California Privacy Notice
Last updated: October 21, 2026. Effective date: the date this notice is published on our website.
This notice applies to California residents ("you") and supplements our general Privacy Policy. It is provided by Tri-Peaks Mortgage Inc., doing business as Mortgage Pro Home Loans (NMLS 2443859) ("we" or "us"), under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), together with applicable implementing regulations (California Code of Regulations, Title 11, Division 6), including amendments effective January 1, 2026. Terms defined in the CCPA have the same meaning here.
Relationship Between California Privacy Law and Federal Financial Privacy Laws
As a mortgage company, much of the information we collect when you apply for or obtain a loan is nonpublic personal information governed by the federal Gramm-Leach-Bliley Act (GLBA) and its implementing regulations. Under California Civil Code §1798.145, personal information collected, processed, sold or disclosed under the GLBA is exempt from certain CCPA requirements. Information covered by the Fair Credit Reporting Act (FCRA), such as credit reports, may also be exempt to the extent the CCPA provides.
These exemptions apply to specific information, not to our company as a whole. General website information — such as browsing activity, cookies, advertising identifiers, Ask Milo questions and contact details from visitors who have not applied for a loan — is generally covered by the CCPA and this notice. Whether particular information is exempt depends on why and how it was collected, and we evaluate that case by case.
GLBA-covered information remains protected by federal privacy, security, recordkeeping and consumer protection laws. We must keep certain loan records for periods required by law, and we cannot delete or change those records in response to a CCPA request where the law requires us to keep them as they are.
What We Collect and Why
The table below describes the categories of personal information we have collected in the last 12 months, where it comes from, why we use it, who receives it, and how long we keep it. "Under review" means we are confirming how a California law definition applies to a particular technology; we provide an opt-out regardless.
| Category | Examples | Sources | Purposes | Recipients | Sold? | Shared for ads? | Sensitive? | Retention | Governing law |
|---|---|---|---|---|---|---|---|---|---|
| Identifiers and contact information | Name, email, phone, postal address | You (forms, booking, Ask Milo, calls) | Respond to inquiries, schedule appointments, provide mortgage services | Service providers (CRM, scheduling, email, hosting) | No | No | No | As long as the relationship or inquiry is active, then per our retention criteria | CCPA for website leads; GLBA once you apply for a loan |
| Government identifiers and account information | Social Security number, driver's license, bank account details | You, during a loan application through secure channels | Loan origination, identity verification, fraud prevention, legal compliance | Credit bureaus, investors, title, appraisal and other financial service providers | No | No | Yes | Per federal and state mortgage recordkeeping requirements | Generally GLBA-covered |
| Financial and credit information | Income, assets, debts, credit reports, employment | You, credit reporting agencies, employers, financial institutions | Evaluate and process your loan application | Credit bureaus, investors, underwriting and settlement providers, regulators | No | No | Some (e.g. account credentials) | Per federal and state mortgage recordkeeping requirements | Generally GLBA and FCRA-covered |
| Protected classification information | Age, marital status, and government monitoring data such as race, ethnicity and sex | You, as requested by federal law in a loan application | Federal fair lending reporting and compliance (not used to decide credit) | Regulators and service providers as required by law | No | No | Some | Per federal reporting and recordkeeping requirements | Generally GLBA-covered |
| Internet and device activity | Pages viewed, clicks, browser and device type, IP address, cookies | Automatically from your browser | Operate and secure the site, measure performance, improve content | Hosting, analytics and security providers | Under review | Under review | No | Per cookie lifetimes and provider settings | CCPA-covered |
| Marketing attribution and advertising identifiers | Campaign tags (UTM), advertising cookies, referring site | Automatically from your browser and links you click | Measure which marketing brought you to us; advertising | Advertising and analytics partners | Under review | May occur — you can opt out | No | Per cookie lifetimes and partner settings | CCPA-covered |
| Ask Milo chat messages | Questions you type, the page you were on | You | Answer general mortgage education questions | AI processing provider (service provider) | No | No | No — please do not enter sensitive information | Not stored by our website after the chat ends | CCPA-covered |
| Appointment information | Date, time, topic, contact details | You, through our booking page | Schedule and manage appointments and reminders | Hosting and calendar/email service providers | No | No | No | As needed to manage the appointment and related records | CCPA-covered unless part of a loan application |
| Communications | Emails, messages, call notes | You | Respond to you and keep records required by law | Email, phone and CRM service providers | No | No | No | Per our retention criteria and recordkeeping laws | Case-by-case |
| Inferences | Loan products you may be interested in | Derived from the information above | Suggest relevant information and services | Service providers | No | No | No | Same as the underlying information | Case-by-case |
We also use personal information to secure our website, prevent fraud, comply with law and respond to lawful requests from regulators and law enforcement. We do not collect precise geolocation or biometric information through our website.
Who receives personal information
- Service providers and contractors that host our website, manage customer contacts, send email, schedule appointments and process Ask Milo questions, under contracts that limit their use of the information.
- Financial service providers involved in your loan, such as credit reporting agencies, appraisers, title and settlement companies, and loan investors.
- Advertising and analytics partners, as described under Selling and Sharing.
- Government agencies and regulators, when required by law.
- Others you direct us to, such as your real estate agent.
Sensitive Personal Information
When you apply for a loan, we collect sensitive personal information such as your Social Security number, driver's license or other government ID, and financial account information. We use it only to process your loan, verify your identity, prevent fraud, secure our systems and comply with law — purposes the CCPA permits without offering a right to limit. We do not use sensitive personal information to infer characteristics about you or for advertising. Our general website forms and Ask Milo are not designed to receive this information; please do not enter it there. A loan officer will provide a secure way to send documents.
Selling and Sharing
Under California law, "selling" includes making personal information available to another business for money or other valuable consideration, and "sharing" means disclosing it for cross-context behavioral advertising, even if no money changes hands. Advertising and analytics technologies on our website may collect browsing information and identifiers in ways that could be considered selling or sharing. We do not knowingly sell or share the personal information of consumers under 16.
We do not sell or share information you provide in a loan application, Ask Milo chat messages, or appointment details.
Do Not Sell or Share My Personal Information
You can opt out of the sale or sharing of your personal information at any time. Use the button below or the "Do Not Sell or Share My Personal Information" link in our footer. Your choice is saved in this browser; if you use another browser or device or clear your browser data, please opt out again. To opt out for information we hold outside your browser, such as your email address, submit an opt-out through our Privacy Rights Request Center — no verification code is needed for this beyond confirming your email.
Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, our website treats it as a request to opt out of sale and sharing in that browser and turns off marketing cookies automatically.
Cookies and Tracking
- Strictly necessary: required for the website, security, booking and forms to work. These cannot be turned off.
- Analytics: help us understand how visitors use our website.
- Marketing and advertising: help measure and personalize advertising, and may be set by third parties.
You can change these at any time with the "Cookie Preferences" link in our footer. Cookie settings control technology in your browser; the opt-out above and the request center are how you exercise your California privacy rights.
Ask Milo and Automated Tools
Ask Milo is an AI-assisted education tool. The questions you type and the page you are on are sent to an AI processing provider to generate a reply. Our website does not save chat conversations after the chat ends. If you choose to share your name and contact details so a loan officer can follow up, those details and the page you were on — not the conversation — are added to our customer contact system.
Ask Milo provides general information only. It does not make credit approval, denial, pricing or other lending decisions, and no automated tool on our website makes those decisions. Licensed loan officers and underwriters review loan applications. Please do not enter Social Security numbers, account numbers or other sensitive information in the chat.
Data Retention, Storage, and Minimization
We keep personal information only as long as reasonably necessary and proportionate for the purposes described in this notice, and as required by law. To decide how long to keep information, we consider:
- Loan, credit and underwriting records: the periods required by federal and state mortgage, fair lending, consumer protection and licensing laws, plus any legal hold.
- Inquiries, leads and appointments: while we are in contact with you and for a reasonable time afterward to respond to follow-up questions and keep business records.
- Communications: as required by recordkeeping laws and our business needs.
- Website analytics, cookies and identifiers: according to each cookie's lifetime and our providers' settings.
- Privacy requests: at least 24 months, as the CCPA regulations require.
- Security and fraud prevention logs: as long as needed to protect our systems and customers.
Your Rights
Subject to the exemptions and exceptions described in this notice and in the law, California residents have the following rights:
- Right to know and access: the categories and specific pieces of personal information we have collected about you, the sources, our purposes, and the categories of recipients. You may ask for information beyond the past 12 months where available, back to January 1, 2022.
- Right to data portability: a copy of your personal information in a portable, readily usable format.
- Right to delete: deletion of personal information we collected from you, except where we need it to complete a transaction, detect security incidents or fraud, comply with legal obligations (including mortgage recordkeeping laws), or as otherwise permitted by law.
- Right to correct: correction of inaccurate personal information, considering the nature of the information and why we use it. Loan records we must keep in their original form may be annotated rather than changed.
- Right to opt out of sale or sharing: see Do Not Sell or Share.
- Right to limit use of sensitive personal information: we use sensitive personal information only for purposes the law permits without this right, as described above. If that changes, we will offer a way to limit it.
- Automated decisionmaking: we do not use automated decisionmaking technology to make significant decisions about you, such as approving or denying credit, through our website. If we begin doing so, we will provide the notices and choices the regulations require.
- Non-discrimination and non-retaliation: we will not deny services, charge different prices or provide a different quality of service because you exercised these rights, and we will not retaliate against employees, applicants or contractors for exercising them.
How to Make a Request
- Online: California Privacy Rights Request Center
- Phone: (941) 231-1325
Verification. For requests to know, delete or correct, we confirm your identity by matching information you give us with information we hold, starting with a code sent to your email. We will never ask for your Social Security number or full account number through our website form. Opt-out requests do not require this level of verification.
Authorized agents. You may use an authorized agent. We may ask the agent for signed permission from you, and may ask you to verify your identity directly or confirm that you gave the agent permission, unless the agent holds a valid power of attorney.
Timing. We confirm receipt of requests to know, delete or correct within 10 business days and respond within 45 calendar days. If we need more time, up to 45 more days, we will tell you why. We act on opt-out requests as soon as feasible and no later than 15 business days.
Contact Us
Questions about this notice or our privacy practices:
Phone: (941) 231-1325
Tri-Peaks Mortgage Inc., d/b/a Mortgage Pro Home Loans
1052 Mill Creek Rd, Bradenton, FL 34212
We review and update this notice at least once every 12 months.