Effective date: July 16, 2026

MBA Financial Services Group, LLC (“MBA,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with our websites, digital services, products, and related interactions.

This Privacy Policy is intended for a United States audience. It is not legal advice and may be updated from time to time. The version posted on our website is the version then in effect.

1. Who we are

MBA Financial Services Group, LLC provides vehicle protection plans, guaranteed asset protection (GAP), and related products and services, and supports dealers, agents, financial institutions, repair facilities, and consumers in connection with those offerings.

Privacy inquiries:
Please use our Contact page (select an appropriate inquiry type) or call 1-800-452-3939.
MBA Financial Services Group, LLC
9419 E. San Salvador Drive, Suite 105A
Scottsdale, Arizona 85258

2. Scope

This Privacy Policy applies to personal information we process in connection with:

• Our public websites and related hostnames (including those listed in Section 3);
• Partner digital services, including Partner Login and related tools on mbaprotection.net;
• Online quote and purchase experiences when available;
• Contact forms, telephone, email, and similar communications;
• Administration of vehicle service agreements, GAP, and related products through our systems (including MBA Admin) and our service partners.

This Policy does not apply to third-party websites or services that we do not control, even if linked from our sites.

3. Websites and digital properties

Our primary public website is mbafinancialservicesgroup.com. We also operate or use related hostnames and digital properties that resolve to or support our business, which may include (without limitation):

• mbadirect.com, mbadirect.net
• mbafsg.com, mbafsg.net
• mbafinancialservicesgroup.net
• mbaholdingsgroup.com, mbaholdingsgroup.net
• mbahg.com
• vehicleprotectionadmin.com, vehicleprotectionadministrators.com
• gapadminservices.com
• mbafinancial.net, mbafinancialservices.net
• mbaprotection.com
• mbawarranty.com, mbawarranty.net, mbawarranty.info, mbawarranty.org, mbawarranty.store
• mbaprotection.net (Partner Login and partner tools)

References to the “MBA Website” or “our digital services” in this Policy and our Terms of Use include these properties as applicable. We do not operate mbafinancial.com.

4. Personal information we collect

Depending on how you interact with us, we may collect:

• Identity and contact data: name, postal address, email address, telephone numbers;
• Vehicle and coverage data: VIN, year/make/model, mileage, coverage selections, agreement numbers, and related plan details;
• Transaction and account data: purchase and billing-related information, payment status, and correspondence about your agreement;
• Payment data: payment card or payment account details may be collected and processed through our payment systems and processors (for example, Intuit) when you pay us. Sensitive payment credentials are handled by payment platforms in accordance with their security standards;
• Communications data: content of inquiries, claims-related information you provide, and records of emails, calls, or messages about your inquiry or agreement;
• Partner and business contact data: company name, role, and business contact details when you deal with us as a dealer, agent, financial institution, or repair facility;
• Technical and usage data: IP address, browser type, device information, pages viewed, dates/times of access, referring URLs, and similar data collected via cookies or similar technologies (see Privacy Settings and our Cookie Notice).

We do not collect Social Security numbers or dates of birth through our ordinary website or agreement administration processes described in this Policy. Payment plan arrangements we offer through payment plan providers, as configured for our programs, do not require SSN, DOB, or consumer credit checks for those plan features as described by MBA.

5. Sources of personal information

• Directly from you (forms, quote/purchase flows, email, phone, Partner Login activity);
• From dealers, agents, financial institutions, or other partners involved in the sale or servicing of a product;
• From our affiliates, subsidiaries, administrators, insurance partners, and payment-related providers as needed to provide services;
• From our systems (including MBA Admin) and service providers that support hosting, communications, payments, and operations;
• Automatically from your browser or device when you use our digital services.

6. How we use personal information

We use personal information to:

• Provide, administer, and support protection plans, GAP, and related products and services;
• Process quotes, purchases, payments, transfers, cancellations, and agreement updates;
• Communicate with you about an inquiry you submitted or about your agreement (including claims and servicing);
• Operate Partner Login and related partner tools;
• Maintain security, prevent fraud, and protect our rights and users;
• Comply with law, regulation, and industry requirements;
• Improve our websites, products, and operations (including analytics when enabled);
• Send promotional email about our products or services where permitted, with an easy unsubscribe option;
• Send promotional text messages or place promotional calls only where we have appropriate consent.

7. How we share personal information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising (for example, we do not use advertising network pixels to retarget you across unrelated third-party sites).

We may share personal information with:

• Affiliates, subsidiaries, and service partners (including insurance carriers, payment plan providers, and administrators) as needed to underwrite, provide, bill, administer, or support products and services;
• Service providers that perform services for us (for example, hosting, IT, communications, payment processing such as Intuit, document and operations support) under appropriate contractual obligations;
• Dealers, agents, financial institutions, and repair facilities involved in the sale, servicing, or repair related to your agreement, as applicable;
• Professional advisors and authorities where required or appropriate (legal, auditors, regulators, courts, law enforcement);
• Other parties with your direction or consent, or as otherwise disclosed at the time of collection.

8. Inquiry-related and marketing communications

• Contact form or quote requests: We may email, call, or text you about that inquiry only. We do not use that contact path for unrelated marketing campaigns.
• Customers — service messages: We may contact you about your agreement, claims, billing, required notices, and similar operational matters without a separate marketing opt-in.
• Customers — promotional email: We may send promotional emails about our products or services. You may unsubscribe at any time using the link in the email or by contacting us.
• Customers — promotional SMS or calls: We send promotional texts or place promotional marketing calls only with your opt-in consent, subject to applicable law. You may revoke consent as described in the message or by contacting us.

9. Cookies and similar technologies

We use cookies and similar technologies as described in Privacy Settings and our downloadable Cookie Notice (PDF). You can manage optional cookie categories in Privacy Settings. Strictly necessary cookies are required for the site to function.

We may use analytics tools (for example, Google Analytics) to understand how our sites are used. Analytics, when enabled, is treated as an optional category under our opt-out model (enabled until you turn it off in Privacy Settings, unless we change that default and update this notice). We do not use marketing/advertising cookies for cross-context behavioral advertising.

10. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide products and services, maintain business and agreement records, resolve disputes, and meet legal, accounting, and compliance requirements. Retention periods vary by record type.

11. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure. Please use strong passwords for Partner Login and protect your devices and credentials.

12. Your choices and requests

Subject to applicable law, you may:

• Request access to or correction of certain personal information we hold about you;
• Update agreement-related information through the channels we provide (including contacting us or, where available, partner/customer processes);
• Unsubscribe from promotional email;
• Manage cookie preferences in Privacy Settings;
• Contact us with privacy questions via our Contact page or by telephone.

We may need to verify your request and may retain certain information as required or permitted by law.

13. Children

Our digital services and products are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

14. Third-party links

Our sites may link to third-party sites (for example, BBB profiles or payment platforms). Their privacy practices are governed by their own policies.

15. Changes to this Policy

We may update this Privacy Policy from time to time. The effective date will be revised when we post changes. Continued use of our digital services after an update constitutes acceptance of the revised Policy where permitted by law.

16. Contact

For privacy questions or requests, please use our Contact page or call 1-800-452-3939.
MBA Financial Services Group, LLC
9419 E. San Salvador Drive, Suite 105A
Scottsdale, Arizona 85258

This document is a draft prepared for corporate counsel review.