Notice at Collection for CA Residents

Effective Date: July 2024
Last Reviewed/Revised on: July 2024

This California Notice at Collection and Privacy Policy (“Privacy Notice and Disclosure for California Residents”) explains how Rithm Capital Corp. (“Company”, “us”, “our”, or “we”) collects, uses, discloses, sells, shares, and retains personal information (“Information Practices”) subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”). This CCPA Disclosure applies solely to California residents (“consumers” or “you”).

The CCPA does not apply to certain information collected by our financial services subsidiaries or affiliates, such as information subject to the Gramm-Leach-Bliley Act, the Fair Credit Reporting Act, and certain other state or federal privacy laws. For example, this CCPA Disclosure does not apply to information that we collect about individuals who seek, apply for, or obtain our financial products and services for personal, family, or household purposes. If Company services your mortgage loan, please refer to the financial privacy notices for consumers of personal, household or family financial product or services that was provided to you by mail.

This CCPA Disclosure does not apply to information we collect in the context of an individual’s interaction with us as a job applicant, employee, contractor, or other role within the Company. Please refer to our CCPA Workforce Disclosure on our Careers homepage.

Notice at Collection

The purpose of this Notice at Collection is to provide you with timely notice, at or before the point of collection, about the categories of personal information we may collect from you and the purposes for which the personal information may be used, including whether that information is sold or shared. Please note that most of the information we use is in the context of providing financial products and services for personal, family, or household purposes, and is therefore not subject to the CCPA.

General Personal Information

Categories of Personal Information	Purposes for Collection and Use	Sold to Third Parties or Shared with Third Parties for Cross-Context Behavioral Advertising
Identifiers: For example, a real name, alias, postal address, Internet Protocol address, email address, or other similar identifiers.	To fulfill or meet the reason for which the information is provided For our internal operation purposes For auditing relating to consumer transactions including ad impressions and compliance with regulations Fraud and security detection Debugging to identify and repair errors Short-term data use for the current interaction that is not used to build a profile For advertising and marketing purposes Performing services on behalf of the business, including maintaining or servicing accounts, providing products or services, providing customer service, processing orders or transactions, verifying customer information, processing payments, providing financing, providing analytic services, storage, or other similar services Undertaking internal research for technological development and demonstration Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business. To share the personal information with service providers to carry out other business purposes.	No
Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, a name, signature, Social Security number, address, telephone number, or financial information.		No
Characteristics of CA or Federal Protected Classifications: For example, demographic information, age, disability status, veteran status.		No
Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered.		No
Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.		No
Sensory or Surveillance Data: For example, call recordings.		No
Professional or Employment-Related Information: For example, compensation, evaluations, performance reviews, personnel files, and current and past job history.		No
Profile Data: For example, inferences drawn from personal information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.		No

We do not collect: geolocation or biometric information or education information (as defined in the Family Education Rights and Privacy Act).

Sensitive Personal Information

Categories of Sensitive Personal Information	Purposes for Collection and Use	Sold to or Shared with Third Parties for Cross-Context Behavioral Advertising
Social Security Number, Driver’s License, State Identification Card, or Passport Number	To perform services or provide goods you request and reasonably expect from us To investigate or curtail malicious, fraudulent, or illegal actions directed at us and to prosecute those responsible To perform services for our business needs such as maintaining accounts, providing customer service, providing financing, verifying customer information, or processing payments To collect or process sensitive personal information where such information is not being used to infer characteristics about you but may be used to provide a specific good or service based on the sensitive information you provided	No
Account log-in, financial account, debit card, or credit card number when provided with any required security or access code, password, or credentials allowing access to an account	To perform services or provide goods you request and reasonably expect from us To investigate or curtail malicious, fraudulent, or illegal actions directed at us and to prosecute those responsible To perform services for our business needs such as maintaining accounts, providing customer service, providing financing, verifying customer information, or processing payments	No
Racial or ethnic origin, religious or philosophical beliefs, or union membership	We collect racial and ethnic origin information on loan application per federal legal requirements.	No

We do not use or disclose the below sensitive personal information for purposes other than those business purposes specifically enumerated under CCPA. As a result, we do not offer a right to limit our use or disclosure of these categories of sensitive personal information.

We do not collect: precise geolocation; contents of a consumer’s mail, email, and text messages (unless we are the intended recipient of the communication); genetic data; biometric information for the purpose of unique identification; health information; information concerning sex life or sexual orientation.

Retention Periods

We retain each category of personal information for different periods of time depending on the purposes for which we collect and use it. In each case, we will only retain the personal information for as long as reasonably necessary to achieve the purposes for which we collected, used, or disclosed it, unless a longer retention period is required to comply with applicable legal and regulatory requirements.

Notice of Sale and/or Share

Our use of tracking technologies may be considered a sale or sharing with third parties for cross-context behavioral advertising (e.g. targeted advertising) under California law. You can opt-out of being tracked by these third parties by clicking the “Do Not Sell or Share My Personal Information” link, as described in our “Right to Opt-Out of Sale/Sharing” notice in our Privacy Policy.

Please review our California Privacy Policy below.

Privacy Policy

The purpose of this privacy policy is to provide you with a comprehensive description of our online and offline practices regarding the collection, use, disclosure, retention, sharing, and sale of personal information and of your rights as it relates to our Information Practices and how you can exercise those rights.

The following table includes disclosures for the preceding 12 months of: categories of personal information we may have collected about consumers, the categories we may have disclosed for a business purpose, and categories of third parties with whom we may have shared the personal information during that period.

General Personal Information

The following categories have been collected and disclosed in the preceding 12 months	Business or Commercial Purpose for Collection & Disclosure	Categories of third parties to whom the information was disclosed

Identifiers	For our operational purposes or the operational purposes of our service provider or contractors. Keeping track of visitors to our website and monitoring the effectiveness of our advertising, including auditing relating to counting ad impressions of unique visitors, verifying positioning and quality, and auditing compliance. Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose. Debugging to identify and repair errors that impair existing functionality. Short-term, transient use Performing services on behalf of the business, including maintaining or servicing accounts, providing products or services, providing customer service, processing orders or transactions, verifying customer information, processing payments, providing financing, providing analytic services, storage, or other similar services. Providing advertising and marketing services. Undertaking internal research for technological development. Undertaking activities to verify or maintain quality or safety of a service or device and to improve or enhance a service or device.	Cloud storage providers Payment processors Web analytics providers Web hosting service providers E-mail distribution service providers Help Desk service providers Financial and accounting service providers Cybersecurity service providers Logistics and planning tool providers Customer relationship management tool providers Business partners used throughout the loan origination process and the servicing of your loan, for example: real estate appraisers, credit reporting agencies, title insurance companies, auditors, property preservation companies, foreclosure law firms/trustees, as well as the owner/ investor of your loan. Federal and state governmental agencies as part of the loan process or their supervision of the company.
Personal Information Categories from Cal. Civ. Code § 1798.80(e)
Characteristics of CA or Federal Protected Classifications	For our operational purposes or the operational purposes of our service provider or contractors As required by federal or state law To provide additional information about our customers when such information is voluntarily disclosed or provided
Internet or Other Similar Network Activity	Providing analytics and advertising and marketing services. Undertaking activities to verify or maintain quality or safety of a service or device and to improve or enhance a service or device. Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose.	Cloud storage providers Payment processors Web analytics providers Web hosting service providers E-mail distribution service providers Help Desk service providers Financial and accounting service providers Cybersecurity service providers Logistics and planning tool providers Customer relationship management tool providers
Sensory or Surveillance Data	For our operational purposes or the operational purposes of our service provider or contractors. Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose. Undertaking activities to verify or maintain quality or safety of a service or device and to improve or enhance a service or device.	Help Desk service providers Customer relationship management tool providers
Professional or Employment-Related Information	For our operational purposes or the operational purposes of our service provider or contractors. Performing services on behalf of the business, including maintaining or servicing accounts, providing products or services, providing customer service, processing orders or transactions, verifying customer information, processing payments, providing financing, providing analytic services, storage, or other similar services.	Financial and accounting service providers Logistics and planning tool providers Customer relationship management tool providers
Profile Data	For our operational purposes or the operational purposes of our service provider or contractors. Providing analytics and advertising and marketing services.	Cloud storage providers Payment processors Web analytics providers Web hosting service providers E-mail distribution service providers Help Desk service providers Financial and accounting service providers Cybersecurity service providers Logistics and planning tool providers Customer relationship management tool providers Business partners used throughout the loan origination process and the servicing of your loan, for example: real estate appraisers, credit reporting agencies, title insurance companies, auditors, property preservation companies, foreclosure law firms/trustees, as well as the owner/ investor of your loan

In the preceding 12-month period, we did not collect or disclose: commercial information, biometric information, geolocation, or education information (as defined in the Family Education Rights and Privacy Act).

Sensitive Personal Information

The following categories have been collected and disclosed in the preceding 12 months	Business or Commercial Purpose for Collection & Disclosure	Categories of third parties to whom this information was disclosed

Social Security Number, Driver’s License, State Identification Card, or Passport Number	To perform services or provide goods you request and reasonably expect from us. To perform services for our business needs such as maintaining accounts, providing customer service, and fulfill orders. To collect or process sensitive personal information where such information is not being used to infer characteristics about you but may be used to provide a specific good or service based on the sensitive information you provided.	Cloud storage providers Customer relationship management tool providers Business partners used throughout the loan origination process and the servicing of your loan, for example: real estate appraisers, credit reporting agencies, title insurance companies, auditors, property preservation companies, foreclosure law firms/trustees, as well as the owner/ investor of your loan. Federal and state governmental agencies as part of the loan process or their supervision of the company.
Racial or ethnic origin, religious or philosophical beliefs, or union membership	To perform services or provide goods you request and reasonably expect from us. To perform services for our business needs such as maintaining accounts, providing customer service, and fulfill orders.	Customer relationship management tool providers Federal and state governmental agencies as part of the loan process or their supervision of the company.
Account log-in, financial account, debit card, or credit card number when provided with any required security or access code, password, or credentials allowing access to an account	To perform services or provide goods you request and reasonably expect from us To investigate or curtail malicious, fraudulent, or illegal actions directed at us and to prosecute those responsible To perform services for our business needs such as maintaining accounts, providing customer service, providing financing, verifying customer information, or processing payments	Cloud storage providers Payment processors Help Desk service providers Financial and accounting service providers Cybersecurity service providers Logistics and planning tool providers

In the preceding 12-month period, we did not collect or disclose: precise geolocation; contents of a consumer’s mail, email, and text messages (unless we are the intended recipient of the communication); genetic data; biometric information for the purpose of unique identification; health information, information concerning sex life or sexual orientation.

For each category of personal information identified above, we also disclose such personal information to the following categories of third parties:

At Your Direction. We may disclose your personal information to any third party with your consent or at your direction.
Business Transfers or Assignments. We may disclose your personal information to other entities as reasonably necessary to facilitate a merger, sale, joint venture or collaboration, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).
Legal and Regulatory. We may disclose your personal information to government authorities, including regulatory agencies and courts, as reasonably necessary for our business operational purposes, to assert and defend legal claims, and otherwise as permitted or required by law.

The categories identified as collected in the tables above were collected from the following categories of sources:

Information from you that you actively provide. We collect this information from sources such as from communications with us via online forms, e-mail, and telephone.
Information from you that you passively provide from your use of our sites and services. We collect this information from sources such as web browsers, e-mails, apps, and smartphones.
We may also collect this information from our observations and interactions with you.
Information from third parties. We collect this information from the following sources such as:
- Our affiliates
- Credit Reporting Agencies
- Marketing partners
- Advertising networks
- Internet service providers
- Data analytics providers
- Government entities
- Operating systems and platforms
- Social networks
- Data brokers

What We Sell to Third Parties or Share with Third Parties for Cross-Context Behavioral Advertising

We have not sold or shared with third parties for cross-context behavioral advertising personal information to third parties in the preceding 12 months.

Your Right to Know

You have the right to request that we disclose what personal information we collect, use, disclose, sell, or share with third parties for cross-context behavioral advertising (e.g. targeted advertising). You have the right to request any of the following:

the categories of personal information we have collected about you
the categories of sources from which the personal information is collected
the business or commercial purpose for collecting, selling, or sharing with third parties for cross context behavioral advertising (e.g. targeted advertising)
the categories of third parties to whom we disclose personal information
the specific pieces of personal information we have collected about you

You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

Your Right to Request Correction of Inaccurate Personal Information

You have the right to request correction of inaccurate personal information maintained by us. We may request documentation from you to determine the accuracy of the information maintained by us. If you provide us documentation either upon our request or through your own initiative, that documentation will only be used or maintained by us for the purpose of correcting your personal information and complying with our recordkeeping requirements under CCPA. We may deny your request if we have previously denied your same request to correct an alleged inaccuracy in the past six (6) months, unless you provide new or additional documentation that the information at issue is inaccurate.

As an alternative to correction, we may delete the inaccurate information if it does not negatively impact you or if you consent to this deletion. We reserve the right to deny this request if allowed under law, or if we determine that the contested information is more likely than not accurate, based on the totality of circumstances. You can submit a correction request through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

Your Right to Request Deletion of Your Personal Information

You have the right to request that we delete any of your personal information collected by us, subject to certain exceptions. You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

There may be scenarios where we deny your deletion request. If that occurs, we will provide you with an explanation as to why we could not delete all or some of your personal information.

Submitting a Verified Consumer Request

You have the right to submit verified consumer requests to know information, to correct information, or for deletion.

You can submit a request through our webform. Your request will be verified using information you provide as described on the web form. Your request will be verified by matching the information you provide to information that we have collected.

If you submit a request that is not through one of these designated methods or is deficient in some manner unrelated to verification, we will provide you with information on how to submit the request or remedy any deficiencies.

Please note that we are not required to provide personal information to you more than twice in a 12-month period. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Once we receive your verifiable consumer request, we will confirm receipt of the request within 10 business days describing our verification process. We will respond to your request within 45 calendar days, if we are able to verify your identity. Requests for deletion will require a separate confirmation that you want your information deleted.

Requests to Know or Delete for Child Under the Age of 13: We do not knowingly collect information of minors under the age of 13.

Using an Authorized Agent to Submit a Request

Only you, or a natural person or a business entity registered with the Secretary of State to conduct business in California that you have authorized to act on your behalf, may make a verifiable consumer request related to your personal information or a request to opt-out of sale or sharing. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465. If a power of attorney that meets those provisions is not submitted, you will be required to provide the authorized agent signed permission to submit a request, verify your identity directly with us, and directly confirm with us that you provided the authorized agent permission to submit the request.

If you’re an authorized agent making a request, you must submit a verified consumer request via the webform and:

Provide the power of attorney provided to you by the consumer pursuant to Probate Code sections 4000 to 4465; or
Provide proof of signed permission along with a copy of your ID and have the consumer submit proof through our webform to directly confirm with us that they provided you permission to submit the request.

Your Right to Non-Discrimination for the Exercise of a Privacy Right

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Other California Privacy Rights

California’s “Shine the Light” law (Cal. Civil Code § 1798.83) permits users of our website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please write us at:

Rithm Capital
Verified Consumer Requests
799 Broadway, 8th Floor
New York, New York 10003

Changes to Our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the Website and update the notice’s effective date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.

Contact for More Information

If you have any questions or comments about this notice, the ways in which we collect and use your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Email:
customer_support@rithmcap.com

Mail:
Rithm Capital
Verified Consumer Requests
799 Broadway, 8th Floor
New York, New York 10003

Read our Notice at Collection for CA Residents