Privacy Policy
Effective Date: September 1, 2025
Small Business Approval LLC dba SBARates.com (“SBARates.com,” “we,” “us,” or “our”) operates an online directory and lead-generation platform that helps small businesses find SBA lenders, compare SBA loan rates, and learn about SBA programs. This Privacy Policy explains how we collect, use, share, and protect personal information, and describes your choices.
1) Who We Are & How to Contact Us
Controller: Small Business Approval LLC dba SBARates.com
Registered Address: 7915 Corkfield Dr., Orlando, FL 32832, USA
Privacy Contact: sbasteve@sbarates.com
Data Protection Contact: Steve Fulmer
2) Scope
This policy covers personal information processed through SBARates.com and related pages, forms, and communications. The site is intended for U.S. users but receives visits from the EU/UK. The service is not intended for individuals under 18. We do not knowingly collect information from children under 13.
3) What We Collect
We collect the following categories of information:
- Account/Contact: name, email, phone, company, role, NAICS, location.
- Lead / Loan Inquiry: requested loan amount, use of proceeds, time in business, revenues, credit range, collateral.
- Technical/Usage: IP address, device identifiers, pages viewed, referrers, and session recordings.
- Marketing: advertising identifiers, campaign/source, preferences.
- Payments (Stripe): cardholder name, last 4 digits, billing address (payment processing handled by Stripe; we do not store full card details).
- Sensitive Data: Not collected (we avoid SSN, driver’s license, bank statements, etc., unless essential).
CPRA Category Table (California)
| Category | Examples | Collected | Business/Commercial Purposes | Shared with |
|---|---|---|---|---|
| Identifiers | Name, email, phone, IP, ad IDs | Yes | Directory search, lender matching, marketing, analytics, security | Service providers; advertising partners (for cross-context ads); lender partners (for leads) |
| Customer Records | Contact and lead details | Yes | Lead handling, lender introductions, support | Lender/partner recipients with your submission |
| Commercial Info | Form selections, inquiries | Yes | Service improvement, matching, analytics | Service providers |
| Internet/Network Activity | Browsing events, device data | Yes | Analytics, security, ads | Analytics and advertising partners |
| Geolocation (coarse) | Approximate location | Yes | Fraud prevention, analytics | Service providers |
| Sensitive Personal Info | SSN, DL, bank statements | No | — | — |
4) Sources of Personal Information
- You (forms, emails, lead inquiries, preferences).
- Automated collection (cookies, pixels, analytics, session recordings).
- Public sources (e.g., SBA/FOIA-based datasets for lender activity and rates).
- Partners (lenders/lead partners when you ask us to share your information).
5) How We Use Personal Information
- Core services: directory search, lender matching/introductions, rate comparisons.
- Operations: analytics (GA4), site performance and improvement, security/fraud prevention.
- Marketing: newsletters (Beehiiv), promotions, and advertising/retargeting (Google Ads, Meta, LinkedIn).
- Compliance: legal, regulatory, and contractual obligations.
We do not use customer inputs to train AI models.
6) How We Share Information
- Service Providers/Processors: Google Analytics 4, Google Tag Manager, Stripe, Beehiiv, Microsoft Outlook, LinkedIn/Meta ad tools, and similar vendors working on our behalf.
- Lenders/Partners (by your request): when you submit a lead or request introductions/quotes, we may transmit your user-provided data and relevant cookie/technical data to lender partners.
- Advertising Partners: we share data for cross-context behavioral advertising (Google Ads, Meta, LinkedIn Insight). See Your Privacy Choices.
- Legal/Compliance: to comply with law, enforce terms, or protect rights and safety.
- Business Transfers: if we undergo a merger, acquisition, or asset sale.
Sale of Personal Information: We do not sell personal information for money or other valuable consideration as defined by CPRA.
Compensation Disclosure
We may receive compensation from lenders/partners if you click, apply, or obtain financing through them. This does not change our commitment to present lender information and rate data transparently (rate metrics updated approximately every 6 months).
7) Cookies, Analytics, and Ads
- Consent: We use a cookie banner to obtain/manage consent where required.
- Manage Preferences: Use Cookie Preferences to opt in/out of categories, including advertising cookies.
- Global Privacy Control (GPC): We honor GPC signals as an opt-out of sale/sharing for cross-context behavioral advertising.
- Do Not Track (DNT): We do not respond to DNT signals.
- Vendors: GA4 analytics, Google Ads, Meta Pixel, LinkedIn Insight, GTM. See their policies for details.
8) Data Retention
Lead data: retained for up to 36 months unless you request deletion sooner.
Analytics data: retained for up to 26 months in aggregate form where possible.
9) Security
We implement reasonable administrative and technical safeguards, including role-based access controls. No method of transmission or storage is 100% secure.
10) International Visitors & Transfers
Our services are operated in the United States. If you access the site from outside the U.S. (including the EU/UK), your information will be processed in the U.S. We do not onward transfer your data outside the U.S.
11) U.S. State Privacy Rights (including California CPRA)
Depending on your state, you may have rights to access, correct, delete, and obtain a portable copy of personal information; to opt out of sale/sharing or targeted advertising; and to appeal our decisions.
- Opt-Out of Sale/Sharing / Targeted Advertising: Use Cookie Preferences and/or enable a browser-level Global Privacy Control (GPC) signal, which we honor.
- Access/Deletion/Correction: email sbasteve@sbarates.com.
- Verification: we may verify by matching your email and requesting limited additional information.
- Appeals: if we deny a request, you may appeal by emailing sbasteve@sbarates.com.
California “Shine the Light”
California residents may request a list of third parties to whom we disclosed personal information for their direct marketing in the prior year, and the categories disclosed. Email sbasteve@sbarates.com with “Shine the Light” in the subject line.
Nevada Privacy Rights (NRS 603A)
Nevada residents may submit a request to opt out of the sale of personal information by emailing sbasteve@sbarates.com. We do not sell personal information, but we will record and honor your request.
12) EU/UK GDPR Disclosures
Lawful Bases: consent (cookies/ads where required), contract (lead submissions and requested introductions), legitimate interests (directory operation, security, analytics), and legal obligations.
Rights: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (for future processing). To exercise, email sbasteve@sbarates.com.
Representative/DPO: Steve Fulmer (contact above).
13) Children’s Privacy
Our services are not intended for individuals under 18, and we do not knowingly collect personal information from children under 13. If you believe a child provided information, contact us and we will delete it.
14) Third-Party Links
We link to third-party lender websites and resources. Their privacy policies govern once you leave SBARates.com.
15) Changes to This Policy
We may update this policy from time to time. For material changes, we will provide notice via banner on the site or email to subscribers. The “Effective Date” indicates the latest revision.
16) Financial/Legal Disclaimer
Content on SBARates.com is for informational purposes only and is not financial, legal, or tax advice. We do not guarantee approval, specific terms, or rates. Rates and lender metrics are updated approximately every six months and may change without notice.
All users should perform their own due diligence and research. Nothing on this website is an offer or a solicitation for a loan. This website does not endorse or charge you for any service or product. None of the information on this site constitutes legal advice. We are not affiliated with the Small Business Administration (SBA). If you need to visit the SBA directly please visit: sba.gov
17) Advertiser Disclosure
SBARates.com is privately owned and is not affiliated with any government agency (including the U.S. Small Business Administration). Business loan offers that appear on this site—or on sites to which we may direct visitors—are from companies or affiliates from which SBARates.com may receive compensation. This compensation may affect how, where, and in what order offers appear. SBARates.com does not include all business loan companies or every available offer.
We operate a free, for-profit, advertiser-supported lender-matching and information service for SBA and other small-business financing products (e.g., SBA 7(a), 504, CAPLines, Export Express). When you submit a request, we may promptly transmit it to a Loan Agent, Affiliate, or Lender Partner. Submitting a request is always free to you. The Loan Agent or Lender Partner may review your information; if they determine you may qualify for an SBA or other small business loan, they may connect you with a specific lender in their network and help you take next steps. The specific lender (if any) will be disclosed after you submit your request.
SBARates.com does not make credit decisions, originate loans, or guarantee approval or specific terms. Loan approvals, rates, and terms are determined solely by lenders and are subject to their review and applicable law.
18) Contact Us
Email: sbasteve@sbarates.com
Mail: 7915 Corkfield Dr., Orlando, FL 32832, USA