The California Consumer Privacy Act

We take the privacy of your data seriously.

We value the trust you put in us and understand that protecting your personal information is critical to earning and keeping that trust. The California Consumer Privacy Act (CCPA) gives some California residents the power to request access to the personal info we have on file for them and request we delete that info .

Submit a CCPA Request

or call 844-940-CCPA

California Consumer Privacy Act Disclosure

This California Consumer Privacy Act Disclosure (“Disclosure”) is meant to supplement the CrossCountry Mortgage, LLC (“CrossCountry”) online Privacy Statement, https://crosscountrymortgage.com/privacy-policy/, and explain how CrossCountry collects, uses, and discloses personal information relating to California residents covered by the California Consumer Privacy Act of 2018 (“CCPA”). This Disclosure applies solely to visitors, users, applicants, and others who reside in the State of California (hereinafter referred to as a “consumer” or “consumers”). Any terms used in this Disclosure, but not defined herein, have the same definition as used in the CCPA.khjg

Background

The CCPA applies to consumers’ personal information, or information that identifies, relates to, or could be reasonably linked, directly or indirectly, with a California resident. Consumers’ personal information does not include information subject to the Gramm-Leach-Bliley Act (“GLBA”). Information subject to GLBA includes, without limitation: information provided to CrossCountry during the mortgage application process, information that results from the mortgage transaction; or, information CrossCountry otherwise obtains in connection with providing the mortgage.

The personal information CrossCountry collects, uses, and discloses varies based upon the relationship and/or interactions with an individual. For example, personal information collected from a consumer who visits the CrossCountry website and submits a mortgage application online may differ from personal information collected from a consumer who does business with CrossCountry in-person.

Information Collected

CrossCountry collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a consumer or device. CrossCountry may collect the following categories of personal information from consumers. Categories of personal information collected in the last twelve (12) months are indicated by the term ‘YES’ in the ‘Collected’ column:

Category	Examples	Collected
A. Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.	YES
B. Personal information categories listed in the California Customer Records statute (CA Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	YES
C. Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).	YES
D. Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES
E. Biometric Information	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO
F. Internet or similar network activity	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.	YES
G. Geolocation data	Physical location or movements.	YES
H. Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information.	NO
I. Professional or employment related information	Current or past job history or performance evaluations.	YES
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g, 34 C.F.R. Part 99))	Education records related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO
K. Inferences drawn from other personal information	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO

 

Collection Sources

CrossCountry obtains the categories of personal information listed above from the following categories of sources:

• Directly from consumers or their agents. For example, from a consumer’s real estate agent prior to the consumer initiating a mortgage loan application.
• Directly and indirectly from activity on our website (www.crosscountrymortgage.com). For example, a consumer’s IP address, kind of web browser and computer used, and locality including the state or country from which the consumer accessed the site.
• From service providers, consumer data resellers and other third parties that interact with us in connection with the services we perform. For example, from an entity that collects consumer personal information and then sells that information to CrossCountry as a lead.
• Public record sources including Federal, state or local government.

Use of Personal Information

CrossCountry may use or disclose consumer personal information for one or more of the following business purposes:

• To fulfill or meet the reason for which the consumer provides the information. For example, if a consumer provides information to a loan officer, CrossCountry will use that information to assist in the preparation and submission of a loan application.
• To provide consumers with information including loan products and pricing.
• To provide consumers with email alerts or other notices concerning our products, services, events, or news that may be of interest.
• To carry out our obligations and enforce our rights arising from any contracts entered between consumers and CrossCountry, including for billing and collections.
• To improve the CrossCountry website and better present content to consumers. For example, auditing related to a current interaction and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
• For testing, research, analysis and product development.
• As necessary or appropriate to protect the rights, property or safety of CrossCountry and our consumers or others. For example, detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• To establish or defend legal claims and allegations.
• To seek advice from attorneys, auditors and other professional advisors.
• As described to consumers in any notice provide at or before time of collection of personal information, or as otherwise set forth in the CCPA.
• To evaluate or conduct a merger, acquisition, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by CrossCountry is among the assets transferred, or personal information held by CrossCountry is used to assess assets or personal information held by another.

Note: CrossCountry will not collect additional categories of personal information or use the collected personal information for materially different, unrelated, or incompatible purposes without providing notice to consumers.

Sharing Personal Information

CrossCountry has disclosed the following categories of personal information to third parties in the previous twelve (12) months:

• A. Identifiers;
• B. Personal information categories;
• C. Protected classification characteristics;
• D. Commercial information;
• G. Geolocation data; and,
• I. Professional or employment related information.

Third Parties to whom We May Disclose Personal Information

CrossCountry discloses consumer personal information for business purposes to the following categories of third parties:

• Service providers.
• Third parties to whom consumers or consumers’ agents authorize CrossCountry to disclose personal information in connection with activities performed or services provided in connection with consumers’ loans.
• Third parties as part of our secondary market-related activities and other aspects of our business, including to purchasers of loans, loan servicers, consumer reporting agencies, workout companies, attorneys, and technology providers who enable us or third parties to perform business, professional, and technical support functions for CrossCountry and its consumers. For example, CrossCountry may disclose personal information to third parties to administer or protect its interest in a loan.
• Third parties who provide services such as storage, loan servicing, legal expertise, tax expertise, notaries and auditors.
• Other parties who enable customers to conduct transactions online and via mobile devices, and support mortgage and fulfillment services.
• Government Agencies as required by laws and regulations.

Sale of Personal Information

CrossCountry has not “sold” personal information subject to the CCPA in the last twelve (12) months, including personal information of minors under the age of 16.

Consumer Rights and Choices Under CCPA

The CCPA provides California residents with specific rights regarding their personal information. This section describes consumers’ CCPA rights and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

California consumers have the right to request that CrossCountry disclose certain information about the collection and use of personal information over the past 12 months. Before CrossCountry discloses information, it will ask for information to verify the requestors identity.  Once CrossCountry receives and confirms a verifiable consumer request, we will disclose the following:

• The categories of personal information CrossCountry collected about the consumer.
• The categories of sources for the personal information CrossCountry collected about the consumer.
• The CrossCountry business or commercial purpose for collecting or sharing that personal information.
• The categories of third parties with whom CrossCountry shares that personal information.
  • If CrossCountry disclosed consumer personal information for a business purpose, the business purpose and the categories of personal information that each category of recipient received.

Additionally, if a consumer requests specific pieces of personal information collected by CrossCountry and provides the requested identifying information, CrossCountry will disclose the specific pieces of personal information to the requestor.

Note: CrossCountry may not disclose the requested information if it cannot verify a requestors identity. CrossCountry may not disclose certain information covered by one or more exemption from the CCPA, as discussed earlier in this Disclosure. Under no circumstances will CrossCountry disclose a consumer’s Social Security number, driver’s license number or other government-issued identification number, financial account number, any health insurance or medical identification number, an account password, or security questions and answers.

Deletion Request Rights

Consumers may request deletion of personal information collected and retained by CrossCountry. Upon receipt and confirmation of a verifiable consumer request, CrossCountry will delete (and/or direct CrossCountry service providers to delete) consumer personal information from applicable records, unless an exception applies.  If CrossCountry denies a consumer deletion request, it will inform the consumer and explain the basis for the denial.

How to Exercise Rights

A consumer may exercise the rights described above by submitting a request to CrossCountry by either:

• Calling us at 844-940-CCPA (2272) or
• Completing the online webform - California Privacy Request

A consumer must describe the request with enough detail so that CrossCountry may properly understand, evaluate, and respond to the request.  A consumer may request access or data portability no more than twice within any 12-month period.

Only the consumer, or a person registered with the California Secretary of State authorized to act on behalf of the consumer, may make a request related to the consumer’s personal information. A consumer may also make a request on behalf of the consumer’s minor child.

CrossCountry will respond only to requests that are verifiable consumer requests.  As a result, CrossCountry will seek to verify a consumer’s identity upon receipt of any request. CrossCountry will ask information from the requestor that enables identification, such as the consumer’s email address or the last four digits of the consumer’s social security number.  CrossCountry also may use a third-party verification provider to verify a consumer’s identity. 

CrossCountry cannot respond to a request or provide a consumer with personal information if it cannot verify the identity of the consumer, the authority of a third party to make the request, and/or confirm the requested personal information relates to the consumer.  Making a request does not require the creation of an account with CrossCountry.  CrossCountry will only use personal information provided in a request to verify the requestor's identity or authority to make the request.

Response Timing and Format

CrossCountry strives to respond to each verifiable consumer request within 45 days of its receipt.  If CrossCountry requires more time, it will inform the requestor of the reason and extension period in writing.  If the requestor has a pre-existing account with CrossCountry, CrossCountry may deliver its written response by means of that account.  If the requestor does not have a pre-existing account, CrossCountry may deliver its written response either by mail or electronically.  Any disclosures provided by CrossCountry will cover the 12-month period preceding the receipt of the verifiable consumer request.  For data portability requests, CrossCountry will select a format to provide a consumer’s personal information that is readily useable and allows the consumer to transmit the information from one entity to another entity without hindrance.

CrossCountry does not charge a fee to process or respond to a verifiable consumer request unless the request is excessive, repetitive, or manifestly unfounded.  If CrossCountry determines a request warrants a fee, CrossCountry will inform the consumer of the decision and provide a cost estimate before completing the request.

Non-Discrimination

CrossCountry will not discriminate against consumers for exercising any CCPA rights. Except to the extent permitted by the CCPA, CrossCountry will not:

• Deny you goods or services;
• Charge different prices or rates for goods or services based upon provision of personal information, including through granting discounts or other benefits, or imposing penalties;
• Provide different levels or quality of goods or services; or,
• Suggest that a consumer may receive a different price or rate for goods or services or a different level or quality of goods or services.

Changes to This Disclosure

CrossCountry reserves the right to amend this Disclosure at its discretion and at any time. When CrossCountry makes changes to this Disclosure, it will notify consumers by posting a link to the updated Disclosure to its website homepage.  Consumers should check back periodically for any updates.

How to Contact Us

For questions or comments about this Disclosure, our Privacy Statement, the ways in CrossCountry collects and uses consumer personal information, consumer choices and rights regarding such use, or exercising rights under California law, please contact CrossCountry at:

Phone:             844-940-CCPA (2272)
US Mail:
CrossCountry Mortgage, LLC
Attn: Sarah Watts
2160 Superior Avenue
Cleveland, OH 44114

Or please contact CrossCountry by sending an email to: [email protected]