California Privacy Notice

Last Updated: June 23, 2026

This California Privacy Notice supplements the information contained in the Privacy Policy of Captech Financial, Inc. and its subsidiaries and affiliates, as applicable (“Captech,” “we,” “us,” or “our”). This supplement applies only to individuals who reside in California and whose personal information is subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act and related regulations (collectively, the “CCPA”). This supplement applies in connection with the websites and applications covered by our Privacy Policy, as well as our business financial products and services, which are provided through direct communications with us and separately executed applications, agreements, schedules, authorizations, and other signed documentation—not directly through our websites or applications. Terms used in this supplement have the meanings given to them under the CCPA unless otherwise defined in our Privacy Policy.

Personal Information We Collect

In the course of operating our business, providing financing and leasing products and services, evaluating applications, servicing accounts, communicating with customers and business contacts, and maintaining our website and systems, we may collect personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer, household, or device. During the preceding twelve (12) months, we may have collected the following categories of personal information:

Personal information does not include:

1. Publicly available information from government records.
2. De-identified or aggregated consumer information.
3. Information excluded from the CCPA’s scope, like:

• health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
• personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

We may collect the categories of personal information listed above from the following categories of sources:

Information You Provide to Us. We collect information you provide directly to us, including when you request information, submit an application, enter into or perform under a lease, loan, financing arrangement, guaranty, or related agreement, communicate with us, submit forms or documents, provide payment or banking information, or otherwise interact with us in connection with our products, services, website, or business operations.

Information We Collect Automatically. When you access our website, open or respond to electronic communications from us, or interact with our digital services, we and our service providers may collect information about your device, browser, internet or network activity, and usage through cookies, pixels, log files, and similar technologies. You may be able to manage cookies through your browser settings; however, disabling certain cookies may affect website functionality.

Information We Receive from Third Parties. We may receive information from third parties, including business customers, guarantors, vendors, brokers, referral sources, equipment suppliers, credit reporting agencies, commercial data providers, financial institutions, payment processors, fraud prevention providers, service providers, public records, governmental authorities, and other parties involved in a proposed or existing financing transaction.

How We Use Personal Information

We may use personal information for the business and commercial purposes described in our Privacy Policy and for the following purposes:

• Receiving, reviewing, underwriting, approving, documenting, closing, servicing, administering, and collecting accounts, leases, loans, and other financing transactions;
• Verifying identity, authority, creditworthiness, ownership, financial condition, collateral, equipment, insurance, and other transaction-related information;
• Communicating with customers, applicants, guarantors, vendors, brokers, referral sources, equipment suppliers, service providers, and other transaction parties;
• Providing, improving, supporting, and developing our products, services, website, systems, and business operations;
• Processing payments, account changes, customer service requests, insurance matters, tax documentation, and other account administration activities;
• Detecting, preventing, investigating, and responding to fraud, unauthorized activity, security incidents, legal claims, defaults, disputes, and other potentially unlawful or prohibited activity;
• Maintaining records, performing audits, monitoring compliance, and satisfying legal, regulatory, contractual, accounting, tax, reporting, and risk-management obligations;
• Evaluating and managing relationships with brokers, vendors, service providers, funding sources, financing sources, assignees, purchasers, investors, and other business partners;
• Marketing our products and services, subject to applicable law and any available opt-out rights;
• Managing, securing, testing, and improving our website, networks, applications, databases, and information technology infrastructure;
• Conducting analytics, forecasting, reporting, portfolio management, business planning, and internal research;
• Complying with applicable law, legal process, regulatory requests, and internal policies; and
• For any other purpose disclosed to you at or before the time the information is collected or as otherwise permitted by law.

Communications. We may use personal information to respond to inquiries, provide customer service, send notices and account-related communications, request or provide information regarding a transaction, and communicate with you regarding our products, services, policies, and business relationship.

Marketing. We may use personal information to provide information about products or services that may be of interest to you, subject to applicable law and any choices or opt-out rights available to you.  

Legal, Compliance, and Risk Management. We may use personal information to comply with applicable laws, regulations, legal process, contractual obligations, industry standards, and internal policies, and to establish, exercise, or defend legal rights and claims.

Aggregated or De-identified Information. We may create, use, and disclose aggregated or de-identified information for lawful business purposes, including analytics, reporting, product development, and portfolio management.

We will not collect additional categories of personal information or use personal information for purposes that are materially different, unrelated, or incompatible with the purposes disclosed in this supplement or our Privacy Policy without providing any notice required by applicable law.

Sensitive Personal Information

Some of the personal information we collect may be considered sensitive personal information under the CCPA, including Social Security numbers, driver’s license or state identification numbers, passport numbers, financial account information, account access credentials, and other information used for identity verification, credit review, payment processing, fraud prevention, transaction administration, compliance, or security purposes. If you authorize us to access or receive bank account information in connection with an application, proposed transaction, transaction, or servicing relationship, we may have access to information made available through that authorization; however, unless expressly authorized, we do not have access to change, edit, or modify your bank account information, and we do not request or retain your banking credentials, such as usernames and passwords. We use and disclose sensitive personal information only as reasonably necessary and proportionate for permitted business purposes, to provide and administer our products and services, to comply with legal and contractual obligations, to detect and prevent fraud and security incidents, and for other purposes permitted by the CCPA. We do not use or disclose sensitive personal information for the purpose of inferring characteristics about you.

Sale or Sharing of Personal Information

We do not sell personal information for monetary consideration. We also do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA, unless we provide any notice and opt-out mechanism required by applicable law. We do not disclose mobile opt-in information or SMS consent data to third parties or affiliates. Mobile contact details collected through our SMS programs are used solely to send communications you have expressly agreed to receive. If our practices change, we will update this Notice and provide any required rights or choices.

Retention of Personal Information

We retain personal information for as long as reasonably necessary and proportionate to fulfill the purposes for which it was collected or processed, including to evaluate, document, fund, service, administer, enforce, collect, assign, sell, or otherwise manage accounts, leases, loans, guaranties, and related transactions; maintain business and financial records; comply with legal, regulatory, contractual, accounting, tax, audit, reporting, and risk-management obligations; resolve disputes; detect and prevent fraud or security incidents; and establish, exercise, or defend legal rights. The specific retention period for a category of personal information may depend on the nature of the information, the purpose for which it was collected, applicable legal and contractual requirements, operational needs, and our record retention practices.

How We Disclose Personal Information

We may disclose personal information to the categories of recipients described below for the business and commercial purposes described in this supplement and our Privacy Policy:

• Service Providers and Contractors: We may disclose personal information to service providers and contractors that perform services for us, including technology, hosting, data security, document preparation, payment processing, credit review, fraud prevention, insurance tracking, collections support, customer service, analytics, mailing, and professional services.
• Vendors, Brokers, Referral Sources, and Equipment Suppliers: We may disclose personal information to parties involved in originating, documenting, verifying, funding, closing, servicing, or administering a proposed or existing financing transaction.
• Affiliates: We may disclose personal information to our affiliates for transaction processing, servicing, administration, financing, portfolio management, compliance, reporting, and other internal business purposes.
• Governmental Authorities, Courts, and Legal Parties: We may disclose personal information when required or permitted by law, legal process, subpoena, court order, governmental request, regulatory inquiry, or to enforce or protect our rights, remedies, property, personnel, customers, systems, and business operations.
• Transaction Counterparties: We may disclose personal information in connection with an actual or proposed merger, acquisition, financing, securitization, assignment, sale, transfer, bankruptcy, receivership, reorganization, or other transaction involving all or part of our business, assets, accounts, leases, loans, or financing portfolio.
• Funding Sources, Financing Sources, Assignees, Purchasers, Investors, and Their Representatives: We may disclose personal information to parties that provide or evaluate funding, financing, syndication, purchase, assignment, servicing, administration, insurance, or other support for our transactions and portfolio.
• Other Parties at Your Direction or With Your Consent: We may disclose personal information to other parties when you direct us to do so, authorize the disclosure, or otherwise consent.
• Mobile Opt-In Information and SMS Consent Data: We do not disclose mobile opt-in information or SMS consent data to any third parties or affiliates. This information is used solely to send communications you have expressly agreed to receive.

California Privacy Rights and Choices

Subject to applicable exceptions and verification requirements, California residents may have the privacy rights described below under the CCPA, including the rights to know, access, delete, correct, opt out of certain sale or sharing, limit certain uses and disclosures of sensitive personal information, and exercise those rights without discrimination.

Right to Know and Access

You may request that we disclose information about our collection, use, disclosure, sale, or sharing of your personal information, including:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• The business or commercial purposes for collecting, using, disclosing, selling, or sharing personal information;
• The categories of third parties to whom we disclose personal information;
• The specific pieces of personal information we collected about you, subject to applicable limitations; and
• If applicable, the categories of personal information we sold, shared, or disclosed for a business purpose and the categories of recipients of that information.

Right to Delete

You may request that we delete personal information that we collected from you and retained, subject to legal exceptions and our need to retain information for lawful business purposes.

We may deny a deletion request, or retain certain information, where permitted or required by law, including when the information is necessary for us or our service providers to:

• Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Right to Correct

You may request that we correct inaccurate personal information that we maintain about you, taking into account the nature of the personal information and the purposes for which we process it. We may request documentation or other information reasonably necessary to verify the accuracy of the requested correction and may deny a correction request where permitted by law.

Right to Opt Out of Sale or Sharing

If we sell personal information or share personal information for cross-context behavioral advertising, you may have the right to opt out of that sale or sharing. As stated above, we do not sell personal information for monetary consideration and do not share personal information for cross-context behavioral advertising unless we provide any notice and opt-out mechanism required by applicable law.

Right to Limit Use and Disclosure of Sensitive Personal Information

You may have the right to limit our use and disclosure of sensitive personal information to certain purposes permitted by the CCPA. Because we use and disclose sensitive personal information only for permitted business purposes and do not use it to infer characteristics about you, we do not currently provide a separate limitation mechanism. If our practices change in a way that requires such a mechanism, we will update this Notice and provide any required method for exercising that right.

How to Exercise California Privacy Rights

To exercise the rights described in this supplement, please submit a verifiable consumer request to us using the contact methods listed below or any other method identified in our Privacy Policy.

Phone: (435) 268-4700
Website: www.captechfinancial.com
Email: info@captechfinancial.com

Only you, or a person authorized to act on your behalf, may submit a verifiable consumer request related to your personal information. We may request information necessary to verify your identity, confirm your authority to make the request, and process your request. Authorized agents may be required to provide proof of authorization, and we may require you to verify your identity directly with us unless otherwise prohibited by law.

Your request should:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We will use personal information provided in connection with a request only to verify the requestor’s identity or authority, process the request, maintain records of the request, and comply with applicable law.

Response Timing and Format

We will respond to verified requests within the time required by applicable law. If we need additional time, we will notify you of the reason and extension period. If we deny a request in whole or in part, we will explain the basis for the denial to the extent required by law. For data portability requests, we will provide information in a readily usable format to the extent required and technically feasible.

We do not charge a fee to process or respond to a verifiable consumer request unless the request is excessive, repetitive, or manifestly unfounded. If we determine that a fee is permitted and appropriate, we will provide notice and an estimate before completing the request.

Right to Non-Discrimination

We will not discriminate against you for exercising rights under the CCPA. Unless permitted by applicable law, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Changes to This Notice

We may update this California Privacy Notice from time to time. The “Last Updated” date above indicates when this supplement was last revised.

Contact Information

If you have any questions or comments about this Notice, our Privacy Policy, or our privacy practices, or if you wish to exercise your rights under California law, please contact us at:

Phone: (435) 268-4700
Website: www.captechfinancial.com
Email: info@captechfinancial.com

Postal Address:
Captech Financial, Inc.
1495 S. Dixie Dr.
St. George, UT 84770