Consumer Privacy Policy for Specific State Residents

Consumer Privacy Policy for Specific State Residents

The California Consumer Privacy Act ("CCPA"), Oregon Consumer Privacy Act ("OCPA"), and Minnesota Consumer Data Privacy Act ("MCDPA") (collectively, "state law") Privacy Policy supplements the information contained in PennyMac Loan Services, LLC dba Townsgate Servicing ("Townsgate")'s online "Privacy Policy." Townsgate adopts this privacy policy to comply with the CCPA, OCPA, and MCDPA, and it applies solely to persons who reside in those states ("consumer" or "you").

You are provided with privacy rights related to the personal information businesses process about you and your household. The purpose of this privacy policy is to provide you with a description of Townsgate’s business practices regarding the collection, use, sale, sharing, and retention of your personal information, and of your rights regarding your personal information.

Generally, you have the right to know what personal information Townsgate collects, uses, sells, shares, and retains about you, the right to request the deletion of your personal information, the right to correct inaccuracies in your personal data, the right to opt-out of Townsgate processing your personal information for certain purposes, and the right to a list of specific third parties to which Townsgate may have disclosed your personal information. However, these rights only extend to certain information covered by state law, and because state law does not cover all consumer information in all scenarios, only certain information is subject to the above referenced rights.

Exceptions:

State law contains certain exceptions. For example, privacy rights established under state law (including the right to know and right to delete) do not apply to personal information collected or disclosed pursuant to the Gramm-Leach-Bliley Act ("GLBA") and the Fair Credit Reporting Act ("FCRA"). Such personal information may include, but is not limited to:

  • Identifiers (such as name, mailing address, email address, online identifier, internet protocol address, account number, telephone number, driver’s license number, passport number, social security number, date of birth); and
  • Consumer records (such as age, gender, marital status, annual income, employment or professional related information, account transactions, payment history, claims history, and consumer

INFORMATION TOWNSGATE MAY COLLECT, USE, OR DISCLOSE

Category Examples Collected Within the Previous 12 Months
Identifiers A real name, alias, mailing address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver's license number or state identification card number, date of birth, passport number, or other similar identifiers. Yes
Any categories of personal information described in the California Customer Records Act (Cal. Civ. Code section 1798.80(e)) A name, signature, social security number, address, telephone number, passport number, driver's license or state identification card number, education, employment, employment history, criminal history, credit history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Yes
Characteristics of protected classifications Race, color, age (40 and older), national origin, ancestry, citizenship, mental or physical disability, sex/gender (includes pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity and gender expression, military or veteran status, marital status, medical condition, political affiliations or activities, primary language, immigration status, or protected medical leaves. Yes
Commercial Information Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. Yes
Biometric information Physiological, biological or behavioral characteristics that can be used to establish individual identity, such as a fingerprint or voiceprint. No
Internet or other electronic network activity Browsing history, search history, and information regarding interaction with an Internet Web site, application, or advertisement. No
Geolocation data Physical location or movements. No
Sensory data Audio, electronic, visual, or similar information, such as call and video recordings. Yes
Professional or employment-related information Current or past employment history. Yes
Non-public education information, per the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99) Education records that are directly related to a student and maintained by an educational agency or institution or by a party acting for the agency or institution, such as transcripts, graduation information, degree, licenses, or certifications. Yes
Inferences drawn from any personal information A profile reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes. Yes
Sensitive Personal Information Personal information that reveals a consumer's social security, driver's license, state identification card, or passport number. A consumer's account log-in, financial account, debit card, or credit card in combination with any required security or access code, password, or credentials allowing access to an account. A consumer's precise geolocation, racial or ethnic origin, mental or physical health condition or diagnosis, sexual orientation, citizenship or immigration status, religious or philosophical beliefs, or union membership. The contents of a consumer's mail, email, or text messages unless the business is the intended recipient of the communication. A consumer's genetic data. The processing of biometric information for the purpose of uniquely identifying a consumer. Yes

Categories of Sources From Which Personal Information is Collected

  • Information you provided directly to Townsgate
  • Information collected through Townsgate's websites
  • Information provided by third parties, such as lead providers, service providers, credit reporting agencies, or government entities
  • Information collected using web technologies

Purpose For Collecting Personal Information

  • Originating your loan
  • Servicing your loan
  • Marketing
  • Analytics
  • Business purposes

Why Townsgate Might Use or Disclose Your Personal Information to Third Parties

  • Activities related to the origination of your loan
  • Activities related to the servicing of your loan
  • Marketing
  • Analytics
  • Business purposes

Why Townsgate Might Use or Disclose Your Sensitive Personal Information to Third Parties

  • Townsgate only uses or discloses sensitive personal information for the following purposes:
  • Originate or service your loan
  • Detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information
  • Resist malicious, deceptive, fraudulent, or illegal actions directed at Townsgate to prosecute those responsible for those actions
  • Ensure the physical safety of natural persons

Who Townsgate May Disclose Your Personal Information To and What Townsgate Might Disclose(Examples of each Category are included in the table above)

Third Parties
Category Suppliers, Service Providers, or Professional Service Firms Affiliates Non-Affiliate Regulators, Legal Authorities, or Other Similar Authorities and/or Agencies
Identifiers
Personal Information Categories
Protected Classification Characteristics
Commercial Information
Biometric Information N/A N/A N/A N/A
Internet or other electronic network activity N/A
Geolocation data N/A N/A N/A N/A
Sensory data N/A
Professional or employment-related information
Non-public education information
Inferences drawn from any personal information N/A N/A N/A
Sensitive Personal Information

Regulators, legal authorities, or other similar authorities and/or agencies may process your personal information to oversee Townsgate's compliance with legal and regulatory requirements.

Sale or Sharing of Information

Townsgate does not sell personal information.

Townsgate does not have actual knowledge that it has sold, shared, or processed the personal information of consumers under 18 years of age.

YOUR PRIVACY RIGHTS

Right to Know

You have the right to request that Townsgate disclose the personal information Townsgate has collected or processed about you, including the categories of personal information, categories of sources from which the personal information was collected, the purpose for collecting, selling, or sharing personal information, a list of third parties to whom Townsgate disclose personal information, and the categories of third parties to whom Townsgate disclose personal information.

Right to Access

You have the right to request that Townsgate disclose the specific pieces of personal information Townsgate has collected about you.

Right to Request Deletion

You have the right to request the deletion of the personal information Townsgate collected about you.

Townsgate may deny your request if there are any conflicts with Townsgate's corporate record retention requirements, federal or state law, or if it falls under any other state law exception.

Right to Request Correction

You have the right to request that Townsgate correct inaccurate personal information Townsgate maintains about you.

Right to Non-Discrimination for the Exercise of a Consumer's Privacy Rights

Townsgate does not discriminate against you for exercising your state law privacy rights.

Authorized Third Party

If you are an authorized third party (such as an attorney-in-fact) making a request on behalf of someone else, please contact Townsgate using one of the methods provided below. You may be asked to provide proof that you are authorized to submit the request.

How to Submit Your Request

To submit a request, click on "Submit a Request" or call Townsgate toll-free at (844) 583-2800.

Townsgate will verify your identity using the personal information you provide, which must include your name, address, and email address.

How to Appeal Townsgate's Denial of Your Previous Request

To submit an appeal of Townsgate's denial of your previous request, click on "Submit a Request" or call Townsgate toll-free at (844) 583-2800.

NOTICE OF RIGHT TO OPT OUT

You have the right to opt-out of the sale or sharing of your personal information. Townsgate does not sell or share your personal information.

RETENTION CRITERIA

The length of time Townsgate intend to retain your personal information depends on (I) applicable legal and regulatory requirements (ii) whether Townsgate need to retain the information for a business purpose(s) and/or (iii) whether you exercised your right, subject to certain exceptions, to request deletion of your information.

Contact Information:

If you have any questions or concerns about Townsgate privacy policies and practices, you may contact Townsgate using the information below.

Address: Corporate Privacy
PO Box 788
Moorpark, CA 93020-9903
Phone: (844) 583-2800
Email:

A link to Townsgate's consumer privacy policies may be found at TOWNSGATESERVICING.COM/PRIVACY

This privacy policy was last updated on July 31, 2025 and is subject to change.

Rev. 07/2025