Privacy policy

Who this policy covers

This policy applies to GLD Factoring LLC DBA GLD Funding ("GLD Factoring LLC DBA GLD Funding", "we", "us"), to this website at www.gldfunding.com, and to the funding applications, forms and support channels we operate. It covers information about businesses that apply to us, about the owners and officers who apply on a business's behalf, and about visitors who browse the site without applying.

It does not cover the separate privacy practices of the third parties we link to, including our client login portal's identity provider, the banks and payment processors that hold your accounts, or the social platforms linked in our footer. Those are governed by their own policies.

Information we collect

Information you give us directly

When you apply for funding, we collect:

• Business identity - legal name, DBA, entity type, Employer Identification Number, business address, phone, industry and start date
• Owner identity - for each owner listed on the application: name, title, ownership percentage, email, mobile phone, home address, date of birth and Social Security number
• Financial information - business bank statements, deposit and balance history, average monthly revenue, and the details of any existing advances or financing positions you disclose
• Your funding request - amount requested and intended use of funds
• Authorization records - your electronic signature image together with the timestamp, IP address, browser user agent and the version identifier of the authorization text displayed to you at the moment you signed
• Correspondence - what you send us through the contact form, by email, by SMS, or say to us on a recorded servicing call

Information we collect automatically

• Device and connection data - IP address, browser type and version, operating system, and screen characteristics
• Usage data - pages viewed, time on page, the link or search that referred you, and the path you took through the site
• Application progress - which steps of the application you have completed, so a part-finished application can be resumed

Information we receive from other sources

• Consumer and business credit reporting agencies - credit reports and scores, obtained under the authorization you sign on the application, during underwriting and in connection with any renewal
• Bank data aggregators - where you choose to connect your bank account instead of uploading statements, read-only transaction and balance history
• Payment processors and financial institutions - card volume and deposit verification, where you have authorized us to verify directly
• Referral partners and independent sales organizations - where a partner introduced you to us, the application information you gave them
• Public and commercial records - entity registrations, UCC filings, lien and judgment records, and fraud and identity verification databases

Why we use it

• To evaluate your application and decide whether, and on what terms, to fund it
• To verify your identity and the accuracy of the financial information you gave us
• To detect, investigate and prevent fraud and other unlawful activity
• To fund, service, collect and reconcile any advance provided, including originating the remittances you authorize
• To communicate with you about your application, your account, and - where you have not opted out - other products we offer
• To meet legal, regulatory and audit obligations, including state commercial financing disclosure, registration and recordkeeping requirements, anti-money-laundering obligations, and the record retention required to make an electronic signature enforceable
• To maintain, secure and improve the site, and to measure which pages and sources bring businesses to us

We do not use Social Security numbers, dates of birth, bank statements or bank connection data for advertising, and we do not use them to build profiles for any purpose other than the ones listed above.

Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose it only in these circumstances:

• Service providers who work on our behalf under written contracts that limit them to our instructions - hosting and infrastructure providers, bank data aggregators, identity and fraud verification services, e-signature and document storage providers, payment processors and ACH originators, communications platforms, and analytics providers
• Funding partners where an advance is syndicated, participated or assigned, and prospective assignees conducting diligence under confidentiality
• Referral partners and independent sales organizations, limited to application status and funding outcome for the deals they introduced
• Credit reporting agencies and commercial data services, where we report or verify account performance
• Professional advisors - counsel, auditors and accountants - under a duty of confidentiality
• Regulators, courts and law enforcement, where required by law, subpoena or other legal process, or where necessary to establish or defend legal claims
• A successor in a merger, acquisition, financing or sale of assets, in which case this policy continues to govern the information transferred until the successor gives you notice of any change

Connecting your bank account

You may supply bank statements either by uploading them or by connecting your bank account through a third-party bank data aggregator. If you connect an account, you enter your banking credentials on the aggregator's screen, not ours. We never receive or store your online banking username or password. The aggregator gives us read-only access to transaction and balance history for the statement period we need - we cannot move money through that connection, and you can revoke the connection with the aggregator or with us at any time.

Cookies and analytics

We use a small number of cookies and similar technologies. Strictly necessary cookies keep the site working, hold your place in a part-completed application and protect forms against abuse; these cannot be switched off. Analytics cookies tell us, in aggregate, which pages are read and which sources bring businesses to us. We do not use advertising cookies that track you across other websites.

Most browsers let you block or delete cookies in their settings. Blocking strictly necessary cookies will break the application form. We honor the Global Privacy Control (GPC) signal as an opt-out request where state law gives it effect.

How long we keep it

• Applications that are declined or withdrawn - 25 months from the date of the decision. We apply this single conservative period rather than tracking shorter category-specific minimums.
• Applications that are abandoned before submission - 12 months from the last activity, then deleted.
• Funded files - for the life of the advance plus 7 years, covering the agreement, disclosures, statements and servicing history.
• Signature and authorization audit records - for the life of the agreement plus 7 years, retained in a form that accurately reproduces what was displayed and signed, as electronic signature law requires.
• Bank connection data - deleted within 90 days of a final decision on a declined application; retained with the funded file where an advance is made.
• Contact form and support correspondence - 24 months from the last message.
• Web analytics - 26 months, in aggregated form.
• Opt-out and suppression records - kept indefinitely, because deleting them is what would cause us to contact you again.

Where a legal hold, open investigation, dispute or regulatory examination applies, we retain the affected records until it is resolved.

How we protect it

We maintain a written information security program with administrative, technical and physical safeguards appropriate to the sensitivity of the information we hold, consistent with the Safeguards Rule under the Gramm-Leach-Bliley Act. In practice that includes:

• Encryption of information in transit (TLS) and at rest
• Access limited to personnel with a business need, enforced by role-based permissions and multi-factor authentication
• Masking of Social Security numbers and account numbers in our interfaces
• Logging and monitoring of access to application files and documents
• Written security obligations imposed on every service provider that touches this data
• Periodic risk assessment, testing, and staff training
• An incident response plan, under which we notify affected individuals and regulators within the timeframes applicable law requires

No system is perfectly secure. Please do not send Social Security numbers, account numbers or bank statements to us by ordinary email - use the application form, which is encrypted, or call us.

Your choices

Marketing and contact preferences

You can stop marketing contact at any time. Reply STOP to any SMS (HELP for help), use the unsubscribe link in any marketing email, tell any representative you speak to, or contact us using the details below. We will continue to send messages necessary to service an active advance - those are transactional, not marketing, and cannot be opted out of while the advance is outstanding.

Your information

You may ask us for a copy of the personal information we hold about you, ask us to correct it if it is inaccurate, or ask us to delete it. We will honor the request unless we are required to keep the information - for example, records tied to a funded advance, a signature audit trail, or anything under a legal hold. If we cannot delete something, we will tell you which category it falls into and why.

Financial privacy

As a financial services provider we are subject to the Gramm-Leach-Bliley Act. We do not disclose nonpublic personal information about our applicants or clients to nonaffiliated third parties except as described in this policy and as permitted by law - which means there is no separate opt-out for you to exercise, because the sharing that would trigger one is sharing we do not do.

Credit report information

Credit reports obtained about an owner are used to evaluate the application. If an application is declined based in whole or in part on information in a consumer report, we will tell you and identify the reporting agency, so you can obtain a free copy and dispute anything inaccurate directly with them under the Fair Credit Reporting Act.

State privacy rights

Several states give residents rights to know what personal information is collected about them, to access or delete it, to correct it, to opt out of its sale or of targeted advertising, and not to be discriminated against for exercising those rights. California residents have those rights under the California Consumer Privacy Act as amended by the CPRA; residents of Colorado, Connecticut, Virginia, Utah, Texas and other states with comprehensive privacy statutes have comparable rights.

Two limits are worth stating plainly. First, most information we collect through the application is subject to the Gramm-Leach-Bliley Act, and information covered by GLBA is exempt from these state statutes - the GLBA framework above governs it instead. Second, information about a business entity is not personal information. Where state rights do apply, we honor them regardless of which state you live in.

To exercise a right, contact us using the details below with the subject line "Privacy request". We will verify your identity against information already in our records before acting, and respond within 45 days, extending once by a further 45 days where necessary and telling you if we do. An authorized agent may submit a request on your behalf with written permission we can verify. If we decline a request, you may appeal by replying to our response; we will answer an appeal within 45 days.

Children

This site is for business owners and is not directed to children. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

Links to other sites

Our site links to third-party sites, including our client login portal and social media profiles. We do not control those sites and are not responsible for their privacy practices. Read their policies before giving them information.

Changes to this policy

We may update this policy as our practices or the law change. The "last updated" date at the top of this page always reflects the current version. If a change materially affects how we use information you have already given us, we will tell you directly - by email or in your client portal - before it takes effect.

Contact us

Questions, requests and complaints about privacy go to the same place:

GLD Factoring LLC DBA GLD Funding, 591 Stewart Avenue, Suite 520, Garden City, NY 11530. Phone 1 (877) 498-4344. Fax 1 (516) 941-0758. Email [email protected]. You can also reach us through our contact form.

See also our terms of use and our disclosures.