Privacy Policy
Last updated
This Privacy Policy explains how Top5Lenders handles personal information when you visit top5lenders.com, follow a provider link or contact our support team.
California residents: read our Privacy Notice for California Residents (CCPA/CPRA), including your rights and how to make a request.
Residents of other U.S. states: see our Privacy Notice for Covered Residents.
1. Who we are and what this policy covers
Top5Lenders is a United States-based comparison website. We publish information about home equity borrowing options and link to provider websites. We do not accept loan applications, open lender accounts or make credit decisions.
This policy covers information handled through our website and support correspondence. It does not govern a lender’s website, application process or services. A lender’s own privacy notice applies when you visit its website or give it information.
“Personal information” means information that identifies, describes, relates to or can reasonably be linked with a person or household. Privacy laws may exclude publicly available, properly deidentified or aggregated information. Specific rights, definitions and exceptions depend on the law that applies.
2. Information we collect
This table covers personal-information categories during the preceding 12 months, which for this newly launched website means the period since launch. It includes information you may choose to provide to support. Information a lender collects after you leave our site is governed by that lender’s policy.
| Category | Examples and sources | Collection |
|---|---|---|
| A. Identifiers | IP addresses in server logs. Your name and email address if you contact support. | Yes / if provided |
| B. California customer-record information | Information covered by California Civil Code section 1798.80(e), such as contact details you include in a support message. We do not request account numbers, identification documents or financial application records. | Only if provided |
| C. Protected classifications | For example, age, race, national origin, religion, sex or disability. No website field requests these details. | Not requested |
| D. Commercial information | For example, purchase histories, loan transactions or records of products bought. Applications and transactions occur on provider websites. | Not collected by this site |
| E. Biometric information | For example, fingerprints, face templates or voiceprints used to identify a person. | Not collected by this site |
| F. Internet or network activity | Requested pages, request times, browser or device information and referring addresses when supplied by your browser, recorded in hosting logs. | Yes |
| G. Geolocation data | We do not request GPS or precise device location. An IP address, listed under identifiers, may suggest an approximate area; this site does not create a separate location profile. | No separate collection |
| H. Sensory information | For example, audio recordings, video or photographs. The site does not record calls or activate your camera or microphone. | Not requested |
| I. Professional or employment information | For example, an employer, occupation or work history. We do not request this information to browse comparisons. | Not requested |
| J. Non-public education information | For example, student records, grades or other education records protected by applicable law. | Not collected by this site |
| K. Inferences | Profiles about preferences, creditworthiness, financial circumstances, behavior or other personal characteristics. This website does not create these profiles. | Not generated by this site |
| L. Sensitive personal information | For example, government identifiers, account-access credentials, precise location, health information, genetic or identifying biometric data, or other information treated as sensitive by applicable law. | Not requested |
“If provided” means the information is received only when you choose to include it in an email. “Not requested” means we do not ask for that category or create it through the website. Unsolicited messages or attachments can contain additional information; please send only what is needed for your inquiry.
Information collected automatically
Our hosting system records access and error logs as pages and files are requested. These may contain an IP address, request time, requested URL, browser information and referring address. A URL can include search or campaign parameters, so avoid putting private information in a website address. Logs help operate the website, investigate problems and detect misuse.
Information you provide directly
If you email support@top5lenders.com, we receive your address, message and any name, contact information or attachments you provide. We use that correspondence to answer the inquiry or handle a request. Browsing does not require an account, an application form, a Social Security number or financial information.
Information from other sources
The current website does not buy consumer lists, import credit reports, receive loan applications from lenders or use a third-party data-enrichment service. Service-generated technical records and support correspondence are the sources described above.
3. How we use and disclose information
We use the limited information described in this policy to deliver website content, diagnose errors, maintain security, respond to support messages, correct reported problems and handle privacy requests. Information may also be needed to satisfy applicable legal requirements, respond to valid legal process or establish, exercise or defend legal claims.
Disclosures for a business purpose
Hosting providers process identifiers and internet/network activity to deliver and protect the site. Email service providers process contact identifiers and the contents of messages to deliver, store and manage correspondence. These are the service-provider categories involved in the current website’s operation during the preceding 12 months. Contact details and any other information you put in a message are available to the email service that handles that message.
We do not send a loan application or lead profile to a lender from this website. If information must be disclosed to an authority, adviser or another recipient to address a legal obligation or security incident, that disclosure is limited to the relevant purpose.
Sale, sharing and targeted advertising
During the preceding 12 months, Top5Lenders has not sold personal information or shared it for cross-context behavioral advertising. We do not currently use personal information for targeted advertising. We do not knowingly sell or share the personal information of consumers under 16, and we do not offer financial incentives for providing personal information.
Compensation from a featured provider, if applicable, is described in our Advertiser Disclosure. A commercial placement does not mean that a loan application is collected by this website.
5. Retention and security
We retain personal information only for the purposes described here, subject to applicable legal and security needs. Retention depends on the type of record, the reason it exists, whether an inquiry is unresolved and any requirement to preserve it.
- Hosting logs: kept on a rotating schedule for operation, troubleshooting and security. Records relevant to an incident or legal requirement may need to be retained longer.
- Support messages: kept as needed to respond, follow up and maintain an appropriate record of the matter. You may request deletion, subject to applicable exceptions.
- Privacy-request records: kept as needed to document and honor your request. Where CCPA recordkeeping applies, the request and response record must be retained for at least 24 months; it is not used for unrelated marketing.
The website uses HTTPS for information in transit. Security measures cannot guarantee that every transmission or stored message is completely secure. Do not email passwords, government identification numbers, bank-account details, medical records or loan documents to our support address.
6. Privacy Notice for California Residents
This notice supplements the policy for California residents. It explains rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”). Those statutory rights apply when the relevant information and business activity fall within the law; exemptions and business-coverage requirements can affect applicability. If an applicable California requirement conflicts with the general policy, that requirement controls.
Key definitions
- Sale: generally, transferring or making personal information available to another business or third party in exchange for money or other valuable consideration, subject to statutory exceptions.
- Sharing: generally, disclosing personal information for cross-context behavioral advertising, whether or not money changes hands.
- Cross-context behavioral advertising: advertising that uses personal information from activity across different businesses or distinctly branded websites, apps or services.
- Sensitive personal information: protected categories such as government identifiers, account credentials, precise location, certain health, genetic or identifying biometric information, and specified personal characteristics. Ordinary support emails addressed to us are not sensitive merely because they are emails, but their contents may include sensitive information.
The category table describes collection within the preceding 12 months. The use and disclosure section identifies purposes and service-provider categories. We do not sell or share personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information to infer characteristics about you.
Your California rights
- Know and access: request the categories and specific pieces of personal information held about you, its sources, the purposes for processing and the categories of recipients, including any sale, sharing or business-purpose disclosure where relevant.
- Delete: request deletion of personal information, subject to legal exceptions such as security, completing a requested service or legal obligations.
- Correct: request correction of inaccurate personal information, taking account of its nature and how it is used.
- Receive a portable copy: obtain information in a reasonably usable format where required and technically feasible.
- Opt out of sale or sharing: direct a covered business to stop selling or sharing your information. The current Top5Lenders site does neither. You can still submit a request through Do Not Sell or Share My Personal Information.
- Limit sensitive-information use: where applicable, restrict uses or disclosures of sensitive personal information beyond the purposes permitted by law. We do not request such information for browsing or use it to infer personal characteristics.
- Non-discrimination: exercise applicable privacy rights without unlawful retaliation, discriminatory prices or denial of service. A deletion request may prevent us from continuing an inquiry if the needed correspondence is removed.
How to exercise these rights
Email support@top5lenders.com with “California privacy request” in the subject, or use Your Privacy Choices. Identify the right you want to exercise and provide enough context to locate your information. You do not need to create an account or pay a fee to submit a request.
For access, correction and deletion, we may need to verify your identity using information reasonably related to the record. We do not ask for more information than needed for that purpose. If we cannot verify a request, we will explain why we cannot complete it. A sale/sharing opt-out is not subject to the same verified-identity requirement, although enough information to apply it may be needed.
Authorized agents
You may authorize someone to act for you. An agent should identify the request as an authorized-agent request and provide evidence of permission where the law allows us to require it. For access, correction or deletion, we may ask you to verify your identity or confirm the authorization directly. Different rules may apply to a valid power of attorney.
Response times and exceptions
Where CCPA applies, receipt of a request to know, correct or delete must be confirmed within 10 business days, and a response is generally due within 45 calendar days from receipt. A permitted extension can add up to 45 calendar days; the reason and extension must be communicated within the initial period. Applicable sale/sharing and sensitive-information limitation requests must be handled as soon as feasible, no later than 15 business days.
These timelines describe applicable requirements; they do not mean an email link submits a request automatically. Requests may be limited by verification requirements or statutory exceptions. We will explain a denial and any available next steps. A fee or refusal for an excessive or manifestly unfounded request is permitted only where the law allows it.
Other California privacy information
California’s “Shine the Light” law addresses certain disclosures for another business’s direct marketing. Top5Lenders does not currently disclose personal information for that purpose. You may contact us with questions about such disclosures.
For official information or to raise a concern, visit the California Attorney General’s CCPA page or the California Privacy Protection Agency’s complaint page.
7. Privacy Notice for Covered Residents
This section supplements the policy for residents whose personal information is protected by an applicable U.S. state consumer privacy law. Such laws include those in Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. This list does not limit rights available elsewhere. Coverage thresholds, exemptions, definitions and rights vary by state; residence alone does not establish that every provision applies.
Access, correction, deletion and portability
Depending on the law, you may be able to confirm whether your personal data is processed, access it, obtain a portable copy, request correction, or request deletion. Some laws also provide information about disclosures to third parties. Not every state provides every right in the same way. The collection table and use/disclosure sections above describe our current processing.
Sale, targeted advertising, profiling and sensitive data
Applicable laws may let you opt out of sale, targeted advertising or certain profiling used for decisions with legal or similarly significant effects. Top5Lenders does not currently sell personal information, use it for targeted advertising or make such automated decisions. We do not assess an applicant’s eligibility or creditworthiness; a provider conducts its own application process.
The meaning of “sale” differs by state and may involve monetary or other valuable consideration. Sensitive-data protections may require consent, a limitation right or other safeguards. We do not request sensitive data for the current comparison service. Browser opt-out signals and our present no-sale/no-targeted-advertising practices are described above.
Requests, agents and appeals
Use the request instructions below and tell us your state so the applicable rules can be considered. We may authenticate an access, correction or deletion request and an agent’s authority as permitted by law. You do not need an account. We will not unlawfully discriminate against you for exercising a privacy right.
Responses and any extensions follow the deadline required by the applicable state law. Many states use an initial 45-day response period, but that period and the permitted extension are not universal. If we decline a request, we will give the reason and instructions for an available appeal.
To appeal, email support@top5lenders.com with “Privacy appeal” in the subject and identify the earlier request and why you believe the decision should be reviewed. Where an appeal right applies, we will review it and explain the outcome within the legally required period. If it is denied, you can contact your state attorney general or other relevant privacy regulator; we will provide the applicable complaint information in the appeal response where required.
8. Submit a privacy request
Write to support@top5lenders.com or visit Your Privacy Choices. Include your state of residence, the right or concern involved, and enough detail to locate the relevant message or website interaction. If possible, contact us from the email address involved in the original correspondence. Do not include sensitive documents with your initial request.
Email a privacy requestThe link opens an editable draft in your email application. The request reaches our inbox only after you send it. Requests about a lender’s records must be directed to that lender separately.
9. Children, policy updates and contact
The service is intended for adults comparing borrowing options, not children under 13. We do not knowingly seek personal information from children. If you believe a child has sent us information, contact us so it can be reviewed and addressed. We do not knowingly sell or share information about people under 16.
We may update this policy when the website or its information practices change, and the date at the top identifies the current version. Applicable law may require additional notice or consent for a material change; a policy update does not replace such a requirement. For questions about this policy, alternative access to its contents or a privacy concern, email support@top5lenders.com.