Privacy and Data Security Policies We take our clients’ financial privacy very seriously. During the course of processing your application, we accumulate non-public personal financial information from you and from other sources about your income, your assets, and your credit history in order to allow a lender to make an informed decision about granting you credit. This information is used for our everyday business purposes such as to process your transactions, maintain your accounts(s), respond to court orders and legal investigations, or report to the credit bureaus. We maintain physical, electronic, and procedural safeguards that comply with federal regulations to guard your nonpublic personal information. Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. We collect nonpublic information about you from the following sources: (i) information we receive from you on applications or other forms; (ii) information about your transactions with us, and (iii) information we receive from a consumer reporting agency. We share nonpublic information for our marketing purposes. If you are a new customer, we can begin sharing your information 45 days from the date we send this notice. When you are no longer our customer, we continue to share your information as described in this notice. Federal law gives you the right to limit only sharing for affiliates’ everyday business purposes — information about your credit worthiness, affiliates from using your information to market to you, and sharing for non-affiliates to market to you. State laws and individual companies may give you additional rights to limit sharing. V.I.P. Mortgage has no affiliates and does no joint marketing with non-affiliates. You have the right as a V.I.P. past or present customer to prevent the sharing of your nonpublic personal information that we use for marketing purposes. To do so, you can call our Marketing Director at 480-553-8437 or email firstname.lastname@example.org. If you have opted out in the past, you do not need to opt-out each year. Your opt-out remains in effect unless you notify us you would like to opt-in. How We Protect Your Privacy Information We Collect When you visit this site, we may collect certain types of information from you, such as information you voluntarily provide via forms, applications, etc. We may also collect information about you from your online browsing and transactions, including your preferences, pages visited, technical information regarding your computer and operating systems, such as your Internet Protocol (IP) address, domain name and system configuration and settings. Individualized Password When you sign up for online access to loan related information, you are asked to create your own username and password to access information related to your loan file. This information is encrypted during transmission. We allow you to select your own personal username (email address) to sign on. We strongly recommend that you use your own email address and not a shared email address that may be accessed by multiple parties. Cookies “Cookies” are alphanumeric identifiers in the form of text files that are inserted and stored by your Web browser on your computer’s hard drive. VIP Mortgage Inc. may set and access cookies on your computer to track and store identifying information about you. We also may gather information about you using cookie technology. For example, VIP Mortgage Inc. may assign a cookie to you to limit the amount of times you see particular information. Please note that most Internet browsers will allow you to stop cookies from being stored on your computer and to delete cookies stored on your computer. If you choose to eliminate cookies, the full functionality of the Service may be impaired for you. We encode our cookies so that only we can interpret the information stored in them. Firewall Our firewall policies are designed to: • Ensure the system is able to examine information content • Ensure that logging functionality is consistent with access controls • Support advanced user authentication • Detect intrusions • Respond to intrusions • Cover domain name, HTTP, SMTP, DNS and IP traffic Data Center Security The site for maintaining the information systems components must have the least amount of exposure from internal and external sources. • Our data center is located in a SSAE 16 Type II certified facility • Data center staffed and surveilled 24/7 • Data center secured by security guards, visitor logs, and entry requirements (passcards/biometric recognition) • Servers are kept in a locked cage • Digital surveillance equipment monitors the data center • Environmental controls for temperature, humidity and smoke/fire detection • All customer data is stored on servers located in the United States Document Destruction Credit reports, mortgage applications, financial statements, tax returns, paystubs, W-2 forms, retirement income documentation, etc. and numerous other documents that contain the borrower’s Social Security Numbers, names of financial institutions, account numbers, etc. must be destroyed using any of the following methods: Commercially-built Mechanical Shredder On-site Services provided by Shredding Service company (such as Shred-It, or other licensed commercial provider) Wrinkling of documents, tearing into sections and disposing into the office trash is not acceptable, as long there is any way that confidential information can be retrieved. Original loan documents that are removed from the office for the purpose of at-home work must be kept in a safe, secure area during travel and the off-site location. Any lost or misplaced confidential documents must be reported to the Operations Manager immediately. Any employee, representative or affiliate of the V.I.P. Mortgage, Inc. found disposing credit reports or any income, asset, liability information of consumers in any outside or publicly accessible area shall be grounds for disciplinary action, including termination. Sharing LEGAL DISCLAIMER: ALTHOUGH WE MAKE EVERY EFFORT TO PRESERVE — USER PRIVACY, WE MAY NEED TO DISCLOSE PERSONAL INFORMATION WHEN (I) REQUIRED BY LAW WHEREIN WE HAVE A GOOD-FAITH BELIEF THAT SUCH ACTION IS NECESSARY TO COMPLY WITH A CURRENT JUDICIAL PROCEEDING, A COURT ORDER OR LEGAL PROCESS SERVED ON OUR WEB SITE; OR (II) NECESSARY TO PROTECT AND DEFEND THE RIGHTS OR PROPERTY OF VIP MORTGAGE INC. OR VIP MORTGAGE INC. AFFILIATES, INCLUDING THEIR WEB SITES. VIP MORTGAGE INC. DOES NOT SHARE PERSONAL INFORMATION WITH THIRD PARTIES EXCEPT AS STATED IN THIS PRIVACY STATEMENT. IN ADDITION, WE MAY SHARE AGGREGATE DATA WITH THIRD PARTIES WHERE SUCH DISCLOSURE DOES NOT ENTAIL THE DISCLOSURE OF ANY PERSONALLY-IDENTIFIABLE INFORMATION. Third-Party Content VIP Mortgage Inc. and its agents are in no way responsible for the content of any site owned by a third party that may be linked to VIP Mortgage Inc.’s Web site via hyperlink, whether such hyperlink is provided by VIP Mortgage Inc. or by a third party. The fact that we have provided a link to a site is NOT endorsement, authorization, sponsorship, or affiliation by us with respect to such site, its owners or its providers. This information shall not be construed in any way as providing business, legal or other advise, or warranting V.I.P. Mortgage’s security systems as fail proof.