Privacy Policy

HomeDepot Apply ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring you have a positive experience on our website HomeDepot.com/applynow invitation code and when using our services. This Privacy Policy explains our information practices, including what information we collect, how we use it, and the choices you have regarding your information.

This Privacy Policy applies to info we collect through our website, mobile applications, and other online services that link to this policy (collectively, the "Services"). By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, and other factors. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy. Your continued use of our Services following the posting of revised Privacy Policy means that you accept and agree to the changes.

We use the information we collect for various purposes, including:

• • Service Delivery: Processing applications, managing accounts, and providing customer support
• • Verification and Compliance: Verifying identity, conducting fraud prevention, and complying with legal obligations
• • Communication: Sending transactional emails, account notifications, and service updates
• • Marketing: Sending promotional materials, newsletters, and marketing communications (with your consent)
• • Analytics and Improvement: Analyzing usage patterns to improve our Services and user experience
• • Security: Protecting against unauthorized access, fraud, and maintaining system security
• • Legal Compliance: Responding to legal requests and complying with applicable laws and regulations
• • Business Operations: Conducting business operations, financial reporting, and internal record-keeping

We implement comprehensive security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• • 256-bit SSL encryption for data transmission
• • PCI DSS compliance for payment processing
• • Multi-factor authentication for account access
• • Regular security audits and penetration testing
• • Secure data storage on protected servers
• • Restricted access to personal information
• • Continuous monitoring for suspicious activity

While we strive to protect your information using reasonable security measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and any transmission of information is at your own risk. You are responsible for maintaining the confidentiality of your account credentials and passwords.

We may share your information with third parties in the following circumstances:

• • Service Providers: Vendors who assist us in operating our Services, processing payments, and providing support
• • Business Partners: Financial institutions and partners necessary to fulfill your application requests
• • Legal Compliance: When required by law, court order, or government request
• • Fraud Prevention: To protect against fraud, security threats, and illegal activities
• • Business Transfers: In connection with mergers, acquisitions, or asset sales
• • Aggregated Data: Non-identifying, aggregated information for analytics and research purposes

We do not sell, trade, or rent your personal information to third parties for their independent marketing purposes without your explicit consent. Any third parties we share information with are contractually obligated to maintain the confidentiality and security of your information.

Depending on your location, you may have certain rights regarding your personal information:

• • Right to Access: Request access to the personal information we hold about you
• • Right to Correction: Request correction of inaccurate or incomplete information
• • Right to Deletion: Request deletion of your personal information (subject to legal obligations)
• • Right to Opt-Out: Opt out of marketing communications and targeted advertising
• • Right to Portability: Request a copy of your information in a portable format
• • Right to Withdraw Consent: Withdraw consent for information processing

To exercise any of these rights, please contact us using the information provided in the Contact Us section below. We will respond to your request within the timeframe required by applicable law.

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly and terminate the child's account.

For users between 13 and 18, we provide additional privacy protections and limited data collection. Parents or guardians who believe their child has provided information to us should contact us immediately at the address provided below.

Our Services may contain links to third-party websites, applications, and services that are not operated by us. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing your information or using their services.

If you access our Services through social media platforms or other third-party services, those platforms may collect information about your activity. Please review their privacy policies to understand how they handle your information.

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country. By using our Services, you consent to the transfer of your information to countries outside your country of residence, including the United States, which may not provide the same level of data protection.

We implement appropriate safeguards to protect your information during international transfers, including standard contractual clauses and other mechanisms recognized under applicable data protection laws.

We retain your personal information for as long as necessary to provide our Services, comply with legal obligations, and resolve disputes. The retention period varies depending on the type of information and the purposes for which we use it:

• • Account information is retained for the duration of your account and thereafter for legal and business purposes
• • Application information is retained in accordance with financial regulations and industry standards
• • Marketing information is retained until you unsubscribe or request deletion
• • Log data and analytics information are typically retained for 12-24 months

After the retention period expires, we securely delete or anonymize your information. However, we may retain certain information if required by law or for legitimate business purposes.