Privacy Policy
Revised: December 2025
Respecting and protecting privacy has always been vital to our business. This Privacy Policy describes how MidCap Financial Services, LLC (together with its subsidiaries and affiliates, “MidCap Financial”, “us”, “we” or “our”) gathers and uses personal information about you when you visit MidCap Financial’s website (www.midcapfinancial.com) (the “Site”) or when you otherwise interact with the business; how we protect and share this information; and the rights you may have in relation to this information. Please read this Privacy Policy carefully, and consult our Terms and Conditions posted on the MidCap Financial Site for more information about the general terms and conditions regarding your use of the Site. Note that this policy does not apply to nonpublic personal information subject to the Gramm-Leach-Bliley Act and its implementing regulations or consumer reports subject to the Fair Credit Reporting Act.
Additional disclosures and rights for residents of California are addressed in California Disclosures below.
In the event that you have any questions or concerns about this Privacy Policy, please contact our Privacy/Compliance Officer at Privacy@midcapfinancial.com.
A. The Types of Information We Collect
We collect personal information about you when you use the Site, contact us, or otherwise interact with the business. The categories of personal information that we collect include the following:
- Identifiers, such as your name, email address, government identifiers, account credentials, and unique personal identifiers such as IP addresses and device identifiers.
- Commercial information, such as your messages to us.
- Professional information, such as past or present employer, salary, job title, experience, skill, or expertise if you apply to come work with us.
- Education information, such as education level and history if you apply to come work with us.
- Internet or other electronic network activity information, such as information regarding your interaction with any websites associated with our business.
- Financial information, such as bank account statements and credit reports in connection with our capital solutions or lines of credit.
We collect personal information directly from you and automatically as you interact with our business, including:
- Directly from you, such as when you contact us or submit a job application.
- Automatically as you interact with our Site or interact with other online services provided by the business.
- From authorized third-party sources such as your employer or a background check provider.
The specific sources of personal information depend on your interaction with us.
The Site may contain links to websites operated by third parties, and your personal information may be collected by those third parties when you use their websites. Should you choose to visit these third-party sites, you should review their privacy policies to ensure you understand and are comfortable with their practices concerning your information. We are not responsible for the privacy policies and practices of any third-party website (whether or not such site is linked on or to the Site). These links are provided to you for convenience purposes only, and you access them at your own risk.
Some of our third-party partners may ask you to provide personal information on their websites and may share such personal information with us, as governed by their respective privacy policies. Our use of information received from such a third-party will be dictated by the third-party’s privacy policy and not this Privacy Policy.
B. How We Use Your Personal Information
We may use your personal information for the following business purposes:
- Providing you with the services, such as providing the content and features of the Site and providing your institution or other affiliated organization with capital. We do this to comply with our contractual obligations with our customer institutions and because it is in our legitimate interest to use personal information to manage our Site.
- Communicating with you, such as to provide you information about the Site, address your inquiries and feedback, requests, and other communications you send us. It is in our legitimate interest to provide you with appropriate responses.
- Operating, evaluating, and improving our business, such as performing accounting, auditing, record keeping, and other internal functions; storing and managing data; and analyzing and improving our Site. We do this to comply with our contractual obligations to our customers and because it is in our legitimate interest to use personal information to manage our business and improve our products and services.
- For marketing communications, such as promoting or marketing our products and services. It is in our legitimate interest to provide more relevant and interesting advertising messages and other marketing communications. Where required by law, we will obtain your consent before sending such marketing messages.
- Processing job applications, including reviewing job application materials and related communications with you, to the extent reasonably necessary to perform pre-contractual measures you have requested.
- Complying with law, such as to comply with legal obligations and contractual obligations, as well as our policies.
- Exercising our legal rights, for example to detect, prevent and respond to fraud claims, intellectual property infringement claims, or violations of law or our terms and conditions, where it is necessary to do so.
- Protecting against harm, such as when we deem the use of personal information as being reasonably necessary to protect the rights and safety of us, you, or others, or as required to comply with our policies.
We may de-identify and/or aggregate personal information so that it cannot be linked to you or any other individual. De-identified and aggregated data is not considered “personal information”. We may use and share that aggregated or de-identified information for any purpose, for example to conduct research and analytics or improve our Site or other services. When we maintain and use de-identified data, we will not attempt to re-identify the data unless expressly permitted or required by law.
C. How We Disclose Your Personal Information
We may disclose certain categories of your personal information to other parties, including our service providers, business partners, or affiliates in order to achieve our business purposes as follows:
- Affiliates and subsidiaries: We may share your personal information with our affiliates, subsidiaries or other related companies whether to operate our business, help manage public sites, deliver our products, develop new products, or market and promote our offerings, which we believe may be of interest to you.
- Service providers and business partners: We engage service providers and business partners to assist us with operating our businesses and providing you with our Services. These service providers or business partners may provide technology support, store or manage data, analyze information in connection with our capital services, support our marketing efforts, and conduct other business activities.
- To comply with law or cooperate with reasonable legal requests: We may disclose your personal information to law enforcement agencies, courts, other government authorities or other third parties where we believe necessary to comply with a legal obligation. We may disclose personal information as we deem reasonably necessary to support lawful investigations or otherwise to protect our rights or the rights of you or any other party.
- In the context of a transaction: We may disclose your personal information to potential transaction partners, service providers, advisors, and other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company, or we sell or transfer all or a portion of our assets or business.
D. The Security Measures We Take to Safeguard Personal Information
The security and confidentiality of the information we collect or receive is extremely important to us, and we take our responsibility to protect this information very seriously. We have implemented reasonable technical, administrative, and physical security measures to protect the personal information that we receive. From time to time, we review and consider updates to our security procedures. Please be aware that, despite our ongoing efforts, no security measures are perfect or impenetrable. Consequently, you understand that any personal information you transmit to us is done so at your own risk. If we learn of a security system’s breach, we may attempt to notify you electronically so that you can take appropriate protective steps. By providing personal information to us, you agree that we can communicate with you electronically regarding security, privacy and administrative issues that may relate to you. We may post a notice via the Site if a security breach occurs. We may also send an email to you at the email address you have provided to us in these circumstances. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.
E. Updating Your Contact Information
You may update your contact information and/or modify your communication preferences by submitting a request by following the instructions on our Consumer Rights Request Information page. If you no longer wish to receive marketing materials from us, you can let us know by clicking the ‘unsubscribe’ link or using other unsubscribe features that we provide in our marketing communications as well.
F. Children’s Information
The Site is intended for use by those over 18. We do not knowingly solicit or collect personal information on the Site from users under the age of 18. If we learn that, despite these measures, someone under the age of 18 has submitted personal information to us, we will take reasonable measures to delete such information from our records and to not use such information for any purpose (except where necessary to protect the safety of the individual or others as required by law).
G. Do Not Track
Our websites do not respond to “Do Not Track” (DNT) signals. If you wish to opt-out of our marketing communications, you may click on the “unsubscribe” link, use other unsubscribe features that we provide in our marketing communications, or follow the instructions on our Consumer Rights Request Information page.
We cannot control third parties’ responses to do-not-track signals or other such mechanisms. Third parties’ use of data relating to you and responsiveness to do-not-track signals is governed by their respective privacy policies.
H. Disclosures for European Residents
Subject to local law, you may have certain additional rights regarding your personal information.
If you are located in the EU, you have the following rights to:
- access your personal information;
- rectify the information we hold about you;
- erase your personal information;
- restrict our use of your personal information;
- object to our use of your personal information (as described above);
- withdraw any consent you have given to uses of your personal information;
- receive your personal information in a usable electronic format and transmit it to a third-party (also known as the right of data portability); and
- lodge a complaint with your local data protection authority.
I. California Disclosures
This section provides additional information for California residents.
The table below describes the categories of personal information we collected in the past 12 months, the purposes for which we may collect and disclose this information, and the categories of recipients of disclosures made for business purposes in the past 12 months.
We have not made any disclosures of personal information in the past 12 months that may be considered “sales” of personal information or “sharing” of personal information for cross-context behavioral advertising under California law, including of personal information pertaining to individuals under the age of 16. We use and disclose sensitive personal information only for purposes expressly permitted under California law.
| Category | Purpose(s) for Collecting & Disclosing | Categories of Recipients to Which We Disclosed Personal Information for Business Purposes |
| Identifiers, such as your name, email address, and unique personal identifiers such as IP addresses and device identifiers. |
|
|
| Commercial information, such as your messages to us. |
|
|
| Professional information, such as past or present employer, salary, job title, experience, skill, or expertise if you apply to come work with us. |
|
|
| Education information, such as education level and history if you apply to come work with us. |
|
|
| Internet or other electronic network activity information, such as information regarding your interaction with any websites associated with our business. |
|
|
| Sensitive personal information, such as Social Security numbers and other government identifiers, as well as account credentials pertaining to personal financial accounts |
|
|
If you have questions about the categories of information we may collect about you or the sources of such information, please be sure to visit section A of this Policy called, “The Types of Information We Collect”. For more details about our processing activities, please be sure to visit section B of this Policy called, “How We Use Your Personal Information”. And for more information about how we may disclose information to third parties, please visit section C called, “How We Disclose Your Personal Information”.
Retention of Your Personal Information
We will keep your personal information for as long as we have a relationship with you or until we no longer need it to fulfil the purposes for which it was collected. For more information, please see the “How Long is Information Retained” section below. Once our relationship with you has come to an end or we no longer need the information to fulfil the purposes for which it was collected, we will retain your personal information for a period of time that enables us to:
- Maintain business records for analysis and/or audit purposes;
- Perform internal research to assess and improve our business;
- Comply with record retention requirements under the law or other relevant legal requirements or our internal document retention policy;
- Defend or bring any existing or potential legal claims; or
- Deal with any complaints regarding the services.
Your Privacy Rights
You may have certain choices regarding your personal information, subject to certain exceptions, as described below.
- Access. You have the right to request, twice in a 12-month period, that we disclose to you the categories of personal information we have collected about you, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of (or specific, if applicable) third parties to whom we disclose your personal information, and the specific pieces of personal information we have collected about you.
- Data Portability. You have the right to request that we provide you with a copy of your personal information that we have collected about you in a structured and machine-readable format.
- Correction. You have the right to request that we correct the personal information we maintain about you if that information is inaccurate.
- Deletion. You have the right to request that we delete certain personal information we have collected from you.
- Non-discrimination: You have the right not to be discriminated against for exercising your rights.
To exercise these rights, including to submit a request as an authorized agent on behalf of another individual, you may email us at privacy@midcapfinancial.com or call us at: 833-496-0302. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.
Authorized agent
You may authorize an agent to exercise your rights on your behalf. To do this, you must provide the authorized agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from the agent when they make a request on your behalf. We may also ask you to verify your own identity and directly confirm with you that you have granted permission to the authorized agent.
Verifying Requests
To help protect your privacy and maintain security, we will take steps and may require you to provide certain information (such as your name, address, email address, and relationship to us) to verify your identity before granting you access to your personal information or complying with your deletion or correction request. If you designate an authorized agent to make an access, correction, deletion, or opt-out request on your behalf, we may require you to provide the authorized agent with written permission to do so and to verify your own identity directly with us (as described above).
J. Cookies and Similar Technologies
We may use cookies, web beacons (including pixels and tags), web server logs, and similar technologies on our Site that collect certain information about you by automated means.
We use these automated technologies to collect information about your devices, browsing actions, and usage patterns. The information we obtain in this manner includes IP address, device ID, and other identifiers associated with your device, device type, device characteristics (such as operating system), the pages you visited on our websites, how you arrived at our websites, browser preferences and characteristics, clickstream data and other information about your online activities. When you use our Online Services, both we and certain third parties (such as analytics providers) collect information about your online activities, over time and across third-party websites, to analyze and improve our services.
Your browser may tell you how to be notified when you receive certain types of cookies or how to restrict or disable certain types of cookies. Note, however, that without cookies, you may not be able to use all of the features of our website. For mobile devices, you can manage how your device and browser share certain device data by adjusting the privacy and security settings on your mobile device.
K. Where is Information Processed
We process information provided by you in and subject to the laws of the United States, which may not provide the same level protection for your information as your home country. The information may be available to the United States government or its agencies under a lawful order made in the United States. In addition, we may transfer your information outside the United States to our affiliates, business partners, and service providers located in other countries. We may be required by law, regulation, professional standard or judicial process to disclose information to required authorities. You acknowledge you understand that by providing your personal information: (i) your personal information will be used for the uses identified above in accordance with this Privacy Policy; and (ii) in accordance with applicable law your personal information will be transferred to the United States and other jurisdictions as indicated above.
L. How Long Is Information Retained
We will keep your personal information for as long as we have a relationship with you or until we no longer need it to fulfil the purposes for which it was collected.
When deciding how long to keep your personal information after our relationship with you has ended, we take into account how long we need to retain the information to fulfill the purposes described above and to comply with our legal obligations, including obligations to financial services regulators. We may also retain personal information to investigate or defend against potential legal claims in accordance with the limitation periods of jurisdictions where legal action may be brought.
M. Amendments to this Privacy Policy
We may change this Privacy Policy from time to time. Should we do so, we will post the changes to this page. We will notify you of any material changes in the way we treat your information by placing a prominent notice on our Site. Your continued use of the Site after the effective date of any modification to the Privacy Policy will be deemed to be your agreement to the changed terms.