Privacy Policy

1. Who We Are

This website is published by Achieve Personal Loans, a computer integrated systems design practice serving personal lending operations. Achieve Loans is the developer name under which this website and its related digital properties are produced and maintained. We are located at 1875 S Grant St Ste 400, San Mateo - 94402-2676, United States (US).

Achieve Personal Loans is a professional services firm. We design, build and support software systems for lending organizations. We are not a lender, a credit bureau, a payment processor or a loan servicer. We do not accept consumer loan applications through this website, and we do not make credit decisions about any individual visitor.

Where this policy refers to the Company, it means Achieve Personal Loans. Where it refers to the website, it means the pages served at achieveloans.lol. Where it refers to the services, it means the systems design, integration, engineering, migration, reporting and support work described on our services page.

Privacy questions and requests may be directed to our studio using the contact details at the end of this policy. We treat every request seriously and we aim to acknowledge it within two business days.

2. Scope of This Policy

This policy applies to information collected through this website and through ordinary business communications with our studio. It also describes the general privacy commitments that govern our professional engagements, although the specific handling of client records is normally set out in the written services agreement for each project.

This policy does not apply to the websites of other organizations, including lenders, brokers or partner vendors that may be linked from our pages. It also does not apply to information that a client organization collects from its own borrowers. When we process borrower data as part of a design or support engagement, we do so under the instructions of that client and under the terms of the relevant agreement, not as an independent controller of that data.

Some sections of this policy apply only to specific categories of visitors, such as California residents exercising statutory rights. Those sections are labelled clearly, and the rest of the policy continues to apply to all visitors.

3. Information We Collect

We collect only the information we need to answer inquiries, prepare proposals, deliver engagements and keep our business records in order. The categories are set out below.

Contact details

When you write to us, call us or submit the contact form, we receive your name, email address, phone number if you provide one, organization name and the content of your message. We use these details to reply and to keep a record of the conversation.

Business and professional information

During a potential engagement we may learn about your organization, the systems you run, the scale of your lending operation, the vendors you use and the problems you are trying to solve. This information is treated as confidential business information and is handled with the same care as personal data.

Technical information

Our web server and hosting provider record standard technical data such as the pages requested, the date and time of a request, the referring address, the browser and operating system description, and a truncated network address. This data is used to keep the site available and secure and to understand which pages are being read.

Engagement information

If you become a client, we may hold project records including meeting notes, requirements documents, design files, test results, deployment records and correspondence. Where an engagement involves access to production systems, that access is logged, limited to named personnel and controlled by the written agreement.

Sensitive information

We ask that you do not send sensitive personal information, government identifiers, financial account numbers or health information through the contact form or by ordinary email. If such information is required for a project, we will agree on a secure transfer method in advance.

4. How We Collect Information

We collect information directly from you when you complete the contact form, send us an email, call the studio or correspond with us during a proposal or a project. We also collect technical information automatically when your browser requests a page from our website.

We may receive information from a colleague or a partner who introduces you to our studio. In that case we rely on the introducer to have a lawful basis for sharing your details with us, and we confirm with you at the first opportunity that you are content for us to keep them.

We do not purchase contact lists, and we do not collect information from social media profiles unless you send it to us yourself. We do not use hidden tracking pixels to build advertising profiles of visitors to this website.

5. Why We Use Information

We use the information described above for the following purposes, each of which corresponds to a legitimate business need or to a specific agreement with you.

• To respond to inquiries, answer questions and prepare proposals for services.
• To deliver, document and support the systems design engagements we have agreed with clients.
• To keep accurate business records, invoices and correspondence for accounting and legal purposes.
• To protect the website, investigate abuse and maintain the availability of our services.
• To improve the clarity of our pages by understanding which content is read most often.
• To comply with legal obligations, respond to lawful requests and enforce our agreements.

We do not sell personal information. We do not use inquiry details to send unsolicited marketing messages, and we do not add visitors to a mailing list without a clear affirmative action on their part.

6. Cookies and Similar Technologies

This website is designed to work with the smallest possible amount of local storage. Pages are static and are served without advertising networks, social plugins or third party analytics scripts that identify individual visitors.

Our hosting provider may set a short lived technical cookie or use similar mechanisms for security, load balancing and basic availability reporting. These mechanisms do not follow you across other websites, and they are not used to build a profile of your interests.

If we introduce a privacy respecting analytics tool in future, we will describe it in this section before activation and we will configure it so that no unnecessary personal identifiers are retained. You can also use the settings in your browser to block or delete cookies; the website will continue to function normally.

7. How We Share Information

We share information only in the limited circumstances described below. We do not sell, rent or trade personal information with data brokers or advertising networks.

• Service providers. We use hosting, email, accounting and document storage providers to run our business. They receive only what is necessary to perform their function and are bound by confidentiality and data protection terms.
• Professional advisers. Our lawyers, accountants and insurers may see limited records when required for advice or coverage.
• Legal requirements. We may disclose information when compelled by a valid legal process, when necessary to protect rights or safety, or when required to comply with applicable law.
• Business transfers. If the studio is merged, acquired or reorganized, project and contact records may transfer as part of the transaction, subject to equivalent protections.
• With your direction. We may share information with a third party when you ask us to do so, for example when you introduce us to a vendor.

Where a client engagement involves borrower data, that data is shared only with the client and with any subprocessor named in the engagement agreement. We never use client borrower data for our own marketing or for any purpose outside the scope of the written instructions.

8. Service Providers and Vendors

We choose vendors deliberately and review them before use. Hosting is provided by infrastructure vendors with documented physical and network security controls. Email and document storage are protected by strong authentication, and access is limited to named members of the studio.

Each vendor that handles personal information on our behalf is required to protect it, to use it only for the agreed purpose and to notify us promptly of any incident that affects it. We review vendor arrangements periodically and we remove providers that no longer meet our standards.

Some vendors operate infrastructure in the United States and in other countries. Where information moves across borders, we rely on contractual safeguards and on the legal mechanisms available under applicable law. The section on international visitors below explains this in more detail.

9. Data Retention

We keep information only as long as it serves a documented purpose. Inquiry correspondence is normally retained for twenty four months after the last exchange, so that we can pick up a conversation where it left off. Proposal records are retained for the life of the engagement plus the period required by our accounting and insurance obligations.

Project records are retained for a minimum period that reflects the expected life of the delivered system, because clients occasionally request support or a review years after launch. Client borrower data is returned or deleted at the end of an engagement unless the written agreement requires otherwise.

Technical server logs are rotated on a short cycle and are retained in detail for no longer than ninety days, after which only aggregate availability figures remain. When a retention period ends, records are deleted or irreversibly anonymized in the ordinary course of business.

10. Security Measures

We apply administrative, technical and physical safeguards that are proportionate to the sensitivity of the information we hold. All studio accounts require multi factor authentication. Devices are encrypted, patched on a schedule and protected by screen locks. Access to client systems is granted per person, logged and revoked promptly when a project ends.

Production access follows the principle of least privilege. Changes are reviewed before they are applied, and rollback plans are written in advance. Backups are tested rather than assumed. Our written procedures describe how to isolate an incident, notify affected parties and preserve evidence for investigation.

No system is perfectly secure. If a security incident affects personal information, we will investigate promptly, contain it, and notify affected individuals and regulators as required by applicable law. We will also tell you what we have done to prevent a recurrence, in plain language.

11. Your Privacy Rights

Subject to applicable law, you may have the right to request access to the personal information we hold about you, to ask us to correct inaccurate details, to ask us to delete information we no longer need, and to ask us to restrict or object to certain processing.

You may also have the right to receive a portable copy of information you provided to us, and the right to withdraw consent where processing is based on consent. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

We will not discriminate against you for exercising a privacy right. We will not deny service, charge different prices or provide a lower quality of service because you asked us to explain or correct your information.

12. Exercising Your Rights

To make a request, write to help@achieveloans.lol with the subject line Privacy Request, or call +17087929143 during business hours. Please describe the right you wish to exercise and the information concerned. We may ask for a small amount of additional detail to verify that the request comes from you, particularly where the information relates to a project.

We acknowledge requests within two business days and aim to complete them within thirty days. If a request is complex or affects a large volume of records, we will explain the reason for an extension and give a revised completion date. If we cannot fulfil a request, we will explain why and tell you about any available route to challenge the decision.

There is no fee for an ordinary request. Where a request is manifestly unfounded or repetitive, we may decline it in writing or charge a reasonable administration fee as permitted by law.

13. California Privacy Rights

Residents of California have specific rights under state privacy law. These include the right to know what categories of personal information we collect, the right to know the sources and purposes of that collection, the right to request deletion, the right to request correction and the right to opt out of the sale or sharing of personal information.

Achieve Personal Loans does not sell personal information and does not share it for cross context behavioral advertising. We have not done so in the preceding twelve months. We do not knowingly collect or sell the personal information of consumers under sixteen years of age.

California residents may use an authorized agent to submit a request. We will require written permission from the consumer and may contact the consumer directly to confirm the appointment. We will respond to verifiable requests within the time limits set by California law.

If you are a California resident and you have a question about this section, please write to help@achieveloans.lol or call +17087929143 and ask for the privacy contact.

14. Privacy for Children

This website is intended for business visitors and is not directed to children. We do not knowingly collect personal information from anyone under the age of thirteen. If you believe that a child has sent information to our studio, please contact us and we will delete it promptly.

Because we provide professional services to lending organizations, our work does not involve marketing to minors or designing consumer experiences for children. Where a client program might reach younger audiences, we discuss the relevant safeguards during the design phase and document them in the engagement plan.

15. International Visitors

The studio is based in the United States and our primary systems are operated there. If you visit this website from another country, your information may be transferred to and processed in the United States, where privacy law may differ from the law of your home jurisdiction.

Where we handle information that originates in a jurisdiction with transfer restrictions, we use appropriate contractual terms and we keep a record of the safeguards applied. You may contact us for more detail about the mechanism that covers a particular transfer.

We aim to answer questions from international visitors in clear English and within the same response times that apply to domestic inquiries.

16. Third Party Websites

Our pages may link to the websites of vendors, standards bodies, professional associations or other resources that we think are useful. Those websites are operated by other organizations and are governed by their own privacy policies.

We do not control the content or the practices of third party websites, and a link from our pages is not an endorsement of their privacy arrangements. We encourage you to read the privacy notice of any site before providing personal information to it.

If you believe that a link from our website points to a site with misleading or harmful practices, please tell us so that we can review it.

17. Automated Processing

We do not use this website to make automated decisions that produce legal or similarly significant effects on individual visitors. The systems we design for lending clients may include automated decision rules, but those systems are operated by the client under the client credit policy and applicable lending law.

When we build decision workflows, we insist that every automated step can be explained to a human reviewer and to the affected borrower where the law requires it. Our design standard is that an automated outcome must always remain reviewable, traceable and correctable by a person with authority to act.

No profile of website visitors is used to make decisions about credit, employment, insurance or any other eligibility determination.

18. Changes to This Policy

We review this policy at least once a year and whenever our practices change in a material way. The effective date at the top of the page records the most recent revision. When a change affects how we handle information already collected, we will describe the change clearly and, where required, ask for consent before applying it.

Continued use of the website after a revision takes effect indicates acceptance of the updated policy. If you do not agree with a revision, you may contact us to discuss your concerns or ask that we delete the information we hold about you, subject to lawful retention requirements.

Earlier versions of this policy are available on request for a period of at least three years after they are replaced.

19. How to Contact Us

If you have a question about this Privacy Policy, a concern about how your information has been handled, or a request to exercise a privacy right, please contact the studio using the details below. We will respond within two business days and we will keep a record of the request and its resolution.

If you are not satisfied with our response, you may have the right to complain to a supervisory authority or the attorney general of your state. We would appreciate the chance to resolve the matter with you first.

Back to the Achieve Personal Loans homepage →