California Residents California Consumer Privacy Act (CCPA)
This Policy applies to Personal Information of California residents and reflects requirements under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, “CCPA”).
This Policy also reflects regulations issued by the California Privacy Protection Agency (11 CCR § 7000 et seq.).
What is the definition of “Personal Information” under the CCPA?
The CCPA defines “Personal Information” as information that “identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.”
Meridian Servicing, LLC does not sell or share Personal Information as those terms are defined under the CCPA.
What Categories of Information Does Meridian Collect?
Meridian may receive, collect and use Personal Information for purposes of collecting debts on behalf of its creditor clients.
Meridian collects or has collected in the last twelve (12) months the following types of Personal Information offline and on Meridian’s website regarding collection accounts placed with us:
CCPA Categories | Examples |
Identifiers | Name, address, email address, Social Security number, signature, date of birth, IP Address, or other similar identifier |
Personal Information | Contact and financial information |
Protected Classifications Under California or Federal Law | Age, marital status, sex, and veteran or military |
Commercial Information | Information about past consumer debts or transactions |
Internet or Similar Network Activity Information | Information about a consumer’s interaction with Meridian’s website |
Audio, Electronic, Visual, or Similar Information | Call recordings |
Inferences Drawn From Other Personal Information | Certain inferences concerning an individual’s preferences and characteristics |
Professional or employment-related information | Information related to employment |
Sensitive Personal Information
Meridian collects or has collected in the preceding twelve (12) months certain categories of Sensitive Personal Information as defined in Cal. Civ. Code § 1798.140(ae), including government identifiers (such as Social Security numbers), financial account information, and precise geolocation data where applicable. Meridian uses Sensitive Personal Information only as reasonably necessary and proportionate to provide debt collection services, comply with legal obligations, prevent fraud, and protect against security incidents. Meridian does not use Sensitive Personal Information for purposes requiring a right to limit under the CCPA.
Meridian will not use Personal Information for purposes that are materially different from those disclosed at collection unless Meridian provides additional notice. Meridian’s use of Personal Information is reasonably necessary and proportionate to the purposes for which it was collected.
Personal Information does not include:
Certain categories of Personal Information may be exempt from some CCPA requirements to the extent such information is collected, processed, sold, or disclosed pursuant to applicable federal or state laws, including but not limited to the Gramm Leach Bliley Act (GLBA), the Fair Credit Reporting Act (FCRA), the Driver’s Privacy Protection Act (DPPA), HIPAA, and related regulations. These exemptions apply to specific data elements and do not necessarily exempt Meridian as an entity.
The Categories of Sources from Whom we Collected this Personal Information are:
- Directly from you or your authorized representative(s);
- Service providers, business partners; and/or
- Websites, such as social networks.
Meridian may also be considered a “Service Provider” to its creditor clients.
Meridian may act as a “Service Provider” to its creditor clients as defined under the CCPA. When acting in that capacity, Meridian processes Personal Information on behalf of and pursuant to a written contract with the creditor. In such cases, certain consumer rights requests may need to be directed to the creditor that controls the Personal Information.
Third Parties we disclose information for debt collection purposes:
- Vendors and service providers who provide such services as payment processing, printing services, and communication services;
- Business partners who provide services such as legal expertise; and/or
- Government Agencies as required by laws and regulations.
How Meridian Collects Your Personal Information
Meridian collects most of this Personal Information from our creditor clients or directly from you or your authorized representative(s) via telephone, written communications, or your activity on Meridian’s website. However, Meridian may also collect information from publicly accessible sources and from our service providers.
Why Does Meridian Collect This Personal Information?
Meridian uses the Personal Information above strictly for the following purposes:
- Providing you with information and services;
- Verifying your identity;
- Performing collection services on behalf of our clients related to your account(s);
- Conducting data analysis;
- Improving customer service;
- Processing your payment(s) (although online payments are processed via a secure third-party payment processor);
- Auditing related to consumer interactions;
- Detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity and prosecuting those responsible for that activity;
- Ensuring compliance with all other applicable laws and regulations, including the FDCPA;
- Responding to civil, criminal, or regulatory requests;
- As appropriate to protect the rights, property, or safety of us, our creditor clients, or others; and/or as described to you when collecting your Personal Information or as otherwise described in the CCPA.
Meridian may disclose Personal Information for business purposes to service providers, legal counsel, payment processors, regulators, and governmental authorities as required by law. Certain financial account information disclosed in connection with debt collection activities may be subject to GLBA or FCRA exemptions as described above.
Retention of Personal Information
Meridian retains Personal Information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide debt collection services, comply with legal obligations, resolve disputes, enforce agreements, and meet regulatory requirements. The criteria used to determine retention periods include the duration of the account relationship, applicable statutes of limitation, litigation hold requirements, regulatory recordkeeping obligations, and operational needs.
Does Meridian Sell Any Personal Information?
Meridian does not sell any Personal Information and will not sell your Personal Information.
CCPA CONSUMER RIGHTS
The CCPA provides California consumers with additional rights regarding their Personal Information.
Right to Correct
You have the right to request that Meridian correct inaccurate Personal Information that we maintain about you, subject to applicable legal exemptions. Upon receipt of a verifiable request, Meridian will use commercially reasonable efforts to correct inaccurate Personal Information as required by the CCPA.
Right to Request
Subject to the exceptions set forth in California Civil Code section 1798.145, you have the right to request that we disclose the categories of Personal Information Meridian has collected, used, or disclosed about you in the preceding 12-month period. We must also provide you with a summary of the purposes for which the categories of Personal Information were collected. We must also provide you with the categories of sources from which the Personal Information was collected, the categories of third parties with whom we share Personal Information, if any, and the specific pieces of Personal Information we have collected about you.
Meridian will disclose the applicable information specified above to you upon receipt of your verifiable consumer request (see “Submitting a Verifiable Consumer Request” section below).
Right to Deletion
You have the right to request that we delete any of your Personal Information subject to the various exceptions provided in the CCPA (see “Submitting a Verifiable Consumer Request” section below).
Please note: Deletion requests are subject to certain exceptions.
Meridian may deny your deletion request if we are acting in the role of a service provider to another business regarding the applicable Personal Information. If we deny your request on that basis, we will generally refer you to the relevant business. In addition, we may deny your deletion request if retaining the information is necessary for Meridian or our service providers to:
- Complete the transaction for which the Personal Information was collected, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and Meridian;
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
- Debug to identify and repair errors that impair existing intended functionality;
- Exercise a right provided for by law;
- Comply with the California Electronic Communications Privacy Act;
- Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
- Comply with a legal obligation;
- Otherwise use your Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information; or
- If another CCPA or applicable exception applies.
Submitting a Verifiable Consumer Request
In order to protect your information, we can only honor requests to know or deletion requests upon receipt of a verifiable consumer request. Your request must provide information that enables us to verify your identity in order for us to respond.
You agree to respond to any reasonable requests from us for additional information to enable us to verify your identity in connection with your access or deletion requests.
You may submit a verifiable consumer request by either of the following methods:
- Sending an email to thirdpartyspecialhandling@meridianservicing.com
- Completing the CCPA request form here.
Upon receiving a request, we will attempt to verify your identity and will respond within no more than forty-five (45) days as required by the CCPA. If Meridian reasonably needs additional time to comply, Meridian will notify you of the need for additional time no more than forty-five (45) days after receipt of your verifiable consumer request.
Once you have submitted a valid request, you will be issued a reference number.
Please note that we are not required to:
- Provide the requested information disclosure if a CCPA or applicable exemption applies.
- Provide the requested information disclosure if we are unable to verify that the individual making the request is the individual about whom we collected information or is someone authorized to act on such individual’s behalf.
- Retain Personal Information about you that was collected for a single, one-time transaction if, in the ordinary course of business, that information about you is not sold or retained.
- Provide the requested information disclosure more than twice in a 12-month period.
- Re-identify or otherwise link information that is not maintained in a manner that would be considered Personal Information.
If Meridian denies your request in whole or in part, you may have the right to appeal that decision. Instructions for submitting an appeal will be provided in the denial response, if applicable.
Authorized Agent Designation
California residents have the right to designate an authorized person or corporate entity to exercise rights granted to them under the California Consumer Privacy Act (CCPA). To make this designation, California residents may complete and submit this form here.
Right To Nondiscrimination
Meridian will not discriminate against you because you elect to exercise any of your rights under the CCPA including, but not limited to:
- Denying a good or service to you;
- Charging you different prices or rates for services, including through the use of discounts or benefits or imposing penalties on you;
- Providing a different level or quality of services to you; or
- Suggesting that you will receive a different price or rate for services or a different level or quality of services.
Meridian does not offer financial incentives in exchange for the collection, retention, or sale of Personal Information.
Contact For More Information
If you have questions or concerns about Meridian’ privacy policies and/or practices, you may reach a representative at thirdpartyspecialhandling@meridianservicing.com
Last Updated: 2/27/2026