Notice at Collection (Multi-State)
Effective Date: July 2024
Last Reviewed/Revised on: November 2024
This Multi-State Notice at Collection and Privacy Policy explains how Rithm Capital Corp. (“Company”, “us”, “our”, or “we”) collects, uses, discloses, sells, shares, and retains personal information (“Information Practices”) subject to applicable U.S. state privacy laws.
This disclosure only applies to certain states residents (“consumers” or “you”). U.S. state privacy laws do not apply to certain information collected by our financial services subsidiaries or affiliates, such as information subject to the Gramm-Leach-Bliley Act, the Fair Credit Reporting Act, and certain other state or federal privacy laws. For example, this disclosure does not apply to information that we collect about individuals who seek, apply for, or obtain our financial products and services for personal, family, or household purposes. If Company services your mortgage loan, please refer to the financial privacy notices for consumers of personal, household or family financial product or services that was provided to you by mail.
This disclosure does not apply to information we collect in the context of an individual’s interaction with us as a job applicant, employee, contractor, or other role within the Company. Please refer to our CCPA Workforce Disclosure on our Careers homepage.
Notice at Collection
The purpose of this Notice at Collection is to provide you with timely notice, at or before the point of collection, about the categories of personal information we may collect from you and the purposes for which the personal information may be used, including whether that information is sold or shared. Please note that most of the information we use is in the context of providing financial products and services for personal, family, or household purposes, and is therefore not subject to this disclosure.
General Personal Information
Categories of Personal Information |
Purposes for Collection and Use |
Sold to Third Parties or Shared with Third Parties for Cross-Context Behavioral Advertising |
Identifiers: For example, a real name, alias, postal address, Internet Protocol address, email address, or other similar identifiers. |
|
No
|
(Pursuant to California law) Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, a name, signature, Social Security number, address, telephone number, or financial information. |
No
|
|
(Pursuant to California law) Characteristics of CA or Federal Protected Classifications: For example, demographic information, age, disability status, veteran status. |
No |
|
Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered. |
No |
|
Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement. |
No |
|
Sensory or Surveillance Data: For example, call recordings. |
No |
|
Professional or Employment-Related Information: For example, compensation, evaluations, performance reviews, personnel files, and current and past job history. |
No |
|
Profile Data: For example, inferences drawn from personal information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
No |
Sensitive Personal Information
We do not use or disclose the below sensitive personal information for purposes other than those business purposes specifically enumerated under the applicable U.S. privacy laws. As a result, we do not offer a right to limit our use or disclosure of these categories of sensitive personal information.
Categories of Sensitive Personal Information |
Purposes for Collection and Use |
Sold to or Shared with Third Parties for Cross-Context Behavioral Advertising |
(Pursuant to California law) Social Security Number, Driver’s License, State Identification Card, or Passport Number |
|
No |
(Pursuant to California law) Account log-in, financial account, debit card, or credit card number when provided with any required security or access code, password, or credentials allowing access to an account |
|
No |
Racial or ethnic origin |
|
No |
Retention Periods
We retain each category of personal information for different periods of time depending on the purposes for which we collect and use it. In each case, we will only retain the personal information for as long as 4 reasonably necessary to achieve the purposes for which we collected, used, or disclosed it, unless a longer retention period is required to comply with applicable legal and regulatory requirements.
Notice of Sale and/or Share
Our use of tracking technologies may be considered a sale or sharing with third parties for cross-context behavioral advertising (e.g. targeted advertising) under applicable U.S. privacy laws. You can opt-out of being tracked by these third parties by clicking the “Do Not Sell or Share My Personal Information” link, as described in our “Right to Opt-Out of Sale/Sharing” notice in our Privacy Policy.
Please review our Privacy Policy below.
Privacy Policy
The purpose of this privacy policy is to provide you with a comprehensive description of our online and offline practices regarding the collection, use, disclosure, retention, sharing, and sale of personal information and of your rights as it relates to our Information Practices and how you can exercise those rights.
The following table includes disclosures for the preceding 12 months of: categories of personal information we may have collected about consumers, the categories we may have disclosed for a business purpose, and categories of third parties with whom we may have shared the personal information during that period.
General Personal Information
The following categories have been collected and disclosed in the preceding 12 months |
Business or Commercial Purpose for Collection & Disclosure |
Categories of third parties to whom the information was disclosed |
Identifiers |
|
|
(Pursuant to California law) Personal Information Categories from Cal. Civ. Code § 1798.80(e) |
||
(Pursuant to California law) Characteristics of CA or Federal Protected Classifications |
|
|
Internet or Other Similar Network Activity |
|
|
Sensory or Surveillance Data |
|
|
Professional or Employment-Related Information |
|
|
Profile Data |
|
|
Sensitive Personal Information
We do not use or disclose the below sensitive personal information for purposes other than those business purposes specifically enumerated under applicable U.S. privacy laws. As a result, we do not offer a right to limit our use or disclosure of these categories of sensitive personal information.
The following categories have been collected and disclosed in the preceding 12 months |
Business or Commercial Purpose for Collection & Disclosure |
Categories of third parties to whom this information was disclosed |
(Pursuant to California law) Social Security Number, Driver’s License, State Identification Card, or Passport Number |
|
|
Racial or ethnic origin |
|
|
(Pursuant to California law) Account log-in, financial account, debit card, or credit card number when provided with any required security or access code, password, or credentials allowing access to an account |
|
|
For each category of personal information identified above, we also disclose such personal information to the following categories of third parties:
- At Your Direction. We may disclose your personal information to any third party with your consent or at your direction.
- Business Transfers or Assignments. We may disclose your personal information to other entities as reasonably necessary to facilitate a merger, sale, joint venture or collaboration, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
- Legal and Regulatory. We may disclose your personal information to government authorities, including regulatory agencies and courts, as reasonably necessary for our business operational purposes, to assert and defend legal claims, and otherwise as permitted or required by law
The categories identified as collected in the tables above were collected from the following categories of sources:
- Information from you that you actively provide. We collect this information from sources such as from communications with us via online forms, e-mail, and telephone.
- Information from you that you passively provide from your use of our sites and services. We collect this information from sources such as web browsers, e-mails, apps, and smartphones.
- We may also collect this information from our observations and interactions with you.
- Information from third parties. We collect this information from the following sources such as:
- Our affiliates
- Credit Reporting Agencies
- Marketing partners
- Advertising networks
- Internet service providers
- Data analytics providers
- Government entities
- Operating systems and platforms
- Social networks
- Data brokers
What We Sell to Third Parties or Share with Third Parties for Cross-Context Behavioral Advertising
We have sold or shared with third parties for cross-context behavioral advertising (e.g., targeted advertising) personal information to third parties in the preceding 12 months as disclosed in the table below. We do not sell or share your sensitive personal information.
Categories sold to or shared with Non-Service Providers over the last 12 months | Categories of Non-Service Providers to whom this category of personal information has been sold or shared |
Identifiers |
|
Internet or Other Similar Network Activity |
|
We do not sell or share: other personal information, including sensitive information, as described in the tables above.
The purpose of the notice of Right to Opt-Out is to inform you that you have the right to direct us to stop selling or using your personal information for targeted advertising purposes, which is called the "Right to Opt-Out."
You may exercise your Right to Opt-Out by: (1) clicking Do Not Sell or Share My Personal Information to use the interactive form, or (2) submitting your request through an opt-out preference signal (described further below in the section titled "Opt-Out Preference Signals").
Once you make an opt-out request, we will comply within 15 business days.
We do not have actual knowledge that we sell the personal information of minors under 16 years of age
Your Right to Know
You have the right to request that we disclose what personal information we collect, use, disclose, sell, or share with third parties for cross-context behavioral advertising (e.g. targeted advertising). You have the right to request any of the following:
- the categories of personal information we have collected about you
- the categories of sources from which the personal information is collected
- the business or commercial purpose for collecting, selling, or sharing with third parties for cross context behavioral advertising (e.g. targeted advertising)
- the categories of third parties to whom we disclose personal information
- the specific pieces of personal information we have collected about you
You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”
Your Right to Request Correction of Inaccurate Personal Information
You have the right to request correction of inaccurate personal information maintained by us. We may request documentation from you to determine the accuracy of the information maintained by us. If you provide us documentation either upon our request or through your own initiative, that documentation will only be used or maintained by us for the purpose of correcting your personal information and complying with our recordkeeping requirements under applicable U.S. privacy laws. We may deny your request if we have previously denied your same request to correct an alleged inaccuracy in the past six (6) months, unless you provide new or additional documentation that the information at issue is inaccurate.
As an alternative to correction, we may delete the inaccurate information if it does not negatively impact you or if you consent to this deletion. We reserve the right to deny this request if allowed under law, or if we determine that the contested information is more likely than not accurate, based on the totality of circumstances. You can submit a correction request through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”
Your Right to Request Deletion of Your Personal Information
You have the right to request that we delete any of your personal information collected by us, subject to certain exceptions. You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”
There may be scenarios where we deny your deletion request. If that occurs, we will provide you with an explanation as to why we could not delete all or some of your personal information.
Submitting a Verified Consumer Request
You have the right to submit verified consumer requests to know information, to correct information, or for deletion.
You can submit a request through our webform or via email at customer_support@rithmcap.com. Your request will be verified using information you provide as described on the web form. Your request will be verified by matching the information you provide to information that we have collected.
If you submit a request that is not through one of these designated methods or is deficient in some manner unrelated to verification, we will provide you with information on how to submit the request or remedy any deficiencies.
Please note that, depending on the applicable state law, we may not be required to provide personal information to you if you make multiple requests in a certain time period. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Once we receive your verifiable consumer request, we will respond to your request within the appropriate time frame(s), if we are able to verify your identity. Requests for deletion from a California resident will require a separate confirmation that you want your information deleted.
Requests to Know or Delete for Child Under the Age of 13: We do not knowingly collect information of minors under the age of 13.
Using an Authorized Agent to Submit a Request
California: Only you, or a natural person or a business entity registered with the Secretary of State to conduct business in California that you have authorized to act on your behalf, may make a verifiable consumer request related to your personal information or a request to opt-out of sale or sharing. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465.
Other Applicable States: If you use an authorized agent, you may provide a power of attorney executed pursuant to applicable state law. If a power of attorney is not submitted, you may be required to provide commercially reasonable identification of your identity and evidence of your authorized agent’s authority to act on your behalf. 13 If a power of attorney that meets those provisions is not submitted, you will be required to provide the authorized agent signed permission to submit a request, verify your identity directly with us, and directly confirm with us that you provided the authorized agent permission to submit the request.
If you’re an authorized agent making a request, you must submit a verified consumer request via the webform and:
- Provide the power of attorney provided to you by the consumer pursuant to the applicable state law; or
- Provide proof of signed permission along with a copy of your ID and have the consumer submit proof through our webform to directly confirm with us that they provided you permission to submit the request.
Opt-Out Preference Signals/Universal Opt-Out Mechanism
Our use of tracking technologies may be considered a sale or share for targeted advertising under applicable state law. You can opt-out of being tracked by these third parties by clicking the "Do Not Sell or Share My Personal Information" link at the bottom of our website and selecting your preferences, or by broadcasting an Opt-Out Preference Signal/Universal Opt-Out Mechanism, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. Because the signal is browser-specific, you will need to broadcast subsequent signals if you are accessing our website through different online devices (e.g., computers, smartphones, tablets).
Your Right to Non-Discrimination for the Exercise of a Privacy Right
We will not discriminate against you for exercising any of your U.S. state privacy law rights. Unless permitted by the applicable laws, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Supplemental U.S. State Privacy Rights
In addition to the privacy rights listed above, certain states provide supplemental privacy rights to residents of those states.
Right to Opt-Out of Certain Profiling
You have the right to opt-out of our use of profiling when used to make decisions that produce a legal or similarly significant effect concerning you or your interactions with us. Currently, we do not engage in such profiling.
Right to Appeal
You have the right to appeal our refusal to take action on, or respond to, a verified consumer request. Upon receipt of our denial or refusal to take action on, or to respond to, a verified consumer request, a consumer has 90 days to submit a request to appeal our decision by mail. We will timely inform you in writing of any action taken or not taken in response. We will also include a written explanation of the reasons for our decision.
Changes to Our Privacy Notice
We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the website and update the notice’s effective date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.
Contact for More Information
If you have any questions or comments about this notice, the ways in which we collect and use your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Email:
customer_support@rithmcap.com
Mail:
Rithm Capital
Verified Consumer Requests
799 Broadway, 8th Floor
New York, New York 10003
Read our Notice at Collection – Multi-State