Privacy Policy

Last Updated: 2026-07-17

1. Who We Are

This Privacy Policy explains how 6069321 Canada Inc., doing business as Rebound Finance ("we," "us," or "our"), collects, uses, sells, shares, and protects your personal information when you visit reboundfinance.com and its subdomains (the "Site"), submit information through our forms, or receive communications from us. It applies to U.S. residents. Rebound Finance is operated by 6069321 Canada Inc., a Canadian company; your information is collected in the United States and may be processed and stored in the United States and in Canada, and disclosed to our partners in those countries. By submitting information, you consent to this cross-border transfer.

Rebound Finance is not a lender. We are an advertising, lead-generation, and marketing service that connects consumers with third-party lenders, lending partners, and marketing partners. We do not make credit or loan decisions. By using the Site or submitting information, you acknowledge this Privacy Policy.

2. At a Glance

3. Information We Collect and Sources

We collect the following categories of personal information (using the categories defined by California law):

We collect this information from three sources: (a) directly from you when you complete our forms or contact us; (b) automatically through cookies and similar technologies when you use the Site; and (c) from third parties such as lenders, partners, data and verification vendors, advertising platforms, and public sources. Providing certain information is necessary for us to match you with lenders.

4. Sensitive Personal Information

Some of what we collect is "sensitive personal information," including your Social Security number and financial account information. We use and disclose this information to match you with lenders and partners and to operate, secure, and improve our services. Where a state law requires your affirmative opt-in consent before we process sensitive data (for example, in Virginia, Colorado, and Connecticut), we obtain that consent. You may direct us to limit the use of your sensitive personal information at Do Not Sell or Share My Personal Information.

5. How We Use Your Information

We use your information to:

6. How We Sell and Share Your Information

Our business is lead generation. We sell your personal information (we disclose it for monetary or other valuable consideration) and we share it for cross-context behavioral advertising. We disclose personal information to the following categories of recipients:

In the past 12 months we have sold and/or shared the categories of personal information described in Section 3 (identifiers, financial and account information, Social Security number, commercial information, internet and device activity, geolocation, and inferences) and disclosed those categories for business purposes to service providers. We are compensated when we refer or match consumers, and that compensation may affect whether, and in what order, offers are presented to you. We require third parties, service providers, and contractors to limit their use of your information by written contract.

To see the categories of our lending and marketing partners, and a representative list, click here.

7. Cookies, Tracking, and Online Advertising

We and our partners use cookies, pixels, web beacons, SDKs, and local storage to operate the Site, measure performance, and deliver interest-based advertising, including on third-party platforms and to build lookalike audiences. This activity may constitute "sharing" or a "sale" under state privacy laws.

You can control cookies through your browser settings and limit interest-based advertising through your device settings and industry programs such as the Digital Advertising Alliance and the Network Advertising Initiative. We honor the Global Privacy Control (GPC) as a valid opt-out of the sale and sharing of personal information. Because there is no common industry standard for browser "Do Not Track" signals, we do not currently respond to them, but we do honor GPC.

8. Your Privacy Rights

Depending on your state of residence, you may have the right to:

The rights available to you vary by state — see Section 14. To opt out, use Do Not Sell or Share My Personal Information. For all other requests, use our Data Request page.

9. How to Exercise Your Rights

You may submit requests through our online form at https://cmi.rocks/privacy-request, by email at legal@reboundfinance.com. For access, deletion, and correction requests we verify your identity before acting; you do not need to verify your identity or create an account to opt out. You may use an authorized agent, subject to proof of authorization. We respond within 45 days (with one 45-day extension if needed) and process opt-out requests within 15 business days. We also honor GPC signals automatically.

10. Marketing Communications

You can opt out of marketing emails by using the unsubscribe link in any marketing email; we honor email opt-outs within 10 business days. You can opt out of marketing texts by replying STOP to any message, and get help by replying HELP. Message and data rates may apply, and message frequency varies. Opting out of marketing does not stop transactional or service messages. Our SMS practices are described in our SMS / Messaging Terms.

11. Data Retention

We retain personal information for as long as necessary to provide our services, to meet legal and recordkeeping obligations (including retaining proof of consent under telemarketing and email laws), and to establish, exercise, or defend legal claims, after which we delete or de-identify it. When you request deletion, we delete the information we are required to delete, subject to legal exceptions.

12. Data Security

We maintain a written information security program with commercially reasonable administrative, technical, and physical safeguards designed to protect your information, consistent with the FTC Safeguards Rule, including encryption of sensitive data, access controls, risk assessments, and oversight of service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. GLBA Financial Privacy Notice

Because we help consumers find financial products, we are treated as a "financial institution" under the federal Gramm-Leach-Bliley Act (GLBA) as enforced by the FTC. We collect nonpublic personal information ("NPI") — such as information from your application and identifiers — and disclose it to affiliates and to nonaffiliated third parties, including lenders and marketing partners.

We may disclose NPI to lenders and partners to process the loan match you request from us. For sharing of NPI with nonaffiliated third parties for their own marketing, you have the right to opt out, and we offer and honor that opt-out before sharing. To opt out, use Do Not Sell or Share My Personal Information, email legal@reboundfinance.com. We provide this notice when you submit your information and, where a continuing customer relationship exists, annually.

14. State-Specific Privacy Disclosures

California (CCPA/CPRA)

California residents have the rights described in Section 8, including the right to know, delete, correct, opt out of sale/sharing, and limit the use of sensitive personal information, and the right to non-discrimination. We provide a Notice at Collection at or before the point of collection on our form. Under California's "Shine the Light" law (Civil Code § 1798.83), California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes by contacting legal@reboundfinance.com.

Other States

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws (including Delaware, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Iowa, and states whose laws take effect in 2026 such as Indiana, Kentucky, and Rhode Island) have some or all of the rights described in Section 8, including opt-outs of sale, targeted advertising, and profiling, opt-in for sensitive data where required, and the right to appeal a denied request. Where the law of your state prohibits or restricts the sale of sensitive personal information, we honor those restrictions.

Universal Opt-Out

We honor the Global Privacy Control and other recognized universal opt-out mechanisms as a valid opt-out of sale and targeted advertising in the states that recognize them.

15. Children's Privacy

Our services are not directed to individuals under 18, and you must be at least 18 to submit information. We do not knowingly collect personal information from children, and we do not sell or share the personal information of consumers we know to be under 16 without the opt-in consent required by law. If we learn we have collected information from a minor, we will delete it.

16. Third-Party Links and Lender Sites

The Site may link to lender and partner websites that we do not control and that have their own privacy practices. We are not responsible for those practices and do not endorse those sites. Please review each lender's and partner's own privacy policy.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last Updated" date and, for material changes, provide additional notice as required by law. Your continued use of the Site after an update constitutes acceptance where permitted by law.

18. Contact Us

6069321 Canada Inc. (d/b/a Rebound Finance)
4000 Notre-Dame Ouest, Montreal, QC, Canada H4C 1R1
Email: legal@reboundfinance.com