Online Privacy Policy

Of the above categories of Personal Information, the following are categories of Sensitive Personal Information the Company may collect from or about consumers:

• Personal Identifiers (social security number, driver's license or state identification card number, passport number)
• Account Information (your account log-in, in combination with any required security or access code, password, or credentials allowing access to the account)
• Protected Classifications (racial or ethnic origin, or sexual orientation)
• Geolocation Data (IP address and/or GPS location)

Personal information does not include:

• Publicly available information from government records.
• Information that a business has a reasonable basis to believe is lawfully made available to the general public by the consumer or from widely distributed media.
• Information made available by a person to whom the consumer or applicant has disclosed the information if the consumer or applicant has not restricted the information to a specific audience.
• De-identified or aggregated information.

We may collect your personal information from the following sources:

• You, the consumer, or your representatives
• We utilize cookies to automatically collect information about our website visitors
• Surveillance cameras at our physical locations
• Lead generators and referral sources
• Credit and consumer reporting agencies
• Service Providers and contractors who provide services

We may disclose your personal information with the following categories of service providers and third parties:

A. Financial institutions
B. Government agencies as required by law and regulations
C. Outside companies or organizations, including service providers subject to appropriate confidentiality and use restrictions, as a part of providing products and services, completing transactions, or supporting our everyday operations (examples include data storage providers, operating systems providers, ISP providers, data analytics providers, email service providers)
D. Outside companies or organizations in connection with routine or required reporting including consumer reporting agencies and other parties
E. Security and risk management vendors

We may collect your personal information for the following business purposes:

1. To fulfill or meet the purpose for which you provided the information.
2. To process, complete, and maintain records on transactions.
3. To complete appraisals.
4. To respond to consumer inquiries, including requests for information, customer support online, phone calls, and in-store inquiries.
5. To improve user experience on our website.
6. To understand the demographics of our website visitors.
7. To detect security incidents.
8. To debug, identify, and repair errors that impair existing intended functionality of our website.
9. To verify and respond to consumer requests.
10. To evaluate your job application and candidacy for employment, obtain and verify background check and references.

We do NOT and will not sell your personal information in exchange for monetary or other valuable consideration. We do not share your personal information for cross-context behavioral advertising.

We do not and will not use or disclose your sensitive personal information for purposes other than the following:

1. To perform services including maintaining or servicing accounts, providing customer service, processing payments, verifying customer information, providing advertising or marketing (except for cross context behavioral advertising),
2. To resist malicious, deceptive, fraudulent, or illegal actions directed at the business and to prosecute those responsible for those actions, provided that the use of a California resident's Personal Information is reasonably necessary and proportionate for this purpose.
3. To detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information.
4. To ensure safety and integrity to the extent personal information is reasonably necessary and proportionate for these purposes.
5. To perform services on behalf of the Company.
6. To identify and repair errors that impair existing intended functionality.
7. For purposes that do not involve inferring characteristics about the consumers.
8. To comply with laws and regulations.

Retention of Personal Information

The length of time that we intend to retain each category of Personal Information will depend on a number of criteria, including (i) the length of time we are required to retain Personal Information in order to comply with applicable legal and regulatory requirements, (ii) the length of time we may need to retain Personal Information in order to accomplish the business or commercial purpose(s) for which such Personal Information is collected, used or disclosed (as indicated in this Notice), and (iii) whether you choose to exercise your right, subject to certain exceptions, to request deletion of your Personal Information.

Compliance with Law and Safety

We may disclose specific personal and/or sensitive personal information based on a good faith belief that such disclosure is necessary to comply with or conform to the law or that such disclosure is necessary to protect our employees or the public.

Rights Under the CCPA and CPRA

If you are a California resident, you have the following rights

1. Right to Know. The right to request, up to 2 times in a 12-month period, that we identify to you (1) the categories of personal information we have collected about you going back to January 1, 2022, unless doing so would be impossible or involve disproportionate effort, or unless you request a specific time period, (2) the categories of sources from which the personal information was collected, (3) the business or commercial purpose for collecting, selling, or sharing this information, (4) the categories of third parties with whom we share or have shared your personal information, (5) the categories of personal information that we have sold or shared about you and the categories of third parties to whom the personal information was sold or shared, by category or categories of personal information for each category of third parties to whom the personal information was sold or shared, and (6) the categories of personal information that we have disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose;
2. Right to Access. The right to request, up to 2 times in a 12-month period, that we disclose to you, free of charge, the specific pieces of personal information we have collected about you going back to January 1, 2022, unless doing so would be impossible or involve disproportionate effort, or unless you request a specific time period;
3. Right to Delete. The right to request, up to 2 times in a 12-month period, that we delete personal information that we collected from you, subject to certain exceptions;
4. Right to Correct. The right to request that we correct inaccurate personal information (to the extent such an inaccuracy exists) that we maintain about you;
5. Right to Opt-Out. The right to opt-out of the selling or sharing of your personal information to third parties;
6. Right to Limit. The right to limit the use or disclosure of your sensitive personal information;
7. The right to designate an authorized agent to submit one of the above requests on your behalf. See below for how you can designate an authorized agent; and
8. The right to not be discriminated or retaliated against for exercising any of the above rights, including an applicant's and independent contractor's right not to be retaliated against for exercising the above rights.

You can submit any of the above types of consumer requests through the options below:

1. Submit an online request on our website at https://www.prmg.net/prmg-ccpa-disclosure
2. Call our privacy toll-free line at 888.365.4989.

Exemptions under Gramm-Leach-Bliley and other Privacy and Data Protection Laws

The CCPA does not apply to personal information to the extent that we collect, process, sell, or disclose it subject to the Gramm-Leach-Bliley Act. Therefore, certain rights under the CCPA may be limited to the extent such requests to exercise CCPA rights relate to the collection, processing, selling, or disclosure of personal information in connection with financial activities covered by the Gramm-Leach-Bliley Act. In addition, privacy and data protection laws, other than the CCPA, apply to much of the Personal Data that we collect, use, and disclose. When these laws apply, Personal Data may be exempt from, or outside the scope of, Access Requests and Deletion Requests. For example, information subject to certain federal privacy laws, such as the Gramm-Leach-Bliley Act or the Health Insurance Portability and Accountability, is exempt from CCPA Requests. As a result, in some instances, we may decline all or part of an Access Request or Deletion Request related to Personal Data exempt from CCPA Requests. This means that we may not provide some or all of this Personal Data when you make an Access Request. Also, we may not delete some or all of this Personal Data when you make a Deletion Request.

As examples, our processing of or response to an Access Request or Deletion Request may not include some or all of the following Personal Data:

• Consumer Accounts. Personal Data connected with consumer accounts used for personal, family, or household purposes. We have other privacy notices providing certain information on use and sharing of this data.
• Employment. Personal Data about an individual who is a current or former employee (team member) or job applicant, and we use that Personal Data within the context of that individual's role as a current or former employee (team member) or job applicant.
• Business-to-Business Relationships. Certain Personal Data we collect in the course of providing a product or service to another business, or in the course of receiving a product or service from another business.

The types of Personal Data described above are examples. We have not listed all types of Personal Data that may not be included when we respond to or process Access Requests or Deletion Requests. In addition to the above examples, we may not include Personal Data when we respond to or process Access Requests or Deletion Requests when the CCPA recognizes another exception. For example, we will not delete Personal Data when it is necessary to maintain that Personal Data to comply with a legal obligation.

How We Will Verify That it is Really You Submitting the Request

If you are a California resident, when you submit a Right to Know, Right to Access, Right to Delete, or Right to Correct request through one of the methods provided above, we will ask you to provide some information in order to verify your identity and respond to your request. Specifically, we will ask you to verify information that can be used to link your identity to particular records in our possession, which depends on the nature of your relationship and interaction with us.

Responding to Your Right to Know, Right to Access, Right to Delete, and Right to Correct Requests

Upon receiving a verifiable request from a California resident, we will confirm receipt of the request no later than 10 business days after receiving it. We endeavor to respond to a verifiable request within forty-five (45) calendar days of its receipt. If we require more time (up to an additional 45 calendar days, or 90 calendar days total from the date we receive your request), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

For a request to correct inaccurate personal information, we will accept, review, and consider any documentation that you provide, and we may require that you provide documentation to rebut our own documentation that the personal information is accurate. You should make a good-faith effort to provide us with all necessarily information at the time that you make the request to correct. We may deny a request to correct if we have a good-faith, reasonable, and documented belief that a request to correct is fraudulent or abusive. If we deny your request to correct, we shall inform you of our decision not to comply and provide an explanation as to why we believe the request is fraudulent.

If You Have an Authorized Agent:

If you are a California resident, you can authorize someone else as an authorized agent who can submit a request on your behalf. To do so, you must either (a) execute a valid, verifiable, and notarized power of attorney or (b) provide other written, signed authorization that we can then verify. When we receive a request submitted on your behalf by an authorized agent who does not have a power of attorney, that person will be asked to provide written proof that they have your permission to act on your behalf, and we will also contact you and ask you for information to verify your own identity directly with us and not through your authorized agent. We may deny a request from an authorized agent if the agent does not provide your signed permission demonstrating that they have been authorized by you to act on your behalf.

Changes to Our Privacy Policy

As our services evolve and we perceive the need or desirability of using information collected in other ways, we may from time to time amend this Privacy Policy. We encourage you to check our website frequently to see the current Privacy Policy in effect and any changes that may have been made to them. If we make material changes to this Privacy Policy, we will post the revised Privacy Policy and the revised effective date on this website.

Consumers With Disabilities

This policy is in a form that is accessible to consumers with disabilities.

Questions About the Policy

This website is owned and operated by Paramount Residential Mortgage Group Inc. If you have any questions about this Privacy Policy, please contact us using the information below:

Email: Privacy@prmg.net

Mail: Paramount Residential Mortgage Group, Inc.

Attn: Privacy Team
1265 Corona Pointe Court, Suite 301
Corona, CA 92879
United States

Phone: 888-365-4989
California Privacy Request: CCPA Privacy Information Request
Opt Out Request: CCPA Opt Out Request Form