California Privacy Policy
Last Updated: February 23, 2023

Your privacy is important to us at Upbound Group, Inc. (formerly known as Rent-A-Center, Inc.) (“Upbound” “Company,” “we,” “us,” or “our”), and we are committed to safeguarding, preserving, and respecting your privacy rights. If you are a California resident, you have certain rights with respect to the collection, use, transfer, and processing of your personal information, as defined by the California Consumer Privacy Act (“CCPA”), Cal. Civ. Code § 1798.100 et seq., as amended by the California Privacy Rights Act (“CRPA”) and implementing regulations. Please refer to the California Privacy Policies posted on each of our affiliates / brands websites to understand your rights with respect to the collection, use, transfer and processing of your personal information we collect through those websites and our Services.

This California Privacy Policy (“Policy”) describes how we collect, use, share, disclose, retain, and secure the personal information we gather about you through our website https://www.upbound.com/ (the “Site”). We reserve the right to limit these rights where permitted under applicable law, including where your identity cannot be reasonably verified or to the extent your rights adversely affect the rights and freedoms of others

What Information Do We Collect?

The below examples are illustrative examples from the CCPA and do not reflect the specific pieces of information we collect.

In the previous 12 months, we have not collected the following categories of personal information from the Upbound website. Going forward we may collect the following categories of personal information:

Category 1

Examples

Collected

Retention Period

A. Identifiers

A real name, alias, postal address, online identifier, Internet Protocol address, email address, or other similar identifiers.

Yes

5 years

B. Personal Information

A name, address, or telephone number.

Some personal information included in this category may overlap with other categories

Yes

5 years

C. Protected Classification Characteristics Under California or Federal Law

Age, sex (including gender, gender identity, gender expression), veteran or military status.

No

N/A

D. Commercial Information

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

No

N/A

E. Biometric Information

Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.

No

N/A

F. Internet or Other Similar Network Activity

Search history, information on interaction with a website.

Yes

5 years

G. Geolocation Data

Physical location or movements.

No

N/A

H. Sensory Data

Audio, electronic, visual, thermal, olfactory, or similar information.

No

N/A

I. Professional or Employment-Related Information

Current or past job history or performance evaluations.

No

N/A

J. Non-Public Education Information

Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.

No

N/A

K. Inferences Drawn of the Consumer

Inferences drawn from Personal Information identified above to create a profile about a consumer reflecting a consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

No

N/A

L. Sensitive Personal Information

Personal information that reveals (a) Social Security, driver’s license, state identification card, or passport number; (b) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credential allowing access to an account; (c) precise geolocation; or (d) the contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication.

No

N/A

Sources from Which Personal Information Is Collected

We collect your personal information directly from you, from your interaction with the Site, and from publicly available sources, which collect the personal information directly from you. We may collect information from—or share information with—our partners such as market research firms and our affiliates, subsidiaries, joint ventures, or other companies under common control. We may combine that information with other information we collect about you. Furthermore, all information gathered about you by the Company may be shared with any of the Company's current or future subsidiaries or affiliates.

Business or Commercial Purposes for Which Personal Information Is Collected

Your personal information is used for the following purposes:

Third Parties with Whom Personal Information Is Disclosed, Shared, or Sold

In the preceding 12 months, we have disclosed the following personal information about consumers for business purposes:

In the preceding 12 months, we have not shared personal information collected from this website for cross-contextual advertising.

Our use of cookies and other tracking technologies may be considered a sale of personal information under the CCPA. Categories of personal information that we have sold under the CCPA include identifiers (e.g., IP addresses), and Internet or other similar network activity. Categories of third parties to whom personal information is sold under the CCPA include data analytics providers.

You can opt out of our tracking technologies for analytics providers by clicking the Do Not Sell My Personal Information link or by broadcasting the GPC signal during your browsing session. Please note that your use of our websites may still be tracked by Upbound and its service providers.

In the Preceding twelve (12) months, Upbound has not used or disclosed Sensitive Personal Information for purposes other than those specified under the CCPA Regulation 7027(m).

In the preceding twelve (12) months, Upbound has not knowingly collected, sold, or shared personal information of consumers under sixteen (16) years of age.

Individual Rights

a. Right to Know About Personal Information Collected, Disclosed, Shared, or Sold

You have the right to request that we disclose the personal information we collect, use, and disclose about you to third parties. There are two types of Rights to Know requests that you can make:

1. Right to Know (Abbreviated Request): If you make a Right to Know (Abbreviated Request), you will receive the following information about you:

a. Categories of personal information collected, sold, or shared;

b. Categories of sources from which personal information is collected;

c. Categories of third parties to whom the information is sold, shared or disclosed

d. Business or commercial purpose for collecting, sharing, or selling personal information;

e. Categories of personal information disclosed for a business purpose and categories of persons to whom it was disclosed for a business purpose.

2. Right to Know (Specific Pieces of Information Request): If you make a Right to Know (Specific Pieces of Information Request), you will receive the following information about you:

a.Specific pieces of personal information collected about you.

This information will be provided to you free of charge, unless we determine that your request is manifestly unfounded or excessive. You may request this information twice in a 12-month period.

There are certain exceptions to a consumer’s Right to Know. We will state in our response if an exception applies.

a. Right of Deletion

You have the right to request that we and our service providers delete any personal information about you that we have collected from you upon receipt of a verifiable request. This right is subject to certain exceptions. We will state in our response if an exception applies.

b. Right to Opt-Out of the Sale or Sharing of Personal Information

You have the right to opt-out of the sale or sharing of your personal information by a business subject to certain laws and regulations.

We recognize the Global Privacy Control. Your browser must be able to support the Global Privacy Control for us to recognize your opt-out preference signal.

Please note that opt-out choices may be stored via cookies. If you clear cookies, if your browser blocks cookies, or if you view the page from a different browser or device, your opt-out choice may no longer be logged or recognized.

For more information, please visit our Do Not Sell or Share My Information page.

You have the right not to receive discriminatory treatment for exercising the privacy rights conferred by California law. We will not discriminate against you because you exercised any of your privacy rights. We will also not retaliate against any employee, applicant for employment, or independent contractor for exercising their rights under the CCPA.

d.Right of Correction

If we maintain inaccurate personal information about you, then you have the right to request that we correct the inaccurate personal information upon receipt of a verifiable request. Taking into account the nature of the personal information and purposes of processing the personal information, you have the right to request that we correct inaccurate personal information about you, if applicable.

e.Right to Limit Use and Disclosure of Sensitive Personal Information

We do not collect Sensitive Personal Information (as defined in Cal. Civ. Code § 1798.140(ae) (effective Jan. 1, 2023)) about you from this website for the purpose of inferring characteristics about you.

Please refer to the California Privacy Policies posted on each of our affiliate / brands websites for information on how we may use Sensitive Personal Information in providing Services to our customers and how to exercise the Right to Limit Use and Disclosure of Sensitive Personal Information.

f.Submitting Requests

You can submit your request by clicking here or by toll-free phone at (801) 297-1982.

g.Verifying Requests

To ensure the protection of your personal information, we must verify that the individual submitting a request to know, request to delete, or request to correct is the consumer to whom the request relates prior to processing the request. To verify a California consumer’s identity, we may request up to three pieces of personal information about you when you make a request to compare against our records. We may also request that you sign a declaration under the penalty of perjury from the consumer whose personal information is the subject of the request.

Making a verifiable consumer request does not require you to create an account with us.

We will only use personal information provided in your request to verify your identity and will delete any information you provide after processing the request. We reserve the right to take additional steps as necessary to verify the identity of California consumers where we have reason to believe a request is fraudulent.

h.Authorized Agents

You may choose a person or a business registered with the California Secretary of State that you authorize to act on your behalf to submit your requests (“Authorized Agent”). If you choose to use an Authorized Agent, we require that you provide the Authorized Agent with written permission to allow them to submit your request and that you verify your identity directly with us. Failure to do so may result in us denying your request.

Contact Us

If you have any questions about this Privacy Policy, please contact us by email at upboundprivacy@upbound.com, via phone at 1-800-275-2696, or at Upbound Group,, Inc., Attn: Data Privacy Office, 5501 Headquarters Drive, Plano TX 75024.