UNITED COMPANIES
PRIVACY POLICY
3700 E. Morgan Avenue · Evansville, Indiana 47715
Effective Date:
United Companies and its subsidiaries and affiliates, including United Leasing, Inc. d/b/a United Leasing & Finance, Professional Transportation, Inc., Romain Buick, Inc., Romain Automotive, LLC, Romain Champion Chevrolet, LLC, and Tri-State Aero, LLC d/b/a United Companies Air Center(collectively, “United,” “we,” “us,” or “our”), are committed to treating and using your personal information responsibly. We appreciate the confidence you place in us and, as part of our commitment to world-class service, want to inform you of our practices regarding the collection, use, and protection of your Personal Data.
This Privacy Policy describes the ways we collect, store, use, disclose, and protect Personal Data received from actual and prospective customers, clients, employees, job applicants, and other individuals who interact with us. We use the term “Personal Data” to refer to any information that identifies or could reasonably be used to identify a specific individual, including but not limited to name, address, email address, phone number, login credentials, social security number, driver’s license number, and financial account information. Personal Data does not include information that has been de-identified or aggregated so that it cannot reasonably identify a specific individual.
This Privacy Policy is governed by the laws and regulations of the United States. If you access our websites or services from outside the United States, you do so at your own risk and are responsible for compliance with the laws of your jurisdiction. By using United’s services, products, or websites, you consent to the practices described in this Privacy Policy.
Questions concerning this Privacy Policy may be directed to our Privacy Compliance Officer at privacy@unitedevv.com.
SECTION 1 - PERSONAL DATA WE COLLECT
We collect Personal Data and other types of information provided by you directly, indirectly, or through automated means, which may be obtained from forms, applications, emails, websites, telephone or text message communications, or other sources, including without limitation the following:
Contact information, including name; home, work, and mobile telephone numbers; email addresses; and mailing addresses
Personal identification information, including date of birth, social security number, passport number, driver’s license number/state/expiration date, citizenship information, and federal tax identification number
SECTION 2 - HOW WE COLLECT DATA
We may collect your Personal Data from the following sources:
Information You Provide Directly. You may supply Personal Data when you inquire about or seek financing, apply for employment, complete applications or forms, subscribe to communications, or interact with us by telephone, text message, email, through our websites, or through social media.
Credit Reporting Agencies and Analytics Providers. We use third-party providers such as credit agencies and data analytics companies to supply information for business purposes, including determining eligibility for employment, for financing, administering financial services, and marketing.
Vendors and Equipment Suppliers. The business supplying the asset(s) you are financing or have financed may provide us with your Personal Data.
Referral and Sales Relationships. Brokers or other financing sources to whom you have provided Personal Data may share that data with us to enable eligibility determinations.
Online Tools and Applications. When you visit our websites, use our chat systems, fill out online forms, or visit our social media pages, our systems may automatically collect data including IP address, domain name, ISP, general geographic location, browsing activity, and links clicked.
Affiliates. Our affiliates and related entities may share Personal Data they have collected through any of the means described above.
Telephone and Text Message Communications. When you communicate with us by telephone or text message, we may collect your phone number, message content, and associated metadata. See Section 8 (SMS/Text Messaging Policy) for additional details.
Other Sources. We may obtain Personal Data from additional sources as needed to enhance our products and services.
SECTION 3 - HOW WE USE YOUR INFORMATION
We collect and use Personal Data for the following purposes, as applicable:
SECTION 4 - CONSENT
When you provide Personal Data through applications, forms, telephone or text message communications, or other interactions, we will use that information for the purpose for which it was provided. Where we seek to use your Personal Data for additional purposes such as marketing, we will obtain your express consent and provide you with the opportunity to opt out.
SECTION 5 - WITHDRAWAL OF CONSENT
You may withdraw your consent for us to contact you, or for the continued collection, use, or disclosure of your information, at any time by contacting us at privacy@unitedevv.com. For text message communications, you may also withdraw consent by replying STOP to any message. See Section 8 for details.
SECTION 6 - THIRD PARTIES
Third-party service providers engaged by United will collect, use, and disclose your information only to the extent necessary to perform the services they provide to us. Certain third-party providers maintain their own privacy policies, and we recommend that you review those policies. We will provide links upon request.
Some third-party providers may have facilities located in jurisdictions other than your own, and your information may become subject to the laws of those jurisdictions. If you are located in Canada and your transaction is processed by a payment gateway located in the United States, your personal information may be subject to disclosure under United States legislation.
Once you leave our websites or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy.
We are not responsible for the privacy practices of other websites and we encourage you to read those privacy policies. SECTION 7 -
TECHNOLOGY USED IN COLLECTING PERSONAL DATA
Cookies. We may use cookies—small text files stored on your device—so that our websites can recognize you across visits. Cookies may also be placed in marketing emails to track engagement. You may configure your browser to warn you before accepting cookies or to refuse cookies entirely; however, refusing cookies may impact website functionality. Cookies may collect browsing activity information to provide more relevant content and promotional materials.
Pixel Tags. We use pixel tags (web beacons) embedded in website banners, links, videos, or emails. Pixel tags communicate information from your browser to a web server, including whether you viewed a particular page or email, the time and date of the view, your IP address, and the referring URL. We use pixel tags for website analytics and to improve our communications.
Analytics and Social Media. United may use analytics tools such as Google Analytics and social media platforms (including but not limited to LinkedIn, Facebook, and YouTube) for information collection purposes. Your use of social media sites is governed by the privacy policies of those platforms. We do not capture or store your social media login credentials, although session information or cookies may be stored.
SECTION 8 - SMS/TEXT MESSAGING POLICY
This section governs text message (SMS and MMS) communications sent by or on behalf of United Companies and its subsidiaries, including United Leasing, Inc. d/b/a United Leasing & Finance, Professional Transportation, Inc., Romain Buick, Inc., Romain Automotive, LLC, Romain Champion Chevrolet, LLC, and Tri-State Aero, LLC d/b/a United Companies Air Center.
Purpose. We may send text messages for the following purposes: recruiting and hiring communications (e.g., application status updates, interview scheduling, onboarding information); account and transaction notifications; service reminders and alerts; and other communications related to your relationship with United.
Consent and Opt-In. By providing your mobile phone number and agreeing to receive text messages from United, you expressly consent to receive recurring autodialed or prerecorded text messages at the number provided. Consent to receive text messages is not a condition of purchasing any goods or services or of employment. Message frequency varies based on your interactions with us.
Message Frequency and Charges. Message frequency varies. Message and data rates may apply depending on your mobile carrier and plan. United is not responsible for any fees charged by your carrier.
Opt-Out. You may opt out of receiving text messages at any time by replying STOP (or QUIT, END, CANCEL, or UNSUBSCRIBE) to any message you receive from us. After opting out, you will receive a one-time confirmation message. Opting out of text messages will not affect other communications from United (e.g., email, mail, or telephone).
Help. For assistance, reply HELP to any text message you receive from us, or contact us at privacy@unitedevv.com.
Data Handling. We collect and retain mobile phone numbers and message content and metadata as described in Sections 1 and 2 of this Privacy Policy. We do not sell, rent, or share your mobile phone number or opt-in data with third parties for their own marketing purposes. Information obtained through our text messaging program will not be shared with third parties except as necessary to administer the program, comply with applicable law, or as otherwise described in this Privacy Policy.
Carriers. United’s text messaging services are supported by major U.S. wireless carriers. Carriers are not liable for delayed or undelivered messages.
Privacy. All Personal Data collected through text message communications is subject to this Privacy Policy. For complete details on how we handle your data, please review this Privacy Policy in its entirety.
SECTION 9 – MULTI-STATE PRIVACY RIGHTS NOTICE AND CANADIAN PRIVACY NOTICE
This section applies to residents of states that have enacted comprehensive consumer privacy laws, including but not limited to California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia (collectively, “Covered States”). To the extent any Covered State’s law provides rights not listed below, we will comply with the applicable law. This section supplements the remainder of the United Companies Privacy Policy.
For California residents, please also refer to the CCPA/CPRA Addendum attached to this Privacy Policy for additional California-specific disclosures, including the categories-of-information table and data retention schedules required by the CCPA.
For Canadian residents, please also refer to the Canadian Privacy Addendum attached to this Privacy Policy for additional Canada-specific disclosures.
YOUR RIGHTS
Depending on your state of residence, you may have some or all of the following rights with respect to your Personal Data:
Right to Know / Access. You may request that we disclose the categories and specific pieces of Personal Data we have collected about you, the categories of sources from which we collected it, the purposes for which it was collected, and the categories of third parties with whom we have shared it.
Right to Correct. You may request that we correct inaccurate Personal Data that we maintain about you.
Right to Delete. You may request that we delete Personal Data we have collected from you, subject to certain exceptions permitted by law (e.g., legal compliance, completing a transaction, security, or exercising legal rights).
Right to Data Portability. You may request a copy of your Personal Data in a structured, commonly used, and machine-readable format, to the extent technically feasible.
Right to Opt Out of Sale or Sharing. You may opt out of the sale of your Personal Data or the sharing of your Personal Data for cross-context behavioral advertising. United does not sell Personal Data, and United does not share Personal Data for cross-context behavioral advertising.
Right to Opt Out of Targeted Advertising. You may opt out of the processing of your Personal Data for purposes of targeted advertising. See the Global Privacy Control section of this Privacy Policy for information on how we process opt-out preference signals.
Right to Opt Out of Profiling. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. United does not engage in such profiling.
Right to Limit Use of Sensitive Personal Information. In states that provide this right (including California), you may direct us to limit the use and disclosure of your Sensitive Personal Information to purposes authorized by law. United uses Sensitive Personal Information only for purposes necessary to provide our services, process transactions, ensure security, and comply with legal obligations.
Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.
HOW TO EXCERSIE YOUR RIGHTS
To submit a verifiable request to exercise any of the rights described above, you may contact us by any of the following methods:
• Email: privacy@unitedevv.com
• Mail: United Companies, Attn: Privacy Compliance Officer, 3700 E. Morgan Avenue, Evansville, Indiana 47715
Verification. When you submit a request, we will verify your identity before processing it. We may ask you to provide information that matches information we have on file. If we cannot verify your identity, we may deny the request. You may also designate an authorized agent to submit a request on your behalf; we may require the agent to provide written authorization and may separately verify your identity.
Response Timing. We will respond to your request within forty-five (45) calendar days of receipt. If we need additional time (up to an additional forty-five (45) calendar days), we will notify you within the initial response period. Where a shorter response period is required by your state’s law, we will comply with that requirement.
Cure Periods. Certain states, including Indiana and Kentucky, provide a cure period before enforcement action may be taken. Where applicable, we will cure any identified violation within the time frame provided by law.
APPEAL PROCESS
If we deny your privacy request in whole or in part, you may appeal the decision by contacting us at privacy@unitedevv.com with the subject line “Privacy Rights Appeal.” We will respond to your appeal within the time frame required by applicable law. If you are not satisfied with our response to your appeal, you may contact your state’s Attorney General or applicable regulatory authority.
STATE-SPECIFIC NOTES
Indiana
The Indiana Consumer Data Protection Act (ICDPA) took effect January 1, 2026 and applies to for-profit entities that conduct business in Indiana and meet certain data-processing thresholds. Indiana provides a permanent 30-day cure period. The Indiana Attorney General has exclusive enforcement authority.
California
California residents have additional rights under the CCPA/CPRA, including the right to limit use of Sensitive Personal Information and expanded rights regarding the sale and sharing of Personal Data. Please see the attached CCPA/CPRA Addendum for the full California-specific disclosures, including categories of Personal Information collected, sources, purposes, third-party disclosures, and data retention periods. We honor Global Privacy Control signals as a valid opt-out request under California law.
Colorado and Connecticut
Colorado and Connecticut require that we honor universal opt-out mechanisms, including Global Privacy Control (GPC). We process GPC signals received through your browser as a valid opt-out of the sale or sharing of Personal Data and targeted advertising for residents of those states. Colorado also requires data protection assessments for certain high-risk processing activities; United conducts such assessments where required.
Texas
The Texas Data Privacy and Security Act (TDPSA) applies to entities that conduct business in Texas or produce products or services consumed by Texas residents. The Texas Attorney General has exclusive enforcement authority. Texas provides a 30-day cure period that expires in 2026. United will comply with applicable TDPSA requirements to the extent it is subject to the law.
Virginia
The Virginia Consumer Data Protection Act (VCDPA) provides Virginia residents with rights substantially similar to those described above. Virginia provides a 30-day cure period. The Virginia Attorney General has exclusive enforcement authority.
Other Covered States
For residents of other Covered States not specifically identified above, United will comply with the applicable state’s consumer privacy law to the extent United is subject to that law. If you have questions about your rights under a specific state’s law, please contact our Privacy Compliance Officer.
SECTION 10 - SECURITY AND AGE OF CONSENT
United takes reasonable precautions and follows industry best practices to protect your Personal Data from misuse, unauthorized access, theft, alteration, destruction, or disclosure.
SECTION 11 - DATA RETENTION
We retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory requirements, and to support legitimate business needs. When Personal Data is no longer needed, we securely destroy or de-identify it in accordance with our data retention policies.
SECTION 12 - DISCLOSURE
We may disclose your Personal Data if we are required or permitted to do so by law, regulation, or legal process. We do not sell your Personal Data to third-party companies.
SECTION 13 - CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this Privacy Policy at any time. Changes take effect immediately upon posting to our website(s). If we make a material change, we will notify you by posting a notice on our website(s) or by other appropriate means. We encourage you to review this Privacy Policy periodically.
In the event of a change in ownership or corporate structure, your information may be transferred to the successor entity.
SECTION 14 - QUESTIONS AND CONTACT INFORMATION
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact our Privacy Compliance Officer:
United Companies
Attn: Privacy Compliance Officer
3700 E. Morgan Avenue
Evansville, Indiana 47715
Email: privacy@unitedevv.com