Security & Compliance

Protecting your data is central to our mission and a core part of OLA Data Security Best Practices.

Information Security

We maintain comprehensive security measures, including:

  • Encryption: All data transmitted via HTTPS using TLS 1.2 or higher.
  • Data Storage: Personal data stored in encrypted, access-controlled environments.
  • Access Control: Only authorized staff and vendors may access consumer data.
  • Monitoring: Regular audits and intrusion-detection systems.
  • Incident Response: If a data breach occurs, we will notify affected users promptly as required by law.

Compliance Commitments

We comply with:

  • Gramm-Leach-Bliley Act (GLBA) – Financial privacy and data protection
  • Federal Trade Commission Act (Section 5 UDAP) – Fair and honest marketing
  • CAN-SPAM Act (2003) – Email marketing and opt-out rights
  • Telephone Consumer Protection Act (TCPA) – Consent for calls and texts
  • Online Lenders Alliance (OLA) Best Practices 2024 – Transparency and consumer control

Vendor Management

All vendors, hosting providers, and marketing partners must:

  • Sign a confidentiality agreement;
  • Maintain comparable security controls; and
  • Handle data in compliance with our privacy and security standards.

Consumer Support & Complaints

If you believe your information has been misused or mishandled, contact us at .

You may also reach the Online Lenders Alliance Consumer Hotline at 1-866-299-7585.