Coast Privacy Policy

Last Updated: April 23, 2026

K-Dimensional Holdings Inc. d/b/a Coast (“Coast” or “we”) provides a fuel and fleet card and software platform for companies with vehicle fleets. We care about the security and privacy of the personal information we receive, such as personal information about visitors to our website, prospective customers, and individuals affiliated with the company that is applying for or has opened a Coast Account (“Company”). For purposes of this Privacy Policy, “You” refers to the natural person interacting with us. Any terms we use in this Privacy Policy without defining them have the definitions given to them in the Platform Agreement.

Our products and services are designed for use by business customers. When Coast processes personal information to provide our platform services to a Company, such as processing transactions or managing the Company’s Coast Account, we do so in accordance with the Platform Agreement and the Company’s instructions. Coast also processes personal information for its own business purposes, including marketing to prospective and existing customers, fraud prevention, underwriting, and regulatory compliance, as described in this Privacy Policy.

This Privacy Policy covers our treatment of personal information that we gather in the conduct of our business, including how we collect personal information, how we use it and disclose it, your rights and choices and how you can contact us about our privacy practices.

Personal information means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household . Personal information does not include de-identified or aggregated data. This Privacy Policy does not cover the practices of companies we don’t own or control.

Table of Contents

Please click here to view our Notice at Collection in Section 7.

1. Personal Information We Collect and How We Collect It
2. How We Use Personal Information
3. How We Disclose Personal Information
4. Other Important Information About Your Personal Information
5. Interest-Based Advertising
6. Your Choices About Your Personal Information
7. U.S. State Privacy Rights
8. Changes to This Privacy Policy
9. Contacting Us

1. Personal Information We Collect and How We Collect It

The personal information we process depends on the products you use and how you access them. We collect personal information when you directly interact with Coast, including in the following ways:

• Requesting a Prequalification, filling out an application and creating a Coast Account
• Making purchases using a Card
• Initiating payments through our bill pay services
• Using our expense management services, rewards program and other platform features
• Browsing coastpay.com or our client portal
• Onboarding Users and Administrators to the Company’s Coast Account
• Using the Coast mobile app
• Connecting bank accounts to the Company’s Coast Account or paying a Coast bill
• Calling, chatting, or interacting with Coast (such as with our customer service or sales representatives) either by phone, video call, email or in person

Information needed to apply and create a Coast Account

If you are requesting a Prequalification or applying for a Coast Account on behalf of a Company, we need to process a certain amount of preliminary information about you, the Company, and individuals associated with the Company to create a Coast Account and to comply with our legal and regulatory obligations. When you request a Prequalification and/or apply for a Coast Account on behalf of the Company, we may process:

• Your name
• Your title or role on your team
• Your email
• Your phone number
• Your address
• Your date of birth
• Your password (hashed)
• Your Social Security Number (SSN) or Tax Identification Number (TIN)
• Other information and documents pertaining to your identity such as copies of a passport, driver’s license, or other government-issued ID
• Information related to the Company, including the Company’s legal name, address, copies of the Company’s corporate documents, Employer Identification Number (EIN), gross annual revenue, number of vehicles/employees, type of business, and years in operation
• Bank account information

Information necessary to comply with regulatory and legal requirements

To help the government fight the funding of terrorism and money laundering activities, federal law requires all financial institutions to obtain, verify, and record information that identifies each business that opens an account, including information about each “beneficial owner” of the business. A beneficial owner is any individual who, directly or indirectly, owns 25% or more of the equity interests of the business and a single individual with significant responsibility to control, manage or direct the business.  What this means for you: if you apply for a Coast Account on behalf of the Company, we will ask for personal information about each beneficial owner of the Company, together with information we receive from identity verification services and other third-party service providers, that will allow us to identify each such person, including:

• Name
• Phone number
• SSN
• Current or previous addresses
• Date of birth
• Other information pertaining to such person’s identity such as copies of a passport, driver’s license, or other government-issued personal identification

As part of our identity verification process, we may ask you to provide a photograph of a government-issued ID and a selfie, which may be compared using a third-party identity verification service to confirm your identity. This may include the collection of your biometric information. We only use your biometric information for the limited purposes of verifying your identity.

Information needed to use our products and services

If the Company or an Administrator thereof creates a profile for you as a User or Administrator or otherwise allows you to use our products and services, we need to process certain personal information about you, including:

• Your name
• Your email
• Your phone number and other contact information
• Your department and location
• Additional identifying information, such as date of birth and address, where required to verify identity, comply with sanctions screening (including OFAC requirements), or otherwise meet legal and regulatory obligations
• Information about the vehicles owned or operated by you or your business, including make, model, year, license plate, VIN, fuel type and tank capacity

This information may be provided to us directly by you, or by the Company or its Administrators on your behalf.

Information processed when you make a transaction or schedule a payment

Each time you initiate or complete a transaction using our services, including payments made using a Card or through our bill pay services, we receive information about your transaction. We may receive this information directly from you, the Company or from our financial institution partners and service providers that support card issuing and payment processing services and the card network. We may obtain:

• Purchase amount
• Purchase date
• Purchase location
• License plate and odometer reading of the vehicle you were using at the time, which we may ask you to provide at the time of purchase
• How you used the card (whether you dipped it, swiped it, used it online or in a store, etc.)
• Receipt information
• Information provided to us by the card network associated with transactions, merchants, or cardholders
• Information related to payments you initiate through our bill pay services, including payee name, address, account details, payment instructions, delivery method, payment approval and related transaction metadata

Information processed through telematics and fleet management integrations

If the Company integrates telematics or fleet management systems with a Coast Account, we may receive vehicle location data, including precise geolocation, to help detect and prevent unauthorized transactions and fuel fraud. We may also use this data to provide expense management features and offers within our products and services.

Information automatically processed when you interact with our website, mobile app or online services

We may obtain:

Browser and device information.

• IP address
• Mobile and other hardware or device identifiers
• Operating system
• Browser information, such as type and version
• Referring and exit pages, including landing pages and pages viewed
• Device event information, including crash reports, request and referral URLs and system activity details

Information about your use of our website or mobile app.

• Your location
• What you click on and what you type, time you spend on our websites, session recordings (which may capture keystrokes, mouse movements, clicks, scrolling behavior, text entered into form fields, and recordings of chat sessions or your use of and inputs to other AI-supported tools), and other user experience information

Cookies and trackers.

Cookies are small data files which are downloaded to your browsing device (such as a computer or smartphone) when you visit a website. We may use cookies and other related tracking tools (such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies) to help our website and other online services function effectively. These tools also allow us to:

• Provide you services such as those that allow you to chat with our customer support team
• Perform website and mobile analytics
• Improve the advertisements you see
• Help prevent fraud and prevent attacks against our websites and services
• Advertise and promote Coast products and services, and additional products and services from our partner companies

You can manage your cookie preferences through the cookie preference tool available on our website.

Information processed when you interact with Coast teams

We may process personal information about you when you call, chat, email, or interact with members of Coast teams (such as customer support, sales, or marketing team members), attend webinars and events or through automated chatbots on our website or web application including:

• Your name
• Your email, phone number, address or other contact information
• Content of your communications, including, in some cases recorded calls or video calls, transcripts, automated notes or summaries generated from such recordings and survey responses

We may also collect information from you at conferences or events that you attend, such as through registration forms.

Information provided through marketing tools and resources on our website

If you submit information through forms, interactive tools, or other resources on our website, we may collect information you voluntarily provide, including your name, email address, company name, and information about your business operations. We use this information to provide you with the requested resource, to contact you about Coast products and services, and for marketing and analytics purposes.

Information related to billing and payments

We may process personal information about you when you authorize, make or send a payment on behalf of a Company’s Coast Account using Cards or our bill pay services.

• Your name, address and telephone number
• Payee information (such as name, mailing address, and bank account details where applicable)
• The amount sent and received and scheduling preferences
• Payment method and account information
• Pictures of any checks and related information

Information processed to integrate third-party products and services with a Coast Account

If you choose to link a Coast Account with products and services provided by our business partners, we process personal information we receive from them to ensure our products and services work properly together.

Embedded partner integrations

In some cases, our services may be accessed through third-party platforms or software providers that integrate Coast into their products (‘Embedded Partners’). When you access Coast through an Embedded Partner, we may receive personal information about you and your Company from that partner, and we may share personal information back to enable the integrated experience, including to support account creation, transactions, and account management. Your use of the Embedded Partner’s platform is subject to their own privacy policy.

Your bank and linked accounts

To underwrite and provide you with the highest credit limit possible, enable payments, and provide certain features of our services, we may require you to give us information about the Company’s finances and we may ask for access to the Company’s bank account. We may use third-party service providers to process information about the Company’s bank account activity. When you link your bank account, we may process the bank account credentials and all information associated with the bank accounts associated with those credentials, including:

• Account names and numbers and unique identifiers associated with your bank
• Bank account type
• Transaction history and related information
• Account balances

In the course of applying for an account with us or in connection with ongoing account servicing, we may ask you for copies of the Company’s bank statements and other financial information about the Company. A linked bank account may be used to fund transactions, pay balances, or facilitate bill pay and other payment services. The foregoing information about Company’s finances and bank account activity may include personal information.

To link the Company’s bank account with your Coast Account, a third-party service provider may use and store your bank account credentials.

Program partners.

We get information from financial service providers such as our issuing bank, card networks, and institutions that process payments on our behalf to make our services work. The information we get includes personal information related to your transactions using a Card as described above.

Information processed as a result of a business partnership, referral, or agreement

We enter into agreements with financial partners and other businesses that provide products and services related to ours, and as a result of these partnerships, Coast may receive personal information related to that particular relationship or partnership. We may process information about:

• You and your relationship with the business partner
• Your email or other contact information
• Your membership or relationship status with the business partner

Information collected from third-party sources

We may receive personal information about you from sources other than you directly, including:

• Third-party data providers and business information services, which may provide us with contact information and other details about prospective customers and their businesses.
• Publicly available sources, including business registrations, news articles, and professional networking platforms.
• Advertising and analytics partners, which may provide us with information about your interactions with our advertisements or website.
• Data enrichment and identity resolution services, which help us supplement and verify information we have collected.
• Referral and joint marketing partners, which may disclose information about you in connection with referral programs or co-marketing activities.

We may use information collected from third-party sources to identify prospective customers and to contact customers and prospects through online and offline marketing channels.

Combination of Information

We may combine personal information that we receive from various sources. For example, we may combine personal information that we collect from you offline with personal information we collect from you through our products or services. Similarly, we may combine personal information that we receive from third parties with personal information we already have about you. We use, disclose, and protect combined personal information as described in this Privacy Policy.

2. How We Use Personal Information

We process your personal information for the reasons stated specifically in this policy, including for the following business and commercial purposes:

Operate our business and provide tailored services to you.

• Communicate with you about our products and services by phone, text, email, or chat
• Monitor, prevent, and detect fraud or unauthorized activity
• Secure our systems and products
• Mitigate financial loss, claims, liability, and other harm to Coast, our users, our partners, or third parties
• Manage, operate, develop, test, and improve the performance of our products and services
• Determine eligibility for Coast products or services
• Use automated tools and models, including artificial intelligence, to assist with fraud detection, identity verification, credit underwriting, and to provide features within our products and services such as chatbot functionality
• Facilitate and process payments you initiate, including Card transactions and bill pay transactions, through our financial institution partners
• Provide you with tailored recommendations
• Identify, fix, and troubleshoot bugs and errors
• Facilitate reporting, analyze performance, and auditing
• Understand how you use our services so we can make enhancements or improvements
• Facilitate business relationships or comply with contractual obligations
• Comply with our regulatory, legal, and other compliance obligations
• Comply with obligations imposed by our financial institution partners and payment networks, including requirements related to offering and operating card issuing and payment services
• Advertise or market services and products to you, including through targeted advertising
• Determine eligibility for, provide, administer, and manage rewards programs, including enabling redemption and reporting on rewards usage
• Compare information for accuracy and verify it with third parties
• We may use information about your geolocation to enhance the security of our products and services and to prevent fraud

Provide you with support.

• Help identify and troubleshoot problems with your account
• Survey your opinions through surveys or questionnaires
• Communicate with you and respond to your specific requests or questions
• Manage and send you notifications, confirmations and important information about your account and our products and services

De-identified and aggregated data

We may aggregate or de-identify personal information so that it can no longer reasonably identify you in accordance with applicable law. Once information has been de-identified or aggregated, it is no longer personal information and we may use and retain it for any lawful business purpose. We will not attempt to re-identify previously de-identified personal information.

3. How We Disclose Personal Information

Coast may disclose personal information to service providers and third parties as described below to improve our products and services, to operate our business, and for marketing and advertising purposes. Some of these disclosures may be considered a ‘sale,’ ‘sharing,’ or ‘targeted advertising’ as defined by applicable privacy laws, as described further in the U.S. State Privacy Rights section below.

De-identified or aggregated information

We may disclose de-identified or aggregated information, or other data that does not directly identify you or the Company, with third parties.

Service providers

We disclose your personal information to our service providers that operate and provide services on our behalf. These service providers need access to your personal information to perform information processing, manage or enhance our customer information, tailor services to you and your preferences, facilitate connectivity between Coast and our financial institution partners and perform other services related to our business.

Advertising and marketing partners

We may disclose certain personal information, such as identifiers and internet activity information, to advertising networks, analytics providers, and social media platforms to help us market our products and services, including through targeted advertising and audience modeling.

Data analytics and research providers

We may disclose personal information to analytics providers and research partners to help us understand how our products and services are used, measure the performance of our business, and develop improvements.

Banking and payment processing partners

We disclose personal information to financial institutions and other partners that provide the card and payment services underlying our products. These partners include, for example, the bank that issues Cards and financial institutions and business partners that originate, process, clear, and settle payments. We disclose information in order to enable transactions, maintain accounts and payment records, comply with legal, regulatory, and network requirements, and detect and prevent fraud and unauthorized activity.

These financial institutions and partners may process your personal information in accordance with their own privacy policies. We encourage you to review those policies, including the Stripe Privacy Policy and the Celtic Bank Privacy Policy and Grasshopper Bank’s Privacy Policy, which they may update from time to time.

Credit reporting agencies

We disclose information about you, if you are requesting a Prequalification on behalf of the Company, to credit reporting agencies and other third parties in order to obtain one or more credit reports (also known as consumer reports) and other information about you and the business. We use this information for the following purposes:

• Evaluating the Company’s request for Prequalification and application for a Coast Account;
• Administering and servicing the Company’s Coast Account (if approved); and
• Offering the Company financial products and services.

Coast uses this information to evaluate whether to offer products and services to the Company, rather than to you in your personal capacity.  Upon request, we will inform you whether or not a consumer report was obtained and the name and address of the consumer reporting agency that furnished the report.

Card network partners

Visa separately processes information related to your use of your Cards. For more information on how Visa handles your personal information, please visit Visa’s Global Privacy Notice.

Partnerships and referrals

We disclose personal information to business partners in connection with referral programs, co-marketing arrangements, or other promotional partnerships. For example, if you were referred to us by a partner, we may share information with that partner to confirm that the Company opened a Coast Account or satisfied applicable program criteria.

This information is typically business-related information (such as account status, transaction volume, spend levels, or payment activity), but may include personal information to the extent necessary to administer the referral or promotional program, including to determine whether applicable referral or promotional criteria have been met and to calculate any incentives, fees, or rewards associated with the partnership.

Rewards partners

We may disclose personal information to rewards program partners to facilitate the earning, tracking, redemption, and administration of Coast rewards. This may include information related to your transactions, rewards balances, and redemption activity.

We may also disclose information as necessary to:

• Determine eligibility for earning or redeeming rewards
• Apply rewards, including statement credits or other redemption options
• Administer rewards redemptions through third-party platforms or partners
• Provide reporting on rewards fulfillment
• Prevent fraud, misuse, or abuse of the rewards program
• Adjust, reverse, or forfeit rewards in accordance with applicable terms

Where rewards are redeemed through third-party platforms, your use of those services is subject to the applicable partner’s terms and privacy policy.

Sharing authorized by you, your users, or authorized representatives

We may enhance our products and services by integrating with products and services provided by other companies. For these integrations to work and with your explicit consent, we may need to share your personal information with them. Information we share with these companies will be used and disclosed according to that company’s privacy policy. This may also include sharing information with third-party rewards or redemption partners when you choose to redeem rewards through those services. You should review the privacy policy of any company that has access to your personal information related to the integration with the Company’s Coast Account.

Corporate transactions

In the event of a corporate sale, merger, reorganization, dissolution or similar event, personal information and data we process from you may become part of the assets we transfer or share in preparation for any such transaction. Any acquirer or successor of Coast may continue to process personal information consistent with this Privacy Policy.

Compliance and compelled disclosure

We may disclose personal information:

• to comply with applicable law, regulation or payment network rules
• to enforce our contractual rights or comply with contractual obligations
• to protect the rights, privacy, safety and property of Coast, you, our customers, our business partners, or others
• to respond to requests from auditors, courts, law enforcement agencies, regulators, and other public and government authorities, which may include authorities outside your country of residence.

Data obtained through the short code texting program will not be shared with any third parties for their marketing purposes.

4. Other Important Information About Your Personal Information

Security

We use organizational, technical, and administrative measures to protect personal information. Please contact us at privacy@coastpay.com immediately if you believe that your personal information or any other confidential information that you have provided to us is no longer secure or has been lost or stolen.

Use by minors

If you are under the age of 18, you may not have a Coast Account or use our products or services. We do not knowingly process any information from, or direct any of our products or services to children under the age of 18. Please do not provide us with any personal information related to children under the age of 18.

Personal information related to users, administrators, company owners, and authorized persons or representatives

In some circumstances, we require you to provide us with personal information relating to another person (such as providing us with personal information about the beneficial owners of the Company during the application process or providing us with personal information about employees to obtain access to the Coast products and services). It is your responsibility to not provide us with any personal information unless you have obtained consent of these persons or you are sure the disclosure of the personal information is otherwise permitted by law or contract.

Coast Account users

Our products and services are intended for use only by businesses, and you may only use a Coast Account or Card if you are an employee or other authorized representative of the Company that has opened a Coast Account. The Company and its Administrators are responsible for managing the Coast Account and Cards associated with that Company. If you are a User, an Administrator can: restrict, suspend, or terminate your access to or ability to use the services, access personal information about you, access or retain information stored with us, and restrict your ability to edit, restrict, modify, or delete information associated with your use of our products and services.

Data Retention

We will retain your personal information for as long as reasonably necessary to provide you with our services, for marketing purposes unless you opt out as described in this Privacy Policy, or otherwise where permitted or required in accordance with applicable law. We will retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. What this means in practice will vary between different types of information, and when we consider our approach we take into account ongoing business or legal needs for the information.

When the applicable retention period elapses, we will delete or de-identify your personal information in accordance with our data management policies and procedures.

5. Interest-Based Advertising

We use analytics services, such as Google Analytics, to help us understand how you access and use our websites, email communications and other online services and interactive features. In addition, we work with agencies, advertisers, ad networks, and other technology services to place advertisements on our behalf on other websites, services and devices you may use. For example, we may place ads through Google and Meta that you may view on their platforms as well as on other websites and services. Typically, though not always, the information used for interest-based advertising is collected through cookies or similar data collection technologies.

As part of this process, we may incorporate tracking technologies into our own online services (including our website and email communications) as well as into our ads displayed on other websites and services. Some of these tracking technologies may track your activities across time and services for purposes of associating the different devices you use, and delivering relevant ads and/or other content to you. Some web browsers transmit ‘do-not-track’ signals to websites. Because there is no industry consensus on how to respond to these signals, we do not currently respond to ‘do-not-track’ signals. You may instead use the Global Privacy Control signal described in Section 7 to communicate your opt-out preferences.

As indicated above, vendors and other parties may act as our service providers, or in certain contexts, independently decide how to process your information. We encourage you to familiarize yourself with and consult their privacy policies and terms of use.

While you may disable some tracking technologies by blocking cookies in your browser, you may still see advertising as part of a broader marketing campaign. For further information on your rights and choices regarding analytics and interest-based advertising, please see “Your Choices About Your Personal Information” and U.S. State Privacy Rights below.

6. Your Choices About Your Personal Information

Coast Account

The information collected and processed in connection with each Coast Account is governed by our agreements with the applicable business customer. If you are a User or Administrator of a Company’s Coast Account, the Company and its Administrators may be able to access information about you and limit your ability to edit, modify or delete information associated with your use of the Coast Account. If you do not agree with our data practices, please notify us in writing, ask the Company to deactivate your profile on its Coast Account, delete any cookies you may have on your devices, and cease all use of our products and services. In certain circumstances, the Company on whose behalf we provide services will need to confirm your choice before we can fully process your request.

Please note that if your personal information is deleted from a Coast Account, or if the applicable Coast Account is closed, we may retain and use certain personal information as necessary to comply with our legal obligations, resolve disputes, carry out legitimate business functions and enforce our agreements.

Communications

You can opt out of receiving promotional emails from us at any time by following the instructions provided in emails or clicking on the unsubscribe link, as applicable. You can opt out of receiving direct mail or email communications at any time by emailing us at privacy@coastpay.com or support@coastpay.com.

If you have opted in to receiving text or SMS messages related to your use of Coast products and services, you can opt out at any time by texting “STOP” to any message you received from us or to (833) 955-2727 or email support@coastpay.com and specify that you want to opt out of text messages. After you send the SMS message “STOP” to us, we will send you an SMS message to confirm that you have been unsubscribed. After this, you will no longer receive SMS messages from us unless you text “START” to opt back in.

If you use our mobile app, you can manage push notification preferences through your device settings. For more information including opt out instructions, please see our User Terms.

If you are a User or Administrator of a Coast Account, please note that you cannot opt-out of non-promotional emails or text messaging, such as those about your Coast Account, transactions, servicing, or our ongoing business relations. If you do not consent to or opt out of receiving such non-promotional Notices via email or text messaging, which is our primary method of communicating with you, you will not be able to use Cards or other Coast services and your User or Administrator profile, as applicable, will be deactivated.

Please note that your opt out is limited to the email address or phone number used and will not affect subsequent subscriptions.

Analytics and Interest-Based Advertising

Google provides tools to allow you to opt out of the use of certain information collected by Google Analytics at https://tools.google.com/dlpage/gaoptout and by Google Analytics for Display Advertising or the Google Display Network at https://www.google.com/settings/ads/onweb. You may learn more about Google’s practices with Google Analytics by visiting Google’s privacy policy at http://www.google.com/policies/privacy/partners.

In order to improve the user experience on our website, we use the software Hotjar. You can learn more about Hotjar’s practices at https://www.hotjar.com/legal/policies/privacy and you can always opt out of their data collection by visiting https://www.hotjar.com/legal/compliance/opt-out.

We use LinkedIn Insights Tag to retarget our website visitors and learn insights about your interactions with our LinkedIn advertisements. You can learn about LinkedIn’s privacy practices at www.linkedin.com/legal/privacy-policy, and you can opt out of LinkedIn Insights Tag at www.linkedin.com/psettings/.

We support the self-regulatory principles for online behavioral advertising (Principles) published by the Digital Advertising Alliance (DAA). More information about these Principles can be found at https://youradchoices.com/. If you want to opt out of receiving online interest-based advertisements on your internet browser from advertisers and third parties that participate in the DAA program and perform advertising-related services for us and our partners, please follow these instructions: https://youradchoices.com/.

When you elect to opt-out through these sites, they will place an opt-out cookie on your device indicating that you do not want to receive interest-based advertisements.  Opt-out cookies only work on the internet browser and device they are downloaded onto. If you want to opt out of interest-based advertisements across all your browsers and devices, you will need to opt out on each browser on each device you actively use. Some of these opt-outs may not be effective unless your browser is set to accept cookies. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you will need to opt-out again.

If you want to opt out of receiving online interest-based advertisements on mobile apps, please follow the instructions at https://youradchoices.com/appchoices.

Please note that when you opt-out of receiving interest-based advertisements, this does not mean you will no longer see advertisements from us or on our online services.  It means that DAA program participants should not deliver certain targeted ads to you. We are not responsible for the effectiveness of, or compliance with, any third-parties’ opt-out options or programs or the accuracy of their statements regarding their programs. In addition, third parties may still use cookies to collect information about your use of our online services, including for analytics and fraud prevention as well as any other purpose permitted under the DAA’s Principles.

7. U.S. State Privacy Rights

U.S. State Privacy Rights

Residents of U.S. states with applicable comprehensive privacy laws may have certain rights with respect to their personal information, including:

Right to Know. You may have the right to know what personal information we have collected about you, including the categories of sources from which the personal information was collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you. Where required by applicable law, you may also request a list of the specific third parties to whom we have disclosed your personal information. Depending on your state of residence, this may include a list of categories of third parties or a list of specific third parties to whom we have disclosed your personal information.

Right to Data Portability. You may have the right to receive a copy of your personal information in a portable format.

Right to Delete. You may have the right to request that we delete personal information that we have collected from or about you, subject to certain exceptions.

Right to Correct. You may have the right to correct inaccurate personal information that we maintain about you.

Right to Opt Out. You may have the right to opt out of the ‘sale’ or ‘sharing’ of your personal information, or the use and disclosure of your personal information for ‘targeted advertising,’ as these terms are defined under applicable state laws. You may exercise this right by clicking the ‘Your Privacy Choices’ link on our website, by enabling a browser-based opt-out preference signal such as Global Privacy Control (GPC), or by contacting us at privacy@coastpay.com. If you enable GPC, we will treat the signal as a valid request to opt out of the sale or sharing of personal information linked to that browser and any consumer profile we have associated with that browser.

To exercise your right to know, right to data portability, right to delete, and right to correct, please contact us at privacy@coastpay.com or call us at +1 (833) 262-7801. We may take steps to verify your identity before responding to your request. Please note that, other than for requests to opt out, we may decline a privacy request if we are unable to verify your identity or confirm the personal information relates to you. Such requests are also subject to applicable exceptions, including for fraud prevention, legal compliance, and financial record-keeping requirements.

We will not discriminate against you for exercising your privacy rights. You are not required to create an account with us to exercise your privacy rights.

Authorized Agent Requests

Only you, or someone legally authorized to act on your behalf, may submit a request related to your personal information. You may authorize someone to make a privacy rights request on your behalf (an authorized agent). Authorized agents will need to demonstrate that you have authorized them to act on your behalf. We retain the right to request confirmation directly from you confirming that the agent is authorized to make such a request, or to request additional information to confirm the agent’s identity.

Right to Appeal

If we decline your privacy rights request, you may appeal our decision by contacting us at privacy@coastpay.com with the subject line ‘Privacy Request Appeal.’ We will respond to your appeal in accordance with applicable law.

Sensitive Personal Information

Coast processes sensitive personal information, such as Social Security Numbers, government-issued identification numbers, and biometric information, strictly for identity verification, fraud prevention, regulatory compliance, and the provision of financial services. Precise geolocation data is used to provide, maintain, and improve our products and services and to detect and prevent unauthorized transactions. We do not use or disclose sensitive personal information for purposes that would require offering a right to limit under applicable state laws.

Sale and Sharing of Personal Information

Coast does not sell personal information for monetary compensation. However, under certain state privacy laws, some of our marketing practices — such as disclosing identifiers or browsing data to advertising partners for targeted advertising — may be considered a ‘sale’ or ‘sharing’ of personal information. To opt out of such disclosures, see ‘Right to Opt Out’ above.

Notice at Collection

In the preceding twelve months, we have collected the following categories of personal information: identifiers (such as name, email address, phone number, IP address, and online identifiers); commercial information (such as transaction history and account activity); financial information (such as bank account information and credit history); internet or electronic network activity information (such as browsing activity on our website); professional or employment-related information (such as job title and employer); geolocation data; biometric information; audio or visual information (such as call recordings); and sensitive personal information (such as Social Security Numbers, government-issued identification numbers, precise geolocation, and biometric information).

As described above, certain of our marketing practices may be considered a ‘sale’ or ‘sharing’ under applicable state laws. The categories of personal information that may be ‘sold’ or ‘shared’ or disclosed for ‘targeted advertising purposes’ include identifiers, commercial information, internet or electronic network activity information, professional or employment-related information, non-precise geolocation data, and inferences drawn from the above information. We do not sell or share financial information, precise geolocation data, biometric information, audio or visual information, or sensitive personal information.

We collect these categories of personal information from you directly, automatically through cookies and similar technologies when you interact with our website or services, and from third-party sources such as data providers, advertising partners, and referral partners, as described in Section 1 above. We collect and use these categories to operate our business, provide and improve our products and services, prevent fraud, comply with legal obligations, and market our services, as described in Section 2 above. We disclose personal information to service providers, advertising and marketing partners, financial and business partners, and other recipients as described in Section 3 above. We retain personal information for as long as reasonably necessary to provide our services, comply with legal obligations, and enforce our agreements, as described in the Data Retention section above. To exercise your right to opt out, please click the ‘Your Privacy Choices’ link on our website or contact us at privacy@coastpay.com.

We do not knowingly sell or share personal information about persons under the age of 18.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, products, or applicable laws. When we do, we will post the updated version on our website and update the ‘Last Updated’ date above. Your continued use of our website or services following the posting of changes means you accept those changes. If we make material changes, we will provide appropriate notice to the Company, which may include notification through our website, the Coast web application, or by email.

9. Contacting Us

If you have concerns, questions, or would just like to better understand our privacy practices at Coast, please send an email to privacy@coastpay.com, call us at +1 (833) 262-7801 or if you prefer to contact us by mail, please write to K-Dimensional Holdings d/b/a Coast, Attn: Legal, P.O. Box 483 New York, NY 10014.