We collect the following categories of information:

Identity Information — Full name, date of birth, government-issued ID details.

Contact Information — Email address, phone number, and mailing address.

Business Information — Business name, EIN/Tax ID, industry type, years in operation, and monthly revenue.

Financial Information — Bank statements, credit history, outstanding debts, and cash flow data.

Technical Information — IP address, browser type, device identifiers, and pages visited on our site.

Communication Data — Records of emails, calls, or chats with our team.

Directly from you — through our online application form, phone calls, or email correspondence.

Automatically — our website uses cookies and analytics tools to collect usage data.

From third-party sources — including credit bureaus, business data providers, and banking verification services to validate your application.

We use your information to:

• Evaluate and process your business funding application
• Present you with tailored loan proposals at no cost or obligation
• Verify your identity and prevent fraud
• Communicate with you about your application, agreements, and account updates
• Comply with applicable laws and lender requirements
• Improve our website and services
• Send you relevant funding updates (you may opt out at any time)

We do not use your information for unrelated advertising and we do not sell it to marketing companies.

We protect your data using industry-standard safeguards:

Encryption — All data transmitted between your browser and our servers is protected using SSL/TLS encryption (HTTPS).

Access Controls — Only authorized personnel with a business need can access your data. All staff follow strict data handling protocols.

Secure Infrastructure — Data is stored on secure servers protected by firewalls, intrusion detection systems, and regular security audits.

We will notify you promptly in the event of a confirmed data breach that may affect your personal information, as required by applicable law.

We do not sell, rent, or trade your personal information. We may share your data only in these circumstances:

Funding Partners & Lenders — To match you with loan proposals from our lender network, with your consent as part of the application process.

Credit Bureaus — To perform credit inquiries as disclosed during the application.

Service Providers — Third-party vendors such as CRM systems, banking verification, and email platforms who process data solely on our behalf under data protection agreements.

Legal & Regulatory Authorities — When required by law, court order, or to protect our legal rights.

Business Transfers — In the event of a merger or acquisition, your data may transfer to the new entity with prior notice to you.

Our website uses three types of cookies:

Essential Cookies — Required for the website to function (form submissions, session management).

Analytics Cookies — Help us understand traffic and improve our content (e.g., Google Analytics).

Marketing Cookies — Used to show relevant content to users who have opted into our communications.

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect website functionality.

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your data, subject to legal retention obligations
• Opt out of marketing emails at any time
• Request your data in a portable, machine-readable format

To exercise any of these rights, contact us at submissions@hilldalefund.com.

If you are a California resident, you have additional rights under the CCPA including the right to know what data we collect, the right to delete it, and the right to opt out of the sale of your data. We do not sell personal information. To submit a CCPA request, email submissions@hilldalefund.com. We respond within 45 days as required by law.

Application Data — Retained for up to 7 years per federal lending regulations.

Marketing & Communication Data — Retained until you opt out or request deletion.

Website Usage Data — Retained for 12–24 months for analytics.

Upon expiration, data is securely deleted or anonymized.

Our website may link to third-party sites. This policy does not apply to those sites. We are not responsible for their privacy practices.

We may update this policy periodically. Material changes will be reflected in the “Last Updated” date. Continued use of our services after updates means you accept the revised policy.