1. Introduction
Welcome to Scratchpay, operated by Scratch Financial, Inc. ("Scratch Financial," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile application, or apply for our veterinary financing services.
We are committed to protecting your privacy and maintaining the security of your personal information. This policy applies to all users of our services, including pet owners who apply for financing, veterinary partners, and website visitors.
Key Privacy Principles
- We only collect information necessary to provide our services
- We use bank-level security to protect your data
- We never sell your personal information to third parties
- You have control over your information and privacy choices
3. How We Use Your Information
Primary Uses
- Provide Services: Process applications, make lending decisions, and manage accounts
- Payment Processing: Collect payments and manage your financing plan
- Customer Support: Respond to inquiries and resolve issues
- Legal Compliance: Meet regulatory requirements and prevent fraud
Secondary Uses
- Improve Services: Analyze usage patterns to enhance our platform
- Communication: Send account updates, payment reminders, and service announcements
- Marketing: Share relevant offers and information (with your consent)
- Risk Management: Detect and prevent fraudulent activities
Legal Basis for Processing
We process your personal information based on:
- Contract Performance: To provide the financing services you requested
- Legal Obligations: To comply with financial regulations and anti-fraud laws
- Legitimate Interests: To improve our services and prevent fraud
- Consent: For marketing communications and optional services
5. Data Security
We implement comprehensive security measures to protect your personal information:
Technical Safeguards
- Encryption: All data is encrypted in transit and at rest using industry-standard protocols
- Secure Servers: Information stored on servers with restricted access and monitoring
- Regular Security Audits: Third-party assessments of our security practices
- Vulnerability Testing: Ongoing testing to identify and address potential security risks
Administrative Safeguards
- Access Controls: Limited access to personal information on a need-to-know basis
- Employee Training: Regular privacy and security training for all staff
- Background Checks: Screening of employees with access to sensitive data
- Incident Response: Procedures for detecting, reporting, and responding to security incidents
Physical Safeguards
- Secure facilities with restricted access
- Surveillance systems and security personnel
- Secure disposal of physical records
- Environmental controls to protect equipment
Data Breach Response
In the unlikely event of a data breach, we will:
- Immediately investigate and contain the incident
- Notify affected users within 72 hours when legally required
- Provide clear information about what happened and what we're doing about it
- Offer free credit monitoring services if appropriate
6. Your Rights and Choices
You have several rights regarding your personal information:
Access and Portability
- View Your Information: Request a copy of the personal information we hold about you
- Data Portability: Receive your information in a commonly used format
- Account Dashboard: Access and review your account information online
Correction and Updates
- Update Information: Correct inaccurate or incomplete personal information
- Profile Management: Update contact preferences and communication settings
- Account Changes: Modify payment methods and contact information
Communication Preferences
- Marketing Opt-Out: Unsubscribe from promotional emails and messages
- Communication Channels: Choose preferred methods for account notifications
- Frequency Settings: Adjust how often you receive non-essential communications
Deletion Rights
You may request deletion of your personal information, subject to legal and contractual obligations. Note that we may need to retain certain information for:
- Active loan servicing and payment processing
- Legal compliance and regulatory requirements
- Fraud prevention and security purposes
- Legitimate business interests and dispute resolution
7. Cookies and Tracking Technologies
We use cookies and similar technologies to improve your experience and analyze website usage:
Types of Cookies
- Essential Cookies: Required for basic website functionality and security
- Performance Cookies: Help us understand how visitors use our website
- Functional Cookies: Remember your preferences and settings
- Marketing Cookies: Used to deliver relevant advertisements
Managing Cookies
You can control cookie settings through your browser preferences. However, disabling certain cookies may limit your ability to use some features of our website.
Third-Party Analytics
We use services like Google Analytics to understand website usage. These services have their own privacy policies and cookie practices.
8. Children's Privacy
Our services are designed for adults aged 18 and older. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected such information, we will promptly delete it.
Parents or guardians who believe their child has provided personal information to us should contact us immediately using the information provided in the Contact section below.
9. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
- Update the "Last Updated" date at the top of this policy
- Post the revised policy on our website
- Send email notifications for significant changes
- Provide notice through our mobile application
Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.