CAPP - MVM Group Powered By AnnieMac Home Mortgage

Note: Please note that if we are unable to verify your identity, we may not be able to fulfill your request. A copy of our CCPA privacy policy can be found below outlining all rights of the consumer (California resident) under the California Consumer Privacy Act.

California law requires we disclose certain information with respect to our privacy practices. This Privacy Notice is specific to California residents who are users and visitors of our Services (defined below). It explains how AnnieMac Home Mortgage and its affiliates with websites that link here (collectively "AnnieMac," "we," "us," or "our"), collect, share, use, and protect personal information and data we receive through our business activities, website, mobile applications, and other online services and communication channels, including via email, telephone, or our branches (collectively, the "Services"). "You" and "your" refer to any California user or visitor who accesses or uses the Services.

This California Consumer Privacy Act Policy supplements our Online Privacy Policy. Please keep in mind that if you have a financial product or service with us, we will also use and share any information that we collect from or about you consistent with our Consumer Privacy Notice, which offers you certain choices with respect to the use and sharing of your personal information. The Consumer Privacy Notice shall supersede this California Consumer Privacy Act Policy and our Online Privacy Policy in the event of any conflict.

We may change this California Consumer Privacy Act Policy from time to time. When we do, we will let you know by appropriate means such as by posting the revised policy on this page with a new "effective date" date at the bottom of this Policy. Any changes to this California Consumer Privacy Act Policy will become effective when posted unless indicated otherwise.

Categories of Information We Collect

We may collect the categories of personal information described below and where we believe it is reasonably required for ordinary business purposes. Personal information generally means information that reasonably identifies you or your device, and other information we associate with it.

Note that if you provide us with information regarding one or more other individual(s), you represent that you have their consent to give us their information and to permit us to use their information in accordance with this policy.
- Customer Lending Activities. This section describes the information we collect when you apply for, or use, our financial products and services.
  - Personal information you voluntarily provide: This includes a username and password, contact information (such as name, email address, mailing address, telephone number) and financial account information. We may also collect payment card information, social security numbers, and driver s license numbers (or comparable), photographs or fingerprints that you provide for ordinary business purposes such as user authentication. We also receive information you may provide through the Services (e.g., feedback, inquiries, etc.) and communications between you and us, such as emails, call recordings, or messages regarding the Services.
  - Transactional information associated with lending and other financial services we provide to you: This includes information relating to account management, deposits, withdrawals and other financing and lending activities.
  - Information received from third parties: We may receive personal information about you from additional online and offline sources and third parties (e.g., credit reporting agencies) to supplement the information we receive from you.
  - Mobile Activity: When you use our mobile application or otherwise use a mobile device to connect to our Services, we may collect a unique device identifier or other device information to provide the Services and/or functionality. Certain Services may require your mobile phone number, which we may associate with your account and device. We may also collect, use and store information about your general location. Your personal information and mobile device information (e.g., location and device identifier) may be used for security and user authentication purposes.
- Job Applicants. This section describes the information we collect when you apply for a job opening with AnnieMac.
  - Information you give us. We may collect certain information from and about you in order to evaluate and process that application. This information may include: contact information (such as name, telephone number, physical address, email, and other contact details); previous work experience, education, skills, and other qualifications; professional and other work-related licenses, permits, and certifications; work authorization status; information relating to references; information from social media sites if you choose to link your application to a social media; and any other information you elect to provide to us. We may also ask you to provide certain information that we use to further our goal of maintaining a diverse workforce, or to comply with laws, such as information about your race, ethnicity, gender, veteran status, or whether you have a disability. As described in the application process, you are not required to provide this information.
  - Information received from third parties. We may obtain information about you from platforms used to collect application information, recruiters, references, and former employers. We may use background check services to collect additional information, subject to consent which we will request during the process of evaluating your application. If you submit an application through a third-party job posting services, please note that we do not control the privacy practices of these services. Please review their privacy policies carefully prior to providing application information.
- Business Contacts. This section describes our practices when you interact with AnnieMac in your capacity as an employee, representative, or agent of a merchant, vendor, or other business entity. Our disclosure covers information that may be collected about you and not about the business on whose behalf you interact with us.
  - Information you give us. You may provide us with your full name, email address, office location, phone number, and other contact information.
  - Information received from third parties. We may obtain your business contact information from the business you represent.
- Online User Activity. We also collect certain information from Customers, Job Applicants and Business Contacts referred to as "Online User Activity." We use third-party analytics tools to help us measure traffic, usage, and other trends by your use of our Services. We may also use third-party cookies, web beacons or other similar technologies to collect and store other information about your visit to, or use of, our Services. These tools may capture:
  - Usage Details about your interaction with our Services (such as the date, time, and length of visits, and specific pages or content accessed during the visits, search terms, frequency of visits, and referring website addresses).
  - Device Information including the IP address and other details of a device that you use to connect with our Services (such as device type and unique device identifier, operating system, browser type, mobile network information, and the device's telephone number).
  - Location information where you choose to provide our website or mobile app with access to information about your device s location.
  - Site usage and session information. We collect information about your interaction with the Services, including the resources that you access, pages viewed, how much time you spent on a page, and how you reached our website. We also log the details of your visits to our website and information generated in the course of using our website, such as mouse movements, clicks, page visits, text entered, how long you spent on a page, and other details of your actions on our website.
If you do not want information collected through the use of cookies, most browsers allow you to reject cookies, although it can impact your ability to use the functionality or features provided by the Services. You may also turn off the tracking cookies used on our website at the link titled "Consent Preferences" in the footer of any page on this website.
CCPA Notice of Collection

We collect information that identifies, relates to, and describes, references, may be associated with, or could be linked, directly or indirectly, with a particular consumer or device, known as "personal information." The information outlined below describes what we have and have not collected from consumers within the last twelve (12) months.

Most of the information we collect about current or prospective customers is in the context of our relationship as your financial institution. As such, this information generally is not subject to state consumer privacy laws and is covered by our Consumer Privacy Notice. However, in certain circumstances, we may collect information that is outside the context of our financial relationship, in which case it is discussed below.
Note that if you provide us with information regarding one or more other individual(s), you represent that you have their consent to give us their information and to permit us to use their information in accordance with this California Consumer Privacy Act Policy.
How to Read This Chart
- The categories we use to describe the information are those enumerated in the California Consumer Privacy Act (CCPA); categories listed in the CCPA and not covered here are either not collected or financial information not within scope of the CCPA. Certain personal information may fall into multiple categories.
- We are required to list entities to whom we (1) "sell" personal information; or (2) "share" personal information for cross-context behavioral advertising. Under the CCPA, a business "sells" personal information when it discloses it to a third party for monetary or other benefit. A company may be considered a third party either because the purpose for its sharing of personal information is not for an enumerated business purpose under California law, or because its contract does not restrict it from using personal information for other purposes. A disclosure is not considered a sale if it is authorized by you or otherwise does not meet this definition.
- We are required to list entities to whom we disclose information to conduct activities on our behalf. These entities are restricted from using personal information for any purpose that is not related to our engagement.
- Note, we are not required to list disclosures that are infrequent or that are not considered "sales" or "sharing" under the law. Please see Section 4 for more information about how we share your information.
Category

Examples
Identifiers
A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.
- Source: Directly from you
- Purpose of collection and use: All purposes listed in Section 3.2 below.
- Categories of Parties to Whom PI is "Sold" or "Shared": None.
- Categories of Parties to Whom PI is Disclosed: Service Providers; Affiliates.
- Retention Considerations: If you become a customer or guarantor, we retain your information for the length of time for which you are a customer/guarantor, and for a period thereafter to comply with our legal obligations and otherwise support our fraud prevention activities. If you never become a customer/guarantor, information is typically deleted at regular intervals when the information is no longer necessary for the purposes for which it is collected
Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.
- Source: Directly from you
- Purpose of collection and use: All purposes listed in Section 3.2 below.
- Categories of Parties to Whom PI is "Sold" or "Shared": None.
- Categories of Parties to Whom PI is Disclosed: Service Providers; Affiliates.
- Retention Considerations: If you become a customer or guarantor, we retain your information for the length of time for which you are a customer/guarantor, and for a period thereafter to comply with our legal obligations and otherwise support our fraud prevention activities
Protected classification characteristics under California or federal law
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
- Source: Directly from you
- Purpose of collection and use: All purposes listed in Section 3.2 below.
- Categories of Parties to Whom PI is "Sold" or "Shared": None.
- Categories of Parties to Whom PI is Disclosed: Existing Customers: Our sharing of these Categories of PI with 3rd parties is covered by GLBA and FCRA exemptions.
- Retention Considerations: If you become a customer or guarantor, we retain your information for the length of time for which you are a customer/guarantor, and for a period thereafter to comply with our legal obligations and otherwise support our fraud prevention activities
Commercial Information
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
- Source: N/A
- Purpose of collection and use: N/A
- Categories of Parties to Whom PI is "Sold" or "Shared": N/A
- Categories of Parties to Whom PI is Disclosed: N/A
- Retention Considerations: N/A
- Biometric Information: Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
- Source: N/A
- Purpose of collection and use: N/A
- Categories of Parties to Whom PI is "Sold" or "Shared": N/A
- Categories of Parties to Whom PI is Disclosed: N/A
- Retention Considerations: N/A
Internet or other similar network activity
Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
- Source: Directly from you, Internet Service Providers, Operating Systems and Platforms
- Purpose of collection and use: All purposes listed in Section 3.2 below.
- Categories of Parties to Whom PI is "Sold" or "Shared": None
- Categories of Parties to Whom PI is Disclosed: Service Providers; Affiliates.
- Retention Considerations: If you become a customer or guarantor, we retain your information for the length of time for which you are a customer/guarantor, and for a period thereafter to comply with our legal obligations and otherwise support our fraud prevention activities
Geolocation data
Physical location or movements.
- Source: Directly from you, Internet Service Providers, Operating Systems and Platforms
- Purpose of collection and use: All purposes listed in Section 3.2 below.
- Categories of Parties to Whom PI is "Sold" or "Shared": None
- Categories of Parties to Whom PI is Disclosed: Service Providers; Affiliates.
- Retention Considerations: If you become a customer or guarantor, we retain your information for the length of time for which you are a customer/guarantor, and for a period thereafter to comply with our legal obligations and otherwise support our fraud prevention activities
Sensory data
Audio, electronic, visual, thermal, olfactory, or similar information.
- Source: Directly from you, Internet Service Providers, Operating Systems and Platforms
- Purpose of collection and use: All purposes listed in Section 3.2 below.
- Categories of Parties to Whom PI is "Sold" or "Shared": None
- Categories of Parties to Whom PI is Disclosed: Service Providers; Affiliates.
- Retention Considerations: If you become a customer or guarantor, we retain your information for the length of time for which you are a customer/guarantor, and for a period thereafter to comply with our legal obligations and otherwise support our fraud prevention activities
Professional or employment-related information
Current or past job history or performance evaluations.
- Source: Directly from you
- Purpose of collection and use: All purposes listed in Section 3.2 below.
- Categories of Parties to Whom PI is "Sold" or "Shared": None
- Categories of Parties to Whom PI is Disclosed: Service Providers; Affiliates.
- Retention Considerations: If you become a customer or guarantor, we retain your information for the length of time for which you are a customer/guarantor, and for a period thereafter to comply with our legal obligations and otherwise support our fraud prevention activities
Non-public education information
Non-public education information Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
- Source: N/A
- Purpose of collection and use: N/A
- Categories of Parties to Whom PI is "Sold" or "Shared": N/A
- Categories of Parties to Whom PI is Disclosed: N/A
- Retention Considerations: N/A
Inferences drawn from other personal information
Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
- Source: Directly from you, Internet Service Providers, Operating Systems and Platforms, Advertising Networks, Data Analytic Providers
- Purpose of collection and use: All purposes listed in Section 3.2 below.
- Categories of Parties to Whom PI is "Sold" or "Shared": None
- Categories of Parties to Whom PI is Disclosed: Service Providers; Affiliates.
- Retention Considerations: If you become a customer or guarantor, we retain your information for the length of time for which you are a customer/guarantor, and for a period thereafter to comply with our legal obligations and otherwise support our fraud prevention activities
Purpose of Collection and Use of Personal Information

We use personal information and other information for essential and other purposes, as described below.
- We may use information we collect as we believe to be necessary or appropriate for certain essential purposes, including:
  - To comply with and enforce applicable legal requirements, relevant industry standards, contractual obligations and our company policies;
  - To detect, prevent, or investigate fraud, suspicious or other illegal activities;
  - To enforce our Terms of Use;
  - To protect our rights, privacy, safety or property, operations, security and/or that of our affiliates, business partners, you or others; and
  - To allow us to pursue available remedies or limit the damages that we may sustain.
  - We may aggregate data we collect on an anonymous basis that does not identify you for any purpose otherwise allowed by applicable law, such as for research, analysis, modeling, marketing, and advertising, as well as improvement of our Services.
- Customer Lending Activity. In addition to the purposes described in Section 3.1, we may also use Customer Lending Activity as follows:
  - Process account applications and transactions, and facilitate other customer account activities;
  - Verify your identity or authenticate your device (such as when you access account information or conduct transactions), and to enhance our online security measures and prevent fraud;
  - Help you efficiently access and manage your information and preferences;
  - Provide you with customer support, and quality assurance of the same;
  - Operate and improve our business and operations, including internal administration, auditing and troubleshooting for our Services;
  - Provide personalized content and information, which could include customized services for you, or offers of various products or services that you may be interested in;
  - Monitor metrics such as total number of visitors, traffic, and demographic patterns; and
  - Provide, improve, test, and monitor the effectiveness of the Services, diagnose and fix technology issues, and develop and test new products and features.
- Business Contacts. In addition to the purposes described in Section 3.1, we may use Business Contact Information
- Job Applicants. In addition to the purposes described in Section 3.1, we may use Job Applicant Information as follows:
  - To solicit applicants for job openings and to process job applications submitted to us
- Online User Activity. We use information that we collect via cookies to further the business purposes described in Sections 3.2 - 3.4, above. In particular, information collected via cookies is used to understand our customer base, advertise our Services to you and other prospective consumers, monitor the performance of our Services, improve the user experience, and to ensure the security of our Services.
See below in Section 6.2 for your choices regarding cookies.
Disclosing Personal Information

We may disclose your personal information to a third party for a business purpose. In connection with the provision of our financial products and services, we disclose information of AnnieMac applicants and customers as described in our Consumer Privacy Notice. When we otherwise disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.

We otherwise do not disclose personal information to third parties without your consent, except in the following circumstances:
- Our legal affiliates;
- Our service providers that we believe need the information to perform a technology, business, professional, or insurance function for us (e.g., IT services, maintenance and hosting of our website, payment processors), but we only provide information so these individuals or entities can perform their required functions on our behalf;
- Third parties or affiliates in connection with a corporate transaction, such as a sale, consolidation or merger of AnnieMac's businesses;
- To comply with legal requirements, including, but not limited to, regulatory, court, and law enforcement demands (e.g., subpoenas, court orders, etc.);
- To address fraud, security or technical issues; and
- To respond to an emergency or otherwise to protect the rights, property or security of AnnieMac, our customers or third parties.
- Customer Lending Activity may also be shared with:
  - Our service providers that assist in marketing our Services to current or prospective customers.
  - Where appropriate, we will limit sharing of Customer Lending Activity in accordance with the choices you have provided us in response to our Consumer Privacy Notice and applicable law.
- Business Contact Information may also be shared with:
  - Our third-party service providers that we believe need the information to perform a technology, business, professional, or insurance function for us (e.g., TBD), but we only provide information so these individuals or entities can perform their required functions on our behalf;
- Job Applicant Information may also be shared with:
  - Our service providers that we believe need the information to perform recruiting and related business functions for us, but we only provide information so these individuals or entities can perform their required functions on our behalf;
  - Advertising partners as described immediately below.
- Online User Activity may also be shared with the partners listed within the link provided. The link provided will provide you more information about their use of your data and how to exercise your options regarding tracking. You may be able to opt out tracking by cookies or control how information collected by cookies is used via a number of means, as described in Section 6.2 below.
Notice of Financial Incentive

We do not provide a financial incentive or a price or service difference to customers in exchange for the retention or sale of their personal information. We may send hard copy or electronic promotions or offers to customers or other individuals who subscribe to marketing communications, and unless a customer has opted out of such communications, the customer will continue to receive such notices irrespective of whether any information privacy request described here has been submitted. We do not offer financial incentives to deter customers from making such requests.
Your Rights and Choices
- Customer Lending Activities.
  - Information we collect from or about individuals in connection with any Customer Lending Activities is treated in accordance with applicable federal and state privacy laws including the Gramm-Leach-Bliley Act (GLBA) and Fair Credit Reporting Act (FCRA). We therefore use and share any information that we collect from or about consumers of our financial products or services consistent with the disclosures in our Consumer Privacy Notice, posted here.
  - Accessing and Correcting Customer Lending Activities Keeping your customer account information up-to-date is very important. You may review or update certain account information and transactions by logging in to the Services or by contacting us. You can also adjust certain profile and privacy settings as follows:
    - Account profile Customers may view or update profile and privacy settings by submitting a request.
    - Emails In all promotional emails, you will be given the opportunity to opt-out of receiving such messages in the future by clicking on the link at the bottom of the email that says "unsubscribe." It may take up to ten (10) business days for us to process your opt-out request. Please note that even after opting out of promotional emails, we may still send you customer service announcements, administrative notices and Services-related communications (e.g., account notices, transaction confirmations, and security notices).
    - Text messages In the event you are enrolled in any service that provides text messages to you, you can opt-out of receiving text messages from that service by replying "STOP" to any text message received. You will continue to receive text messages from product lines or services from which you have not opted out.
    - Mobile devices As with cookies, mobile devices may allow a user to block certain information requests (e.g., location information), but doing so may diminish your experience with our Services. Mobile device or mobile operating system providers typically provide instructions on how to adjust such privacy features.
- Job Applicant Information.
  - Same as 6.1 above
- Business Contact Information.
  - Same as 6.1 above
Online User Activity

Online User Activity information collected by third parties about your visit to, or use of, our Services may be used by those parties for their own purposes, some of whom may be able to associate such information with you based on other information they have collected independently (not from us). When you opt-out as provided below, we will endeavor to block such information collection activities by third parties.
- Rejecting Cookies. Most internet browsers allow you to block cookies. If you block cookies, your browsing experience may be affected, and you may not be able to use all of the features of our Services. You can delete cookies that are already stored on your computer or device by following the instructions associated with your browser and operating system.
- Opting Out of Tracking Cookies.
  - We provide all customers and other website visitors with the option of turning off the tracking cookies used on our website by visiting the homepage and clicking on the "Cookie Choices" link. (The California Consumer Privacy Act refers to this as a "Do Not Sell" request.)
  - To learn more about your choices regarding the collection of your online activity see the privacy policies of our ad partners above at the "Cookie Choices" link.
- Global Privacy Control. Our website recognizes Global Privacy Control signals, and where required by law treats such signals as an opt-out of tracking cookies.
CCPA Rights

If you are a California resident, you have the right to:
- Right to Know. You have the right to request access to personal information collected about you and information regarding the source of that personal information, the purposes for which we collect it, and the third parties and service providers with whom we share it.
- Right to Correct. You also have the right to correct inaccurate personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right to Delete. Additionally, you have the right to request in certain circumstances that we delete personal information that we have collected directly from you.
- Right to Opt-out of Sale or Sharing of Personal Information. You may opt out of our sale or sharing of personal information to third parties. Please note that your right to opt out does not apply to our sharing of personal information with service providers, who are parties we engage to perform a function on our behalf and are contractually obligated to use the personal information only for that function.
- Right to Restrict Use of Sensitive Personal Information. You have the right to request that we restrict our use of certain pieces of personal information that are considered sensitive under California law—such as information about your race, ethnicity, religion, and philosophical beliefs, financial information to the extent such would enable access to your account, biometric information, and health information.
Please note that if you are a customer or prospective customer, we only collect sensitive personal information in the context of our provision of financial services. Such sensitive personal information is not subject to CCPAs access or deletion provisions.
Exercising Your Rights

You may submit a request to exercise your rights by clicking here or by calling us at 1-888-531-0380. Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information.

To protect your personal information, we are required to verify your identity before we can act on your request. Thus, we ask you to provide personal identifiers we can match against information we may have collected from you previously, and to confirm your request using the email address or telephone number stated in the request.

Upon receiving your request, we will first need to verify your request. If the authentication process is not completed, we will be unable to process your request. Please review our policy outlining all consumer rights (California residents) under the California Consumer Privacy Act herein.

Basic Information
First Name Required

Middle Name

Last Name Required

Date of Birth

Residency
Current Street Address

Current City

ZIP Code

Current State Required

Contact Information
Email Required

Phone Number Required

Request Information
Which option best describes you?

Your Request

How would you like to receive your information?

I declare, under the penalty of perjury, that the information I have provided above is accurate and complete to the best of my knowledge.
Response Timing and Format

We will make a good faith effort to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to ninety (90) days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated—for example, if your information is not protected by the CCPA because it is financial information. If we do, we will explain that to you in our response.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.
Contact Us

Please contact us about this California Consumer Privacy Act Policy or our Services at 1-888-531-0380 or ccpa_request@annie-mac.com
Effective Date

This California Consumer Privacy Act Policy was last revised and is effective as of 1/20/23.

Categories of Information We Collect

CCPA Notice of Collection

How to Read This Chart

Purpose of Collection and Use of Personal Information

Disclosing Personal Information

Notice of Financial Incentive

Your Rights and Choices

Online User Activity

CCPA Rights

Exercising Your Rights

Response Timing and Format

Non-Discrimination

Contact Us

Effective Date