Privacy Policy

Introduction

New Market Mortgage, Inc. ("we," "our," or "us") is an Illinois-licensed residential mortgage broker (Illinois Residential Mortgage Licensee MB.6760225, NMLS #232966). This Privacy Policy describes how we collect, use, share, and protect information when you visit our website or interact with our services. Because we are a mortgage broker, much of the information we handle constitutes "nonpublic personal information" (NPI) under the federal Gramm-Leach-Bliley Act (GLBA), and we treat it accordingly.

Information We Collect

Information you provide to us

When you use our contact or pre-approval forms, or when you begin a loan application, we may collect:

• Your name, email address, phone number, and mailing address
• Information about the loan you're interested in (loan type, intent, property details)
• Property information — estimated price, down payment, ZIP code, property type
• For refinances — approximate current loan balance and rate
• Employment, income, and asset information if you proceed with a full loan application
• Credit report information we pull in connection with a loan application
• Any additional information you voluntarily share in a message field

Information collected automatically

When you visit our website, we may automatically collect information about your device and browsing, including IP address, browser type and version, operating system, referring URL, pages visited, timestamps, and interactions with our forms. This is typically collected via server logs, cookies, and similar technologies.

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide mortgage brokerage services
• Evaluate your eligibility for a mortgage loan and match you with participating lenders
• Prepare loan estimates, disclosures, and other documents required by law
• Communicate with you about your application and, where permitted, about other products that may interest you
• Operate, maintain, and improve our website and services
• Detect and prevent fraud, spam, and unauthorized activity (including via Cloudflare Turnstile bot verification)
• Comply with legal, regulatory, and record-retention obligations applicable to mortgage brokers

How We Share Your Information

We do not sell your personal information. We share information only as described below:

With lenders and loan program providers

When you apply for a mortgage through us, we share your application information with participating lenders so they can underwrite and fund the loan. This sharing is essential to delivering the service you requested and is permitted under GLBA §502(e).

With service providers acting on our behalf

We use a small number of vetted third-party service providers to run our business. Each is bound by contractual confidentiality and data-handling obligations. Our current providers include:

• Vercel — website hosting and infrastructure
• Resend — delivery of email notifications when you submit a form
• Cloudflare (Turnstile) — bot protection on our forms
• Google Analytics — aggregated website usage analytics
• Credit bureaus and appraisal management companies — only when you proceed with a loan application

When required by law

We may disclose information when required to comply with a subpoena, court order, regulatory request, or other legal process, or when necessary to protect our rights, property, or safety, or that of our customers or others.

GLBA Notice (Financial Privacy)

As a financial institution under the federal Gramm-Leach-Bliley Act, we are required to provide you with notice of our privacy practices and your rights:

• What we collect: nonpublic personal information from you (such as income and employment), from your transactions with us (such as loan amounts), and from third parties (such as credit bureaus).
• What we share: only what is necessary to originate, process, service, and fund your loan, and only with parties permitted under §502(e) of GLBA.
• Opt out: we do not share your nonpublic personal information with unaffiliated third parties for their own marketing. Because we do not do this sharing, there is nothing for you to opt out of in that category.
• How we protect it: we maintain physical, electronic, and procedural safeguards that comply with federal standards for financial institutions.

Illinois Privacy Rights

If you are an Illinois resident, you may have additional rights under Illinois law:

• Personal Information Protection Act (PIPA). We maintain reasonable security measures for personal information and will notify affected Illinois residents in the event of a breach of unencrypted personal information, in accordance with 815 ILCS 530.
• Biometric Information Privacy Act (BIPA). We do not collect, capture, purchase, receive through trade, or otherwise obtain biometric identifiers or biometric information (such as fingerprints, voiceprints, retina or iris scans, or face geometry) from website visitors or loan applicants.
• Right to inquire. You may contact us using the information at the bottom of this page to ask what information we hold about you, to correct inaccurate information, or to request deletion of information that is not subject to mandatory record-retention requirements.

Data Retention

Federal and state mortgage regulations require us to retain loan files and certain communications for specified periods — generally at least three years for general loan records, and longer for certain categories (for example, Fair Lending documentation and disclosures governed by the Real Estate Settlement Procedures Act and the Truth in Lending Act). We retain information for these minimum legal periods and dispose of it securely thereafter. Website contact form submissions that do not lead to a loan application are typically retained for up to 24 months for follow-up and legitimate business purposes, then purged.

Data Security

We implement technical, administrative, and physical safeguards designed to protect personal information, including encryption in transit (TLS/HTTPS), access controls, and staff training. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we treat the protection of your information as a top priority.

Cookies and Tracking

Our website uses cookies and similar technologies to operate core functionality, remember preferences, and measure aggregated website usage. You can set your browser to refuse cookies or alert you when cookies are being sent, but some features of the site may not function properly if you do so. We respect the Global Privacy Control (GPC) signal where applicable.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have received information from a child under 18, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting a new version on this page and updating the "Last updated" date above. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise any of your rights, please contact us:

This policy describes our current practices in plain language. It is not legal advice. For questions about how Illinois or federal privacy law applies to your specific situation, please consult an attorney.