INTERNATIONAL VISITORS PRIVACY NOTICE

Section 1.01 Who This Notice Covers. Our products are offered only to persons in the United States, and the Site is directed to a United States audience. This Notice applies to a visitor who is located in the European Economic Area, the United Kingdom, or Switzerland when the General Data Protection Regulation (Regulation (EU) 2016/679), the United Kingdom General Data Protection Regulation, or the Swiss Federal Act on Data Protection applies to our processing of that visitor's personal data (together, "Applicable Data Protection Law"). It supplements our Website Privacy Policy.

Section 1.02 Controller. The controller of your personal data is American Originations LLC, doing business as LoanAmerica, 350 S Rampart Street, Suite 200, Las Vegas, Nevada 89145, Support@loanamerica.com.

Section 2.01 Purposes and Bases. We process personal data on the following legal bases: (a) to respond to your inquiry or to take steps at your request before entering into a contract, under Article 6(1)(b); (b) to comply with legal obligations, under Article 6(1)(c); (c) for our legitimate interests in operating, securing, and improving the Site, preventing fraud and abuse, and managing relationships with institutional partners, under Article 6(1)(f), where those interests are not overridden by your rights; and (d) on the basis of your consent, under Article 6(1)(a), for any optional cookie or similar technology that is not strictly necessary and for marketing communications where consent is required. You may withdraw consent at any time, and withdrawal does not affect processing that occurred before it.

Section 2.02 Categories of Personal Data. The categories are those listed in Article II of our Website Privacy Policy. We do not intentionally collect special categories of personal data through the Site.

Section 2.03 Automated Decision-Making. We do not make decisions about you that produce legal or similarly significant effects based solely on automated processing through the Site.

Section 3.01 Transfers to the United States. We are located in the United States, and personal data that you provide is transferred to and processed in the United States, which the European Commission has not found to provide adequate protection for all transfers. Where Applicable Data Protection Law requires a transfer mechanism, we rely on the standard contractual clauses approved by the European Commission, the United Kingdom International Data Transfer Addendum, or another lawful mechanism, and you may request a copy by writing to us.

Section 3.02 Retention. We retain personal data for the periods stated in Section 6.01 of our Website Privacy Policy.

Section 4.01 Rights Under Applicable Data Protection Law. You have the right to: (a) access your personal data; (b) have inaccurate personal data rectified; (c) have personal data erased; (d) restrict processing; (e) receive your personal data in a portable format; (f) object to processing based on legitimate interests and to direct marketing; and (g) withdraw consent.

Section 4.02 Exercising Your Rights. Submit a request at www.loanamerica.com/privacy-request or by email to Support@loanamerica.com. We will respond within one month, which may be extended by two further months for complex requests, with notice to you.

Section 4.03 Complaints. You may lodge a complaint with the data protection supervisory authority in the country where you live, work, or believe an infringement occurred. We encourage you to contact us first so that we can try to resolve your concern.

Section 5.01 Opt-In. For visitors in the European Economic Area, the United Kingdom, and Switzerland, we do not place or read any cookie or similar technology that is not strictly necessary unless you have opted in through the preferences control on the Site. Our practices are described in our Cookie Notice.