Privacy

Progressive Leasing

Privacy Policy

Last Updated: 07/07/2026

This online Privacy Policy (the “Policy”) describes how Progressive Finance Holdings, LLC, Prog Leasing, LLC, Approve.Me LLC, and their affiliates (collectively “Prog Leasing,” “we,” “us,” or “our”),collect, use, disclose, and secure the personal information we gather about you through our website, websites, including without limitation www.progleasing.com, and www.progressivelp.com (the “Sites”)  when you use our Sites, apps, and when you otherwise interact with us (collectively, the “Services”). 

For purposes of this Policy, personal information means data that classifies as personal information, personal data, personally identifiable information, or similar terms under applicable data privacy and security laws and regulations.  It does not include data excluded or exempted from those laws and regulations, such as aggregated, anonymized, or deidentified data.  Nothing in this Policy will constitute an admission or evidence that any particular data privacy or information security law or regulation applies to Prog Leasing generally or in any specific context. 

If you are an employee or job applicant, please see our Employee and Contractor Privacy Policy. 

In providing our Services, Prog Leasing may collect personal information on behalf and as a service provider for third parties. This Policy does not govern any information we collect on behalf of third parties, and you should consult their privacy policies to become familiar with their data collection and usage practices.

Notice at Collection:  At or before the time of collection, California residents have a right to receive notice of our practices, including the categories of personal information to be collected, the purposes for which such information is collected, used, disclosed, sold, or shared, the categories of third parties to whom personal information is disclosed, sold, or shared, whether such information is sold or shared and how to opt-out of such uses (including the right to opt out of certain sales, sharing or target advertising), and how long such information is retained.  You can find those details in this statement by clicking on the foregoing links.

1. You Consent to This Policy

By accessing, browsing, downloading, or otherwise using the Services, you confirm that you have read, understood, and agreed with this Policy.  Beyond this Policy, your use of the Services is subject to our Terms of Use.  If you do not agree to this Policy or our Terms of Use, you may not use the Services.

This Policy and the Terms of Use apply regardless of how the Services are accessed and will cover any technologies or devices by which we make the Services available to you.

If you have any questions or concerns about our personal information policies or practices, you can contact us in the methods described in the “Contact Us” section below.

2. Types of Personal Information We Collect

We collect information you voluntarily provide directly to us, information that we collect automatically when you interact with the Services, and information collected from third parties.  The categories of personal information that we collect and the purposes for which we collect that information are described below.

     A.  Personal Information You Provide to Us

The following list describes the categories of personal information we may collect directly from you:

• Account Information includes name, phone number, email address, and zip code. We collect this information when you provide it directly to us such as when you create an account or fill out a form. We collect this information for providing the Services, administrative purposes, and marketing and advertising our products and services.

• Biometric Information includes imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, or voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted. We collect this information from our third party service providers when you sign up or apply for certain Prog Leasing’s product or services or create an account and provide it directly to such providers. We collect this information for the purposes of complying with our legal and regulatory compliance obligations, policies, and procedures.

• Chatbot Information includes any information you might provide to our chatbot. We collect this information when you provide it directly to us by interacting with the chatbot on our Site. If you engage with our chatbot, we will record the information. Please note that information related to your communications may be shared with our service providers. We collect this information for providing the Services and for administrative purposes.

• Contact Information includes name, email address, physical address, and phone number. We collect this information when you provide it directly to us such as signing up for newsletters, requesting information about Prog Leasing services, creating an account, or filling out a form. We collect this information for the purposes of advertising and marketing, analytics and research, customer service, and website security and maintenance.

• Leasing and Purchase Information includes information you provide when you apply to lease products. This information includes name, email address, physical address, social security number, employment information, bank account details, banking history, credit bureau reporting information, income, a credit or debit card, and date of birth. You may also need to create an account with a username and password. We collect this information for the purposes of account management, advertising and marketing, analytics and research, customer service, and website security and maintenance.  

• Payment and Commercial Information includes name, billing address, phone number, third party payment service provider-related information, debit or credit card information, purchase and participation history, or other payment processing information. We collect this information for providing the Services and for administrative purposes. 

• Responses to Surveys and Questionnaires includes information you provide to us when you respond to marketing materials, promotions, contests, or other surveys. We collect this information for administrative purposes and marketing and advertising our products and services.

• Social Media Information includes information that you post by sharing on a blog or another social media platform. We collect this information for administrative purposes and marketing and advertising our products and services. Please note that your comments will be visible to the public, so you should never share personal information that you would like to keep private.

• Text Message Opt-In Information includes your opt-in consent to receive marketing messages from us through short codes or similar means. We collect this information for providing the Services, marketing and advertising our products and services, and for administrative purposes.

• User-Generated Content includes information about you included in content you upload, comment, or otherwise submit on the Services, such as your name and email address and products you may have purchased. Be aware that as a default, any information you post on the Services, including without limitation reviews, comments, and text, may be available to and searchable by all users of the Services. We collect this information for providing the Services and administrative purposes.

The purposes for which we use your personal information are described in further detail in the “How We Use Personal Information We Collect” section below. 

     B.  Personal Information Collected Automatically Through “Cookies” or Other Tracking Technologies

We may send one or more cookies to your computer or other device. We may also use other similar technologies such as tracking pixels, tags, or similar tools when you visit our Services. These technologies can collect data regarding your operating system, browser type, device type, screen resolution, IP address, and other technical information, as well as navigation events and session information as you interact with our Services. This information allows us to understand how you use the Services.

          i.  Cookies

Cookies are small files created by websites, including our Services, that reside on your computer’s hard drive and that store information about your use of a particular website.  When you access our Services, we use cookies and other tracking technologies to:

• Estimate our audience size and usage patterns;

• Store information about your preferences, allowing us to customize our Services according to your individual needs;

• Contact you to provide you with information or services that you request from us;

• Advertise new content, events, and services that relate to your interests;

• Provide you with more personalized content that is most relevant to your interest areas; and

• Recognize when you return to our Services.

We set some cookies ourselves and others are set by third parties.  You can manage your cookies preference as described in the “Your Privacy Options and Configurations” section below.

          ii.  Types of Cookies and Their Functions 

The following chart lists the different types of cookies that we and our service providers use on the Services, examples of who serves those cookies and links to the privacy notices and opt-out information of those cookie servers.  Because the specific cookies we use may vary over time, as well as differ by the specific page you are browsing, the below chart is illustrative only.

We do not use analytical tools in a manner that discloses to third parties that a specific person viewed specific video materials.

          iii.  Cookie Retention Period

Some cookies operate from the time you visit the Services until the end of that particular browsing session.  These cookies, which are called “session cookies,” expire and are automatically deleted when you close your internet browser.

Some cookies will stay on your device between browsing sessions and will not expire or automatically delete when you close your internet browser.  These cookies are called “persistent cookies” and the length of time they will remain on your device will vary from cookie to cookie.  Persistent cookies are used for a number of purposes, such as storing your preferences so that they are available for your next visit and to keep a more accurate account of how often you visit the Services, how your use of the Services may change over time, and the effectiveness of advertising efforts.

     C.  Personal Information We Receive From Third Parties 

We may receive additional information about you from our business partners, as well as our Affiliates, subsidiaries, joint ventures, advertising partners, or other companies under common control, or other third parties.  We may combine that information with other information we collect about you, and use, disclose, share, and as permitted by applicable law, sell, but we will always use the information as described in this Policy. 

 

3.  HOW WE USE PERSONAL INFORMATION WE COLLECT

We use your personal information for a variety of business purposes, including to provide our Services, for administrative purposes, and to market our products and Services, as described below.

     A.  Providing Our Services

We use your information to fulfill our contract with you and provide you with our Services, such as:

• Managing your information and accounts;

• Providing access to certain areas, functionalities, and features of our Services;

• Answering requests for customer or technical support;

• Communicating with you about your account, activities on our Services, and policy changes;

• Processing your financial information and other payment methods for products or Services purchased or used; and

• Allowing you to register for events.

     B.  Administrative Purposes

We use your information for various administrative purposes, such as:

• Pursuing our legitimate interests such as direct marketing, research and development (including marketing research), network and information security, and fraud prevention;

• Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity;

• Measuring interest and engagement in our Services;

• Improving, upgrading, or enhancing our Services;

• Developing new products and services;

• Ensuring internal quality control and safety;

• Authenticating and verifying individual identities, including requests to exercise your rights under this Policy;

• Debugging to identify and repair errors with our Services;

• Auditing relating to interactions, transactions, and other compliance activities;

• Sharing personal information with third parties as needed to provide the Services;

• Enforcing our agreements and policies; and

• Carrying out activities that are required to comply with our legal obligations.

     C.  Marketing and Advertising our Products and Services

We may use personal information to tailor and provide you with content and advertisements.  We may provide you with these materials as permitted by applicable law. Some of the ways we market to you include email campaigns, custom audiences advertising, joint marketing with our Affiliates and other third parties, and “interest-based” or “personalized advertising,” including through cross-device tracking.

We may disclose, share, and, where permitted by applicable law, sell such information, including: Account Information, Contact Information, Commercial Information, personal information collected automatically through cookies or other tracking technologies, and inferences to our Affiliates and to non-affiliated business partners and other third parties such as advertising networks, media platforms, advertisers of consumer goods and services, brands, digital advertisers, insurers, alternative financing providers, third party marketers and marketing partners for marketing, advertising, analytics, measurement, attribution, audience creation, customer acquisition, joint marketing, lead generation, and other commercial purposes. These recipients may use the personal information for their own purposes as described in their privacy notices and subject to applicable law. 

Our use of cookies and other tracking technologies may be considered a sale of personal information. We sell personal information for the purposes of targeted advertising, as defined under applicable law. Categories of personal information that we have sold include the following: Account Information, Contact Information, Leasing and Purchase Information, and Payment and Commercial Information. Categories of third parties to whom personal information is sold include data analytics providers and advertising and marketing providers. 

You may opt-out of these sales as described in the “Your Privacy Rights” section below. If you have any questions about our marketing practices or if you would like to opt out of the use of your personal information for marketing purposes, you may contact us at any time as set forth in “Contact Us” below.

    D.  With Your Consent

We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent.

 

4.  HOW WE DISCLOSE PERSONAL INFORMATION WE COLLECT

We may collect, use, or disclose personal information for a variety of business purposes, including the following:

• Business Partners, Affiliates, and Other Third Parties.  We may collect personal information from and disclose, share, and as permitted by applicable law, sell personal information including Account Information, Contact Information, Payment and Commercial Information, Responses to Surveys and Questionnaires, Social Media Information, and User-Generated Content, personal information collected automatically through cookies or other tracking technologies, and inferences to and with our Affiliates and our business partners, including legal advisors and financial advisors, co-branded partners, and other third parties for our and their business, marketing, advertising, and other commercial purposes. We may combine that information with other information we collect about you, but we will always use the information as described in this Policy. We may also disclose personal information to our Affiliates, subsidiaries, joint ventures or other companies under common control. 

• Business Transactions or Mergers.  We reserve the right to disclose your personal information to third parties as part of any potential business or asset sale, merger, acquisition, investment, round of funding, or similar type of transaction. Additionally, if we are entering into a corporate transaction with a third party, we may receive personal information in connection with the diligence. If we close a transaction, the third party may transfer personal information, which we would use as described in this Policy.

• Bankruptcy or Insolvency.  In the event of bankruptcy, insolvency, or dissolution proceedings, we may disclose your personal information with third parties as part of the sale or reorganization process. 

• Service Providers.  We use service providers to perform various functions on our behalf, including background screening service providers and service providers who process Biometric Information for compliance purposes. We may also receive personal information from service providers. 

• Retail Providers.  We may disclose your personal information, including Contact Information and Leasing and Purchase Information, with third party merchants who supply the underlying product or service that is the subject of the current, potential, upcoming, or former lease and/or Services you obtain from us. 

• Marketing Partners.  We may use certain cookies, pixels, and other tools that collect personal information so that it can be used in connection with the marketing efforts of third parties. In those instances, your personal information may be used for third parties to serve unsolicited information, services, or products to you. We may also use certain cookies, pixels, and other tools that collect personal information from or disclose to our Affiliates and non-affiliated third parties, including advertising networks, data analytics providers, social networks, co-branded partners, joint marketing partners, lead generation partners, data enrichment providers, and other business partners. In some circumstances, these disclosures may be considered “sales” or “sharing” under applicable law. To the extent required by applicable law, you may opt-out of those practices as described in Section 5(ii) below  
  
   

5. YOUR PRIVACY RIGHTS

Under certain United States state privacy laws, you may be entitled to various privacy rights. Although they may not all apply to us, Prog Leasing values your privacy, and we therefore afford privacy rights to all individuals regardless of their residency. The chart below explains these rights, although some exceptions may apply. 

          i. Sensitive Personal Information

We will process sensitive personal information (as the term or its equivalent is defined by applicable privacy laws) in accordance with any applicable privacy laws, including obtaining consent where required. Sensitive data includes precise geolocation and biometric information. We do not sell or share sensitive personal information, including government identifiers, financial account access credentials, biometric information used to uniquely identify an individual, or precise geolocation, for cross-context behavioral advertising or for third parties’ own marketing purposes unless we separately disclose that practice and provide any rights and consents required by applicable law. 

          ii. Exercising Your Rights

To exercise your rights, to know/access, correction, deletion, restrict, or portability, as applicable, please fill out the form on our “Data Subject Request” page, or at 877-898-1970. To exercise your right to opt-out of sales or sharing of your personal information for targeted advertising please visit our “Cookie Settings” page linked in our cookie banner when you visit our Sites, or our “Your Privacy Choices” page. You may submit a request to delete your mobile app profile information by emailing privacy@progleasing.com or calling 877-898-1970 between 9 a.m. and 5 p.m. Mountain Time, Monday through Friday. You may exercise your right to opt out of the sale or sharing of your data by filling out the form on our Opt-Out of Sale/Share page, or at 877-898-1970. 

          iii. Verification

To ensure the protection of your personal information, we may need to verify that the individual submitting a request is the consumer to whom the request relates prior to processing the request, or an authorized agent. To verify a consumer’s identity, we may request up to three pieces of personal information about you to compare against our records when you make a request. Making a verifiable consumer request does not require you to create an account with us. However, we may require that you access a previously existing account where necessary to submit the request. We will only use personal information provided in your request to verify your identity and will delete any information you provide after processing the request. We reserve the right to take additional steps as necessary to verify the identity of consumers where we have reason to believe a request is fraudulent. You may choose a person or business that you authorize to act on your behalf to submit your requests (“Authorized Agent”). If you choose to use an Authorized Agent, we require that you provide the Authorized Agent with written permission to allow them to submit your request and that you verify your identity directly with us. Failure to do so may result in us denying your request.

6. YOUR PRIVACY OPTIONS AND CONFIGURATIONS

Depending on the device(s) you use to access the Services, you may be able to select certain privacy choices or configuration, which are further described below: 

• Email Communications.  If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails.  Note that you will continue to receive transaction-related emails regarding products or Services you have requested.  We may also send you certain non-promotional communications regarding us and our Services, and you will not be able to opt out of those communications (e.g., communications regarding our Services or updates to our Terms or this Policy).

• Mobile Devices.  We may send you push notifications through our mobile application.  You may opt out from receiving these push notifications by changing the settings on your mobile device.

• Text Messages. If you have previously opted-in to receive text messages from us, you may unsubscribe from these messages at any time by following the instructions in the text message, or by replaying to the message with the word "STOP".

• Do Not Track (“DNT”).  DNT is a privacy preference that users can set in certain web browsers.  Please note that we do not respond to or honor DNT signals. Our Sites respond to the Global Privacy Control. 

• Cookies and Personalized Advertising.  You may stop or restrict the placement of cookies and tracking technologies on your device or remove them by adjusting your preferences as your browser or device permits.  However, if you adjust your preferences, our Services may not work properly.  Please note that cookie-based opt-outs are not effective on mobile applications.  However, you may opt out of personalized advertisements on some mobile applications by following the instructions provided by Android or iOS.  You can find out more about cookies and how to manage them by visiting https://ico.org.uk/for-the-public/online/cookies/.
  
   

7. SUPPLEMENTAL PROVISIONS FOR CALIFORNIA RESIDENTS

This section supplements our Policy and only applies to our processing of personal information that is subject to California Consumer Privacy Act, Cal. Civ.  Code § 1798.100 et seq. as amended by the California Privacy Rights Act and implementing regulations (collectively “CCPA”):

     A. Collection of Personal Information

In the preceding 12 months, we have collected personal information from the following categories identified in Section 2, which are described using the terms identified under the CCPA: identifiers, personal information, commercial information, biometric information, protected classification characteristics under California or federal law, geolocation information, sensitive personal information, inferences drawn on the consumer, internet or other similar network activity, and sensory data. 

     B. Disclosure of Personal Information

In the preceding 12 months, we have disclosed personal information in the following categories:  identifiers, personal information, commercial information, biometric information, geolocation information, sensitive personal information, internet or other similar network activity, and inferences with service providers. 

We disclose content posted on our social media platforms (e.g., if a consumer “comments” on a story) with other consumers.  Such posts may include information in the category of personal information and identifiers, but the content depends on the individual posts. 

     C. Sharing of Personal Information

In the preceding 12 months, we have shared for cross-contextual behavioral advertising (to analytics providers and advertising and marketing providers) personal information in the following categories: personal information, identifiers, commercial information, geolocation, inferences, and internet or similar networking activity.

     D. Sales of Personal Information

In the preceding 12 months, we have sold personal information for monetary consideration.  Additionally, our use of cookies and other tracking technologies may also be considered a sale of personal information under the CCPA.  Categories of personal information that we have sold under the CCPA include the following: identifiers, personal information, commercial information, internet or similar network activities, and inferences about our users to third parties.  Categories of third parties to whom personal information is sold under the CCPA include data analytics providers and advertising and marketing providers such as advertisers of consumer goods and services, insurers, marketing partners, and media companies which may or may not be related to our business.  We sell this information for the purposes of providing advertising services, and third parties’ own commercial use, including to market products and services.  For more information on how we conduct sales, including information on opting-out of sales, please refer to Section 3(c) above.  

     E. Collection of Personal Information from Children under 16

In the preceding 12 months, we have not knowingly collected or processed personal information pertaining to children under the age of 16.

     F. Sensitive Personal Information

If we process sensitive personal information as defined by California law, we will only do so for the purposes specifically authorized by California law and in a manner that is necessary and proportionate for those purposes, unless we provide any additional notice and rights required by law.  As such, we do not perform any processing for which a Right to Limit request is available.

8. HOW LONG YOUR PERSONAL INFORMATION IS KEPT

We will retain your personal information until the personal information is no longer necessary to accomplish the purpose for which it was provided.  We may retain your personal information for longer periods for specific purposes to the extent that we are obliged to do so in accordance with applicable laws and regulations, to protect you, other people, and us from fraud, abuse, an unauthorized access; as necessary to protect our legal rights; or for certain business requirements.

We will delete your personal information when it is no longer necessary for the purpose for which it was collected, or upon your request, subject to exceptions as discussed in this Policy or under applicable law, contract, or regulation. Following a deletion request, some mobile app profile information may be retained if required for legal or contractual purposes. 

9. OUR COMMITMENT TO DATA SECURITY

The security of your personal information is important to us.  We take various reasonable organizational, administrative, and technical measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.  If required by law to do so, we will notify you and/or the relevant supervisory authority in the event of a data breach.

However, we cannot and do not guarantee complete security, as it does not exist on the internet.

10. THIRD PARTY LINKS

Our Services may contain links to third-party websites.  When we provide links, we do so only as a convenience and we are not responsible for any content of any third-party website or any links contained within.  It is important to note that this Policy only applies to our Services.  We are not responsible and assume no responsibility for any personal information collected, stored, or used by any third party as a result of you visiting third-party websites.  We also advise that you carefully read the privacy notice of any third-party websites you choose to visit.

11. CHILDREN’S PRIVACY

Our Services are not directed at children (as defined under applicable law).  We do not knowingly collect or otherwise process personal information from children without first obtaining legally permission from that child’s parent or legal guardian, such as through the attestations during account registration. 

12. POLICY CHANGES

This Policy may change from time to time.  If we need to change this Policy at some point in the future, we will post any changes on this page.  If we make a significant or material change to this Policy we will notify you as required by applicable law.  You should check this Policy when you use the Services.  Your continued use of the Services constitutes acceptance of the most current version of this Policy.

13. SHINE THE LIGHT DISCLOSURE

If you are a California resident and have an established business relationship with us, Prog Leasing has not disclosed personal information to third parties for those third parties' direct marketing purposes during the preceding calendar year.

14. CONTACT US

If you have any questions about this Policy, please contact us by email at privacy@progleasing.com, via phone at 877-898-1970 between the hours of 9 a.m. and 5 p.m. Mountain Time, or by mail at 256 W. Data Drive, Draper, UT 84020, Attn: Privacy Office.