Privacy Policy

Last Updated: July 1, 2023

Your privacy is important to us at Upbound Group, Inc. (formerly known as Rent-A-Center, Inc.) (“Upbound” “Company,” “we,” “us,” or “our”), and we are committed to safeguarding, preserving, and respecting your privacy rights. This online privacy statement (the “Statement” or “Policy”) describes how we collect, use, disclose, and secure the personal information we gather about you through our website, https://www.upbound.com/ (the “Site”). Please refer to the Privacy Policies posted on each of our affiliates / brand websites to understand how we collect, use, disclose, and secure the personal information we collect through your use of those websites and our Services.

For purposes of this Statement, personal information means data that classifies as personal information, personal data, personally identifiable information, or similar terms under applicable data privacy and security laws and regulations. It does not include data excluded or exempted from those laws and regulations. Nothing in this Statement will constitute an admission or evidence that any particular data privacy or information security law or regulation applies to the Company generally or in any specific context.

This Policy expressly incorporates any privacy notices we may issue to supplement this Policy, for example if required by law. Depending on your residency, a supplemental privacy notice may apply to you. For example, if you are a California resident, please view our California Privacy Policy. Unless supplemental notices expressly provide otherwise, in the event of any conflict between this Policy and additional privacy notices this Policy governs.

1. You Consent to This Statement

You should read this Statement carefully, so that you understand our privacy practices. We recommend printing and retaining a copy for your future reference. By accessing, browsing, downloading, or otherwise using the website you confirm that you have read, understood, and agreed with this Statement.

This Statement applies regardless of how the website is accessed and will cover any technologies or devices by which we make the website available to you, including mobile devices.

We may provide you with additional privacy notices or terms where we believe it is appropriate to do so. It is important that you read this Statement together with any other privacy notice or terms we may provide on specific occasions, so that you are fully aware of how and why we are using your data. This Statement supplements these other notices and is not intended to override them.

If you have any questions or concerns about our personal information policies or practices, you can contact us in the methods described in the “Contact Us” section below.

2. What Types of Information Do We Collect?

We collect information you voluntarily provide to us directly, information that we collect automatically when you interact with the website, and information collected from third parties. The categories of personal information that we collect and the purposes for which we collect that information are described below.

Categories of Personal Information We Collect

The following list describes the categories of personal information we may collect.

Purposes for Collection of Personal Information

The following chart identifies the purposes for which we may collect your personal information, as well as information regarding our use and disclosure of that personal information. Please note that we may not collect each category of information about each user of our website.

Purpose

Categories of Personal Information

Targeted Ad/Sales

Data Shared With Third Parties

Categories of Third Parties

Marketing and Advertising

  • Analytics Information
  • Contact Information
  • Responses to Surveys and Questionnaires
  • Social Media Information

Yes / Yes

  • Email Lists
  • Analytics Information
  • Analytics Providers
  • Third Party Advertisers

Analytics and Research

  • Analytics Information
  • Contact Information
  • Responses to Surveys and Questionnaires
  • Social Media Information

Yes / No

  • Contact Information
  • Analytics Information

N/A

Website Security and Maintenance

  • Analytics Information

No / No

N/A

N/A


Other Ways We May Collect, Use, or Share the Information

We may also reserve the right to collect, use, or share personal information for the following purposes:

We will not disclose your information except as provided for in this Policy.

Information Regarding Automated Profiling

We may rely on certain types of automated processing in order to prevent, detect, and protect against fraud, identity theft, and other illegal activities. Under some privacy laws, this processing may constitute “profiling.” This means that we may use automated programs that analyze your Contact Information in the future, without human assistance in order to detect indicators of fraud and verify your identity. If you wish to opt-out of Automated Profiling, you may submit a request by clicking here

3. How Do We Use “Cookies” and Other Tracking Technologies?

We may send one or more cookies to your computer or other device. We may also use other similar technologies such as tracking pixels, tags, or similar tools when you visit our website. These technologies can collect data regarding your operating system, browser type, device type, screen resolution, IP address, and other technical information, as well as navigation events and session information as you interact with us. This information allows us to understand how you use the website.

What Are Cookies?

Cookies are small files created by websites, including our Services, that reside on your computer’s hard drive and that store information about your use of a particular website. When you access our Services, we use cookies and other tracking technologies to:

We set some cookies ourselves and others are set by third parties. You can manage your Cookies preference as described in the “Managing Your Cookies” section below.

What Types of Cookies Do We Use and Why?

The following chart lists the different types of cookies that we and our service providers use on the Services, examples of who serves those cookies and links to the privacy notices and opt-out information of those cookie servers.

Types of Cookies

Purpose

Who Serves (for example)

Essential

These cookies are required for the operation of the website and enable you to move around the website and use its features. Disabling these cookies can negatively impact the performance.

Functionality

These cookies are used to recognize you when you return to the website. This enables us to personalize content for you and remember your preferences.

Analytics, Performance, and Research

These cookies, beacons, and pixels allow us to analyze activities on the website. They can be used to improve the functioning of the website. For example, these cookies recognize and count the number of visitors and see how they move around the website.

Social Networking

These cookies are used to enable you to share pages and content that you find interesting on our website through third-party social networking and other websites.

Advertising

These cookies and pixels are used to deliver relevant ads, track ad campaign performance, or track email marketing.

We do not disclose information to any third party that identifies a specific person as having viewed specific video materials.

How Long Do Cookies Stay on My Device?

Some cookies operate from the time you visit the website until the end of that particular browsing session. These cookies, which are called “session cookies,” expire and are automatically deleted when you close your Internet browser.

Some cookies will stay on your device between browsing sessions and will not expire or automatically delete when you close your Internet browser. These cookies are called “persistent cookies” and the length of time they will remain on your device will vary from cookie to cookie. Persistent cookies are used for a number of purposes, such as storing your preferences so that they are available for your next visit and to keep a more accurate account of how often you visit the website.

Managing Your Cookies

It may be possible to block cookies by changing your Internet browser settings to refuse all or some cookies. If you choose to block all cookies (including Essential cookies), you may not be able to access all or parts of the website.

You can find out more about cookies and how to manage them by visiting

https://www.aboutcookies.org/.

Does the Site Respond to “Do Not Track” Signals?

We respond to the Global Privacy Control ("GPC") signal. The GPC signal is a browser level signal that can reflect the desire to opt-out of having personal information shared or sold. Some browsers allow transmission of GPC signal. When you broadcast this signal, we will not transmit your personal information to third parties who perform analytics services or who advertise to you based on this information. Please note that your use of our website will still be tracked by the Company and its service providers who have agreed to limit their use of personal information. .


Colorado, Connecticut, Utah, and Virginia Users’ Rights

Colorado, Connecticut, Utah, and Virginia residents have certain rights with respect to their data. These rights are established through the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), and the Virginia Consumer Data Protection Act (“VCDPA”). To exercise any of the rights listed in the chart below, please visit us at

https://upbound.truyo.com/consumer/index.

Consumer Right

Explanation

Applies to Residents of:

Right to Know/Access

You have the right to confirm whether we are processing your personal data, and the right to access that data.

Colorado,

Connecticut, Utah,

Virginia

Right of Correction

You have the right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of the personal data.

Colorado,

Connecticut, Utah,

Virginia

Right of Deletion

You have the right to delete your personal data provided by you or obtained about you.

Colorado,

Connecticut, Utah,

Virginia

Right of Portability

Up to two times per calendar year, you have the right to obtain your personal data in a portable and—to the extent technically feasible—readily usable format that allows you to transmit the data to another entity without hindrance.

Colorado,

Connecticut, Utah,

Virginia

Right to Opt-out:

You have the right to opt-out of the processing of your personal data for the purposes of:

(1) Targeted advertising;

(2) The sale of personal data.

(3) Profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

Colorado,

Connecticut, Utah,

Virginia

Right to Opt-out:

You have the right to opt-out of the sale of personal data or targeted advertising.

Utah

Sensitive Information

We will not knowingly collect or otherwise process your Sensitive Data, as defined under applicable state laws, without first obtaining your consent. Sensitive Data as defined in the CTDPA, UCPA, and VCDPA includes precise geolocation information. For the purposes of serving you relevant advertisements based on your location, we collect geolocation information to perform geofencing. We will not collect this information from Connecticut, Utah, and Virginia residents without first obtaining consent.

Exercising Your Rights

If you are a Colorado, Connecticut, Utah Virginia resident and wish to exercise one of the above rights and it applies to you, please submit a request by clicking here or by calling us using the phone number listed in the “Contact Us” section below.

If necessary, we may request additional information reasonably necessary to authenticate you and your request.

In certain circumstances, you may make a request on behalf of another such as if you are an authorized agent or the parent or guardian of a child on behalf of whom you wish to exercise their rights.

We will respond to verified consumer requests, if applicable, within 45 days of receipt of the request and without undue delay. If we need to extend this period, we will notify you of the delay and explain the reasonably necessary justifications for our delay.

We will provide responses to your requests free of charge unless certain exclusions apply, depending on the state in which you reside. We may charge a fee in:

Appealing a Rights Request Decision

If you are a resident of Virginia, and we deny or reject your request to exercise your applicable consumer privacy rights, you may appeal our decision. When this happens, we will send you an email informing you of our decision. The email will include a link that you can access in order to initiate the appeals process.

We will inform you in writing within 45 days of any action taken or not taken in response to the appeal. We will also provide a written explanation of the reasons for our decisions regarding your request(s).

5. Nevada Users’ Rights

Under Nevada law, certain Nevada consumers may opt out of the sale of certain personally identifiable information (“Covered Information”) for monetary consideration to a person for that person to license or sell such information to additional persons. “Covered Information” includes first and last name, address, email address, phone number, Social Security number, an identifier that allows a specific person to be contacted either physically or online, or any other information concerning a person collected from the person through our website and maintained in combination with an identifier in a form that makes the information personally identifiable.

If you are a Nevada resident who has purchased or leased goods or services from us, you may (A) submit a request to opt out of any potential future sales, and/or (B) request changes to your Covered Information by visiting us here http://racbrandsprivacy.truyo.com/.

6. Advertising and Marketing Choice

We respect your rights in how your personal information is used and shared. If at any time you would like to unsubscribe from receiving future emails, you can follow the instructions at the bottom of each email, and we will promptly remove you from correspondence. Please note, however, that we may still need to contact you regarding other matters.

7. How Long Is Your Personal Information Kept

We will retain your personal information until the personal information is no longer necessary to accomplish the purpose for which it was provided. We may retain your personal information for longer periods for specific purposes to the extent that we are obliged to do so in accordance with applicable laws and regulations, to protect you, other people, and us from fraud, abuse, an unauthorized access, as necessary to protect our legal rights, or for certain business requirements.

We will delete your personal information when it is no longer necessary for the purpose for which it was collected, or upon your request, subject to exceptions as discussed in this Statement or under applicable law, contract, or regulation.

8. Our Commitment to Data Security

The Company will use appropriate security measures to protect your information from unauthorized access, disclosure, alteration, or destruction in a secure, controlled environment. The Company has made substantial investments in server, database, backup, and firewall technologies to protect the security and integrity of your information. However, we cannot and do not guarantee complete security, as it does not exist on the Internet. In the event that a security breach does occur and your information is acquired by an unauthorized person, we will take appropriate steps to contain the breach and to notify you of the unauthorized acquisition as required by law.

However, we cannot and do not guarantee complete security, as it does not exist on the Internet.

9. Third Party Links

Our website may contain links to third-party websites. When we provide links, we do so only as a convenience and we are not responsible for any content of any third-party website or any links contained within. It is important to note that this Statement only applies to Upbound’s website. We are not responsible and assume no responsibility for any personal information collected, stored, or used by any third party as a result of you visiting third-party websites. We also advise that you carefully read the privacy notice of any third-party websites you choose to visit.

10. Children’s Privacy

Protecting the privacy of the very young is especially important. Our website is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. In the event that we learn that we have collected personal information from a child under age 13 without verification or parental consent, we will immediately delete that information. If you believe that we might have any information from or about a child under 13, please contact us using the information provided in the “Contact Us” section below. If you are under the age of 18, you must ask a parent or legal guardian to order merchandise from the Company

11. Policy Changes

This Statement may change from time to time. If we need to change this Statement at some point in the future, we will post any changes on this page. If we make a significant or material change to this Statement we will notify you via email. You should check these terms when you use the Site. Your continued use of the Site constitutes acceptance of the most current version of this Statement.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us by email at uboundprivacy@upbound.com or via phone at 1-800-275-2696, or through the contact us form available on our website and by clicking here.