Effective as of January 1, 2020
Last updated July 30, 2025
Introduction
Subsidiaries of Enova International, Inc., operating under the NetCredit brand ("NetCredit," "we," "our," or "us") respect the privacy of your information. This States Privacy Policy is designed to assist you in understanding how we collect, use, disclose, share, and safeguard your personal information. This States Privacy Policy applies to individuals who access our websites (“Site”) and any of our online services or who use our services provided through a third-party platform ("Platforms") (collectively, the "Services").
From time to time, we may change this States Privacy Policy. If we do, we will post an amended version on this webpage with a new "last updated" date. Please review this States Privacy Policy periodically.
In addition, we will use and share any information that we collect from or about you in accordance with our Privacy Policy, which offers you certain choices with respect to the use and sharing of your personal data.
This States Privacy Policy covers the following topics:
We collect personal data from you through your use of the Site and Services. Personal data is information that is linked or reasonably linkable to an identified or identifiable individual. We collect the following types of personal data:
Personal Data You Provide
Depending on how you interact with our Site and Services, we will collect the following personal data that you voluntarily provide to us for the following purposes:
Personal Data as You Navigate Our Site
We automatically collect certain personal data through your use of our Site and our use of cookies and other tracking technologies, such as the following:
For more information on our cookie usage see our "Cookies and Other Tracking Technologies" section below.
Personal Data We Collect About You from Other Sources
In some cases, we may receive personal data about you from other sources. This includes credit reporting agencies, third-party data providers, marketing partners, advertising partners, web browsers, internet service providers, government entities, operating systems and platforms, and data brokers.
In addition to the purposes stated above, we may use all the personal data we collect in accordance with applicable law such as to:
We may share the personal data that we collect about you in the following ways:
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties for marketing purposes.
How We Use Cookies
Like many other companies, we use cookies and other tracking technologies (collectively, "Cookies"). Cookies are small files of information that are stored by your web browser software on your computer hard drive, mobile or other devices (e.g., smartphones or tablets).
We use Cookies to:
We set some Cookies ourselves, while separate entities set other Cookies. We use Cookies other entities set to provide us with useful information, to help us improve our Site and Services, to conduct advertising, and to analyze the effectiveness of advertising. For example, we use Cookies from Google, Facebook and other similar companies.
Please see our Terms of Use for additional information about our use of Cookies.
How You Can Opt Out of Cookies
To manage your Cookie settings, please click here.
Browser Settings
You can block Cookies by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies) you may not be able to access all or parts of the Site.
You can find out more about Cookies and how to manage them by visiting www.AboutCookies.org or www.allaboutcookies.org.
Platform Controls
You can opt out of Cookies set by specific entities by following the instructions found at these links:
Advertising Industry Resources
You can understand which entities have currently enabled Cookies for your browser or mobile device and how to opt out of some of those Cookies by accessing the Network Advertising Initiative’s website or the Digital Advertising Alliance’s website. For more information on mobile specific opt-out choices, visit the Network Advertising Initiative’s Mobile Choices website.
Please note these opt-out mechanisms are specific to the device or browser on which they are exercised. Therefore, you will need to opt out on every browser and device that you use.
Google Analytics
We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses Cookies to help us analyze how users interact with the Site and Services, compile reports on their activity, and provide other services related to their activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. To learn more about Google’s partner services and to learn how to opt out of tracking of analytics by Google, click here.
Hotjar
We use Hotjar to better understand our users’ needs and to optimize the service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g., how much time they spend on which pages, which links they choose to click, what users do and do not like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses Cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our Site. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For more information, please view Hotjar’s privacy page by clicking here.
LiveRamp Authenticated Traffic Solutions
When you use our Site, we share information that we collect from you, such as your email (in hashed form), IP address, or information about your browser or operating system, with our identity partners/service providers. These partners return an online identification code that we may store in our first-party cookie for our use in online, in-app, and cross-channel advertising and it may be shared with service providers to enable interest-based and targeted advertising. To opt out of this use, please click here.
Other Types of Collecting Activities
The Site and Services may use Cookies third-party vendors provide to collect information, such as IP address, device information (e.g., operating system), and information on user behavior (e.g., screens and pages visited, buttons and links clicked, limited information entered, and user taps and mouse movements). This information enables us to monitor and improve the user experience.
The Site recognizes the Global Privacy Control ("GPC") signal. If you are using a browser setting or plug-in that sends an opt-out preference signal to each website you visit, we will treat that as a valid request to opt out. To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.
Some internet browsers incorporate a "Do Not Track" feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the "Do Not Track" signal, the Site does not currently interpret, respond to or alter its practices when it receives "Do Not Track" signals.
We maintain commercially reasonable security measures to protect the personal data we collect and store from loss, misuse, destruction, or unauthorized access. However, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.
We retain your personal data for as long as necessary to fulfill the purposes for which we collect it, such as to provide you with the service you have requested, and for the purpose of satisfying any legal, accounting, contractual, or reporting requirements that apply to us.
The Site may contain links that will let you leave the Site and access another website. Linked websites are not under our control. We accept no responsibility or liability for these other websites.
The Site and Services are not intended for children under 18 years of age. We do not knowingly collect, use, or disclose personal data from children under 18.
Please note that your privacy rights described above do not apply to personal data that we collect, process, sell, or disclose in accordance with the federal Gramm-Leach-Bliley (GLBA) Act and/or the Fair Credit Reporting Act (FCRA). Because we are subject to these federal laws, much of the personal data that we collect from you is exempt from state privacy laws in Oregon, Minnesota, and Montana. Your choices and rights with respect to our use and sharing of that information are subject to our Privacy Policy.
We are registered with the Oregon Secretary of State under the following business names: NetCredit Loan Services, LLC and NetCredit Finance, LLC.
If you are an Oregon, Minnesota, or Montana resident, you may have the following privacy rights. To see the specific state rights that apply to each state, please click on the corresponding webform: here for Oregon residents, here for Minnesota residents, and here for Montana residents
We use Cookies to display advertisements about our products to you on nonaffiliated websites, applications, and online services. This is "targeted advertising" under applicable privacy laws. When we engage in those activities, we sell personal data (i.e., information from cookies) to third-party advertisers and analytics companies.
To exercise your rights, please submit a request through our interactive webform available here for Oregon residents, here for Minnesota residents, and here for Montana residents or by calling us at 1-877-392-2014. If legally required, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the individual on whose behalf you are making such request. To do so, we will ask you to verify data points based on information we have in our records. If you are submitting an opt-out request on behalf of another individual, please use the same contact methods described above. We will process authorized agent requests in accordance with applicable law. If we refuse to take action regarding your request, you may appeal our decision through our interactive webform available here for Oregon residents, here for Minnesota residents, and here for Montana residents or by calling us at 1-877-392-2014. If you would like to opt out of targeted advertising, you may alter your cookie preferences here.
Please note that your privacy rights described above do not apply to personal data that we collect, process, sell, or disclose subject to the federal Gramm-Leach-Bliley Act and the Fair Credit Reporting Act. Because we are subject to those laws, much of the personal data that we collect is exempt from compliance under Oregon law. Your choices and rights with respect to our use and sharing of that information are subject to our Privacy Policy.
Minnesota and Montana residents: If we make material changes, we will provide you with additional notice, such as adding a statement on the homepages of our Site or sending you a notification.
The California Consumer Privacy Act, as amended by the California Privacy Rights Act of 2020 ("CCPA"), requires that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, sale, sharing, and retention of personal information and of the rights of California residents regarding their personal information. This section of the States Privacy Policy is intended solely for, and is applicable only as to, California residents. If you are not a California resident, this section does not apply to you and you should not rely on it.
The CCPA defines "personal information" to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available, deidentified or aggregated information or lawfully obtained, truthful information that is a matter of public concern. For purposes of this "Notice to California Residents" section we will refer to this information as "Personal Information."
The CCPA’s privacy rights described below do not apply to Personal Information that we collect, process, sell, or disclose subject to the federal Gramm-Leach-Bliley Act and its implementing regulations or the California Financial Information Privacy Act. Because we are subject to those laws and regulations, much of the Personal Information that we collect is exempt from the CCPA. Your choices and rights with respect to our use and sharing of that information are subject to our Privacy Policy.
Notice at Collection of Personal Information
We currently collect and, in the 12 months prior to the Last Updated Date of this States Privacy Policy, have collected the following categories of Personal Information:
We collect Personal Information directly from California residents and credit reporting agencies, third-party data providers, marketing partners, advertising partners, web browsers, internet service providers, government entities, operating systems and platforms, and data brokers. We do not collect all categories of Personal Information from each source.
In addition to the purposes stated above in the section "How We Use Your Personal Data" we currently collect and have collected the above categories of Personal Information for the following business or commercial purposes:
Sale, Sharing, and Disclosure of Personal Information
The following table identifies the categories of Personal Information that we sold or shared to third parties in the 12 months preceding the Last Updated Date of this States Privacy Policy and, for each category, the categories of third parties to whom we sold or shared Personal Information:
| Category of Personal Information | Categories of Third Parties |
| Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number, unique pseudonym or user alias; telephone numbers, or other forms of persistent or probabilistic identifiers that can be used to identify a particular consumer or device) | Advertising networks; data analytics providers; social media companies |
| Identifiers (online identifier, Internet Protocol address) | Advertising networks; data analytics providers; social media companies |
| Internet or other electronic network activity information (browsing history; search history; and information regarding consumer’s interaction with website, application or advertisement) | Advertising networks; data analytics providers; social media companies |
| Geolocation data | Advertising networks; data analytics providers; social media companies |
We sold or shared Personal Information to third parties for the following business or commercial purposes:
The following table identifies the categories of Personal Information that we disclosed for a business purpose in the 12 months preceding the Last Updated Date of this States Privacy Policy and, for each category, the categories of recipients to whom we disclosed Personal Information:
| Category of Personal Information | Categories of Recipients |
| Identifiers (name, Internet Protocol address, email address, or other similar identifiers) | Regulators, payment processing vendors, third-party data providers, advertising partners, marketing partners, web analytics providers, data processing providers, IT services providers, security/anti-fraud providers, credit reporting agencies, professional services providers, and customer support providers |
| Name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, employment, employment history, bank account number, debit card number, or any other financial information | Regulators, payment processing vendors, third-party data providers, marketing partners, data processing providers, IT services providers, security/anti-fraud providers, credit reporting agencies, professional services providers, and customer support providers |
| Protected classification characteristics under California or federal law (e.g., age, gender, national origin, citizenship, marital status, disability, or military status) | Regulators, data processing providers, IT services providers, security/anti-fraud providers, credit reporting agencies, professional services providers, and customer support providers |
| Commercial information (e.g., records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies) | Regulators, advertising partners, marketing partners, web analytics providers, data processing providers, IT services providers, security/anti-fraud providers, credit reporting agencies, and professional services providers |
| Internet or other similar network activity (e.g., browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement) | Regulators, advertising partners, marketing partners, web analytics providers, and security/anti-fraud providers |
| Geolocation data | Regulators, advertising partners, marketing partners, web analytics providers, and security/anti-fraud providers |
| Audio, electronic, visual, or similar information | Regulators, data processing providers, IT services providers, security/anti-fraud providers, professional services providers, and customer support providers |
| Professional or employment-related information (e.g., current and/or prior employment information) | Regulators, credit reporting agencies, data processing providers, IT services providers, security/anti-fraud providers, professional services providers, and customer support providers |
| Inferences drawn from other personal information (e.g., profile reflecting a person’s preferences, characteristics, trends, behavior, and abilities) | Regulators, web analytics providers, data processing providers, and security/anti-fraud providers |
We disclosed Personal Information for all of the business and commercial purposes described above.
We do not knowingly collect or sell or share the Personal Information of consumers under 16 years of age. We do not collect or process sensitive Personal Information for the purpose of inferring characteristics about individuals and, consequently, do not collect sensitive Personal Information or use it for purposes other than those allowed by the CCPA and its regulations.
Retention of Personal Information
For an explanation of how long we retain Personal Information, please see the "Data Retention" section above.
Your Rights
If you are a California resident, you have the following rights with respect to your Personal Information:
How to Submit a Request to Know, Delete, and/or Correct
You may submit a request to know, delete, and/or correct through our interactive webform available here by calling us toll-free at 1-888-994-1389.
As mentioned above, if you are a California resident who has a financial product or service with us, much of the Personal Information that we collect is exempt from the CCPA and, therefore, is not subject to the rights discussed in this "Notice to California Residents" section. Your choices and rights with respect to our use and sharing of that information are subject to our Privacy Policy.
If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, and if the request is not subject to an exemption or exception, we will require additional information to verify your authority to act on behalf of the California resident.
Our Process for Verifying a Request to Know, Delete, and/or Correct
If we determine that your request is subject to an exemption or exception, we will notify you of our determination. If we determine that your request is not subject to an exemption or exception, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request.
We will verify your identity either to a "reasonable degree of certainty" or a "reasonably high degree of certainty" depending on the sensitivity of the Personal Information and the risk of harm to you by unauthorized disclosure, deletion, or correction as applicable. To do so, we will ask you to verify data points based on information we have in our records concerning you.
Right to Opt Out of Sale or Sharing of Personal Information
If you are a California resident, you have the right to direct us to stop selling or sharing your Personal Information.
You may submit a request to opt out of sales or sharing through our interactive webform available by clicking here. If you have enabled privacy controls on your browser (such as a plugin), we will also treat that as a valid request to opt out. Please see the "Universal Opt-Out Mechanisms" section above for more information.
We are committed to ensuring this State Privacy Policy is accessible to individuals with disabilities. If you wish to access this State Privacy Policy in an alternative format, please contact us as described in the "How to Contact Us" section below.
To contact us for questions or concerns about our privacy policies or practices, please email us at support@netcredit.com or by telephone at 1-877-392-2014.
