Privacy Notice and Disclosure for California Residents

Effective Date: January 1, 2020

Last Revised on: January 1, 2020

Rithm Capital (together with certain subsidiaries, “we”, “our” or “Rithm Capital”) respects your privacy and is committed to providing a transparent notice of our Privacy Notice and Disclosure for California Residents. This Privacy Notice and Disclosure for California Residents applies solely to those who reside in the State of California (“consumers” or “you”).

The purpose of this privacy notice and disclosure is to inform California residents, at or before the time we collect your personal information, how we use your personal information and what your rights are with respect to the personal information we collect:

Your Right to Know

You have the right to request that Rithm Capital disclose what personal information it collects, uses, discloses, and sells. You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

We collect personal information, which means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household (“personal information”). The following table includes disclosures of the personal information we collect from consumers and the purposes for which it is collected and used, as well as lists of categories of consumers’ personal information we have collected about consumers in the past 12 months, the categories of sources from which it was collected and categories of third parties with whom we share the personal information.

What personal information do we collect, use and share?

We Collect/Use

We Have Collected/Used in the Past 12 Months

A. Identifiers: For example, a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.

This category of personal information is collected and used for the following purposes:

What are the categories of sources from which the personal information was collected?

This category of personal information has been disclosed in the preceding 12 months to the following third parties for a business purpose:

  • To service (or to cause our affiliate(s) or service provider(s) to service) your mortgage account, if that account is related to a property that is not used primarily for personal, family, or household purposes
  • For the purpose for which you provided it to us, our affiliate(s), and/or our service provider(s)
  • Undertaking activities to review, conduct due diligence on, or purchase mortgage servicing rights or other assets
  • For our internal operational purposes, analytical purposes, marketing purposes, or other business purposes
  • For monitoring and auditing consumer transactions, including compliance with applicable laws and regulations compliance with regulations by us, our affiliates, and our service providers
  • Fraud and security detection
  • To evaluate or conduct a transaction involving any of our assets that include personal information (including, without limitation, purchases, sales, mergers, acquisitions or other transactions)
  • Internal research, analysis, modeling, and technology development
  • To share the personal information with service providers
  • Information from you that you actively provide: We (or our affiliate(s) or service provider(s)) may collect this information from various sources, including from online forms, online account portals, e-mail, web or mobile applications, and via telephone
  • Information from you that you provide passively from your use of our sites and services: We may collect this information from various sources, including from a web browser
  • Third Parties (information we collect about you from third party sources): We (or our affiliate(s) or service provider(s)) may collect from various sources, including business partners, consumer reporting agencies, service providers, and other sources you authorize to provide us with information
  • Data storage providers
  • Database service providers
  • Cloud file collaboration system providers
  • Web analytics providers
  • Email service and email archiving providers
  • Web hosting service providers
  • Financial and accounting service providers
  • Cybersecurity service providers
  • Disaster recovery service providers
  • Consulting firms that perform compliance and vendor management services
  • Law firms that support compliance with legal and regulatory obligations

We Collect/Use

We Have Collected/Used in the Past 12 Months

 

B. Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, a name, signature, Social Security number, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, employment, employment history, bank account number, credit card number, debit card number, or any other financial information.

This category of personal information is collected and used for the following purposes:

What are the categories of sources from which the personal information was collected?

This category of personal information has been disclosed in the preceding 12 months to the following third parties for a business purpose:

  • To service (or to cause our affiliate(s) or service provider(s) to service) your mortgage account, if that account is related to a property that is not used primarily for personal, family, or household purposes
  • For the purpose for which you provided it to us, our affiliate(s), and/or our service provider(s)
  • Undertaking activities to review, conduct due diligence on, or purchase mortgage servicing rights or other assets
  • For our internal operational purposes, analytical purposes, marketing purposes, or other business purposes
  • For monitoring and auditing consumer transactions, including compliance with applicable laws and regulations compliance with regulations by us, our affiliates, and our service providers
  • Fraud and security detection
  • To evaluate or conduct a transaction involving any of our assets that include personal information (including, without limitation, purchases, sales, mergers, acquisitions or other transactions)
  • Internal research, analysis, modeling, and technology development
  • To share the personal information with service providers
  • Information from you that you actively provide: We (or our affiliate(s) or service provider(s)) may collect this information from various sources, including from online forms, online account portals, e-mail, web or mobile applications, and via telephone
  • Information from you that you provide passively from your use of our sites and services: We may collect this information from various sources, including from a web browser
  • Third Parties (information we collect about you from third party sources): We (or our affiliate(s) or service provider(s)) may collect from various sources, including business partners, consumer reporting agencies, service providers, and other sources you authorize to provide us with information
  • Data storage providers
  • Database service providers
  • Cloud file collaboration system providers
  • Web analytics providers
  • Email service and email archiving providers
  • Web hosting service providers
  • Financial and accounting service providers
  • Cybersecurity service providers
  • Disaster recovery service providers
  • Consulting firms that perform compliance and vendor management services
  • Law firms that support compliance with legal and regulatory obligations

We Collect/Use

We Have Collected/Used in the Past 12 Months

C. Characteristics of CA or Federal Protected Classifications: For example, age (40 and over), gender, familial status, disability, or veteran status.

This category of personal information is collected and used for the following purposes:

What are the categories of sources from which the personal information was collected?

This category of personal information has been disclosed in the preceding 12 months to the following third parties for a business purpose:

  • To service (or to cause our affiliate(s) or service provider(s) to service) your mortgage account, if that account is related to a property that is not used primarily for personal, family, or household purposes
  • For the purpose for which you provided it to us, our affiliate(s), and/or our service provider(s)
  • Undertaking activities to review, conduct due diligence on, or purchase mortgage servicing rights or other assets
  • For our internal operational purposes, analytical purposes, marketing purposes, or other business purposes
  • For monitoring and auditing consumer transactions, including compliance with applicable laws and regulations compliance with regulations by us, our affiliates, and our service providers
  • Fraud and security detection
  • To evaluate or conduct a transaction involving any of our assets that include personal information (including, without limitation, purchases, sales, mergers, acquisitions or other transactions)
  • Internal research, analysis, modeling, and technology development
  • To share the personal information with service providers
  • Information from you that you actively provide: We (or our affiliate(s) or service provider(s)) may collect this information from various sources, including from online forms, online account portals, e-mail, web or mobile applications, and via telephone
  • Information from you that you provide passively from your use of our sites and services: We may collect this information from various sources, including from a web browser
  • Third Parties (information we collect about you from third party sources): We (or our affiliate(s) or service provider(s)) may collect from various sources, including business partners, consumer reporting agencies, service providers, and other sources you authorize to provide us with information
  • Data storage providers
  • Database service providers
  • Cloud file collaboration system providers
  • Web analytics providers
  • Email service and email archiving providers
  • Web hosting service providers
  • Financial and accounting service providers
  • Cybersecurity service providers
  • Disaster recovery service providers
  • Consulting firms that perform compliance and vendor management services
  • Law firms that support compliance with legal and regulatory obligations

We Collect/Use

We Have Collected/Used in the Past 12 Months

D. Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories.

This category of personal information is collected and used for the following purposes:

What are the categories of sources from which the personal information was collected?

This category of personal information has been disclosed in the preceding 12 months to the following third parties for a business purpose:

  • To service (or to cause our affiliate(s) or service provider(s) to service) your mortgage account, if that account is related to a property that is not used primarily for personal, family, or household purposes
  • For the purpose for which you provided it to us, our affiliate(s), and/or our service provider(s)
  • Undertaking activities to review, conduct due diligence on, or purchase mortgage servicing rights or other assets
  • For our internal operational purposes, analytical purposes, marketing purposes, or other business purposes
  • For monitoring and auditing consumer transactions, including compliance with applicable laws and regulations compliance with regulations by us, our affiliates, and our service providers
  • Fraud and security detection
  • To evaluate or conduct a transaction involving any of our assets that include personal information (including, without limitation, purchases, sales, mergers, acquisitions or other transactions)
  • Internal research, analysis, modeling, and technology development
  • To share the personal information with service providers
  • Information from you that you actively provide: We (or our affiliate(s) or service provider(s)) may collect this information from various sources, including from online forms, online account portals, e-mail, web or mobile applications, and via telephone
  • Information from you that you provide passively from your use of our sites and services: We may collect this information from various sources, including from a web browser
  • Third Parties (information we collect about you from third party sources): We (or our affiliate(s) or service provider(s)) may collect from various sources, including business partners, consumer reporting agencies, service providers, and other sources you authorize to provide us with information
  • Data storage providers
  • Database service providers
  • Cloud file collaboration system providers
  • Web analytics providers
  • Email service and email archiving providers
  • Web hosting service providers
  • Financial and accounting service providers
  • Cybersecurity service providers
  • Disaster recovery service providers
  • Consulting firms that perform compliance and vendor management services
  • Law firms that support compliance with legal and regulatory obligations

We Collect/Use

We Have Collected/Used in the Past 12 Months

 

 

 

 

E. Biometric Information: For example, physiological, biological or behavioral characteristics, including an individual’s deoxyribonucleic acid (DNA), that can be used, singly or in combination with each other or with other identifying data, to establish individual identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information

This category of personal information is collected and used for the following purposes:

What are the categories of sources from which the personal information was collected?

This category of personal information has been disclosed in the preceding 12 months to the following third parties for a business purpose:

N/A

N/A

N/A

We Collect/Use

We Have Collected/Used in the Past 12 Months

F. Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement

This category of personal information is collected and used for the following purposes:

What are the categories of sources from which the personal information was collected?

This category of personal information has been disclosed in the preceding 12 months to the following third parties for a business purpose:

  • To monitor website browsing activity
  • For the purpose for which you provided it to us.
  • For example, if you asked us a question regarding our company or provided us information regarding a mortgage account or property
  • Information from you that you actively provide: We or our service providers may collect this information from various sources, including from online forms, e-mail, mobile and web applications, and via telephone
  • Information from you that you provide passively from your use of our sites and services: We may collect this information from various sources, including from a web browser
  • Third Parties (information we collect about you from third party sources): We (or our service provider(s)) may collect from various sources, including business partners and other sources you authorize to provide us with information
  • Web analytics providers
  • Consulting firms that perform compliance and vendor management services
  • Law firms that support compliance with legal and regulatory obligations
  • Mortgage or real estate service providers

We Collect/Use

We Have Collected/Used in the Past 12 Months

G. Geolocation Data: For example, information that can be used to determine a device’s physical location

This category of personal information is collected and used for the following purposes:

What are the categories of sources from which the personal information was collected?

This category of personal information has been disclosed in the preceding 12 months to the following third parties for a business purpose:

N/A

N/A

N/A

We Collect/Use

We Have Collected/Used in the Past 12 Months

H. Sensory or Surveillance Data: For example, audio, electronic, visual, thermal, olfactory, or similar information that can be linked or associated with a particular consumer or household

This category of personal information is collected and used for the following purposes:

What are the categories of sources from which the personal information was collected?

This category of personal information has been disclosed in the preceding 12 months to the following third parties for a business purpose:

  • We or our service provider(s)) may record your voice during a telephone call when you call one of our (or our affiliate(s) or service provider(s)) customer service representatives or business telephone numbers.
  • Phone recordings
  • Consulting firms that perform compliance and vendor management services
  • Law firms that support compliance with legal and regulatory obligations
  • Mortgage or real estate service providers

We Collect/Use

We Have Collected/Used in the Past 12 Months

I. Professional or Employment-Related Information: For example, compensation, evaluations, performance reviews, personnel files and current and past job history.

This category of personal information is collected and used for the following purposes:

What are the categories of sources from which the personal information was collected?

This category of personal information has been disclosed in the preceding 12 months to the following third parties for a business purpose:

  • Research in preparation for interactions or meetings
  • Investigate complaints or disputes
  • Respond to legal or regulatory inquiries
  • Information from you that you actively provide: We or our service providers may collect this information from various sources, including from online forms, e-mail, mobile and web applications, and via telephone
  • Information from you that you provide passively from your use of our sites and services: We may collect this information from various sources, including from a web browser
  • Third Parties (information we collect about you from third party sources): We (or our service provider(s)) may collect from various sources, including business partners and other sources you authorize to provide us with information
  • Law firms that support compliance with legal and regulatory obligations

We Collect/Use

We Have Collected/Used in the Past 12 Months

 

 

 

J. Education Information (defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99)): Education records directly related to a student maintained by an education institution or party acting on its behalf, for example, non-public information that can be used to distinguish or trace an individual’s identity in relation to an educational institution either directly or indirectly through linkages with other information.

This category of personal information is collected and used for the following purposes:

What are the categories of sources from which the personal information was collected?

This category of personal information has been disclosed in the preceding 12 months to the following third parties for a business purpose:

N/A

N/A

N/A

We Collect/Use

We Have Collected/Used in the Past 12 Months

K. Profile Data: For example, inferences drawn from personal information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

This category of personal information is collected and used for the following purposes:

What are the categories of sources from which the personal information was collected?

This category of personal information has been disclosed in the preceding 12 months to the following third parties for a business purpose:

  • Research in preparation for interactions or meetings
  • Respond to
  • Investigate complaints or disputes
  • Respond to legal or regulatory inquiries
  • Information from you that you actively provide: We or our service providers may collect this information from various sources, including from online forms, e-mail, mobile and web applications, and via telephone
  • Information from you that you provide passively from your use of our sites and services: We may collect this information from various sources, including from a web browser
  • Third Parties (information we collect about you from third party sources): We (or our service provider(s)) may collect from various sources, including business partners and other sources you authorize to provide us with information
  • Law firms that support compliance with legal and regulatory obligations

Please note that Personal Information does not include:

  • Publicly available information from government records.
  • Deidentified or aggregated consumer information.
  • Information excluded from the CCPA's scope, like:
    • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
    • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (CalFIPA), and the Driver's Privacy Protection Act of 1994.

We will not collect additional categories of personal information or use the personal information for any other undisclosed purpose without providing you notice.

Rithm Capital Does Not Sell Personal Information

Rithm Capital does not sell the personal information of minors under 16 years of age without affirmative authorization. Rithm Capital does not and will not sell Personal Information. Rithm Capital does not respond to web browser “do not track” signals or other mechanisms.

Your Right to Request Deletion of Your Personal Information

You have the right to request that Rithm Capital delete any of your personal information collected or maintained by Rithm Capital, subject to certain exceptions. You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

We may deny your deletion request if retaining the information is necessary for us, our affiliate(s) or our service provider(s) to:

  • Complete the transaction for which we (or such affiliate(s) or service provider(s)) collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our (or such affiliate(s)’ or service provider(s)’) contract with you.
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
  • Debug products to identify and repair errors that impair existing intended functionality.
  • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
  • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
  • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us, our affiliate(s) or our service provider(s).
  • Comply with a legal obligation.
  • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Submitting a Verified Consumer Request

You have the right to submit verified consumer requests to know information or for deletion. The request to know can be for any or all of the following about you:

  • Specific pieces of personal information that Rithm Capital has;
  • Categories of personal information Rithm Capital has collected;
  • Categories of sources from which the personal information is collected;
  • Categories of personal information that Rithm Capital sold or disclosed for a business purpose;
  • Categories of third parties to whom the personal information was sold or disclosed for a business purpose; and
  • The business or commercial purpose for collecting or selling personal information.

The request for deletion is to delete any of your personal information collected or maintained by Rithm Capital, subject to certain exceptions. 

You may only make a verifiable consumer request to know information twice within a 12-month period. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

You can submit requests using the webform below or by calling 1-844-639-7374. Your request will be verified using information you provide as described on the webform. If you call 1-844-639-7374, please provide the same information requested on the webform for verification purposes.

Once we receive your verifiable consumer request, we will send you an acknowledgement letter within ten (10) days which will describe our verification process. We will respond to your request within forty-five (45) days, if we are able to verify your identity. Requests for deletion will require a separate confirmation that you want your information deleted.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Please note we are unable to disclose or provide you with your Social Security Number, Driver’s License Number, or other government issued identification number, financial account number, any health insurance or medical identification number, an account password, or security questions and answers.

Using an Authorized Agent to Submit a Request

Only you, a person registered with the California Secretary of State, or a person you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465. If a power of attorney that meets those provisions is not submitted, you will be required to verify your identity directly by submitting a verified consumer request according to the procedures in the section “Submitting a Verified Consumer Request.” If anyone purporting to be an authorized agent for a consumer contacts us, we will require proof that the authorized agent has been authorized to act on the consumer’s behalf.

Your Right to Non-Discrimination for the Exercise of a Privacy Right

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

  • Deny you goods or services.
  • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
  • Provide you a different level or quality of goods or services.
  • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

Changes to Our Privacy Notice

Rithm Capital reserves the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on our website and update the notice’s effective date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.

Contact for More Information

If you have any questions or comments about this notice, the ways in which Rithm Capital collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Phone: 1-844-639-7374

Website: California Privacy and Disclosure Consumer Request Form

Email: customer_support@rithmcap.com

Verified Consumer Request Webform

The information requested in this form is necessary for Rithm Capital to verify that you are the person authorized to make this request, to locate you within our records, and to determine whether we may have a lawful reason to deny your request. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request, and confirm that the personal information relates to you.

For more information, please review our Privacy Notice and Disclosure for California Residents.

SECTION 1: Consumer

Note: If you may have used more than one email address when communicating with Rithm Capital, please submit a separate request for each additional email address.

If you are a current or former customer of one or more of the companies listed below, please select the appropriate box(es) (if more than one, please select all that apply):






Other (Please specify any other company in the following section)
If you are not a current or former customer of any of the companies listed above, please describe the method by which you provided Rithm Capital or another company with your personal information. Please provide the telephone number, mailing address, or email address from which you provided personal information to Rithm Capital or such other company.
Was the information provided in connection with a property? If so, please provide information related to the property: property address, city, state, and zip code.
Please provide any information that might be helpful in fulfilling your request regarding how you have engaged with Rithm Capital. For example, “I am a mortgage customer” or “I called to inquire about a property”,
SECTION 2: Are you the Consumer who is the subject of this Request?


SECTION 3: Details of Authorized Agent

If your request is on the behalf of the Consumer identified above and you cannot provide a scanned or printed copy of a duly authorized Power of Attorney to act on their behalf in this matter, we will seek the written consent of the Consumer before we can fulfil your request.

Please upload subject’s Power of Attorney executed pursuant to California Probate Code sections 4000 to 4465. (JPG, PDF) (10MB Max)*

Accepted file types: jpg, pdf.

SECTION 4: Nature of Request
Please select all desired options:







SECTION 5: Declaration

The following CCPA requests require you to submit a signed declaration under penalty of perjury that you are the consumer whose personal information is the subject of this request.

- Right to Know – Specific Pieces of Personal Information
- Deletion Request

Please complete the below declaration as required so that we may fulfill your request made pursuant to CCPA. You may also download a copy of the declaration form and submit it to us via mail or email by following the instructions immediately beneath the box below.





SECTION 6: Delivery Options
Please select your preferred delivery method for our response(s) to your request(s):


 

Click here to download the delcaration form. Once you have downloaded, completed, and signed the declaration form, you can send it to either:

Read our Privacy Notice and Disclosure for California Residents