Privacy Policy
Contents
- Who we are
- Scope of this policy
- Information we collect
- How we use information
- When we share information
- Credit-profile consultation — specific provisions
- FCRA, GLBA, and consumer-financial information
- Phone, SMS, and auto-dialed communications (TCPA)
- Email communications (CAN-SPAM)
- How we protect information
- Retention & deletion
- Your rights
- California residents (CCPA/CPRA)
- European residents (GDPR/UK GDPR)
- Cookies, analytics & local storage
- Children
- International transfers
- Changes to this policy
- Contact us
1. Who we are
This Privacy Policy describes how Magnara Global (“Magnara,” “Magnara Global,” “we,” “our,” or “us”) collects, uses, stores, shares, and protects information submitted through magnaraglobal.io (the “Site”).
Magnara Global is an advisory firm. We provide capital strategy, structuring, and credit-readiness advisory. We are not a lender, broker-dealer, registered investment adviser, depository institution, credit repair organization, or law firm. Where appropriate, we coordinate introductions to licensed third-party lenders, banks, specialty-finance partners, FCRA-experienced counsel, nonprofit credit counselors, or licensed credit-repair organizations, each of whom contracts with you separately under their own terms, fees, and disclosures.
2. Scope of this policy
This policy applies to information we collect through the Site, including (a) consultation and intake forms (such as the credit-profile consultation, personal funding intake, SPV intake, real-estate intake, automotive intake, acquisition intake, revenue-based intake, broker partnership intake, and lead-magnet form); (b) email correspondence with us; and (c) phone, video, or in-person engagements that follow from a Site submission. It does not apply to information you submit directly to a third-party lender, attorney, accountant, or credit-repair organization, even where Magnara made the introduction; those parties operate under their own privacy practices.
3. Information we collect
The categories of information we collect vary by which form you submit. We collect only the information needed for the intake or service in question.
3.1 Credit-profile consultation
For the credit-profile consultation specifically, we collect:
- First and last name; email; phone; state of residence; age confirmation (18 or older).
- Self-attested capital goal, target capital range (optional), target timeline (optional), and entity status (optional).
- Self-attested credit-profile inputs only — an estimated credit-score band, whether you are currently engaged with a credit-repair service, whether you have had a bankruptcy or major derogatory in the past 24 months, and whether you are actively disputing items on your credit report.
- An optional free-text introduction and source of referral.
- Required disclosure acknowledgments and consent records.
3.2 Lender-routed intake forms (personal funding, SPV, real estate, acquisition, etc.)
For lender-routed intake forms used to prepare a package for licensed third-party lenders, we collect, where applicable to the specific intake:
- Legal name, residential address, email, phone.
- Date of birth and SSN (where the intake supports a downstream credit application by a licensed third-party lender; only via secure, encrypted channels).
- Government-issued ID images when requested (driver’s license, passport).
- Business information (legal entity name, DBA, EIN, address, time in business, ownership structure, beneficial-ownership disclosures).
- Financial information (stated revenue, deposit history, existing debt, bank statements, tax returns, financial statements, intended use of proceeds).
3.3 Partner / broker intake
For broker, ISO, attorney, accountant, or referral-partner applications, we collect firm name, jurisdiction, license number (where applicable), partner type, deal-size and volume self-disclosure, and contact information.
3.4 Educational / lead-magnet form
For the lead-magnet form, we collect first name and email only.
3.5 Technical information (all visitors)
- IP address, browser type and version, device identifiers, approximate geolocation derived from IP, referral URL, and user-agent string.
- Timestamps and page-interaction metadata used for fraud prevention, rate limiting, and audit logging.
4. How we use information
We use the information you submit for the following purposes:
- Advisory services. Reviewing your inquiry, scoping a possible engagement, preparing readiness assessments, and discussing capital paths.
- Coordination with third parties. With your separate authorization, preparing a package for and introducing you to licensed third-party lenders, banks, specialty-finance partners, FCRA-experienced counsel, nonprofit credit counselors, or licensed credit-repair organizations.
- Identity and fraud verification. Validating that you are who you claim to be and that the information submitted is internally consistent.
- Communication. Acknowledging your submission, requesting clarifying information, scheduling consultations, and providing status updates.
- Legal and regulatory compliance. Meeting obligations under applicable federal and state law, responding to lawful requests, and supporting anti-money-laundering and know-your-customer compliance where applicable.
- Service operation and improvement. Operating, maintaining, securing, and improving the Site.
We do not sell personal information. We do not use your SSN, EIN, bank statements, tax returns, credit-profile self-attestations, or any other consumer-financial information for marketing, advertising, profiling unrelated to your inquiry, or model training.
5. When we share information
We share information only as set out below:
- Licensed third-party lenders, banks, specialty-finance partners, or other professional counterparties with whom you are being introduced or considered — only with your separate, explicit authorization, and only to the extent necessary for that party to evaluate the introduction.
- Service providers who support our operations under written confidentiality obligations: cloud hosting (Render, Hostinger), email delivery, document processing, and analytics for site reliability.
- Government authorities when required by subpoena, court order, regulator request, or applicable law.
- Successors in the event of a merger, acquisition, financing, or sale of assets, subject to continued protection of this information consistent with this policy.
We do not share information with advertising networks, data brokers, or unaffiliated marketers.
6. Credit-profile consultation — specific provisions
This section supplements the general policy with provisions specific to the credit-profile consultation flow.
- Magnara is not a credit repair organization. We do not perform disputes, communicate with consumer reporting agencies on your behalf, or attempt to alter credit records. The federal Credit Repair Organizations Act (CROA, 15 U.S.C. §§1679–1679j) governs credit repair organizations; Magnara is not one.
- No advance fees for credit repair. We do not charge any fee for credit-repair services because we do not provide credit-repair services. There is no fee at intake for the credit-profile consultation. If a paid advisory engagement is later proposed, the scope, term, and fee are presented in writing in advance under a separate engagement letter.
- No credit pull. The consultation form does not authorize a consumer-report inquiry. Magnara does not obtain consumer reports without separate, explicit, written authorization given to a licensed third party operating under the FCRA, not to Magnara.
- Coordination with third parties. Where credit-repair work or FCRA-experienced counsel is appropriate, we may, where possible, coordinate an introduction to a licensed third-party professional. That party engages with you separately under its own contract, fees, and CROA-required disclosures. Magnara does not receive payment for credit-repair services rendered to you and does not pay or accept referral fees on consumer-purpose credit where prohibited by federal or state law (including the federal Equal Credit Opportunity Act, ECOA, and the Real Estate Settlement Procedures Act, RESPA).
- Your rights are preserved. You retain the right to obtain a free annual credit report from each of the three nationwide consumer reporting agencies at AnnualCreditReport.com, the right to dispute inaccurate information directly with the credit reporting agencies at no cost, the right to address credit-report items yourself without engaging any third party, and (if you separately engage a credit-repair organization, not Magnara) the right to cancel that contract within three (3) business days under CROA.
7. FCRA, GLBA, and consumer-financial information
Information you submit through Site forms may include “nonpublic personal information” (NPI) within the meaning of the Gramm-Leach-Bliley Act (GLBA, 15 U.S.C. §§6801 et seq.) and the FTC Safeguards Rule (16 C.F.R. Part 314). Where GLBA applies to information we hold, we maintain administrative, technical, and physical safeguards reasonably designed to protect the security, confidentiality, and integrity of that information, including the technical safeguards described in Section 10.
Where Magnara introduces you to a licensed third-party lender or bank, the “permissible purpose” basis for any consumer-report inquiry under the FCRA (15 U.S.C. §1681b) is established between you and that party directly. Magnara does not request or receive consumer reports on you.
8. Phone, SMS, and auto-dialed communications (TCPA)
By submitting a form on the Site that includes a phone number and by checking the contact-consent acknowledgment, you consent to be contacted by Magnara Global at the phone number you provided, including by manually dialed call and by ordinary text message, solely about the inquiry or engagement to which the submission relates. You are not required to consent to receive autodialed or pre-recorded marketing calls or text messages as a condition of receiving any goods, service, or response from Magnara.
Magnara does not currently use an automatic-telephone-dialing system (ATDS) or pre-recorded voice technology to deliver marketing communications, and does not send marketing SMS without separate, prior, express written consent in the form required by the federal Telephone Consumer Protection Act (TCPA, 47 U.S.C. §227) and 47 C.F.R. §64.1200. Should we ever introduce such communications, we will obtain separate, prior, express written consent from you in compliance with TCPA before sending them.
You may revoke consent to be contacted at any time by replying STOP to any text message we send, by emailing privacy@magnaraglobal.com, or by telling any Magnara representative on a call. Standard message and data rates from your carrier may apply.
9. Email communications (CAN-SPAM)
Email communications from Magnara fall into two categories:
- Transactional or relationship messages — for example, confirmations of your form submission, document requests, scheduling, and engagement-related correspondence. These messages are not commercial in nature under the CAN-SPAM Act (15 U.S.C. §§7701 et seq.) and are sent to facilitate the inquiry or engagement you initiated.
- Commercial messages — for example, newsletters, briefings, lead-magnet content, or other educational or promotional content. We send these only to recipients who have opted in (such as through the lead-magnet or newsletter form). Every commercial message identifies Magnara, includes our valid physical postal address, and contains a clear and conspicuous one-click unsubscribe link. We honor opt-out requests within ten (10) business days, the maximum permitted under CAN-SPAM.
To opt out of all commercial email from Magnara, click the unsubscribe link in any commercial email, or email privacy@magnaraglobal.com. Opting out of commercial email does not stop transactional or relationship messages tied to an active inquiry or engagement.
10. How we protect information
In addition, we apply the principle of least privilege across our infrastructure, enforce strong password hashing (bcrypt) and two-factor authentication on administrator accounts, segregate environments, and operate routine encrypted backups of production data. No method of electronic transmission or storage is 100% secure; we continuously work to improve our safeguards but cannot guarantee absolute security.
11. Retention & deletion
Retention varies by data category and by the legal basis under which it is held.
- Credit-profile consultation records. Retained for the duration of any engagement plus a tail period of up to three (3) years to support audit, dispute, and recordkeeping needs, after which records are securely deleted or anonymized.
- Lender-routed intake records. Retained as required by financial-services recordkeeping rules, which may extend up to seven (7) years after the close, decline, or last activity, depending on jurisdiction and the nature of the file.
- Email subscription lists. Retained until you unsubscribe; suppressed (not deleted) for a tail period to honor your opt-out and prevent re-subscription error.
- Audit logs and security records. Retained as required for security monitoring and incident response, typically up to two (2) years.
You may request deletion of your records by emailing privacy@magnaraglobal.com. We will honor deletion requests to the extent permitted by law; records we are legally required to retain will be preserved in a restricted-access archive.
12. Your rights
Subject to applicable law, you may have the right to (a) know what personal information we hold about you, (b) request correction of inaccurate information, (c) request deletion, (d) request portability of information you have provided, (e) opt out of certain processing, and (f) lodge a complaint with a data-protection authority. To exercise any right, contact privacy@magnaraglobal.com. We respond to verifiable consumer requests within the timelines required by applicable law (generally 45 days under CCPA/CPRA, with one 45-day extension where reasonably necessary; one month under GDPR).
13. California residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the rights described in Section 12, plus the right to limit the use and disclosure of sensitive personal information and the right not to be discriminated against for exercising your rights.
We do not sell personal information. We do not “share” personal information for cross-context behavioral advertising as those terms are defined under the CPRA. Accordingly, we do not provide a “Do Not Sell or Share My Personal Information” link, because there is no sale or covered share to opt out of. If our practices change, we will provide that link before any sale or share occurs.
California residents may make verifiable consumer requests for the prior 12 months of disclosures by emailing privacy@magnaraglobal.com with the subject line “California Consumer Request.” You may also designate an authorized agent to make a request on your behalf, subject to agent verification. We do not collect personal information from minors under 16 and do not sell or share personal information of any consumer.
14. European residents (GDPR/UK GDPR)
Where we process personal data of residents of the European Economic Area, the United Kingdom, or Switzerland, our lawful bases are (a) the performance of a contract or steps taken at your request prior to entering a contract, (b) compliance with legal obligations to which we are subject, and (c) our legitimate interests in operating an advisory practice and securing the Site. You have the right to access, rectify, erase, restrict processing, object to processing, and to data portability. You also have the right to lodge a complaint with the supervisory authority in your jurisdiction. To exercise any right, contact privacy@magnaraglobal.com.
15. Cookies, analytics & local storage
The Site uses only functional localStorage and session storage necessary to maintain your draft application, authentication state where applicable, and reference token. We do not set third-party advertising cookies, cross-site tracking cookies, fingerprinting scripts, or behavioral-advertising pixels on the Site. Font assets are loaded from Google Fonts, which may receive your IP address as part of normal content delivery; we do not control Google’s practices and recommend reviewing Google’s own privacy notice. We may use first-party, privacy-respecting analytics for site reliability; any such analytics are configured to anonymize IP addresses and to disable cross-site tracking.
16. Children
The Site is intended for use by individuals who are at least 18 years of age. We do not knowingly collect personal information from children under 13, and we do not market to or knowingly process personal information of children under 16 without verifiable parental consent. If we become aware that we have collected information from a child under 13, we will promptly delete it.
17. International transfers
Magnara operates from the United States. If you are submitting information from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States, where data-protection law may differ from the law of your jurisdiction. Where required by law, we apply appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers of personal data from the EEA, UK, or Switzerland.
18. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected in an updated “Effective” date and version number at the top of this page; for changes that materially expand the categories of information collected or the purposes of use, we will provide additional notice (such as via email to recent submitters or a prominent notice on the Site). Continued use of the Site after any change constitutes acceptance of the revised policy.
19. Contact us
For any privacy-related inquiry, including to exercise a right listed above:
Magnara Global — Privacy Office
Email: privacy@magnaraglobal.com
General: info@magnaraglobal.com
Phone: (401) 317-2915 — Mon–Fri, 9 AM – 6 PM ET