COLLECTION OF PERSONAL INFORMATION

We may gather, collect, record, hold, distribute, share, disclose, or otherwise use Personal Information about you. “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. “Personal Information” does not include: (i) publicly available information from government record, or (ii) identified or aggregate consumer information.

Information Provided By You

We collect Personal Information that you provide to us, including without limitation, any Personal Information you provide during your use of the Site or any other Services. For example, we may collect Personal Information from you when you:

• Visit our Site;
• Provide us with any data about you through the Site or any other Services;
• Create an account;
• Sell a bankruptcy claim;
• Seek customer support;
• Request any information from or about us, such as a newsletter, e-alert, or any other information about our products, events, or business partners;
• Communicate with any of our representatives;
• Communicate with us via third-party social media sites; or
• Otherwise communicate with us.

The following types of Personal Information may be collected from you:

• Name
• Signature
• Postal Address
• Email Address
• Telephone Number
• Unique Personal Identifier
• Account Name
• Bank Account Number

Information Automatically Collected

When you access the Site or use the Services, we automatically collect certain Personal Information about you, including:

• Information regarding your interactions with the Site or Services;
• Internet or Other Electronic Network Activity. We may collect information such as browsing history, search history, and information regarding your interactions with the Site.
• Online Identifiers. We (or our service providers) may collect information such as cookies identifiers, radio frequency identification (RFID) tags, advertising IDs, pixel tags, and account handles. Combined, these identifiers may be used to create profiles of individuals and identify them.
• Log Files. We periodically collect log files, including IP addresses, from our server. These files give us a general picture of who is visiting our website and which pages are being viewed the most often. This information is not specific to an individual viewer and is only collected to assist us in the maintenance and administration of our website. Log files are collected mainly for research purposes to see what pages are of most interest and use to current and potential clients.
• Session Variables. The Site uses session variables to collect information from users. It also uses session variables that remember people and information logged into private sections of the site. Session variables expire after a pre-determined amount of time. Information is only collected for that specific time and is not stored for future use.
• Device Information. We (or our service providers) may collect information about the computer, tablet, phone, or other device you use to access any of the Services, including the Internet Protocol address, hardware model, operating system and version, mobile network information, and other unique device identifiers (hereinafter collectively referred to as “Device Identifiers”).
• Cookies and Other Web-based Tracking Technologies. We use technologies such as cookies, pixels, tags, web beacons, and other types of web-based tracking technologies to gather personal information from Site visitors. Currently, we use Google Analytics, Cookie Yes, and Microsoft Clarity.
• Geo-location Data. Subject to your device permissions, we (or our service providers) may be able to collect information about the precise location of your device or may gather other general location data based on GPS data, mailing address, and/or billing address (hereinafter collectively referred to as “Geo-location Data”).
• Social Media Information. If any of our Services offer social media features, such as the Facebook Like button or similar social media interactive mini-programs, these features may collect your Internet Protocol address, which page you are visiting on our Site, and may set a cookie to enable the feature to function properly. Social media features are either hosted by a third party or hosted directly. Your interactions with these features may be governed by the privacy policies of the company providing it.

Sources from Which We Collect Personal Information

We collect Personal Information directly from you and from third parties, including advertising networks, internet service providers, data analytics providers, government entities, operating systems and platforms, and social media. We may merge or co-mingle that Personal Information with the Personal Information we maintain about you and other data collected on or through our Site.

HOW WE USE YOUR INFORMATION

Primary Ways We Use Your Information

Your Personal Information may be gathered, collected, recorded, held, or otherwise used by us or our service providers to provide, maintain, and improve our services, including for the following purposes:

• Complete a transaction with us;
• Send support and administrative messages;
• Respond to your comments, questions, and customer service requests;
• Communicate with you about products, services, offers, or any other events offered by us and/or to offer and provide you with news and information that we think will be of interest to you;
• Allow you to sign up for newsletters, blogs, and other communications;
• Monitor and analyze trends, usage, and activities in connection with our services and industry;
• Personalize your experience and the advertisements and content you see when you use our Services;
• For compliance purposes, as may be required by applicable laws or regulations, or as requested by any judicial process or governmental agency or as may be requested under any subpoena;
• To facilitate our use of various social media sharing features or other integrated tools (for example, the Facebook “Like” button), which you may use as part of social media pages; and
• To carry out any other purpose described to you at the time the Personal Information is collected.

Other Ways We May Use Your Information

In addition to the above, your Personal Information may be gathered, collected, recorded, held, or otherwise used for the following additional purposes:

• Outside Professionals. To use with, or otherwise distribute, share, or disclose to any of our professional advisors, such as attorneys or accountants (“Outside Professionals”) in order to facilitate the professional advice from those Outside Professionals.
• Government Agencies. To use with, or otherwise distribute, share, or disclose to any government agencies or third parties in order to comply with, or otherwise pursuant to, any subpoena, court order, or other governmental order, law, or regulation.
• Auditing. Auditing related to a current interaction with you.
• Security. Helping to ensure security and integrity of our data to the extent the use of your Personal Information is reasonably necessary and proportionate for these purposes.
• Debugging. Debugging to identify and repair errors that impair existing intended functionality of our Services.
• Transient Use. Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with us provided that your Personal Information is not disclosed to a third party and is not used to build a profile about you or otherwise alter your experience outside the current interaction with us.
• Services. Performing services on our behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, providing analytic services, providing storage, or providing similar services on our behalf.
• Advertising. Providing advertising and marketing services to you. With your permission, we may send you emails about our services and other updates.
• Research. Undertaking internal research for technological development and demonstration.
• Quality and Safety. Undertaking activities to verify or maintain the quality or safety of our products and services and to improve, upgrade, or enhance our services.
• Commercial Interests. Advancing our commercial or economic interests, such as by inducing a person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction.

WE may also use or share your Personal Information for another reason that is compatible with the purposes described above. For example, we consider de-identification, aggregation, and other forms of anonymization of Personal Information to be compatible with the purposes listed herein and in your interest because the anonymization of such information reduces the likelihood of improper disclosure of that information. If we need to use your Personal Information for an unrelated purpose, we will notify you and we will explain the legal basis with allows us to do so.

SHARING OF INFORMATION

We may distribute, share, or disclose Personal Information about you as described herein:

• Affiliates. We may share or disclose your Personal Information, or obtain Personal Information from, one or more of our affiliates or subsidiaries for any of the purposes described herein (collectively, “Affiliates”). In addition, our Affiliates may share or disclose your Personal Information with, or may receive your Personal Information from, one or more of the other Affiliates. Our Affiliates may use your Personal Information in any way in which we may use your Personal Information under this Privacy Policy.
• Service Providers. We may share or disclose your Personal Information with our service providers or other third party vendors (“Service Providers”) that we retain in connection with our Services, including without limitation the following types of service providers:
  • Email, internet, or other telecommunication service providers, including website hosting;
  • Cloud, or other data storage, or other hosting service providers;
  • Third-party payment service providers;
  • Analytics companies who assist us with various types of data analytics, web analytics, and app analytics;
  • Other types of third-party application providers or other third-party contractors we engage to assist us in providing our services;
  • App design; and
  • Database management.
• Third-Party Application Providers. We may share or disclose your Personal Information to third-party application providers.
• Third-Party Analytics Tools or Services. We may use analytics tools provided by Google Analytics, Cookie Yes, and Microsoft Clarity to collect and process certain analytics data (“Third Party Analytics Tools or Services”). These Third Party Analytics Tools or Services may also collect data about your use of other websites, apps, and online resources for purposes of providing targeted advertising.
• Aggregated Form. We may make certain automatically collected, aggregated, or otherwise de-identified Personal Information available to third parties for various purposes, including (i) compliance with various reporting obligations; (ii) for business or marketing purposes; or (iii) to assist such parties in understanding our users’ interests, habits, and usage patterns for certain programs, content, services, advertisements, promotions, and/or functionality available through our Services.
• Social Media. Our Site and Services may offer integrated social media features, such as the Facebook “Like” button, which let you share actions that you take on our social media pages. You may control who views your social media activity by adjusting your settings on the social media platform.
• Merger, Sale, or Other Asset Transfers. We may share, disclose, or otherwise transfer your Personal Information or Outside Professionals, other advisors, potential transactional partners, or other third parties in connect with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets. If another company or individual acquires our business, or assets, that company or individual will possess the Personal Information collected by us and will assume the rights and obligations regarding your Personal Information as described in this Privacy Policy. The use of your Personal Information following any of these events will be governed by this Privacy Policy.
• As Required by Law, Subpoena or Similar Government Order. We may access, preserve, share, or disclose your Personal Information if we believe doing so is required or appropriate to: (i) comply with all laws or regulations, including any tax reporting requirements; (ii) comply with any other law enforcement requests or legal process, such as a court order or subpoena; (iii) respond to your requests; or (iv) protect your, our, or others’ rights, property or safety.
• Outside Professionals. We may share or disclose your Personal Information with any of our Outside Professionals in order to facilitate the professional advice such Outside Professionals provide to us.
• Contractors. We disclose Personal Information to entities that help us fulfill a business or commercial purpose including (“Contractors”). Contractors are not permitted to sell or share your Personal Information or to use your Personal Information other than to perform the tasks we assign to them.
• Consent. We may also share or disclose your Personal Information with your permission.

NOTICE: We do not sell your sensitive data.

NOTICE: We do not sell your biometric personal data.

HOW LONG YOUR INFORMATION WILL BE KEPT

We will only keep your Personal Information for as long as is reasonably necessary to conduct business with you or as required by law. Personal Information will not be kept longer than is reasonably necessary for the purpose it was collected.

YOUR RIGHTS UNDER CALIFORNIA LAW & OTHER STATE LAWS

Persons who reside in California, Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia (“Residents”) have certain rights with respect to their personal information.

Right to Know

• Residents can ask us what personal information we have about collected about them, including a list of categories of your personal information that we have sold and a list of categories of your personal information that we have shared with another company for a business purpose.
  • Upon receipt of a verifiable consumer request, we will provide:
  • The categories of personal information we have collected about you.
  • The categories of sources from which we collect your personal information.
  • The business or commercial purpose for collecting or selling your personal information.
  • The categories of third parties with whom we share personal information.
  • The specific pieces of personal information we have collected about you.
  • A list of categories of personal information that we have sold, along with the category of any other company we sold it to. Any of the categories of personal information that we collect could be included in a sale to other companies, including those within our corporate family. If we have not sold your personal information, we will inform you of that fact.
  • A list of categories of personal information that we have disclosed for a business purpose, along with the category of any other company we shared it with.

Right to Delete

• Residents can ask us to delete their personal information. Once we receive a verifiable consumer request, we may delete Residents’ personal information from our records and direct any service providers to do the same. Please note that we are only obligated to delete Residents’ personal information under certain circumstances. We may deny your request to delete in accordance with applicable law.

Right to Correct

Residents have the right to request that we correct any inaccurate personal information. We will use commercially reasonable efforts to correct any inaccurate personal information as directed by Residents upon receipt of a verifiable consumer request.

Do Not Sell or Share

• Residents have the right to ask that we stop selling or sharing your personal information. We do not sell your personal information to third parties for monetary consideration. However, under some circumstances a transfer of personal information to a third party, or within our affiliates and subsidiaries, may be considered a “sale” under applicable law. If you submit a request to stop selling your personal information, we will stop making such transfers. Contact us at 877-444-0277 or visit https://www.crgfinancial.com/contact/ to submit a do not sell or share request.

To help you determine whether to opt out, we have provided the following charts summarizing what personal information we have sold, shared, or disclosed in the past 12 months.

Categories of Personal Information Collected, Sold or Shared for Cross-Context Behavioral Advertising or Disclosed for a Business Purpose within the past 12 months.

Categories of “Sensitive” Personal Information Collected, Sold or Shared for Cross-Context Behavioral Advertising or Disclosed for a Business Purpose within the past 12 months.

No Discrimination

• We have a nondiscrimination policy. CRG will not discriminate against Residents for exercising their rights. This generally means we will not cease doing business with you or charge you a different price or rates because you exercised rights under applicable state privacy law.

How to Exercise Your State Law Privacy Rights

To exercise your privacy rights under California law or other state privacy law, you must submit a verifiable consumer request to us by either:

• Calling us at 877-444-0277
• Completing the form available at https://www.crgfinancial.com/crg-privacy-policy-opt-out/

The request must:

• provide sufficient information to allow CRG to verify that the person submitting the request is the person or the authorized representative of the person whose personal information is implicated by the request.
• describe the Resident’s request with sufficient detail to allow CRG to properly understand, evaluate and respond to it.

Only a Resident, or a person authorized to act on a Resident’s behalf, may make a request to CRG related to the Resident’s personal information. A Resident may also make a request on behalf of their minor child.

If CRG cannot verify a Resident’s identity or a requestor’s authority to make a request on behalf of a Resident, CRG cannot respond.

You do not have to create an account to submit a consumer request.

CRG will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Response Timing and Format

If a Resident sends a verifiable consumer request as set forth above, CRG will respond within 45 days of receipt. If additional time is needed, CRG will inform the Resident or their authorized representative of the reason for the extension and the length of the extension. We will deliver our written response by e-mail.

For data portability requests, we will provide the Resident’s personal information in a form that is readily useable and should allow the Resident to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to a Resident’s verifiable consumer request unless it is excessive, repetitive or manifestly unfounded. If we determine that the request warrants a fee, we will tell the Resident why and provide the Resident with a cost estimate before completing the Resident’s request.

Appeal

Residents may appeal our decision with respect to a request by emailing us at support@crgfinancial.com

California’s Shine the Light Act

Individual consumers who reside in California and have provided us with their personal information may request information about our disclosures of certain categories of personal information to third parties for their direct marketing purposes. Such requests must include your name, street address, city, state, and zip code, and be submitted to us at one of the following addresses: support@crgfinancial.com with the subject “California Shine The Light Request” or 84 Herbert Ave. Building B- Suite 202, Closter, NJ 07624. Within thirty days of receiving such a request, we will provide a list of the categories of personal information disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made no more than once per calendar year. We reserve our right not to respond to requests submitted to addresses other than the addresses specified in this paragraph.

NOTICE TO NEVADA RESIDENTS

Under Nevada Revised Statutes Chapter 603A (the “Nevada Privacy Act”), Nevada residents who have purchased goods or services from us may notify us not to sell their covered personal information. Covered personal information includes first and last name, address, email address, and phone number. If you are a Nevada resident, you may submit a request not to sell your covered information by emailing support@crgfinancial.com.

NOTICE TO VERMONT RESIDENTS

In accordance with Vermont law, we will not share information we collect about Vermont residents with companies that are not affiliated to us for the purpose of direct marketing, except with your consent or as permitted by law, such as is necessary to service, audit or fund your transactions. We might share your name and contact information with third parties that assist us in our direct marketing efforts.

NOTICE TO TEXAS RESIDENTS

You may appeal our decision with respect to a request you have submitted by emailing us at support@crgfinancial.com

NOTICE:
We do not sell your sensitive personal data.

NOTICE:
We do not sell your biometric personal data.

NOTICE TO RESIDENTS OF THE EUROPEAN UNION AND THE UNITED KINGDOM

EU/UK residents (“Data Subjects”) are entitled to the following:

• The right to determine whether Personal Data has been processed;
• The right to access Personal Data that has been processed;
• The right to obtain information about how Personal Data has been processed, including without limitation: (i) the purpose of the Processing; (ii) the category of Personal Data concerned; (iii) the categories of recipients to whom the Data Subject’s Personal Data has been disclosed; (iv) the planned retention period; (v) the existence of the right of rectification, deletion, limitation of processing, or opposition; (vi) the existence of a right to complain; (vii) the source of the collection of Personal Data if not collected from CRG; (viii) and the existence of automated decision-making including profiling and, where appropriate, meaningful information about their details;
• The right to correct Personal Data stored by CRG;
• The right to request the deletion of Personal Data, subject to certain exceptions;
• The right to restrict the Processing of Personal Data if: (i) the accuracy of the Personal Data is disputed; (ii) the Processing of the Personal Data is unlawful, but the Data Subject rejects its deletion; (iii) CRG no longer needs the Personal Data, but the Data Subject requires it to exercise or defend legal claims; or (iv) the Data Subject has objected to the Processing of the Personal Data in accordance with GDPR Article 21;
• The right of the Data Subject to receive his/her Personal Data as provided to CRG, in a structured, common, and machine-readable format or to request the transfer to another person responsible;
• The right to withdraw the Data Subject’s consent to Processing of Personal Data; and
• The right of the Data Subject to complain to a Supervisory Authority, as such term is defined in the GDPR. As a general rule, the Data Subject can contact the Supervisory Authority of the Data Subject’s usual place of residence, work, or place of the alleged infringement.
• Data Subjects in the European Economic Area can find their local Supervisory Authority here: European Data Protection Board
• Within the United Kingdom, Data Subjects can submit complaints to the Information Commissioner’s Office.
• Within Switzerland, Data Subjects can submit complaints to the Federal Data Protection and Information Commissioner.

Legal Basis for Company’s Processing of Personal Data Under GDPR

In the event CRG inadvertently collects and/or processes Personal Data, Data Subjects’ Personal Data may be processed under the following conditions:

• Consent:you have given your consent for processing Personal Data for one or more specific purpose.
• Performance of a contract:provision of Personal Data is necessary for the performance of an agreement with you and/or for any pre-contractual obligations thereof.
• Legal obligations:processing Personal Data is necessary for compliance with a legal obligation to which CRG is subject.
• Vital interests:processing Personal Data is necessary in order to protect your vital interests or those of another natural person.
• Public interests:processing Personal Data is related to a task that is carried out in the public interest or in the exercise of official authority vested in CRG.
• Legitimate interests:processing Personal Data is necessary for the purposes of the legitimate interests pursued by CRG.

Data Subject Requests

Data Subjects may exercise their rights under the GDPR by emailing us at support@crgfinancial.com.

Contact Us

Data Subject may contact our Operations Department at support@crgfinancial.com

OTHER WAYS TO LIMIT USE OF PERSONAL INFORMATION

Unsubscribe from Emails and Other Communications

If you provide us with Personal Information and, thereafter, do not want to continue to receive further notices or information from us, such as emails about our products or services, you may unsubscribe using the link at the bottom of our emails. Email us at support@crgfinancial.com.

Limit Use of Cookies and Other Web-Based Tracking Technologies

You can prevent certain cookies and technologies from being used by adjusting the setting on your browser or by electing your preferences in the window that appears when you visit the Site. Be aware that disabling cookies will affect the functionality of this Site and many other websites that you visit.

Limit Collection of Geo-Location Data

You may be able to prevent your device from sharing precise location information including, without limitation, some or all of the Geo-Location Data described above, at any time through your device’s operating system settings.

Do Not Track

Some browsers have a “DO NOT TRACK” feature that lets website users inform websites or other applications that they do not want to have their online activities tracked. These “do not track” features may also give website users other choices regarding the collection of their Personal Information. However, these “do not track” features and “do not track” signals are not yet uniform. ACCORDINGLY, EACH USER OF THE SITE OR SERVICES IS HEREBY NOTIFIED THAT THE SITE AND THE SERVICES ARE NOT CURRENTLY SET UP TO RESPOND TO “DO NOT TRACK” FEATURES OR SIGNALS.

CHILDREN’S PERSONAL INFORMATION

This Site and other Services are not directed to children under the age of 13. We adhere to the Children’s Online Privacy Protection Act and will not knowingly register or otherwise collect any Personal Information from any child under the age of 13. We ask that minors under the age of 13 not submit any Personal Information to us. If you have reason to believe a child under the age of 13 has provided us with any Personal Information, please contact us at support@crgfinancial.com and request that such information be deleted from our records.

THIRD-PARTY SITES

The Site and Services may now or in the future link to other websites, forums, or programs that are not under our control and are not owned by us (collectively referred to as the “Third-Party Sites”). Any link to any Third-Party Site from the Site or Services does not imply any endorsement of the privacy practices of the Third-Party Site. No Third-Party Site is authorized to make any representation or warranty on our behalf.

If you click on a link to, or otherwise gain access to, any such Third-Party Site, you will be transported to one of these Third-Party Sites.

This Privacy Policy only applies to the Site and the Services. This Privacy Policy: (a) does not describe the privacy policies of any of these Third-Party Sites; and (b) does not govern the collection or use of your Personal Information by the Third-Party Sites. We are not responsible for the privacy practices of any of these Third-Party Sites. You should review the privacy policies for any Third-Party Sites to determine their practices with respect to the collection and use of Personal Information.

You acknowledge and agree that, by clicking a link to, or otherwise accessing a Third-Party Site, your Personal Information may be read, collected, shared, distributed, or otherwise used by the Third-Party Site. We are not responsible for any Personal Information that you submit, or otherwise make available to, Third-Party Sites.

DATA SECURITY

We take reasonable precautions and follow industry best practices to make sure your Personal Information is not lost, misused, accessed, disclosed, altered, or destroyed. Despite our best efforts, no internet transmission or cloud storage system is 100% secure. We shall not be held liable if a third party illegally obtains your Personal Information that was submitted to or otherwise collected by us.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on this Site.

CONTACT INFORMATION

If you have any request or questions concerning our Privacy Policy, please call 201.266.6988 or write to us at:

Email Address: support@crgfinancial.com

Mailing Address:

CRG Financial 

84 Herbert Avenue

Bldg. B, Suite 202

Closter, NJ 07624

Effective Date 11/25/2025