Security Policy

Updated: March 10, 2022

Security

Headway Sales Inc. dba Acorn Finance (“Acorn Finance,” “Acorn,” “the Company,” “we,” “us,” or “our”), is concerned with the safety of your personal information. We take the following measures to protect the information you may provide us:

Web Site and Data Encryption

Acorn Finance uses well-known and vetted security technologies to protect the data and transmissions between you, Acorn Finance, and lenders that provide services through our site. Transmissions between Acorn Finance and our partners are encrypted using public/private key cryptography algorithms with a minimum key size of 128 bits.

All pages on the Acorn Finance website, including those that ask for your personal information are delivered to your browser through HTTPS, a secure server communications layer. Transmission between your browser and our web servers is conducted via Transport Layer Security (TLS), the successor to Secure Sockets Layer (SSL) technology. TLS encrypts your data, making the information unreadable and inaccessible by anyone except Acorn Finance. This technology requires any modern web browser such as Internet Explorer, Firefox, Safari or Opera. In conjunction with TLS, we utilize Extended Validation SSL Certificates. An Extended Validation SSL Certificate requires verification of the business’ identity by a certificate authority and proves that you are doing business with us. You can verify that you are doing business with Acorn Finance and that your communications with Acorn Finance are secure by checking for the key or lock icon on your browser and a green address bar.

Firewall Protection

Firewalls are special-purpose software that protects and blocks malicious attempts to access information and networks. Acorn Finance deploys firewalls at several points in its environment, including between you and the web server, the database servers, and the Acorn Finance internal production networks.


Victim of identity theft

In the unlikely event that we believe that the security of your information in our possession or control may have been compromised, we may seek to notify you. If notification is appropriate, we may notify you via your computer, mobile or other device.

If you are or believe you have become, a victim of identity theft, or if you become aware that your personal information has been compromised, you may want to contact one of the three nationwide credit reporting agencies identified below to report possible fraudulent activity under your name and learn more about fraud alerts and security freezes that you can place on your credit reports, your right to obtain a free copy of your credit report from each of the credit reporting agencies, and other preventive measures you can take now to help detect and prevent the improper use of your information:

Equifax
1-800-525-6285
P. O. Box 105788, Atlanta, GA 30348
https://www.equifax.com/personal/identity-theft-protection

Experian
1-888-397-3742
P. O. Box 9554, Allen, TX 75013
https://www.experian.com/help/identity-theft-victim-assistance.html

TransUnion
1-800-680-7289
P. O. Box 6790, Fullerton, CA 92834-6790
https://www.transunion.com/identity-theft

You may also visit the website of the Federal Trade Commission at https://www.identitytheft.gov for free information to help you guard against identity theft and for guidance on the recovery steps you can take if you have been the victim of identity theft, including information on how to file an identity theft complaint. 

Vermont Residents: In the unlikely event that we believe that the security of your information in our possession or control may have been compromised, we will also notify Vermont’s state regulator.