account number will likely be necessary for us to verify your identity.

We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Response Timing and Format

We will respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.

We will deliver our written response to you electronically or by mail, at your option.

Our response to a verifiable consumer request will only cover the 12-month period preceding our receipt of your verifiable consumer request.

If we are unable to comply with a request, we will provide a response which explains the reason(s) we are unable to comply with a request, if applicable.

No Sale of Personal Information

BACS does not and will not sell your personal information to third parties, unless you direct us to do so.

No Discrimination

BACS does not discriminate against consumers who exercise their rights provided by the CCPA.

Changes to Our Privacy Notice for California Residents

BACS reserves the right to amend this Privacy Notice for California Residents at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on our website(s) and update the PNCR’s effective date.

Contact us for More Information

If you have questions or concerns about BACS Privacy Policies or practices, or the Privacy Notice for California Residents, you can contact us at: consumerprivacy@bayareacredit.com.