Privacy Requests

Introduction

This page is where you submit a privacy request to Portola Technologies, Inc. (“Portola”). You can use it to exercise your privacy rights under the California Consumer Privacy Act and other U.S. state privacy laws, to ask about personal information Portola holds about you, or to raise a takedown or content concern regarding information that appears on the tryportola.com website.

For background on what information Portola collects and how it is used, see the Portola Privacy Statement.

Who can submit a request

• Visitors to tryportola.com
• Personnel of Portola’s Business Customers (financial institutions and fintech companies that use Portola’s services)
• Borrowers of Portola’s Business Customers — see the note below on how Borrower requests are handled

Note for Borrowers. Most Borrower personal information that Portola processes is held on behalf of the Business Customer that holds your loan or account, and is governed by the federal Gramm-Leach-Bliley Act and the Business Customer’s own privacy notice.

If you are a Borrower and wish to exercise rights with respect to your personal information, you should generally contact that Business Customer in the first instance. You may also submit a request through this page; where appropriate, Portola will route the request to the Business Customer and assist them in responding as required by applicable law and our agreement with the Business Customer.

What you can request

• Right to know / access. Receive a description of the categories of personal information we have collected, the sources, the business purposes for collection, the categories of third parties with whom we share it, and the specific pieces of personal information we have collected about you.
• Correction. Request that we correct inaccurate personal information.
• Deletion. Request that we delete personal information we have collected from you, subject to applicable legal exceptions.
• Opt-out of sale or sharing. Portola does not sell or share personal information for cross-context behavioral advertising, but you may submit a formal opt-out request. See the Do Not Sell or Share Notice.
• Limit use of sensitive personal information. Where applicable under California law.
• Content or takedown concern. Raise a concern about personal information that appears on the tryportola.com website or in materials Portola has published.
• Other privacy concern or complaint. Anything else not covered above.

Submit your request

The fastest way to reach us is the Get In Touch form below. Select “Privacy request” from the Inquire dropdown and describe your request in the message field, including the details listed under “What to include in your request” below.

If you prefer, you may also email or mail your request — see “Alternative submission” further down this page.

What to include in your request

To help us locate your information and respond efficiently, please include the following in the message field of the form:

• Your full name and a contact method we can use to reach you (the form already collects email and phone — confirm the best channel here if you have a preference).
• Your relationship to Portola. Are you a website visitor, a Business Customer’s employee or contractor, a Borrower of a Business Customer, or something else?
• State of residence. Some rights depend on the state in which you reside.
• The type of request. Access, correction, deletion, opt-out, limit, takedown, or other.
• The scope of the request. Which information, accounts, products, or pages on tryportola.com are involved, if you know.
• Authorized agent details, if applicable. If you are submitting a request on behalf of someone else, please note this and confirm you can provide written authorization on request.
• You do not have to share more personal information than necessary to fulfill the request.

Identity verification

Before we respond substantively, we will take reasonable steps to verify that the request comes from you (or your authorized agent). The verification process depends on the type of information involved and the sensitivity of the request.

Typically this means matching information you provide against information Portola already holds, or asking you to confirm details through a known contact channel. We will not require you to create an account in order to make a request, and we will not use information you provide for verification for any other purpose.

If we cannot verify your identity to a degree appropriate to the request, we may decline the request or fulfill it in a more limited form (for example, a general description of the categories of information we hold rather than the specific pieces).

Authorized agents

You may use an authorized agent to submit a request on your behalf. We will ask for:

• Written authorization signed by you giving the agent permission to act on your behalf, and
• Verification of your identity directly, or, for California residents, a copy of a valid power of attorney under Probate Code §§ 4000–4465.

How we respond and timing

We will acknowledge your request promptly after we receive it, and we will respond within the timeframe required by the law applicable to you. In most cases this is 45 days from receipt, with one 45-day extension available where reasonably necessary and where we notify you of the extension.

We will respond by the contact method you used to reach us, unless you ask us to respond differently.

You will not be charged a fee, and you will not be subject to discrimination, for exercising any of these rights.

What we may not be able to do

In some cases we will be unable to fulfill a request in full. Common reasons include:

• The information is required to be retained under a specific law (for example, financial-services recordkeeping under the Bank Secrecy Act, Regulation B, or Regulation Z).
• The information is the subject of a legal hold or active litigation.
• The information is held on behalf of a Business Customer that holds your loan or account, and the request should be directed to that Business Customer.
• Fulfilling the request would interfere with another person’s rights, or with our ability to detect or respond to fraud or security incidents.
• We cannot verify your identity, or the identity of an authorized agent, to a degree appropriate to the request.

In any of these cases, we will tell you which exception applies and what we are able to do.

Alternative submission

If you prefer not to use the form, you may submit a request by email or mail:

privacy@tryportola.com

Portola Technologies, Inc.
Attn: Privacy
92 South Park
San Francisco, CA 94107

Other privacy notices

• Privacy Statement
• Cookie Notice
• Subprocessors
• Do Not Sell or Share My Personal Information