Privacy Policy

Updated: June 11, 2024

BigSisFinance prioritizes your data protection and privacy. This policy applies to our websites, applications, services and all interactions we have with you. It explains how we handle your personal information (defined later), including methods of collection, use, storage, sharing and processing. It also outlines your rights regarding your personal information and how to contact us with any questions or concerns.

Please read this policy carefully. Additionally, our Terms of Use explains the terms under which we operate.

Understanding Your Information:

Key Terms:
- Definitions used throughout this Privacy Policy ("Policy") are available in a separate section here.

Personal Information: The data we process about you ("Personal Information") depends on your interaction with our Services ("Services") (as defined below) and can include:
- Information collected automatically (e.g., device information, usage data)
- Information collected by third-party technologies within our Services (more details available here)
- Information you provide directly (e.g., name, email address)

How and Why We Use Your Personal Information: We utilize your Personal Information:
- To understand your Service usage
- To deliver and maintain Services
- To maintain records of interactions with you
- To respond to your inquiries
- To notify you of Service changes
- To serve advertisements on our Services or for marketing purposes (subject to your consent)
- To enable participation in interactive features
- To enforce our legal rights and inform business strategies (more detailed information available here)

Do Not Track: Your browser settings may allow for the transmission of a "Do Not Track" signal to online services, including our Services. However, there is no industry consensus regarding how operators should handle these signals. Therefore, unless legally required, we do not currently monitor or take action based on "Do Not Track" signals. For more information on "Do Not Track," go here.

Sharing Your Personal Information:

With Trusted Partners:
- We may disclose your Personal Information to the Big Sis Finance, LLC (as defined below), our third-party service providers and professional partners, parties involved in corporate transactions, law enforcement agencies, courts, or regulatory bodies (to comply with legal obligations), or with your explicit consent. Learn more about who we share your information with here.

Retention Period:
- We retain your Personal Information for as long as necessary to fulfill the purposes for which it was collected. Find more information about retention periods here.

International Transfers:

In the event of international transfers of your Personal Information, we take steps to ensure it is subject to safeguards in compliance with applicable data protection laws. More details available here.

Additional Information:

Third-Party Links: When accessing content from third parties through our Services, please review their privacy policies to understand their data handling practices. Learn more about external links here.

Specific Regional Rights: Depending on your location, you might have additional rights regarding your Personal Information.
- United States: Learn more about your US rights here.
- EEA and UK: Learn more about your rights in the EEA and UK here.

Security:

We have implemented appropriate technical and organizational safeguards to protect your Personal Information. More information available here.

Children:

Our Services are not directed at or intended for use by children or minors under 16. Learn more about child privacy here.

Changes to This Policy:

We may update or modify this Policy periodically. Learn more about policy updates here.

How to Contact Us:

You can contact us online, by mail, or through email. Find our contact details here .

Understanding key terms within our Privacy Policy

BigSisFinance, our, us, we

We are BigSisFinance, LLC - referred to as "BigSisFinance", "Big Sis Finance", "our", "us" or "we".

Personal Information

Any information that, either directly or indirectly, in itself or in combination with other information, identifies or could identify a particular individual or household (as applicable).

You or Your

The person whose Personal Information is being collected, used, shared, or otherwise processed

Services

This Privacy Policy applies to:

The BigSisFinance websites that directly hyperlink to this Privacy Policy, including all associated subdomains.

The related services offered therein.

This Privacy Policy does not extend to:

Websites and services that do not display or link to this Privacy Policy.

Websites and services that contain their own independent privacy policies.

Key Terms

Anchor 1

Anchor 2

Anchor 3

Anchor 4

Anchor 5

Anchor 6

Anchor 7

Anchor 8

Anchor 9

Anchor 10

Anchor 11

Anchor 12

Anchor 13

Personal Information Collected:

The type of Personal Information we process about you depends on your interaction with our Services, including:

Directly Provided Information:

Any information submitted through forms, queries, registration, job application, or service subscription on our Services (e.g., name, email, demographics like age).
Content of messages, emails, or other communication you have with us, including your contact details and the message content itself.
Information contained in and associated with anything you post on our Services.

Information Collected Through Automated Technologies:

As you use our Services, we may utilize automated data collection or tracking technologies to gather specific information about your equipment, browsing activities and usage patterns, such as:

Details of your Service usage, including traffic data, referral data, location data, logs, other communication data and utilized resources (or retrieved information) on our websites and applications, including interactions with any advertisement offerings or links to third-party websites accessed, acquired, or considered, along with related metrics.
Information regarding your computer or other device, including IP address, operating system, device type, device ID and browser type, used to access or interact with our Services.
Other electronic network activity information like browsing history, viewing history, search history and interactions with our websites or Services, where applicable.

If applicable, we may also utilize these technologies to collect information regarding your online activities across various third-party websites or other online services over time (e.g., behavioral tracking).

The information we collect automatically is usually statistical data, but we may maintain it or associate it with Personal Information obtained:

(i) Directly from you, or
(ii) From third-party collaborators.

We utilize this information to improve our products and services (including the Services) and deliver better, more efficient and more personalized services to our users over time.

Tracking Technologies Utilized:

The tracking technologies we employ for this automated data collection may include:

Cookies (or browser cookies): Small files placed on your computer's hard drive.
Flash Cookies: Certain features within our Services may utilize locally stored objects (or "flash cookies") to collect and store information regarding your preferences and navigation to, from and on our Services.
Web Beacons: Portions of our Services may contain small electronic files known as web beacons (sometimes referred to as clear gifs, pixel tags and single-pixel gifs). These allow us to count users who have visited pages, track where they have been referred from, track and report conversions and generate other website-related statistics (e.g., recording the popularity of specific website content and verifying system and server integrity).

Opting Out of Tracking Technologies:

Depending on your location when accessing our Services, you may refuse the use of these technologies by activating the appropriate settings on your browser, or (where applicable) by refusing to consent to the use of these technologies when accessing our Services. Please note that certain features of our Services may no longer be available or may not function as intended if you do not consent to the use of such technologies.

Third-Party Use of Cookies and Tracking Technologies:

Some content or applications, including advertisements, made available through our Services are served or provided by third parties, such as advertisers, ad networks, ad servers, content providers and application providers. These third parties may also use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Services.
The information these third parties collect may be associated with or matched with certain of your Personal Information which they have already collected, or they may collect information in the future, including Personal Information about your online activities over time and across different websites and other online services. They may also utilize this information to provide you with interest-based (e.g., behavioral or retargeted) advertising or other targeted content.
We do not have control over these third-party tracking technologies or how they may be used, during your session or over time. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

Specific Third-Party Tracking Technologies:

Google Analytics: Some of our Services incorporate Google Analytics Advertising Features, including remarketing with Google Analytics, Google Display Network Impression Reporting, DoubleClick Platform integrations and Google Analytics Demographic and Interest Reporting. For information about Google Analytics and currently available opt-outs, please click https://support.google.com/analytics/answer/4597324?hl=en.
Microsoft Bing: Some of our Services may include advertisements or tracking technologies from Microsoft Bing. To learn more about information collected by Microsoft, please click https://www.quora.com/What-kinds-of-data-does-Bing-collect-and-how-is-it-used and opt-out of Microsoft's personalized advertising services by following the instructions found

How and Why We Use Your Information:

We use your personal information only for the reasons explained in this policy (or similar uses that align with the purposes described here). If you don't provide your information or if we can't process it for any reason, we may not be able to offer you all features of our services, or they may be delayed.

In some locations (like the EEA and UK), the law requires us to have a legal justification for collecting and using your personal information. The table below details the reasons we use your information and the legal basis for each reason. In cases where we rely on our (or a third party's) legitimate interests, we've ensured these interests don't outweigh your rights and interests in your personal information.

For what do we use your Personal Information?

Relevant for EEA and UK users; Our legal basis

1. Service Delivery and Data Processing:

We, the service provider, shall endeavor to furnish you, the user, with the Services, encompassing the presentation of Content, Promotional Materials and Tailored Recommendations, alongside the identification and rectification of Errors and Service Disruptions.

2. Categories of Data Subject to Processing:

Directly Provided Information: This encompasses any information you consciously divulge to us.
Automatically Collected Data: This comprises information amassed through Automated Data Collection Tools or Tracking Technologies.
Additional Notes:

Content: This refers to the information displayed within the service, including text, images and other media.
Promotional Materials: This encompasses advertisements or sponsored content presented within the service.
Tailored Recommendations: This pertains to suggestions or content targeted towards your specific preferences or interests.
Errors: This refers to any malfunctions or inconsistencies within the service.
Service Disruptions: This denotes any instances of service unavailability or performance degradation.
Automated Data Collection Tools: These are software programs designed to gather information automatically, such as web analytics tools or cookies.
Tracking Technologies: These are methods employed to monitor user activity or behavior within the service, such as pixel tags or log files.

Basis for Data Processing:

Explicit Consent (when mandated by Governing Legislation): We shall obtain your unequivocal and verifiable authorization for data processing whenever necessitated by applicable laws.
Legitimate Interests: We may also engage in data processing activities in furtherance of our legitimate interests, provided such activities comply with applicable legal frameworks. An example of such a legitimate interest is the provisioning of relevant Content to users in order to guarantee User Satisfaction and enhance Return Rates.
Additional Notes:

Explicit Consent: This refers to your unambiguous and informed agreement to the processing of your personal information.
Governing Legislation: This denotes the relevant laws and regulations pertaining to data privacy and security within your jurisdiction.
Legitimate Interests: These are lawful and justifiable business interests pursued by the service provider, provided they do not outweigh the fundamental rights and freedoms of the data subject.
Content: This refers to the information displayed within the service, including text, images and other media.
User Satisfaction: This signifies the degree of contentment and fulfillment experienced by users when interacting with the service.
Return Rates: This refers to the percentage of users who return to the service after their initial visit.

1. Interaction Records and User Communications:

We shall maintain a record of User Interactions with our service, to the extent that such interactions occur. We reserve the right to furnish you, the user, with Notifications or Service Advisories concerning your Inquiries, User Accounts, or Submissions.

2. Data Subject to Processing:

Directly Provided Information: This encompasses any information you consciously disclose to us.
Automatically Collected Data: This comprises information amassed through Automated Data Gathering Tools or User Activity Monitoring Tools.

Additional Notes:

User Interactions: This refers to any communication or exchange of information between you and the service, such as queries, submissions, or account activity.
Notifications: These are electronic messages sent to you regarding your account, service updates, or other relevant information.
Service Advisories: These are formal announcements concerning important information about the service, such as maintenance schedules or security updates.
Inquiries: This refers to any questions or requests for information submitted by you.
User Accounts: This denotes your individual account within the service.
Submissions: This signifies any information or data you provide to the service, such as feedback, reviews, or content uploads.
Automated Data Gathering Tools: These are software programs designed to gather information automatically, such as web analytics tools or cookies.
User Activity Monitoring Tools: These are methods employed to track user behavior within the service, such as pixel tags or log files.

Justification for Data Processing:

The processing of your personal information may be undertaken based on the following legal justifications, depending on the specific circumstances:

Compliance with Legal and Regulatory Obligations: We may process your data to the extent necessary to comply with mandatory laws and regulations imposed by governing authorities.
Legitimate Interests: We may also engage in data processing activities in furtherance of our legitimate interests, provided such activities comply with applicable legal frameworks. Examples of such legitimate interests include enabling effective communication with you, facilitating responses to your inquiries, addressing any grievances you may raise and fostering the relationship we have established with you.

1. Service Updates and User Support:

We shall endeavor to furnish you, the user, with Service Change Notifications in the event of any modifications to our services that may have an impact on your user experience. Additionally, we reserve the right to offer Customer Support and address any User Inquiries, as applicable.

2. Data Subject to Processing:

Directly Provided Information: This encompasses any information you consciously disclose to us, such as contact details, which may be utilized to facilitate communication regarding service changes or support inquiries.

Additional Notes:

Service Change Notifications: These are electronic messages informing you about any modifications to our service that may affect your usage.
Customer Support: This refers to the assistance and guidance provided to users in relation to service utilization or troubleshooting.
User Inquiries: This denotes any questions or requests for information submitted by you.

Justification for Data Processing:

We may engage in data processing activities in furtherance of our legitimate interests, provided such activities comply with applicable legal frameworks. Examples of such legitimate interests include:

Maintaining User Awareness: We have a legitimate interest in ensuring you, the user, are informed about Material Service Modifications as part of our ongoing relationship with you. This facilitates your continued and informed utilization of the services.
Facilitating Service Access and Quality: We have a legitimate interest in processing your data to the extent necessary to support your Access to and Quality Experience with the services.

Additional Notes:

Material Service Modifications: This refers to significant changes to our services that may have a substantial impact on your user experience.
Access: This signifies your ability to utilize the functionalities and features offered by the service.
Quality Experience: This denotes the degree of satisfaction and fulfillment you experience when interacting with the service.

1. Delivery of Promotional Materials:

We may utilize your personal information to tailor and deliver Promotional Materials within our services.

2. Data Subject to Processing:

Automatically Collected Data: This comprises information amassed through Automated Data Gathering Tools or User Activity Monitoring Tools.

Additional Notes:

Promotional Materials: This encompasses advertisements or sponsored content displayed within the service.
Automated Data Gathering Tools: These are software programs designed to gather information automatically, such as web analytics tools or cookies.
User Activity Monitoring Tools: These are methods employed to track user behavior within the service, such as pixel tags or log files.

Justification for Data Processing:

The processing of your personal information may be undertaken based on the following legal justifications, depending on the specific circumstances:

Explicit Consent (when mandated by Governing Legislation): We shall obtain your unequivocal and verifiable authorization for data processing whenever necessitated by applicable laws.
Legitimate Interests: We may also engage in data processing activities in furtherance of our legitimate interests, provided such activities comply with applicable legal frameworks. An example of such a legitimate interest is to enable the continued provision of Free Online Content through our services.

Additional Notes:

Explicit Consent: This refers to your unambiguous and informed agreement to the processing of your personal information.
Governing Legislation: This denotes the relevant laws and regulations pertaining to data privacy and security within your jurisdiction.
Legitimate Interests: These are lawful and justifiable business interests pursued by the service provider, provided they do not outweigh the fundamental rights and freedoms of the data subject.
Free Online Content: This signifies access to the service's content offerings without a financial charge.

1. Legal Compliance and Enforcement:

We reserve the right to process your personal information to the extent necessary to:

Uphold Legal Rights: Safeguard and enforce our legal rights and interests.
Adhere to Governing Laws: Comply with all applicable laws, regulations and legal mandates imposed by governing authorities.
Prevent Fraud and Criminal Activity: Engage in activities aimed at mitigating fraud, unauthorized access and other criminal acts.
Pursue or Defend Legal Proceedings: Participate in legal actions, either as a plaintiff or defendant, or undertake necessary steps in preparation for potential litigation.
Fulfill Court Orders and Legal Obligations: Abide by court orders, subpoenas, warrants, or other legally binding obligations.

2. Data Subject to Processing:

Directly Provided Information: This encompasses any information you consciously disclose to us.
Automatically Collected Data: This comprises information amassed through Automated Data Gathering Tools or User Activity Monitoring Tools.

Additional Notes:

Governing Laws: This denotes the relevant laws and regulations pertaining to data privacy and security within your jurisdiction.
Legal Mandates: These are compulsory requirements imposed by law enforcement agencies or other legal entities.
Automated Data Gathering Tools: These are software programs designed to gather information automatically, such as web analytics tools or cookies.
User Activity Monitoring Tools: These are methods employed to track user behavior within the service, such as pixel tags or log files.

Justification for Data Processing:

The processing of your personal information may be undertaken based on the following legal justifications, depending on the specific circumstances:

Compliance with Legal and Regulatory Obligations: We may process your data to the extent necessary to comply with mandatory laws and regulations imposed by governing authorities.
Legitimate Interests (where applicable): In other instances, we may engage in data processing activities in furtherance of our legitimate interests, provided such activities comply with applicable legal frameworks. However, we will only do so when such processing is necessary to:
- Safeguard Our Business: Protect our ongoing operations, assets, intellectual property and other business interests from harm.
- Uphold Our Interests and Rights: Defend and enforce our legal rights and interests, including contractual rights and intellectual property rights.

Additional Notes:

Governing Authorities: This denotes the relevant governmental bodies or regulatory agencies empowered to establish and enforce laws and regulations.
Legitimate Interests: These are lawful and justifiable business interests pursued by the service provider, provided they do not outweigh the fundamental rights and freedoms of the data subject.

1. Business Strategy Development:

We may utilize your personal information to:

Conduct Service Usage Analysis: Analyze data pertaining to your utilization of our services. This analysis may involve Statistical Methods and Data Aggregation Techniques.
Inform Business Planning: Leverage the insights gleaned from service usage analysis to inform our Strategic Business Decisions, including the design and selection of Future Offerings and the ongoing development, improvement, maintenance and repair of our existing products and services.

2. Data Subject to Processing:

Directly Provided Information: This encompasses any information you consciously disclose to us.
Automatically Collected Data: This comprises information amassed through Automated Data Gathering Tools or User Activity Monitoring Tools.

Additional Notes:

Statistical Methods: This refers to mathematical techniques employed to analyze and interpret data sets.
Data Aggregation Techniques: These are methods used to combine and summarize data from various sources.
Strategic Business Decisions: These are high-level choices made by the service provider to achieve its long-term objectives.
Future Offerings: This refers to new products, features, or functionalities planned for development and introduction within the service.

Justification for Data Processing:

We may engage in data processing activities in furtherance of our legitimate interests, provided such activities comply with applicable legal frameworks. An example of such a legitimate interest is to:

Enhance Service Quality and Effectiveness: Continuously improve the functionalities, features and overall user experience of our services. This may involve utilizing data to identify areas for improvement, personalize user experiences and optimize service performance.
Optimize Business Strategy Effectiveness: Leverage data insights to refine and enhance our business strategies, leading to more informed decision-making regarding product development, resource allocation and marketing efforts.

Additional Notes:

Legitimate Interests: These are lawful and justifiable business interests pursued by the service provider, provided they do not outweigh the fundamental rights and freedoms of the data subject.

1. Service Promotion:

We may utilize your personal information to engage in Promotional Activities pertaining to our services.

2. Data Subject to Processing:

Directly Provided Information: This encompasses any information you consciously disclose to us.
Automatically Collected Data: This comprises information amassed through Automated Data Gathering Tools or User Activity Monitoring Tools.

Additional Notes:

Promotional Activities: This refers to marketing and advertising efforts aimed at promoting awareness and utilization of our services.
Automated Data Gathering Tools: These are software programs designed to gather information automatically, such as web analytics tools or cookies.
User Activity Monitoring Tools: These are methods employed to track user behavior within the service, such as pixel tags or log files.

1. Marketing Communication Consent:

Explicit Consent (when mandated): We shall obtain your unequivocal and verifiable authorization (Consent) for the transmission of Promotional Materials whenever necessitated by applicable laws and regulations.
Opt-Out Mechanism: Recipients possess the right to Withdraw Consent and discontinue receiving promotional communications from us at any time. This may be facilitated through readily accessible Opt-Out Mechanisms provided within our services.

2. Legitimate Interests (where applicable):

In instances where the procurement of explicit consent is not legally mandated, we may engage in marketing communication activities in furtherance of our legitimate interests, provided such activities comply with applicable legal frameworks. An example of such a legitimate interest is to Promote Our Business by raising awareness and encouraging the utilization of our services.

Additional Notes:

Promotional Materials: This encompasses advertisements or sponsored content presented within the service or sent through other communication channels.
Opt-Out Mechanisms: These are methods employed within the service, such as unsubscribe buttons or preference settings, that allow recipients to easily withdraw their consent and discontinue receiving marketing communications.
Legitimate Interests: These are lawful and justifiable business interests pursued by the service provider, provided they do not outweigh the fundamental rights and freedoms of the data subject.

1. Enabling Interactive User Engagements:

We may utilize your personal information to facilitate your participation in Interactive Service Features, such as User-Generated Content (UGC) Initiatives (e.g., quizzes, polls, or promotions).

2. Data Subject to Processing:

Directly Provided Information: This encompasses any information you consciously disclose to us when engaging with interactive features, such as quiz answers, poll selections, or promotional entries.
Automatically Collected Data: This comprises information amassed through Automated Data Gathering Tools or User Activity Monitoring Tools within the context of your participation in interactive features.

Additional Notes:

Interactive Service Features: These are functionalities within the service that encourage active user participation and engagement, often involving submission of data or content.
User-Generated Content (UGC) Initiatives: This refers to interactive features where users contribute their own content, such as answers, selections, or entries.
Automated Data Gathering Tools: These are software programs designed to gather information automatically, such as web analytics tools or cookies, which may be used to track user interaction with specific interactive features.
User Activity Monitoring Tools: These are methods employed to track user behavior within the service, such as pixel tags or log files, which may be used to assess user engagement with interactive features.

Justification for Data Processing:

Enhance User Experience and Value: Develop and provide Compelling Features and functionalities that cater to user needs and preferences, thereby promoting User Satisfaction and encouraging continued engagement with our services. This may involve utilizing data to personalize the user experience, identify and address user pain points and optimize feature effectiveness.
Sustain User Retention: Foster a positive user experience that encourages users to return to and continue utilizing our services. This may involve analyzing user behavior and engagement patterns to identify areas for improvement and implement strategies to enhance user retention.

Additional Notes:

Legitimate Interests: These are lawful and justifiable business interests pursued by the service provider, provided they do not outweigh the fundamental rights and freedoms of the data subject.
Compelling Features: These are functionalities or offerings within the service that are deemed attractive, engaging and valuable to users.
User Satisfaction: This signifies the degree of contentment and fulfillment experienced by users when interacting with the service.

1. Payment Processing (where applicable):

We may utilize your personal information to facilitate the processing of Financial Transactions, if such functionalities are offered within our services.

2. Data Subject to Processing:

Directly Provided Information: This encompasses any information you consciously disclose to us during the payment process, such as payment card details or billing information.

Additional Notes:

Financial Transactions: This refers to the exchange of monetary value in connection with the use of our services, such as subscriptions, purchases, or fees.

Justification for Data Processing:

Secure Payment Fulfillment: Guarantee the successful completion and Recompense for any Fee-Based Services offered within our service. This may involve processing payment information to ensure proper transaction execution and verification, as well as managing potential disputes or chargebacks.

Additional Notes:

Legitimate Interests: These are lawful and justifiable business interests pursued by the service provider, provided they do not outweigh the fundamental rights and freedoms of the data subject.
Fee-Based Services: These are functionalities or offerings within the service that require users to pay a fee for access or usage.
Recompense: This refers to the financial compensation received in exchange for providing the fee-based service.

1. Additional Processing Activities:

We reserve the right to engage in additional data processing activities beyond those explicitly outlined herein, provided such activities:

Are Duly Communicated: We shall clearly and comprehensively inform you of the nature and purpose of any additional processing activities Prior to Commencement.
Comply with Legal Frameworks: Such activities shall adhere to all applicable legal and regulatory requirements.
Align with Legitimate Interests: Where applicable, the processing may be justified by our legitimate interests, provided they do not outweigh your fundamental rights and freedoms.

2. Data Subject to Processing:

Directly Provided Information: This encompasses any information you consciously disclose to us.
Automatically Collected Data: This comprises information amassed through Automated Data Gathering Tools or User Activity Monitoring Tools.
Additional Information Categories: We may process other categories of personal information, the specific nature of which will be explicitly communicated to you in accordance with the aforementioned requirements.

Additional Notes:

Prior to Commencement: This refers to the period preceding the initiation of the additional data processing activities.
Legitimate Interests: These are lawful and justifiable business interests pursued by the service provider, provided they do not outweigh the fundamental rights and freedoms of the data subject.

With your consent

Do Not Track and Your Choices:

While your browser may allow you to send a "Do Not Track" signal to websites you visit, including ours, there's no agreed-upon standard for how websites and apps should handle these signals. Currently, we do not monitor or take specific actions based on "Do Not Track" signals. However, this may change if the law requires us to do so in the future.

To learn more about "Do Not Track", you can visit [http://www.allaboutdnt.com] (link to All About Do Not Track).

Sharing Your Information:

We may share your personal information with others only for the reasons explained in this policy. Here are the types of companies we may share with:

BigSisFinance companies: We may share your information with other companies within BigSisFinance, if needed, to deliver our services.
Service providers: We may share your information with companies that help us run our services, like hosting providers, cloud-based services and customer support platforms.
Marketing and advertising partners: We may share your information with companies that help us with marketing and advertising, like social media platforms and advertising platforms. These companies may use your information to show you relevant ads based on your interests.
Business partners: We may share your information with companies that we partner with to improve our services or business processes.
Legal and regulatory purposes: We may share your information with law enforcement agencies, courts, or regulatory bodies to comply with legal obligations.
Business transactions: We may share your information with companies involved in a merger, acquisition, or other business transaction involving BigSisFinance. In these cases, we will try to anonymize the information whenever possible.
Other parties with your consent: We may share your information with other parties if you give us your explicit consent.

Remember:

We require all companies we share your information with to keep it confidential.
We may also share information that does not identify any individual, known as de-identified information.

Links to Third-Party Sites and Content:

Our Services may contain links to other websites or content operated by third parties ("Third-Party Sites"). We do not control such Third-Party Sites and are not responsible for the content, privacy practices, or security of any Third-Party Site. You acknowledge and agree that we are not responsible for the availability of any such Third-Party Sites and do not endorse or sponsor any content, products, services, or information presented on any Third-Party Site.

We recommend that you review the privacy policies and terms of use of any Third-Party Site you visit from our Services. The inclusion of any link on our Services does not constitute an endorsement, authorization, or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices.

Retention of Personal Information:

We retain your Personal Information for the minimum period necessary to achieve the designated purposes of collection as outlined in the section and table column titled "What We Use Your Personal Information For" and further elaborated under the section titled "Business or Commercial Purposes for the Collection and Processing of Personal Information." Consequently, different categories of information are subject to varied retention periods.

Upon the cessation of the relevant retention period, your Personal Information will be either deleted or anonymized. However, certain exceptional circumstances may necessitate the extended retention of Personal Information, such as:

Compliance with legal or regulatory obligations: We may be obligated to retain your information for a longer period to comply with applicable legal or regulatory requirements.
Dispute resolution: Your information might be preserved longer in connection with potential legal disputes or claims.
Compliance with legal needs: Even if you request deletion, we may be legally required to maintain your information for specific purposes, such as:
- Transaction records: Maintaining records of your transactions with us.
- Legal claims: Exercising, establishing, or defending legal claims.
- Fraud prevention: Protecting against fraudulent or abusive activities on our Services.

International Transfers of Personal Information:

Our Services are primarily hosted in the United States of America ("U.S."). You acknowledge and agree that by accessing our Services from outside the U.S., your Personal Information collected through the Services may be subject to transfer to, storage in, or other processing within the U.S. or other jurisdictions where we engage third-party service providers. It is important to note that the data protection laws of these jurisdictions may differ from the laws of your country of residence and may, in certain instances, offer a lesser degree of protection.

In the event we engage in the international transfer of your Personal Information, we implement appropriate safeguards to ensure that your Personal Information is protected in accordance with all applicable data protection laws. For Personal Information originating in the European Economic Area ("EEA") or the United Kingdom ("UK"), these safeguards may encompass the execution of the European Commission-approved Standard Contractual Clauses ("SCCs") and, where applicable, the UK International Data Transfer Addendum, with the recipient of such Personal Information. Big Sis Finance is bound by applicable European data protection laws to protect Personal Information originating in the EEA or UK that they process.

Should you require further information regarding our international data transfer practices and the implemented safeguards, please do not hesitate to contact us through the contact details provided in the "How to contact us" section of this Privacy Policy.

Supplemental U.S. State Specific Privacy Rights and Disclosures

Scope: This section solely applies to Personal Information collected from consumers residing in the United States ("U.S. Consumers").

Disclosures: Depending on your state of residence and interaction with our Services, you may be entitled to additional disclosures regarding the collected Personal Information and your associated rights.

Collected Personal Information:

Within the past twelve months, we may have collected and processed the following categories of Personal Information from U.S. Consumers:

Identifiers: Name, email address, device type, web browser, operating system and similar unique identifiers.
Unique Online Identifiers: IP address, device IDs derived from device type and similar unique online identifiers.
Certain Commercial Information: Accessed, purchased, or considered Services, advertisement offerings, links to third-party websites and related metrics.
Electronic Network Activity Information: Browsing history, search history and interaction information with our websites and Services.
Location Information: Geolocation data about your Service access location (e.g., precise device location on mobile or tablet devices, if feasible).
Online Viewing Activities and Habits: Viewed videos and pages.
Precise Geolocation (Applicable): Consumer's specific geographic location.
Demographic Data (Applicable): Gender, age, etc.
Business or Commercial Purposes for Collection and Processing: Defined elsewhere in this Privacy Policy.

Collection Purposes: We may have collected these categories of Personal Information for the following purposes (including any other purposes described in this Privacy Policy):

Operational Purposes: Operating, managing and maintaining our businesses and infrastructure.
Service Delivery and Improvement: Providing, developing, improving, repairing and maintaining our products and Services.
Internal Operations: Performing services for our businesses, such as user retention, content recommendations and information processing.
Security: Fraud and crime prevention and debugging errors in systems.
Marketing and Advertising: Marketing and advertising activities.
Internal Functions: Performing accounting, audit and other internal functions, such as internal investigations.
Compliance: Complying with law, legal process and internal policies.
Research and Development: Internal research, analytics and development, such as user-preference analytics.
Network Management: Developing, maintaining, provisioning, or upgrading networks, products, services, or devices.
Payment Processing: Processing and verifying payments (if applicable).
Customer Support: Customer support and inquiries.

No Sensitive Information Processing: We do not collect or process sensitive Personal Information for inferring individual characteristics.

Sources of Personal Information:

We collect Personal Information from U.S. Consumers through various sources:

Directly: Technical and usage information collected when using our Services.
Linked Sites: Social media sites and other third-party platforms.
Affiliated Entities: Our various affiliated entities.
Partners: Joint ventures, promotional and strategic partners.
Information Suppliers: Information providers.
Vendors: Distributors, service providers and other vendors.
Marketing Lists: Marketing mailing lists.

Retention of Personal Information: Refer to the above section titled "How long your Personal Information will be kept" for our retention practices.

Categories of Disclosed Personal Information: As detailed in the above section titled "Who we share your Personal Information with", we share your Personal Information with entities like third-party media and marketing vendors, data analytics providers, social media networks and others to provide services such as product recommendations, marketing messages and relevant offers.

Potential "Sale" or "Sharing" under State Law: Such disclosure of Personal Information may be considered a "sale" or "sharing" of information under applicable state law. For example, under California law, a "sale" is the disclosure of Personal Information to a third party for monetary consideration or anything of value and a "share" is the disclosure of Personal Information to a third party for cross-context behavioral advertising, regardless of consideration.

Disclosed Personal Information Categories: We disclose the following categories of Personal Information in the manner described above:

Identifiers: Email address, device type, web browser, operating system and similar unique identifiers.
Unique and Online Identifiers: IP address, device IDs derived from device type and similar unique online identifiers.
Certain Commercial Information: Accessed, purchased, or considered Services.
Internet or Electronic Network Activity Information: Browsing history, search history and interaction information with our websites and Services.
Location Information: Geolocation data about your Service access location (e.g., precise device location on mobile or tablet devices, if feasible).
Online Viewing Activities and Habits: Viewed videos and pages.

Potential Applicability of "Targeted Advertising" Definition:

It is important to note that certain of our processing activities may constitute "targeted advertising" as defined under the relevant legal regime.

U.S. State-Specific Privacy Rights:

Depending on your state of residence within the United States, you may possess specific privacy rights regarding your Personal Information, potentially including (but not limited to):

Right to Know: The right to access information concerning the categories of Personal Information we have collected about you, the sources from which such data was obtained, the business or commercial purposes for collecting, selling, or sharing Personal Information, the categories of third-party recipients to whom we disclose Personal Information and the specific pieces of Personal Information maintained about you.
Right to Confirmation: The right to obtain confirmation as to whether we are actively processing your Personal Information.
Right of Access: The right to obtain a copy of the Personal Information you previously provided to us in a portable and readily usable format, to the extent technically feasible, allowing you to transmit the information to another controller without hindrance, provided such processing is conducted by automated means.
Right to Deletion: The right to request the deletion of Personal Information we have collected from and/or about you, subject to certain exceptions outlined in applicable law.
Right to Rectification: The right to request the correction of inaccurate Personal Information we maintain about you, subject to certain exceptions outlined in applicable law.
Right to Opt-Out: The right to opt-out of, if applicable: (1) the sale or sharing of your Personal Information; (2) targeted advertising; and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
Right to Restriction: The right, if we utilize or disclose sensitive Personal Information for purposes beyond what is permitted by applicable law, to restrict our continued use or disclosure.
Right to Withdraw Consent: The right to withdraw your consent, if we are required by applicable law to obtain your consent for the processing of sensitive Personal Information.
Right to Non-Discrimination: The right to not be subject to discriminatory treatment by us for exercising your privacy rights.

Exercising Your Privacy Rights:

To exercise any of your aforementioned privacy rights, you may contact us through the methods outlined in the section titled "How to contact us". We may request verification of your identity to ensure compliance with your request to exercise your privacy rights. In certain states, consumers may authorize an agent to submit requests on their behalf. Notably, in California, if a consumer authorizes an agent to submit a request on their behalf, we may require the agent to provide evidence of signed authorization from the consumer to submit the request. Alternatively, we may require the consumer to verify their own identity or confirm with us that they have granted the agent permission to submit the request on their behalf. Under certain circumstances, we may be unable to honor your request if an exception applies under relevant law. We will respond to your request in accordance with the requirements of applicable law.

Right to Appeal:

You possess the right to appeal our decisions regarding your privacy rights requests. To initiate an appeal, please contact us through the methods outlined in the section titled "How to contact us". Kindly include a copy of, or specifically reference, our decision on your request to ensure proper handling of your appeal. We will respond to your appeal in accordance with applicable law.

Practices Regarding Third-Party Disclosures for Direct Marketing:

You may request information concerning our practices related to the disclosure of your Personal Information by members of Big Sis Finance to specific third parties for their direct marketing purposes. You may, under certain circumstances, be able to opt-out of our sharing of your Personal Information with unaffiliated third parties for their direct marketing purposes. To exercise this right, you may contact us through the methods outlined in the section titled "How to contact us".

Right to Opt-Out of Sale or Sharing of Personal Information:

Depending on your state of residence, you may have the right to opt-out of the sale of your Personal Information. You can exercise this right by contacting us through the methods outlined in the section titled "How to contact us" or by clicking on the "Do Not Sell or Share My Personal Information" link at the bottom of the page.

Limited Tracking for Essential Business Functions:

Please be advised that even with your opt-out selection, your website usage may still be tracked by us, our vendors, or partners to perform essential functions for our businesses, such as website hosting and ensuring the absence of fraudulent activity (e.g., click-fraud, fraudulent or bot traffic). These entities are contractually bound to maintain the confidentiality of this information and are prohibited from using it for any purpose other than providing services to our businesses.

Supplemental Information for Data Subjects in the EEA and UK:

This section is intended for individuals ("Data Subjects") located in the European Economic Area ("EEA") or the United Kingdom ("UK"). As a data subject, you may possess certain legal rights concerning the Personal Information we process about you, as outlined below. It is important to note that these rights are not absolute and may be subject to specific limitations or qualifications under applicable data protection laws. For any questions regarding these rights or their applicability to your situation, please do not hesitate to contact us.

The potential rights you may possess include, but are not limited to:

Right of Access: The right to request confirmation as to whether we are processing your Personal Information and, if so, to access such data and obtain certain information about its processing.
Right to Rectification: The right to request the rectification of any inaccurate or incomplete Personal Information we hold about you.
Right to Erasure: The right to request the erasure of your Personal Information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or processed.
Right to Restriction of Processing: The right to request restriction of the processing of your Personal Information under certain circumstances, such as when you contest the accuracy of the data or object to its processing.
Right to Data Portability: The right to receive your Personal Information in a structured, commonly use and machine-readable format and to transmit it to another controller where technically feasible.
Right to Object: The right to object, on grounds relating to your particular situation, to the processing of your Personal Information.

It is important to remember that these are just potential rights and their applicability may depend on the specific circumstances of your situation and the legal framework governing your data.

Right

Information

Access

1. Right to Access Personal Information:

You possess the right to:

Be Informed: Request and receive comprehensive information concerning the categories of your personal information that we process, the purposes for which such information is processed and the categories of third-party recipients to whom your information may be disclosed.
Obtain a Copy: Request and receive a copy of your personal information in a readily accessible and commonly used format, such as electronically.

Rectification

1. Right to Data Rectification:

You possess the right to request that we rectify any inaccuracies or factual errors present within your personal information that we hold. This right may be exercised as applicable, taking into account the relevance and accuracy of such information for the purposes of processing.

Additional Notes:

Right to Data Rectification: This refers to the legal right granted to data subjects to request the correction of inaccurate or incomplete personal information held by data controllers.
As Applicable: This signifies that the applicability of this right may be subject to specific conditions or limitations outlined in applicable legal frameworks.

Erasure (or the right to be forgotten)

1. Right to Data Erasure (Right to be Forgotten):

You possess the right to request the deletion of your personal information, subject to certain conditions and limitations outlined in applicable legal frameworks. This right, also known as the "Right to be Forgotten," may be exercised in situations where specific deletion grounds apply, such as:

Withdrawal of Consent: When you have withdrawn your previously granted consent for the processing of your personal information and we lack any other legal basis for continued processing.

Additional Notes:

Right to Data Erasure: This legal right allows data subjects to request the deletion of their personal information held by data controllers when specific legal grounds are met.
Right to be Forgotten: This refers to the principle established by certain data privacy regulations, granting individuals the right to have their personal information erased under specific circumstances.
Data Controllers: These are entities that determine the purposes and means of processing personal data.

Restriction of processing

1. Right to Restrict Processing:

You possess the right to request the restriction of processing of your personal information under specific circumstances, as outlined in applicable legal frameworks. This right may be exercised in situations such as:

Contesting Data Accuracy: You dispute the accuracy of your personal information and a period is required to verify its accuracy.
Unlawful Processing: You believe that your personal information is being processed unlawfully, but do not necessarily want it deleted.
Personal Objections: You object to the processing of your personal information based on your particular situation and there are no overriding legitimate interests justifying the continued processing.

Additional Notes:

Right to Restrict Processing: This legal right allows data subjects to request the limitation of the processing of their personal information, preventing further use beyond storage, until certain conditions are met.

Data portability

1. Right to Data Portability:

You possess the right to:

Receive Your Data: Obtain your personal information, which you have provided to us, in a Structured, Machine-Readable and Commonly Used Format (SMRCUF). This format facilitates the transfer of your data to other service providers without hindering usability.
Transmit Your Data (where technically feasible): Under specific circumstances, request that we directly transmit your personal information to a designated third-party controller, provided such transmission is technically achievable.

Additional Notes:

Structured, Machine-Readable and Commonly Used Format (SMRCUF): This refers to a standardized data format that is easily processed and understood by computers, enabling seamless data transfer between different systems.
Technically Feasible: This signifies that the requested data transmission to a third-party controller must be practicable and achievable with the existing technological infrastructure.

To object

1. Right to Object:

You possess the right to object to the processing of your personal information under specific circumstances, as outlined in applicable legal frameworks:

Direct Marketing (including profiling): You have the absolute right to object to the processing of your personal information for Direct Marketing Purposes, including Profiling Activities employed for such purposes, at any time.
Legitimate Interests (with exceptions): You may also object to our continued processing of your personal information where such processing is based on our Legitimate Interests, unless we can demonstrate:
- Compelling Legitimate Grounds: The existence of compelling legitimate grounds that override your interests, rights and freedoms.
- Legal Necessity: The processing is necessary for the establishment, exercise, or defense of legal claims.

Additional Notes:

Direct Marketing Purposes: This refers to the use of your personal information for the promotion of products, services, or offerings, either directly or through third parties.
Profiling Activities: This encompasses the automated analysis of your personal information to predict your behavior, preferences, or other characteristics for various purposes, including direct marketing.
Legitimate Interests: These are lawful and justifiable business interests pursued by the service provider, provided they do not outweigh the fundamental rights and freedoms of the data subject.

Not to be subject to automated individual decision making

1. Right to Object to Automated Decision-Making:

You possess the right to object to decisions made solely through Automated Means (i.e., without human intervention) that produce:

Legal Effects: Consequences impacting your legal rights or obligations.
Significant Impacts: Material or substantial effects on you, such as affecting your access to opportunities, rights, or benefits.

Additional Notes:

Automated Means: This refers to the use of algorithms or other technological processes to make decisions without human involvement.
Legal Effects: These are consequences that directly impact your legal rights or obligations, such as eligibility for employment, credit, or insurance.
Significant Impacts: These are substantial effects on your personal, social, or economic situation, such as being denied access to a service or opportunity.

The right to withdraw consents

1. Withdrawal of Consent:

Where we have obtained your explicit consent for processing your personal information, you retain the right to Revoke such consent at any time. This right may be exercised by sending a message to Big Sis Finance through our Contact Us for here or sending an email to hello@bigsisfinance.com.

It is important to note that:

Retroactive Effect: The Revocation of Consent will not impact the Lawfulness of our prior processing activities based on your previously granted consent. This signifies that any processing undertaken before your withdrawal remains lawful.

Additional Notes:

Explicit Consent: This refers to your unambiguous and verifiable agreement to the processing of your personal information for a specific purpose.
Revoke: This signifies the act of cancelling or withdrawing previously granted consent.
Lawfulness: This denotes conformity with applicable legal and regulatory requirements.

The right to complain

Right to Lodge a Complaint and Right to Seek Recourse from a Supervisory Authority

1. Right to Lodge a Complaint:

You possess the right to submit a Formal Complaint concerning our processing of your personal information. You may direct such complaints to us through the following methods:

[List specific complaint channels, e.g., designated email address, online form, etc.]

2. Right to Seek Recourse from a Supervisory Authority:

Furthermore, you retain the right to lodge a complaint with a relevant Data Protection Supervisory Authority (DPA) regarding our processing of your personal information. This right is independent of your right to submit a complaint directly to us.

Additional Notes:

Formal Complaint: This refers to a formal communication outlining your concerns and grievances regarding the processing of your personal information.
Data Protection Supervisory Authority (DPA): These are independent regulatory bodies established to monitor and enforce data protection laws and regulations within their respective jurisdictions.

Exercising Your Rights under EEA and UK Data Protection Law:

Should you wish to exercise any of the rights enumerated above, you are required to:

Submit a communication via electronic mail: Please utilize the contact information provided under the designated section titled "How to contact us".
Provide verifiable identification: To ensure the legitimate exercise of your rights, you are required to supply sufficient information allowing us to verify your identity. This may encompass, but is not limited to, providing your full name and, where relevant or applicable, a customer account number (for example) and any additional identification information we deem reasonably necessary in the specific circumstances.
Specify the right and personal information: Clearly outline the specific right you intend to exercise and the Personal Information to which your request pertains.

Data Controller Identification:

For the exclusive purpose of compliance with data protection law applicable within the EEA and UK, it is hereby clarified that:

BigSisFinance, LLC serves as the data controller and can be contacted through any of the methods outlined in the designated section titled "How to contact us".

Implementation of Appropriate Security Measures:

We are committed to upholding the highest standards of data security for your Personal Information. To achieve this objective, we have implemented a comprehensive framework of security measures designed to prevent unauthorized access, unlawful processing and accidental loss or destruction of your personal data. These measures are tailored to address the specific risks associated with the nature and scope of your Personal Information processed by us.

Security Framework Components:

Our robust security framework encompasses the following key components:

Organizational Measures: We prioritize data security through comprehensive staff training programs and the development of robust security policies. These measures ensure that all personnel with access to your Personal Information possess a thorough understanding of their data security responsibilities and adhere to a strict duty of confidentiality.
Technical Measures: We leverage a robust suite of technical measures to safeguard your Personal Information. These measures may include, but are not limited to:
- Physical security measures to ensure the physical protection of data storage systems and related infrastructure.
- Pseudonymization and encryption techniques to render your Personal Information unreadable to unauthorized individuals or entities.
Securing Ongoing Availability, Integrity and Accessibility: We prioritize the continuous availability, integrity and accessibility of your Personal Information. This involves implementing appropriate backup and disaster recovery strategies to ensure the timely restoration of your Personal Data in the event of any unforeseen disruptions.

Data Breach Notification Procedures:

In the unfortunate event that a suspected or confirmed data security breach occurs, we have established comprehensive procedures to address the situation in a timely and effective manner. These procedures encompass:

Internal Investigation: Prompt initiation of a thorough internal investigation to identify the root cause of the breach and assess the potential impact on affected individuals.
Regulatory Notification: Where legally mandated, we will notify the relevant data protection authorities of the data security breach, adhering to the prescribed timelines and reporting requirements.
Data Subject Notification: In line with our obligations under applicable data protection laws, we will notify you, the data subject, of the data breach when and where legally required. This notification will provide you with comprehensive information regarding the nature of the breach, the potential risks involved and any necessary steps you should take to safeguard your personal data.

By implementing these comprehensive security measures and breach notification procedures, we strive to ensure the ongoing confidentiality, integrity and availability of your Personal Information.

Restriction on Use by Minors:

Our Services are not intended for use by and are not directed towards, individuals below the age of sixteen (16) years. We do not knowingly collect, sell, or share Personal Information from individuals under sixteen (16) years of age, nor do we knowingly target our Services to such individuals. Any individual under the age of sixteen (16) years is prohibited from using or providing any Personal Information through our Services.

In the event that we discover that we have collected or received Personal Information from an individual under the age of sixteen (16) years, we will promptly delete such Personal Information in accordance with all applicable laws and regulations. Should you have any reason to believe that we may possess any information pertaining to or obtained from an individual under the age of sixteen (16) years, you are obligated to contact us immediately.

Modifications to this Privacy Policy:

This Privacy Policy was last updated on July 5, 2023. It is our established practice to publish any alterations made to this Privacy Policy on this dedicated page. You are solely responsible for periodically reviewing this Privacy Policy for any implemented changes. In the event that we introduce material modifications to the manner in which we handle our users' Personal Information, we will endeavor to notify you through an appropriate notice displayed within the context of your service utilization subsequent to the implementation of such changes. It is your responsibility to ensure that we possess an accurate, active and deliverable email address for you, if applicable.

Contact Information:

For any inquiries related to this Privacy Policy, the information we may hold concerning you, the exercise of your rights under applicable data protection laws, the submission of complaints, or general inquiries, please do not hesitate to contact us using the contact details provided below:

Big Sis Finance LLC

300 S. Mountain Ave. #1098
Upland, CA 91786
United States

Please contact us at hello@bigsisfinance.com or use the contact form here.