Security & Privacy

Close all unauthorized accounts that you are aware of. Contact those companies that have established unauthorized accounts using your personal information and advise them that you are a victim of identity theft. Request that the accounts be closed immediately. Ask the company for any assistance they can provide in handling the fraudulent account. There may be information you need to provide to these companies to ensure the accounts are closed.

Place a fraud alert on your credit report and review your credit reports annually. Fraud alerts can help prevent an identity thief from opening additional accounts in your name. Contact any of the toll-free number below to initiate a fraud alert. The company you call is required to provide your information to the other credit bureaus. An alert will be placed on your credit bureau for you at each of the other bureaus.

Equifax: 1-800-525-6285; www.equifax.com; P.O. Box 740241, Atlanta, GA 30374- 0241

Experian: 1-888-397-3742; www.experian.com; P.O. Box 9532, Allen, TX 75013

TransUnion: <1-800-680-7289; www.transunion.com; Fraud Victim Assistance Division, P.O. Box 6790, Fullerton, CA 92834-6790

If your driver's license/other government issued identification is stolen:

Contact the agency that issued the license or other form of identification. Follow their procedure to cancel the document and request a replacement. Ask the agency to flag your file so that no one else can request a license or any other form of identification in your name.

File a police report for identity theft in your community or in the community where the identity theft took place. The police report can also be provided to the credit bureaus if a credit freeze is required to address the identity theft.

File a complaint with the Federal Trade Commission. This information can be helpful to law enforcement officials across the nation in tracking down identity thieves. The FTC can refer victims' complaints to other government agencies and companies for further action, as well as investigate companies for violations of laws the FTC enforces. A complaint can be filed online at www.ftc.gov/idtheft. If you don't have internet access, call the FTC's Identity Theft Hotline toll-free at 1-877-IDTHEFT (438-4338); \ TTY: 1-866-653-4261; or write to: Identity Theft Clearinghouse, Federal Trade Commission, 600 Pennsylvania Avenue NW, Washington, DC 20580.

You can change your communication preferences by signing in to your account and going to My Profile on the left side. Click on Communication Preferences.

From here you can control the following:

• Promotional Emails
• Partner Notifications
• Mail Preferences
• Language Preference

Check your credit card and bank statements for inaccuracies.
Check your credit report at least once a year. Look for what should and should not be there.
Do not provide personal information to another individual or business unless they have a valid reason for requiring the information.
Never write your credit card number or social security number on checks or the outside of an envelope.
Do not give out account numbers over the phone to persons/companies you are not familiar with.
Do not use a telephone, cordless or cellular, or an email to send financial or private personal information.
Keep your financial documents in a safe/secure place.
Do not pre-print your driver's license number on your checks. If you do, shred cancelled checks before you throw them away.
Shred pre-approved credit applications, statements, or bills that contain personal information.
Have your name and address removed from 'pre-screened lists'.
Mail bills from the post office or your business, rather than your home mailbox.
Consider having your name, telephone number, and/or address removed from the phone directory.
Do not provide personal information over the phone unless you initiated the call and know who you are speaking with.
If telemarketing companies call, advise them that you want to be added to their Do Not Call List. This is your right under the Federal Telephone Consumer Protection Act.
Keep your birth certificate and social security card in a safe place. Do not carry these items in your wallet or purse.
Choose passwords that will be difficult to crack and use different passwords for all accounts.
Change passwords and PIN codes often.
Use different PIN numbers for all of your cards/accounts.
Do not store your PIN numbers on mobile phones or laptops.
Do not put your Social Security number on any document unless you are legally required to do so.
Shred any papers with financial information and identifiers instead of throwing them in the trash.

We use the latest tools and technology to protect your personal information. To help with Internet security, it is highly recommended that you are very careful when sharing information such as full credit card numbers, social security numbers, driver's license, or any other important data.

Note: If you are on our website using a public computer or share a computer with other people in your home, please make sure you sign out each time to prevent someone else from accessing your account.

Your privacy is important to us. We follow the rules set by the Direct Marketing Association's Privacy Promise to American Consumers. We will not share your information to other marketers/companies if you ask us not to.

Full disclosure of our Privacy Policy is available by clicking here.

Identity theft occurs when a person uses someone else's identification in order to impersonate that person.

You can visit the Federal Trade Commission Identity Theft Center by clicking here.

Some state privacy laws give Consumers more control over how their personal information is being used by providing the following rights:

• The Right to Know: Consumers can make a verifiable request to know what personal information is being collected about them, and whether their personal information is being sold or disclosed and to whom.
• The Right to Request Deletion: A Consumer can make a verifiable request to a business to delete any personal information the business has collected or maintained. If a business receives a verifiable request to delete collected personal information, the business must also notify its service providers of the request so the Service Provider can delete the Consumer's personal information from their records.
• The Right to Opt-Out of Sale and Share: A Consumer can direct, at any time, a business to not sell or share the Consumer's personal information to a third party.
• Right to Non-Discrimination for the Exercise of Granted Privacy Rights: A business must not discriminate against Consumers that exercise rights granted under a state privacy law.
• The Right to Correct: A Consumer can make a verifiable request to a business to correct inaccurate personal information that we maintain about the Consumer.

You can make a verifiable request to exercise the Right to Know and the Right to Request Deletion, request to exercise the Right to Opt-Out of Sale and Share, and the Right to Correct via our Website (“Site””) https://www.fingerhut.com/privacy/management/request/ or by calling us at 1-888-912-0579.

To make a verifiable request to exercise the Right to Know, please visit the Site https://www.fingerhut.com/privacy/management/request/, or by calling 1-888-912-0579. The following steps may apply to you:

• On either the phone call or through the Site, we will ask you to provide certain pieces of personal information to verify your identity. You may request that we provide to you a report containing
  • Specific pieces of information we have collected, disclosed, and sold about you
  • The categories of personal information we have collected, disclosed, and sold about you
• We will confirm receipt of your verifiable request for the Right to Know within 10 days.

We will try to respond to your request within 45 days. The 45-day period will begin on the day we receive your verifiable request. If necessary, we may take an additional 45 days to respond to your verifiable request, for a maximum of 90 days total ‐ if the added 45-day period is needed, we will provide notice and explanation of why the extension is required.

Under state privacy laws, we have the right to deny your request if we cannot verify your identity. Once you submit your verified request, we will match the personal information you may have provided to our internal records. If you requested that we provide you with specific pieces of information, and we are unable to verify your identity, we will evaluate your request as if you requested disclosure of categories of personal information. If you requested categories of personal information about you and we are unable to verify your identity, we will direct you to our general Privacy Policy at www.fingerhut.com.

Identifiers: real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, Social Security Number, driver's license number, customer number, or other similar identifiers

We collect information from you when you use the Site, contact us or interact with us. We may collect personal information that you may provide. Personal Information may also be collected on our behalf by our third parties and service providers.

To make a verifiable request to exercise the Right to Request Deletion, please visit the Site https://www.fingerhut.com/privacy/management/request/, or by calling 1-888-912-0579. The following steps may apply to you:

• On either the phone call or through the web page, we will ask you to provide certain pieces of personal information to verify your identity. We will confirm receipt of your verifiable request for the Right to Know within 10 days.

As part of your Right to Request Deletion, you may ask for Fingerhut to delete personal information we have collected and maintained about you from our records and direct us to communicate with our service providers to delete your personal information from their records.

We will confirm receipt of your verifiable request for the Right to Request Deletion within 10 days. We will try to respond to your request within 45 days. The 45-day period will begin on the day we receive your verifiable request. If necessary, we may take an additional 45 days to respond to your verifiable request, for a maximum of 90 days total ‐ if the added 45-day period is needed, we will provide notice and explanation of why the extension is required.

We will send you correspondence regarding your request to delete within the timeframe outlined above. In the correspondence, we will specify the way the personal information was deleted. We will maintain a record of the request of deletion as part of the record retention requirements for at least 24 months.

Also, state privacy laws provide businesses certain exemptions from the Right to Request Deletion ‐ there may be instances where Fingerhut may not delete your information even though you requested the personal information be deleted.

Fingerhut may share the personal information it has collected about you to its service providers. If you make a verifiable request to exercise the Right to Deletion, we will provide notice to our Service Providers to delete your personal information from their records. In communication to you, we will confirm that we notified our Service Providers of your request to exercise your Right to Deletion.

Please note, even if Service Providers are notified of your request, state privacy laws provide several exemptions from the Right to Deletion allowing the Service Providers to keep records of your personal information even though you requested the personal information be deleted.

Under state privacy laws, we also have the right to deny your request to exercise the Right to Request Deletion if we cannot verify your identity. Once you submit a request, we will match your information to our internal records. We will inform you if we are unable to verify your identity and shall treat your request as a request to Opt-Out of Sale or Share.

Further, state privacy laws allow for businesses to exercise a number of exceptions to a verifiable request to delete. If we deny your request to delete, we will provide you correspondence describing that we cannot comply with your request and include any statutory and regulatory exceptions.

This information is protected for regulatory reasons and cannot be deleted.

This information is protected for regulatory reason and cannot be deleted.

As a Consumer, certain state privacy laws provide the right, at any time, to direct Fingerhut not to sell or share your personal information (“Right to Opt-Out”) to third parties. If you would like to Opt-Out of Fingerhut selling or sharing your personal information, please click on the “Do Not Sell My Info” link at www.fingerhut.com or call us at 1-888-912-0579.

We will act on the request to Opt-Out within 15 days from the date we receive your request. We will notify you that we communicated with third parties to whom we sold or shared your personal information that you have exercised your Right to Opt-Out and to instruct the third parties not to further sell the information.

If we have a good-faith, reasonable, and documented belief that a request to Opt-Out is fraudulent, we may deny the request. If we deny the request, we will inform you that we will not comply with the request, and we will provide an explanation why we believe the request is fraudulent.

To make a verifiable request to exercise the Right to Correct, please visit the Site https://www.fingerhut.com/privacy/management/request/, or by calling 1-888-912-0579. The following steps may apply to you:

• On either the phone call or through the Site, we will ask you to provide certain pieces of personal information to verify your identity.
• We will confirm receipt of your verifiable request for the Right to Correct within 10 days.

We will confirm receipt of your verifiable request for the Right to Correct within 10 days. We will try to respond to your request within 45 days. The 45-day period will begin on the day we receive your verifiable request. If necessary, we may take an additional 45 days to respond to your verifiable request, for a maximum of 90 days total ‐ if the added 45-day period is needed, we will provide notice and explanation of why the extension is required.

Under state privacy laws, we have the right to deny your request if we cannot verify your identity. Once you submit your verified request, we will match the personal information you may have provided to our internal records. If you requested that we provide you with specific pieces of information, and we are unable to verify your identity, we will evaluate your request as if you requested disclosure of categories of personal information. If you requested categories of personal information about you and we are unable to verify your identity, we will direct you to our general Privacy Policy at www.fingerhut.com.

By requesting to delete your Fingerhut mobile app account, you are also requesting to delete your Fingerhut website account. By deleting your Fingerhut website account, you will no longer have access on fingerhut.com to service your Fingerhut Credit account(s) on the website.

To request the deletion of your mobile app account, visit Email Customer Service, and select ‘Mobile App’ as your Contact Reason.