Oregon Privacy Policy

Last updated July 1, 2024

Privacy Policy for Oregon Residents

This Privacy Policy for Oregon Residents (“Oregon Privacy Policy”) explains how Reliable Credit Association, Inc. (referred to herein as “Reliable Credit”, “we”, or “us”), collects, uses, and discloses personal data about Oregon residents (referred to herein as “consumer”, “you” or “your”) that is subject to the Oregon Consumer Privacy Act (the “OCPA”). Any terms defined in the OCPA have the same meaning when used in this Oregon Privacy Policy.

The rights set forth under the OCPA do not apply to, among other information and activities excluded by the OCPA:

  • Information collected, processed, sold, or disclosed under or in accordance with the federal Gramm-Leach-Bliley Act (“GLBA”), and implementing regulations;
  • Information that originates from, or is intermingled so as to be indistinguishable from, information collected, processed, sold, or disclosed under or in accordance with the GLBA and that a person licensed under ORS 725 collects, processes, uses or maintains in the same manner as is required under the GLBA; and
  • Activities involving the collection, maintenance, disclosure, sale, communication, or use of any information for the purpose of evaluating a consumer’s credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, personal characteristics or mode of living by:

    • on who provides information for use in a consumer report; and

    • by a user of a consumer report.

Therefore, this Oregon Privacy Policy does not apply to, for example, information that we collect about Oregon residents who apply for or obtain our financial products and services for personal, family, or household purposes pursuant to the GLBA (“Customers”). It also does not apply to information that comes from, or is combined with and impossible to tell apart from, information we collect pursuant to the GLBA. For more information about how we collect, disclose, and secure information about our Customers, please see our Privacy Notice.

Categories of Personal Data Collected

We collect minimal personal data about you that is not excluded by the OCPA. We currently collect and, in the 12 months prior to the last updated date of this Oregon Privacy Policy, have collected or may have collected the following categories of information about Oregon residents that is not excluded by the OCPA:

  • Identifiers – Non-Customers:  First, middle, and last name; postal address; unique personal identifier; online identifier; email address; mobile phone number; residence phone number; work phone number; account name; date of birth; social security number; driver’s license number; passport number; or other similar identifiers. Note: Some personal data included in this category may overlap with other categories.
  • Protected classification characteristics under Oregon law or federal law – Non-Customers: Age (40 years or older), marital status, citizenship, or gender.
  • Customer records with personal data – Non-Customers:  Information that identifies, relates to, describes, or is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer who is a non-Customer, including, but not limited to, name, signature, address, telephone number, driver’s license or state identification card number, insurance policy number, bank account number, debit card number, or any other financial information. Note: Some personal data included in this category may overlap with other categories.
  • Commercial information – Information including, but not limited to, records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
  • Internet or other electronic network activity - Non-Customers:  Information about non-Customer’s interaction with a website or online loan application which is limited to name, email address, and phone number.
  • Geolocation data – We collect geolocation data on Customers and non-Customers in a way that does not identify the individuals or allow us to locate the individual.
  • Professional or employment-related information – Current or past job history.

We have collected the above categories of personal data from the following sources:

  • Directly from consumers and/or their agents.
  • Indirectly from our Customers and/or their agents. For example, through information we collect in the course of providing services to our Customers.
  • Directly and indirectly from activity on our website, as described in Cookie Policy herein. For example, from submissions through, eServices, Customer Satisfaction Surveys, website usage details collected automatically, and/or Reliable Credit app usage.
  • From third parties that interact with us in connection with the services we perform. Examples include, skip tracing services, repossession agents, and collection agencies.

We currently collect and may have collected the above personal data for the following business or commercial purposes:

  • Performing services for Reliable Credit or on behalf of a service provider, including providing financing; establishing, maintaining, or servicing accounts; providing customer service; processing transactions and payments; and verifying Customer information.
  • Helping to ensure security and integrity of the personal data.
  • Internal research for technological development.
  • For use in activities to verify or maintain the quality or safety of Reliable Credit’s services, and to improve, upgrade, or enhance such services.
  • Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity.
  • Debugging activities to identify and repair errors that impair Site and Reliable Credit computer system functionality.

Length of Time Personal Data is Retained

We will not retain your personal data for longer than is reasonably necessary for the disclosed collection or use purpose. Our retention of personal data also is subject to state and federal legal requirements.

Your Rights and Choices

The OCPA provides Oregon residents with specific rights regarding their personal data. This section describes your rights and explains how to exercise those rights. Only you, or your guardian or conservator, may make a request related to your personal data. You may also make a request on behalf of your minor child.

The request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal data or an authorized representative and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Right to Access Personal Data

You have the right to request that we disclose certain information about our collection and use of personal data. Upon receiving and processing a request, we will disclose to you:

  • The categories of personal data we collected about you.
  • The categories of sources for the personal data we collected about you.
  • Our business purposes for collecting that personal data.
  • The categories of third parties with whom we disclose personal data.

You also have the right to request the specific pieces of personal data we have collected about you.

Right to Know Who Has Received Your Personal Data From Us:

  • Skip tracing services – To locate a consumer for whom we do not have good location information.
  • Repossession agents – To locate a vehicle for repossession upon a customer’s default.
  • Collection agencies – If we assign an account for collection after a customer’s default.

Right to Correct Inaccurate Personal Data

You have the right to request that we correct any inaccurate personal data, taking into account the nature of the personal data and the purposes of the processing of the personal data. Upon receiving and processing a request to correct inaccurate personal data, we shall use commercially reasonable efforts to correct the inaccurate personal data as directed by you.

Right to Delete Personal Data

You may request that we delete any of your personal data that we collected from you and retained, subject to certain exceptions. Upon receiving and processing a request, we will delete your personal data from our records, unless an exception applies.  We will also ensure that all deletion requests are passed along to applicable third parties, contractors, and service providers, unless an exception applies.

Please note that we, or a service provider or contractor acting pursuant to its contract with us, may deny your deletion request if retaining the information is reasonably necessary for us or our service providers or contractors maintain the personal data to:

  • Complete the transaction for which we collected the personal data, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
  • Debug products to identify and repair errors that impair existing intended functionality.
  • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
  • Enable solely internal uses that are reasonably aligned with consumer and/or employee expectations based on your relationship with us.
  • Comply with a legal obligation.
  • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Right to Obtain a Copy of Your Personal Data

You may request that we give you a copy of all of the personal data that we have processed or are processing.

Right to Opt-Out of Processing, Sales and Profiling

The OCPA gives you the right, at any time, to direct us not to process your data for targeted advertising, sale, or profiling. In the preceding twelve (12) months, however, Reliable Credit has not processed your personal data for “targeted advertising”, “sale” or “profiling” as those terms are defined in the OCPA.

How to Exercise Your Rights

To exercise your access, correction, deletion, and limitation of use and disclosure rights described above, please submit a request to us:

  • by calling us at 1-888-462-3003, Monday through Friday, 8:30 am PST to 5:00 pm, PST, excluding observed holidays
  • or mailing us at:

Reliable Credit Association, Inc.
Attn: General Counsel
PO Box 22829
Milwaukie, OR 97269

If you are submitting a request on behalf of an Oregon resident, please submit the request through one of the designated methods discussed above. Please attach a written authorization authorizing you to make the request on their behalf.

The request must:

  • Provide sufficient information that allows us to reasonably verify you (or in the case of an authorized representative, the consumer) are the person about whom we collected personal data or an authorized representative.
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal data if we cannot verify your identity and/or authority to make the request and confirm the personal data relates to you. In the case of an authorized representative, we may need to contact the consumer to directly verify their identity and your authority. Making a request does not require you to create an account with us. We will only use personal data provided in a request to verify the requestor’s identity or authority to make the request.

Responding to Your Request

If you have an account with us, we will deliver our written response to the physical or email address on that account, at your option, unless you elect otherwise. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option, to the physical or email address you provide in your request. We also may contact you for additional information to verify your identity and the validity of your request.

We attempt to respond to a request within forty-five (45) days of its receipt. If we require more time (up to 45 days), we will inform you of the reason and extension period in writing. Any disclosures we provide will only cover the 12-month period preceding the request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal data that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Your Right to Appeal

If we refuse your request, we will allow you fifteen (15) days after you receive our refusal to appeal that decision. If you choose to appeal the decision, you may do so in the same manner that you submitted the request. We will notify you in writing of our approval or denial of your appeal, and the reasons therefore, within 45 days after the date we received the appeal.

Non-Discrimination

We will not discriminate against you for exercising any of your OCPA rights.

Accessibility

We are committed to ensuring this Oregon Privacy Policy is accessible to individuals with disabilities. If you wish to access this Oregon Privacy Policy in an alternative format, please contact us as described below. Please also see our ADA Policy available here.

Contact Information

If you have any questions about this Oregon Privacy Policy, you may call us during normal business hours at 1-888-462-3003 or write us at:

Reliable Credit Association, Inc.
Attn: General Counsel
PO Box 22829
Milwaukie, OR 97269