Notice at Collection for California Residents
How to Submit Your Request If You are a Resident of California
To submit a request to know, access, delete, or correct your information, click on “Submit a Request” or call us toll-free at (866) 601-3518.
This California Consumer Privacy Act of 2018 (“CCPA”) Notice at Collection provides California residents with the categories of personal information to be collected, the purposes for which the personal information is collected or used, and whether that information is sold or shared.
Information We May Collect
| Category | Examples | Collected Within the Previous 12 Months |
|---|---|---|
| Identifiers | A real name, alias, mailing address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number or state identification card number, date of birth, passport number, or other similar identifiers. | Yes |
| Any categories of personal information described in the California Customer Records Act (Cal. Civ. Code section 1798.80(e)) | A name, signature, social security number, address, telephone number, passport number, driver’s license or state identification card number, education, employment, employment history, criminal history, credit history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. | Yes |
| Characteristics of protected classifications under California or federal law | Race, color, age (40 and older), national origin, ancestry, citizenship, mental or physical disability, sex/gender (includes pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity and gender expression, military or veteran status, marital status, medical condition, political affiliations or activities, primary language, immigration status, protected medical leaves. | Yes |
| Commercial Information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Yes |
| Biometric information | Physiological, biological or behavioral characteristics that can be used to establish individual identity, such as a fingerprint. | No |
| Internet or other electronic network activity | Browsing history, search history, and information regarding interaction with an Internet Web site, application, or advertisement. | Yes |
| Geolocation data | Physical location or movements. | No |
| Sensory data | Audio, electronic, visual, or similar information, such as call and video recordings. | Yes |
| Professional or employment-related information | Current or past employment history. | Yes |
| Non-public education information, per the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99) | Education records that are directly related to a student and maintained by an educational agency or institution or by a party acting for the agency or institution, such as transcripts, graduation information, degree, licenses or certifications. | Yes |
| Inferences drawn from any personal information | A profile reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | Yes |
| Sensitive Personal Information | Personal information that reveals a consumer’s social security, driver’s license, state identification card, or passport number.A consumer’s account log-in, financial account, debit card, or credit card in combination with any required security or access code, password, or credentials allowing access to an account. A consumer’s precise geolocation, racial or ethnic origin, religious or philosophical beliefs, or union membership. The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication. A consumer’s genetic data. The processing of biometric information for the purpose of uniquely identifying a consumer. | Yes |
Purpose For Collecting and Using Personal Information
- Originating your loan
- Servicing your loan
- Marketing
- Analytics
- Establish and maintain relationships with brokers or other third parties to originate loans
Sensitive Personal Information
Pennymac only uses or discloses sensitive personal information for the following purposes:
- Originate or service a loan;
- Detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information;
- Resist malicious, deceptive, fraudulent, or illegal actions directed at Pennymac to prosecute those responsible for those actions; or
- Ensure the physical safety of natural persons.
Sale or Sharing of Personal Information
Pennymac does not sell personal information.
In the preceding 12 months, Pennymac has shared identifiers and internet or other electronic network activity with online analytics third parties for marketing purposes.
Retention Criteria
The length of time that we intend to retain each category of personal information depends on (i) applicable legal and regulatory requirements (ii) whether we need to retain the information for a business purpose(s) and/or (iii) whether you exercised your right, subject to certain exceptions, to request deletion of your information.
Notice of Right to Opt Out of Sale/Sharing
Contact Information
If you have any questions or concerns about our privacy policies and practices, you may contact Pennymac using the information below.
PennyMac Loan Services, LLCAttention: Corporate Privacy
PO Box 788
Moorpark, CA 93020-9903
P: (866) 601-3518
A link to Pennymac’s consumer privacy policies may be found at https://tpo.pennymac.com/privacy
Rev. 06/2023