Skip to content

Notice at Collection (Multi-State)

Effective Date: July 2024
Last Reviewed/Revised on: November 2024

This Multi-State Notice at Collection and Privacy Policy explains how Rithm Capital Corp. (“Company”, “us”, “our”, or “we”) collects, uses, discloses, sells, shares, and retains personal information (“Information Practices”) subject to applicable U.S. state privacy laws.

This disclosure only applies to certain states residents (“consumers” or “you”). U.S. state privacy laws do not apply to certain information collected by our financial services subsidiaries or affiliates, such as information subject to the Gramm-Leach-Bliley Act, the Fair Credit Reporting Act, and certain other state or federal privacy laws. For example, this disclosure does not apply to information that we collect about individuals who seek, apply for, or obtain our financial products and services for personal, family, or household purposes. If Company services your mortgage loan, please refer to the financial privacy notices for consumers of personal, household or family financial product or services that was provided to you by mail.

This disclosure does not apply to information we collect in the context of an individual’s interaction with us as a job applicant, employee, contractor, or other role within the Company. Please refer to our CCPA Workforce Disclosure on our Careers homepage. 

Notice at Collection  

The purpose of this Notice at Collection is to provide you with timely notice, at or before the point of collection, about the categories of personal information we may collect from you and the purposes for which the personal information may be used, including whether that information is sold or shared. Please note that most of the information we use is in the context of providing financial products and services for personal, family, or household purposes, and is therefore not subject to this disclosure.

General Personal Information

Categories of Personal Information 

Purposes for Collection and Use  

Sold to Third Parties or Shared with Third Parties for Cross-Context Behavioral Advertising 

Identifiers: For example, a real name, alias, postal address, Internet Protocol address, email address, or other similar identifiers.

  • To fulfill or meet the reason for which the information is provided

  • For our internal operation purposes

  • For auditing relating to consumer transactions including ad impressions and compliance with regulations

  • Fraud and security detection

  • Debugging to identify and repair errors

  • Short-term data use for the current interaction that is not used to build a profile

  • For advertising and marketing purposes

  • Performing services on behalf of the business, including maintaining or servicing accounts, providing products or services, providing customer service, processing orders or transactions, verifying customer information, processing payments, providing financing, providing analytic services, storage, or other similar services

  • Undertaking internal research for technological development and demonstration

  • Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.

  • To share the personal information with service providers to carry out other business purposes.

 

No 

 

(Pursuant to California law) Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, a name, signature, Social Security number, address, telephone number, or financial information.

No 

 

(Pursuant to California law) Characteristics of CA or Federal Protected Classifications: For example, demographic information, age, disability status, veteran status.

No 

Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered. 

No 

Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement. 

No 

Sensory or Surveillance Data: For example, call recordings.  

No 

Professional or Employment-Related Information: For example, compensation, evaluations, performance reviews, personnel files, and current and past job history. 

No 

Profile Data: For example, inferences drawn from personal information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

No 

Sensitive Personal Information

We do not use or disclose the below sensitive personal information for purposes other than those business purposes specifically enumerated under the applicable U.S. privacy laws. As a result, we do not offer a right to limit our use or disclosure of these categories of sensitive personal information.

Categories of Sensitive Personal Information 

Purposes for Collection and Use 

Sold to or Shared with Third Parties for Cross-Context Behavioral Advertising 

(Pursuant to California law) Social Security Number, Driver’s License, State Identification Card, or Passport Number

  • To perform services or provide goods you request and reasonably expect from us
  • To investigate or curtail malicious, fraudulent, or illegal actions directed at us and to prosecute those responsible 
  • To perform services for our business needs such as maintaining accounts, providing customer service, providing financing, verifying customer information, or processing payments
  • To collect or process sensitive personal information where such information is not being used to infer characteristics about you but may be used to provide a specific good or service based on the sensitive information you provided

No 

(Pursuant to California law) Account log-in, financial account, debit card, or credit card number when provided with any required security or access code, password, or credentials allowing access to an account 

  • To perform services or provide goods you request and reasonably expect from us 

  • To investigate or curtail malicious, fraudulent, or illegal actions directed at us and to prosecute those responsible 

  • To perform services for our business needs such as maintaining accounts, providing customer service, providing financing, verifying customer information, or processing payments

 

No 

Racial or ethnic origin 

  • We collect racial and ethnic origin information on loan application per federal legal requirements.

No  

Retention Periods 

We retain each category of personal information for different periods of time depending on the purposes for which we collect and use it. In each case, we will only retain the personal information for as long as 4 reasonably necessary to achieve the purposes for which we collected, used, or disclosed it, unless a longer retention period is required to comply with applicable legal and regulatory requirements.

Notice of Sale and/or Share 

Our use of tracking technologies may be considered a sale or sharing with third parties for cross-context behavioral advertising (e.g. targeted advertising) under applicable U.S. privacy laws. You can opt-out of being tracked by these third parties by clicking the “Do Not Sell or Share My Personal Information” link, as described in our “Right to Opt-Out of Sale/Sharing” notice in our Privacy Policy.

Please review our Privacy Policy below. 

Privacy Policy 

The purpose of this privacy policy is to provide you with a comprehensive description of our online and offline practices regarding the collection, use, disclosure, retention, sharing, and sale of personal information and of your rights as it relates to our Information Practices and how you can exercise those rights.

The following table includes disclosures for the preceding 12 months of: categories of personal information we may have collected about consumers, the categories we may have disclosed for a business purpose, and categories of third parties with whom we may have shared the personal information during that period. 

General Personal Information

The following categories have been collected and disclosed in the preceding 12 months 

Business or Commercial Purpose for Collection & Disclosure 

Categories of third parties to whom the information was disclosed 

     

Identifiers  

  • For our operational purposes or the operational purposes of our service provider or contractors.
  • Keeping track of visitors to our website and monitoring the effectiveness of our advertising, including auditing relating to counting ad impressions of unique visitors, verifying positioning and quality, and auditing compliance.
  • Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose.
  • Debugging to identify and repair errors that impair existing functionality.
  • Short-term, transient use
  • Performing services on behalf of the business, including maintaining or servicing accounts, providing products or services, providing customer service, processing orders or transactions, verifying customer information, processing payments, providing financing, providing analytic services, storage, or other similar services.
  • Providing advertising and marketing services. 
  • Undertaking internal research for technological development. 
  • Undertaking activities to verify or maintain quality or safety of a service or device and to improve or enhance a service or device.
  • Cloud storage providers
  • Payment processors
  • Web analytics providers
  • Web hosting service providers
  • E-mail distribution service providers
  • Help Desk service providers 
  • Financial and accounting service providers
  • Cybersecurity service providers
  • Logistics and planning tool providers
  • Customer relationship management tool providers
  • Business partners used throughout the loan origination process and the servicing of your loan, for example: real estate appraisers, credit reporting agencies, title insurance companies, auditors, property preservation companies, foreclosure law firms/trustees, as well as the owner/ investor of your loan.
  • Federal and state governmental agencies as part of the loan process or their supervision of the company. 

(Pursuant to California law) Personal Information Categories from Cal. Civ. Code § 1798.80(e) 

   

(Pursuant to California law) Characteristics of CA or Federal Protected Classifications 

  • For our operational purposes or the operational purposes of our service provider or contractors
  • As required by federal or state law
  • To provide additional information about our customers when such information is voluntarily disclosed or provided 
 

Internet or Other Similar Network Activity  

  • Providing analytics and advertising and marketing services.
  • Undertaking activities to verify or maintain quality or safety of a service or device and to improve or enhance a service or device. 
  • Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose.
  • Cloud storage providers
  • Payment processors
  • Web analytics providers
  • Web hosting service providers
  • E-mail distribution service providers
  • Help Desk service providers
  • Financial and accounting service providers
  • Cybersecurity service providers
  • Logistics and planning tool providers
  • Customer relationship management tool providers 

Sensory or Surveillance Data 

  • For our operational purposes or the operational purposes of our service provider or contractors.
  • Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose.
  • Undertaking activities to verify or maintain quality or safety of a service or device and to improve or enhance a service or device. 
  • Help Desk service providers
  • Customer relationship management tool providers

Professional or Employment-Related Information 

  • For our operational purposes or the operational purposes of our service provider or contractors.
  • Performing services on behalf of the business, including maintaining or servicing accounts, providing products or services, providing customer service, processing orders or transactions, verifying customer information, processing payments, providing financing, providing analytic services, storage, or other similar services.  
  • Financial and accounting service providers
  • Logistics and planning tool providers
  • Customer relationship management tool providers

Profile Data 

  • For our operational purposes or the operational purposes of our service provider or contractors.
  • Providing analytics and advertising and marketing services.
  • Cloud storage providers
  • Payment processors
  • Web analytics providers
  • Web hosting service providers
  • E-mail distribution service providers
  • Help Desk service providers
  • Financial and accounting service providers
  • Cybersecurity service providers
  • Logistics and planning tool providers
  • Customer relationship management tool providers
  • Business partners used throughout the loan origination process and the servicing of your loan, for example: real estate appraisers, credit reporting agencies, title insurance companies, auditors, property preservation companies, foreclosure law firms/trustees, as well as the owner/ investor of your loan.

Sensitive Personal Information 

We do not use or disclose the below sensitive personal information for purposes other than those business purposes specifically enumerated under applicable U.S. privacy laws. As a result, we do not offer a right to limit our use or disclosure of these categories of sensitive personal information. 

The following categories have been collected and disclosed in the preceding 12 months 

Business or Commercial Purpose for Collection & Disclosure

Categories of third parties to whom this information was disclosed 

     

(Pursuant to California law) Social Security Number, Driver’s License, State Identification Card, or Passport Number

  • To perform services or provide goods you request and reasonably expect from us. •
  • To perform services for our business needs such as maintaining accounts, providing customer service, and fulfill orders. •
  • To collect or process sensitive personal information where such information is not being used to infer characteristics about you but may be used to provide a specific good or service based on the sensitive information you provided.
  • Cloud storage providers
  • Customer relationship management tool providers
  • Business partners used throughout the loan origination process and the servicing of your loan, for example: real estate appraisers, credit reporting agencies, title insurance companies, auditors, property preservation companies, foreclosure law firms/trustees, as well as the owner/ investor of your loan.
  • Federal and state governmental agencies as part of the loan process or their supervision of the company. 

Racial or ethnic origin

  • To perform services or provide goods you request and reasonably expect from us.
  • To perform services for our business needs such as maintaining accounts, providing customer service, and fulfill orders.
  • Customer relationship management tool providers
  • Federal and state governmental agencies as part of the loan process or their supervision of the company.

(Pursuant to California law) Account log-in, financial account, debit card, or credit card number when provided with any required security or access code, password, or credentials allowing access to an account

  • To perform services or provide goods you request and reasonably expect from us
  • To investigate or curtail malicious, fraudulent, or illegal actions directed at us and to prosecute those responsible
  • To perform services for our business needs such as maintaining accounts, providing customer service, providing financing, verifying customer information, or processing payments
  • Cloud storage providers
  • Payment processors
  • Help Desk service providers
  • Financial and accounting service providers
  • Cybersecurity service providers
  • Logistics and planning tool providers

For each category of personal information identified above, we also disclose such personal information to the following categories of third parties:

  • At Your Direction. We may disclose your personal information to any third party with your consent or at your direction.
  • Business Transfers or Assignments. We may disclose your personal information to other entities as reasonably necessary to facilitate a merger, sale, joint venture or collaboration, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
  • Legal and Regulatory. We may disclose your personal information to government authorities, including regulatory agencies and courts, as reasonably necessary for our business operational purposes, to assert and defend legal claims, and otherwise as permitted or required by law

The categories identified as collected in the tables above were collected from the following categories of sources:

  • Information from you that you actively provide. We collect this information from sources such as from communications with us via online forms, e-mail, and telephone.
  • Information from you that you passively provide from your use of our sites and services. We collect this information from sources such as web browsers, e-mails, apps, and smartphones.
  • We may also collect this information from our observations and interactions with you.
  • Information from third parties. We collect this information from the following sources such as:
    • Our affiliates 
    • Credit Reporting Agencies
    • Marketing partners 
    • Advertising networks 
    • Internet service providers 
    • Data analytics providers 
    • Government entities
    • Operating systems and platforms
    • Social networks
    • Data brokers

What We Sell to Third Parties or Share with Third Parties for Cross-Context Behavioral Advertising 

We have sold or shared with third parties for cross-context behavioral advertising (e.g., targeted advertising) personal information to third parties in the preceding 12 months as disclosed in the table below. We do not sell or share your sensitive personal information.

Categories sold to or shared with Non-Service Providers over the last 12 months Categories of Non-Service Providers to whom this category of personal information has been sold or shared
Identifiers
  • Analytics providers
  • Advertising partners
Internet or Other Similar Network Activity

 

  • Analytics providers
  • Advertising partners

 

We do not sell or share: other personal information, including sensitive information, as described in the tables above.

The purpose of the notice of Right to Opt-Out is to inform you that you have the right to direct us to stop selling or using your personal information for targeted advertising purposes, which is called the "Right to Opt-Out."

You may exercise your Right to Opt-Out by: (1) clicking Do Not Sell or Share My Personal Information to use the interactive form, or (2) submitting your request through an opt-out preference signal (described further below in the section titled "Opt-Out Preference Signals").

Once you make an opt-out request, we will comply within 15 business days.

We do not have actual knowledge that we sell the personal information of minors under 16 years of age

Your Right to Know

You have the right to request that we disclose what personal information we collect, use, disclose, sell, or share with third parties for cross-context behavioral advertising (e.g. targeted advertising). You have the right to request any of the following:

  • the categories of personal information we have collected about you 
  • the categories of sources from which the personal information is collected
  • the business or commercial purpose for collecting, selling, or sharing with third parties for cross context behavioral advertising (e.g. targeted advertising) 
  • the categories of third parties to whom we disclose personal information
  • the specific pieces of personal information we have collected about you

You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

Your Right to Request Correction of Inaccurate Personal Information

You have the right to request correction of inaccurate personal information maintained by us. We may request documentation from you to determine the accuracy of the information maintained by us. If you provide us documentation either upon our request or through your own initiative, that documentation will only be used or maintained by us for the purpose of correcting your personal information and complying with our recordkeeping requirements under applicable U.S. privacy laws. We may deny your request if we have previously denied your same request to correct an alleged inaccuracy in the past six (6) months, unless you provide new or additional documentation that the information at issue is inaccurate. 

As an alternative to correction, we may delete the inaccurate information if it does not negatively impact you or if you consent to this deletion. We reserve the right to deny this request if allowed under law, or if we determine that the contested information is more likely than not accurate, based on the totality of circumstances. You can submit a correction request through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”  

Your Right to Request Deletion of Your Personal Information 

You have the right to request that we delete any of your personal information collected by us, subject to certain exceptions. You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

There may be scenarios where we deny your deletion request. If that occurs, we will provide you with an explanation as to why we could not delete all or some of your personal information. 

Submitting a Verified Consumer Request 

You have the right to submit verified consumer requests to know information, to correct information, or for deletion.  

You can submit a request through our webform or via email at customer_support@rithmcap.com. Your request will be verified using information you provide as described on the web form. Your request will be verified by matching the information you provide to information that we have collected.

If you submit a request that is not through one of these designated methods or is deficient in some manner unrelated to verification, we will provide you with information on how to submit the request or remedy any deficiencies.   

Please note that, depending on the applicable state law, we may not be required to provide personal information to you if you make multiple requests in a certain time period. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Once we receive your verifiable consumer request, we will respond to your request within the appropriate time frame(s), if we are able to verify your identity. Requests for deletion from a California resident will require a separate confirmation that you want your information deleted. 

Requests to Know or Delete for Child Under the Age of 13: We do not knowingly collect information of minors under the age of 13.

Using an Authorized Agent to Submit a Request 

California: Only you, or a natural person or a business entity registered with the Secretary of State to conduct business in California that you have authorized to act on your behalf, may make a verifiable consumer request related to your personal information or a request to opt-out of sale or sharing. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465.

Other Applicable States: If you use an authorized agent, you may provide a power of attorney executed pursuant to applicable state law. If a power of attorney is not submitted, you may be required to provide commercially reasonable identification of your identity and evidence of your authorized agent’s authority to act on your behalf. 13 If a power of attorney that meets those provisions is not submitted, you will be required to provide the authorized agent signed permission to submit a request, verify your identity directly with us, and directly confirm with us that you provided the authorized agent permission to submit the request.  

If you’re an authorized agent making a request, you must submit a verified consumer request via the webform and: 

  1. Provide the power of attorney provided to you by the consumer pursuant to the applicable state law; or
  2. Provide proof of signed permission along with a copy of your ID and have the consumer submit proof through our webform to directly confirm with us that they provided you permission to submit the request.

Opt-Out Preference Signals/Universal Opt-Out Mechanism

Our use of tracking technologies may be considered a sale or share for targeted advertising under applicable state law. You can opt-out of being tracked by these third parties by clicking the "Do Not Sell or Share My Personal Information" link at the bottom of our website and selecting your preferences, or by broadcasting an Opt-Out Preference Signal/Universal Opt-Out Mechanism, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. Because the signal is browser-specific, you will need to broadcast subsequent signals if you are accessing our website through different online devices (e.g., computers, smartphones, tablets).

Your Right to Non-Discrimination for the Exercise of a Privacy Right 

We will not discriminate against you for exercising any of your U.S. state privacy law rights. Unless permitted by the applicable laws, we will not: 

  • Deny you goods or services. 
  • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties. 
  • Provide you a different level or quality of goods or services. 
  • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Supplemental U.S. State Privacy Rights

In addition to the privacy rights listed above, certain states provide supplemental privacy rights to residents of those states.

Right to Opt-Out of Certain Profiling

You have the right to opt-out of our use of profiling when used to make decisions that produce a legal or similarly significant effect concerning you or your interactions with us. Currently, we do not engage in such profiling.

Right to Appeal

You have the right to appeal our refusal to take action on, or respond to, a verified consumer request. Upon receipt of our denial or refusal to take action on, or to respond to, a verified consumer request, a consumer has 90 days to submit a request to appeal our decision by mail. We will timely inform you in writing of any action taken or not taken in response. We will also include a written explanation of the reasons for our decision.

Changes to Our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the website and update the notice’s effective date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.

Contact for More Information 

If you have any questions or comments about this notice, the ways in which we collect and use your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Email:
customer_support@rithmcap.com

Mail:
Rithm Capital
Verified Consumer Requests
799 Broadway, 8th Floor
New York, New York 10003