Privacy Policy

Home Privacy Policy

Last modified: 4/06/26

Overview

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. This Privacy Policy describes Caribou Financial, Inc., Caribou Insurance Services, LLC, Caribou Insurance Associates, LLC, and their affiliates (collectively, “we,” “us,” “our,” and “Caribou”) practices for collecting, using, protecting, storing, and sharing the personal information you provide when you visit any website managed by Caribou (including, but not limited to, http://www.caribou.com) or use any related online products and services, including any associated interactive features, widgets, plug-ins, cookies, applications, content, downloads and other services we may offer to you that posts a link to this Privacy Policy (collectively described as the, “Site” or the “Sites”, or “Services”) regardless of how you access or use them, whether via personal computer, browser, laptop, tablet, mobile phone or other device (each a “Device”). We maintain this Site and provide Services through it for your information and communication purposes, as well as for purposes associated with automobile loans and insurance. Our Site and Services are intended for use only by United States residents, while located in the United States. If you are not a United States resident, or are located in a country other than the United States, you may not use our Site and Services. To the extent that we provide you with notice through our Site of different or additional privacy policies or practices (e.g., at the point of collection), those additional privacy policies shall govern such data collection and use.

Additional privacy rights and notices will apply if you are a resident of certain states, which we describe below. A different privacy policy will apply if you request or receive a financial product or service from us by using this Site or otherwise. See our Financial Privacy Notice for more information about how we collect and disclose nonpublic personal information about consumers who request or receive a financial product or service from us.

By accessing or using this Site, you agree to this Privacy Policy. If you do not agree with our policies and practices, your choice is to not use our Site. This Privacy Policy may change from time to time (see the section below called Changes to this Privacy Policy), so please check this Privacy Policy periodically for updates. If we change the Privacy Policy on this Site and you continue to use it, you agree that your continued use of the Site will mean that you have accepted all changes in the updated Privacy Policy.

If you breach or violate the rules, restrictions, limitations, terms and/or conditions that apply to the Site and the Services, whether listed in the Privacy Policy, posted at any point on the Site or in connection with the Services, or otherwise communicated to you, Caribou may terminate, discontinue, suspend and/or restrict your ability to access, visit, and/or use the Site and its Services, with or without notice. Caribou may further restrict or refuse to provide you with any future access and/or use of the Service. Finally, Caribou reserves the right to take any technical, legal and/or other actions that it deems necessary and/or appropriate, with or without notice.

This Privacy Policy covers the following:

Section 1: Age of Site Users and Visitors

Section 2: Information We Collect About You and How We Collect It

Section 3: Information You Provide To Us

Section 4: Information We Collect Through Automatic Data Collection Technologies

Section 5: Cookies and Other Tracking Technologies

Section 6: Third-Party Services

Section 7: How We Use Your Information

Section 8: Disclosure of Your Information

Section 9: Your Privacy Rights and Choices About How We Use and Disclose Your Information

Section 10: Security

Section 11: Use of Artificial Intelligence 

Section 12: Assistance to Victims of Identity Theft

Section 13: Changes to this Privacy Policy

Section 14: Contact Us

SECTION 1

Age of Site Users and Visitors

By using this Site, you represent that you are at least the age of majority in your state of residence (or in the District of Columbia, if you reside there). Our Site and Services are not intended for use by children, especially those under age 18. No one under the age of 18 is allowed to use the Site and its Services. We do not knowingly collect personal information from children under the age of 18. If we obtain knowledge that we have personally identifiable information about a child under 18 in retrievable form in our files, we will delete that information from our existing files. If you believe we might have information from or about a child under 18, please notify us as soon as possible by using any of the options in the section below to ask questions or exercise rights.

SECTION 2

Information We Collect About You and How We Collect It

We collect several types of information from and about visitors and users of our Site, including:

  • Information by which you may be personally identified, such as name, postal address, e-mail address, telephone number, Social Security number, date of birth, and driver’s license number (“personal information”);
  • Information about your vehicle, financial information, and other information collected for your loan inquiry or application, and
  • Information about your internet connection, the equipment and devices you use to access our Site, the dates and times you use the Site, and other Site usage details.

We collect this information:

  • Directly from you when you provide it to us through the Site; 
  • Automatically as you navigate through the Site, including Site usage details, Internet Protocol (IP) addresses, and information collected through cookies and other tracking technologies; 
  • From third parties, for example, our business partners and service providers; and

Through inferences made by our machine learning models or when you use the Services.

SECTION 3

Information You Provide To Us

The information we collect on or through our Site currently and within the past 12 months includes:

  • Identifiers and other personal information you choose to provide to us when filling in forms on the Site to request or obtain our Services or otherwise interact with us, which may include your name, postal address, email address, date of birth, phone number, and income information; 
  • Sensitive personal information that may include documents or other media that verifies your identity, such as your driver’s license and log-in information;
  • Information such as your credit history, credit scores and other information provided by consumer reporting agencies;
  • Professional or employment related information, including education history, information subject to FERPA, degrees, majors, graduation years, and institutions attended. If you are an employee or applicant of Caribou, you will receive a copy of our Employee Privacy Policy, that provides additional details about how we process your employment and applicant information;
  • Sensory data, such as audio, visual, and electronic information, including customer service calls, security footage, or other similar information;
  • Financial and banking data, including bank account numbers, account and log-in credentials, transaction history, and brokerage statements;
  • Employment and income, including job titles, current/past employers, pay stubs, W-2s, tax returns, and investment/asset details;
  • Commercial information, such as business information, including legal entity names, tax IDs (EIN/SSN), professional licenses, and contact details (address, fax, website);
  • Technical and usage data, including IP addresses, geolocation, device type, browser settings, and interaction data (clicks, referring URLs) collected via cookies and tracking pixels;
  • Information we may request from you if you enter a contest or promotion we sponsor or when you report a problem with our Site; 
  • Records and copies of your correspondence (including text messages, chat transcripts, or email addresses), if you contact us; and
  • Details of transactions and search queries you may carry out through the Site. 

You also may provide information to be published or displayed (“posted”) on public areas of the Site or to be transmitted to other users of the Site or third parties (collectively, “User Contributions”). Your User Contributions are posted on and transmitted to others at your own risk. Although we may limit access to certain pages, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the Site with whom you may choose to share your User Contributions. We cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.

SECTION 4

Information We Collect Through Automatic Data Collection Technologies

As you use and interact with our Site, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, such as details of your Site visits (including traffic data, location data, logs, and other communication data and the resources you access and use on the Site), and information about your device and Internet connection (including your IP address, operating system, and browser type). 

We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). See the sections below called Cookies and Other Tracking Technologies and Choices About How We Use and Disclose Your Information for information on how you can opt out of behavioral tracking and how we respond to web browser signals and other mechanisms that enable consumers to exercise choice about behavioral tracking. The information we collect automatically may include personal information or we may maintain it or associate it with personal information we collect in other ways or receive from third parties.

We use commonly used information-gathering tools, such as cookies (discussed in the Cookies and Other Tracking Technologies section), to collect information as users navigate our Site and request or obtain our Services.

  • Usage Information: We collect certain information automatically through your use of the Site, such as which of our web pages you access, the frequency of access, and what you click on while on our Site. 
  • Location Information: We may collect information about your actual location which may be determined from: IP address, GPS, and other sensors that may reveal information on nearby devices, Wi-Fi access points, and cell towers. 
  • Device Information: We may collect information about the device you are using such as:  hardware model, device ID, operating system, application version number, browser, and IP addresses. 
  • Mobile Device Information: In addition to the Device Information listed above, when you access our Site or Services via a browser on your mobile device, we may also collect mobile network information including phone number, the unique device identifier assigned to that device, mobile carrier, operating system, and other device attributes.

SECTION 5

Cookies and Other Tracking Technologies

  • Session Cookies: A cookie is a small text file that is stored on a user’s computer for record-keeping purposes. We use session cookies to make it easier for you to navigate our Site. 
  • Persistent Cookies: We use persistent cookies that remain on your hard drive for an extended period. Persistent cookies also enable us to track and target the interests of our users to enhance the experience on our Site. You can remove persistent cookies by following directions provided in your Internet browser’s instructions. 
  • Tracking Pixels (Web Beacons):  We may use a software technology called tracking pixels (also known as web beacons or clear gifs) that help us better manage content on our Site by informing us what content is most effective. Tracking pixels are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of Web users. In contrast to cookies, which are stored on a user’s computer hard drive, tracking pixels are embedded invisibly on Web pages and are about the size of the period at the end of this sentence.
  • Session Replay / Pixel Tracking : We may also rely on Tracking Technologies for purposes of session replay and pixel tracking, which collect Usage Information that tracks your interactions with our Site, including mouse movements, text, and other information, associated with your visit to our Site. This information is used to help us improve our Site and better provide you with information you are interested in when you visit our Site.
  • Other Tracking Technologies:  We may also use other website or mobile tracking technologies, such as device fingerprinting, to identify you and keep track of your preferences, prevent fraudulent activity or improve Site security, assess the performance of the Site, and deliver content to you based on your interests on our Site and third-party sites.

Some content or applications on the Site may be provided by third parties, including analytics companies and application providers. These third parties may use cookies or other tracking technologies to collect information about you when you use our Site. The information they collect may be associated with your personally identifiable information or they may collect information, including personally identifiable information, about your online activities over time and across different websites and other online services.

We may, from time to time, contract with third-party service providers to advertise on our behalf, by using the Internet, email, social media, search engine marketing, influencer campaigns, connected television, and direct mail, if we think customers may be interested in our products or services, or related products or services. To advertise on our behalf, these third parties may collect information about visitors to our Site by using JavaScript software code and “cookies.” Our service providers may then connect the information they collect from our Site using “cookies” to other sources of information, which may include your name and mailing address, IP address, and device information, for the purpose of sending you promotions. 

By using this Site, you consent to these activities, including information collection by our service providers. 

If you do not wish for cookies to be placed on your computer, most web browsers permit you to prevent that from taking place. Additionally, information about opting out of cookie-based advertising can be found via the following links:

However, please keep in mind that cookies and similar technologies are an important part of how the Site works. Removing, rejecting, or limiting the use of cookies or other similar technologies may affect the availability and functionality of the Site. 

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. Some of these third parties may provide you with ways to choose not to have your information collected or used for targeted advertising.

SECTION 6

Third-Party Services

Third-party service providers and contractors we use will collect, use and disclose your information only to the extent necessary to allow them to perform services for us and on our behalf. However, certain third-party service providers have their own privacy policies related to the information we are required to provide to them for your credit-related or other purposes, and for which you will receive supplemental notice. For these providers, we recommend that you read their privacy policies, so you can understand the way your personal information will be handled by these providers. Additionally, the use of third-party cookies and pixels is subject to the privacy policies of these third parties and Caribou has no control relating to the use of the third-party cookies and pixels on these third-party sites. If you do not want these services, you may be able to opt out by visiting http://www.aboutads.info and/or www.networkadvertising.org.

Remember that certain providers may be in or have facilities that are located in a different jurisdiction than either you or us. If you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

Once you leave our website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our Terms & Conditions, unless stated otherwise.

When you click on links on our website, they may direct you away from our Site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

SECTION 7

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

  • To present our Site, its contents and the Services to you; 
  • To provide you with information, products, or Services that you request from us or to contact you about our Services that may be of interest to you; 
  • To fulfill any other purpose for which you provide any personal information; 
  • To provide you with notices and information about your accounts with us or to carry out our duties and enforce our rights arising from any contracts between you and us; 
  • To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses
  • To personalize your Site experience and to deliver content and product and service offerings relevant to you, including by recognizing you as a customer, through targeted offers and ads through our Site, via third-party advertising networks, and via email or text message (with your consent, where required by law); 
  • For testing, research, analysis, and product development, including to develop and improve our Site, products, and services; 
  • To notify you about changes to our Site and any products or services we offer or provide through it; 
  • To fulfill legal requirements and enforce our agreements;
  • To help maintain the safety, security, and integrity of our Site, products and services, databases and other technology assets, and business; 
  • In any other way we may describe when you provide the information; and
  • For any other purpose with your consent.
  • The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

SECTION 8

Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this Privacy Policy:

  • To our lenders, service providers, or affiliates or subsidiaries, to provide services that you have elected;
  • To contractors, service providers, and other third parties we use to support our business; 
  • To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our Site users and consumers are among the assets transferred; 
  • To fulfill the purpose for which you provide any personal information; 
  • For any other purpose we disclose when you provide the information; and
  • With your consent. 

We may also disclose your personal information:

  • To comply with any court order, law, or legal process, including to respond to any government or regulatory request; 
  • To enforce or apply the terms of this Privacy Policy, our Terms & Conditions, and other agreements between you and us, including for billing and collection purposes; and
  • If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Caribou, our service providers, our customers, other visitors and users of the Site, and others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and risk reduction.

Your personal information collected when you request, receive, or use a financial product or service from us is protected under federal law and how we disclose this information is described in our Financial Privacy Notice. 

We may sell or share other personal information collected from you as permitted by state privacy laws. This includes identifiers (such as IP address, name and email), browsing activity, location data, and related inferences. We share this with advertising networks and marketing partners for targeted ads and analytics, and may sell such data as necessary to support our business. We do not knowingly sell or share minors’ information without authorization. To opt out, see the Your Privacy Rights and Choices About How We Use and Disclose Your Information section below.

SECTION 9

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

  • Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies or alert you when cookies are being sent. If you disable or refuse cookies, some parts of the Site may then be inaccessible or not function properly.
  • Sale or Sharing of Your personal Information. To opt out of the sale or sharing of your personal information, click “Do Not Sell or Share My Personal Information” on our Site or calling 877-455-0070 and selecting Option 2. We honor Global Privacy Control (GPC) signals where required by law.
  • Promotional Offers from Us. If we send you a promotional email, you may use the Unsubscribe link and ask to be omitted from future email distributions. If we send you a promotional text message, you may send a text reply that says “Stop” and instruct us not to send these types of promotional text messages. To opt-out of receiving direct mail from us, you may: send an email to us at contact@gocaribou.com;  call us at 1-877-455-0070 and selecting Option 2; or send a written request to Caribou at 1200 17th Street, Suite 200, Denver, CO 80202.

We will honor those requests, but it may take up to 60 days for such promotional contact to end, unless a lesser time is required by law.

Additional information for residents in certain jurisdictions

California

In this section, we provide information for California residents as required under California privacy laws, including the CCPA.

Categories of personal information that we collect and disclose. Our collection, use, and disclosure of personal information about a California resident will vary depending upon the circumstances and nature of our interactions or relationship with such resident. Sections 2-4 above sets out the categories of personal information (as defined by the CCPA) about California residents that we have collected and disclosed to others for a business purpose within the past twelve months. We collect these categories of personal information from the sources described in that section of the policy and for the purposes described in the sections 5-8 above.

If you are a California resident, the CCPA grants you certain rights and imposes restrictions on particular business practices as set forth below:

  • Opt-Out of Sale or Sharing: California residents have the right to opt out of the sale of their personal information. California residents also have the right to opt out of the “sharing” of their personal information, which under the law means making available, transferring, or otherwise communicating personal information to a third party for cross-context behavioral advertising.
  • Initial Notice: We are required to notify California residents, at or before the point of collection of their personal information, regarding the categories of personal information collected and the purposes for which such information is used.
  • Right to Limit: California residents have the right to limit the use of sensitive personal information in certain situations. The CCPA defines “sensitive personal information” as personal information that reveals: (1) consumer’s Social Security or other state identification number; (2) a consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (3) consumer’s geolocation; (4) consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership; (5) the contents of a consumer’s mail, email, or text messages, unless the business is the intended recipient of the communication; and (6) consumer’s genetic data. You may have the right to limit our processing of sensitive personal information to the extent that we use sensitive personal information for any purpose other than: (1) to perform services or provide good reasonably expected by a consumer who requested those goods or services; (2) to detect security incidents provided that the use of personal information is reasonably necessary and proportionate for this purpose; (3) to restrict, malicious, deceptive, fraudulent, or illegal actions directed at us and prosecute those responsible for those actions, provided the use of personal information is reasonably necessary and proportionate for this purpose; (4) to ensure the physical safety or natural persons, provided the use of the personal information is necessary and proportionate for this purpose; (5) for short-term transient use, including but not limited to non-personalized advertising shown as part of the consumer’s current interaction with us, provided the personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with us; (6) to perform services on behalf of us, such as maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business; (7) to verify or maintain the quality or safety of a service or device that is owned, manufactured by, manufactured for, or controlled by us; or (8) for the purpose of inferring characteristics about a consumer.
  • Request to Delete: California residents have a limited right to request deletion of their personal information that we have collected about them and to have such personal information deleted, except where an exemption applies. 
  • Request to Know: California residents have the right to request and, subject to certain exemptions, receive a copy of the specific pieces of personal information that we have collected, used, disclosed and sold about them in the prior 12 months and to have this delivered, free of charge, either (a) by mail or (b) electronically in a portable and, to the extent technically feasible, readily useable format that allows the individual to transmit this information to another entity without hindrance. California residents also have the right to request that we provide them certain information about how we have handled their personal information in the prior 12 months, including the:
    • categories of personal information collected;
    • categories of sources of personal information;
    • business and/or commercial purposes for collecting and selling their personal information;
    • categories of third parties with whom we have shared their personal information;
    • categories of personal information that we have sold in the preceding 12 months, and for each category identified, the categories of third parties to which we sold that particular category of information; and
    • categories of personal information disclosed for a business purpose in the preceding 12 months, and for each category identified, the categories of third parties to which we disclosed that particular category of personal information.
  • Request to Correct: California residents have the right to request correction of inaccurate personal information that we maintain about them.
  • Right to Non-Retaliation: The CCPA prohibits retaliation against California residents for exercising their rights under the CCPA. We do not and will not retaliate against individuals based on their exercise of rights under the CCPA.

If you are a California resident, you may opt out of the sale or sharing of your personal information or make another request under the CCPA by clicking the “Do Not Sell or Share My Personal Information” on our Site, emailing financialprivacy@gocaribou.com or calling 877-455-0070 and selecting Option 2. We also honor Global Privacy Control (GPC) signals where required by law.


We will use the following process to verify requests: We will acknowledge receipt of your request, verify it using processes required by law, and process and respond to your request as required by law.  To verify such requests, we may ask you to provide the following information:

For a request to know categories of personal information which we collect, we will verify your identity to a reasonable degree of certainty by matching at least two data points provided by you against information in our systems that are considered reasonably reliable for the purposes of verifying a consumer’s identity.

For a request to know specific pieces of personal information or for requests to correct or delete, we will verify your identity to a high degree of certainty by matching at least three pieces of personal information provided by you to personal information maintained in our systems and also by obtaining a signed declaration under penalty of perjury that the requestor is the consumer whose personal information is the subject of the request.

Authorized agent requests: An authorized agent can make a CCPA request on a California resident’s behalf by providing either: (1) a power of attorney valid under California law; or (2) proof that the consumer gave the agent signed permission to submit the request.  The consumer must also provide either: (1) verification of their own identity with respect to a right to know categories, right to know specific pieces of personal information, or requests to delete which are outlined above; or (2) direct confirmation that the consumer provided the authorized agent permission to submit the request.

Other U.S. States with Privacy Rights

Certain other U.S. states have enacted consumer privacy laws that may grant residents specific privacy rights, including the Connecticut Data Privacy Act; Minnesota Consumer Data Privacy Act; Montana Consumer Data Privacy Act; and Oregon Consumer Privacy Act. These laws are collectively referred to as the “Multi-State Privacy Laws.” 

In this section, we provide information for individuals who are entitled to rights under Multi-State Privacy Laws.

Categories of personal information that we collect and disclose. 

Our collection, use, and disclosure of personal information about individuals entitled to rights under Multi-State Privacy Laws will vary depending upon the circumstances and nature of our interactions or relationship with such individual. Sections 2-4 above sets out the categories of personal information about individuals that we have collected and disclosed to others for a business purpose within the past twelve months. We collect these categories of personal information from the sources described in that section of the policy and for the purposes described in Sections 5-8 above. Please note that some Multi-State Privacy Laws use the term Personal Data, rather than Personal Information. For purposes of this policy, Personal Information has the same meaning as Personal Data.

If you are a resident of a state covered by the Multi-State Privacy Laws, these laws may grant you certain rights and imposes restrictions on particular business practices as set forth below:

  • Opt-Out of Certain Processing: You may have the right to opt out of certain processing activities. These include the right to opt out for purposes of (i) targeted advertising, (ii) the sale of Personal Data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.  
  • Withdraw your Consent to our processing of your personal data. Where our processing is based on your consent or subject to your objection, please note that your withdrawal will only take effect for future processing and will not affect the lawfulness of processing before the withdrawal.
  • Access and Obtain a Copy of your personal data, including: (i) confirming whether and how we are processing your personal data; (ii) obtaining access to or a copy of your personal data; and (iii) receiving an electronic copy of personal data that you have provided to us; (iv) for automated information where our processing is based on consent or the performance of a contract with you, or (v) data portability (asking us to send that information to another company in a structured, commonly used, and machine-readable format).
    • In some jurisdictions you may also have the right to request more specific information in certain circumstances, which may include the right to know which third parties your personal information was disclosed to or specific information used and decisions made as part of certain profiling activities.
  • Request Correction of your personal data where it is inaccurate or incomplete. In some cases, we may provide self-service tools that enable you to update your personal data.
  • Request Deletion of your personal data, which enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it,  when you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local laws. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
  • Appeal. You may have the right to appeal our decision or response to your request. To exercise your right to appeal, you can submit an appeal request using the same method used to submit your original request, including by contacting us at any time as set forth below.
  • Lodge a Complaint. While we are always willing and eager to listen and respond to your concerns about this Notice or our data practices, at any time you have the right to lodge a complaint with the data protection authority or other regulatory body in charge of enforcing data protection laws in your jurisdiction.

You may opt out of the sale of your personal information, or request your other rights provided by applicable Multi-State Privacy Law described above you may opt out of the sale or sharing of your personal information or make another request under these laws by clicking the “Do Not Sell or Share My Personal Information” on our Site, emailing financialprivacy@gocaribou.com or calling 877-455-0070 and selecting Option 2. We also honor Global Privacy Control (GPC) signals where required by law.

We will use the following process to verify requests: We will acknowledge receipt of your request, verify it using processes required by law, then process and respond to your request as required by law.  To verify such requests, we may ask you to provide the following information:

For a request to access personal information which we collect, we will verify your identity to a reasonable degree of certainty by matching at least two data points provided by you against information in our systems which are considered reasonably reliable for the purposes of verifying a consumer’s identity.

For a request to correct or delete, we will verify your identity to a high degree of certainty by matching at least three pieces of personal information provided by you to personal information maintained in our systems and also by obtaining a signed declaration under penalty of perjury that the requestor is the consumer whose personal information is the subject of the request.

Authorized agent requests: An authorized agent can make a privacy rights request on an individual’s behalf by providing either: (1) a power of attorney valid under applicable law; or (2) proof that the consumer gave the agent signed permission to submit the request.  The consumer must also provide either: (1) verification of their own identity with respect to a right to know categories, right to know specific pieces of personal information, or requests to delete which are outlined above; or (2) direct confirmation that the consumer provided the authorized agent permission to submit the request.

SECTION 10

Security

We take reasonable precautions to secure your personal information.

Your information may be transferred to, and maintained on, servers and databases located outside of your state or outside of the United States, where the privacy laws may not be as protective as your jurisdiction. We may transfer your information to and from any governmental jurisdiction and process it in the United States or elsewhere. 

No system of electronic security is impenetrable. We cannot guarantee the security of the information that you send to us or the security of our servers, networks, or databases. By using the Site and our Services, you acknowledge and agree that Caribou’s systems are not 100% secure against every possible attack, and you agree to assume all risk in connection with the information sent to us or collected by us when you access, visit, and/or use the Site and our Services. 

SECTION 11

Use of Artificial Intelligence 

We integrate Artificial Intelligence into our Services. Our use of AI helps improve the efficiency and quality of our services. During these interactions, our AI may collect and process information about you and be trained on information you provide, including personal information, in accordance with this Privacy Policy and our obligations under applicable law. While we take reasonable and appropriate steps to ensure the accuracy of its responses, AI responses from any chat bots or other technologies we deploy for your use (and for which you will receive specific supplemental notice of) are generated automatically and may contain inaccuracies or omissions.

SECTION 12

Assistance to Victims of Identity Theft

If you suspect that someone has had unauthorized access to the information you provided to Caribou, or any accounts with Caribou, or access to your personally identifiable information, you should report this crime to your local law enforcement agency and to the Federal Trade Commission (FTC). To speak with a trained FTC telephone counselor, call toll-free: 1-877-IDTheft (1-877-438-4338). Or, to enter information about your complaint into a secure FTC online database, visit www.consumer.gov/idtheft. The site also provides links to consumer education materials.

SECTION 13

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes, additions, updates, and modifications will take effect immediately upon their posting on the Site. You are responsible for periodically visiting the Site and this Privacy Policy to check for any changes. The date of the most recent revision will appear at the beginning of the Privacy Policy.

SECTION 14

Contact Information

If you have questions or want more information about this Privacy Policy, you may contact us at privacy@gocaribou.com or by mail at:

Caribou Financial, Inc. d/b/a Caribou

1200 17th Street, Suite 200
Denver, CO 80202

Attn: Legal

Footer