Privacy Policy | Lock It Mortgage

Thank you for visiting Lock It Mortgage. This Privacy Policy explains what information we collect, how we use and share it, and outlines your rights, particularly if you are a California, Minnesota, or Oregon resident. Terms not defined here that start with a capital letter are explained in our Terms of Use. By choosing to use our Services, you are agreeing to the terms of this Privacy Policy. If you do not wish to agree, you may not be able to use some portions of our services. If you have any questions or comments about this Privacy Policy, please feel free to contact us.

Our Privacy Commitment

At Lock It Mortgage, we believe in transparency, not surprises. As your mortgage partner, we handle some of your most sensitive information. Before we dive into the legal details, we want to share the core principles that guide how we protect your data:

We Do Not Sell Your Data: We do not sell your personal information to third parties. Our business is securing your home loan, not selling your data.
Minimum Collection: We only collect the information necessary to provide our mortgage brokerage services, comply with federal lending laws, or improve your experience on our site.
Secure & Controlled Sharing: We only share your information with wholesale lenders, credit bureaus, and service providers (like title or appraisal companies) as required to process your loan or with your explicit permission.
Absolute Accountability: When you apply with us, you trust us with your financial future. We take that responsibility seriously and hold ourselves to the highest standards of data security and privacy.

Information Collection and Use

We collect various types of information to provide and improve our Service.

Data We Collect

1. Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personal Data includes, but is not limited to:

Email address;
First name and last name;
Phone number;
Address, State, Province, ZIP/Postal code, City;
Social Security Number;
Employment information;
Financial information such as your income, assets, and liabilities, as well as information about your savings, investments, insurance, and business;…
Cookies and Usage Data.

2. How We Obtain Personal Data

We collect Personal Data from a wide range of other sources to provide you the Service. These sources may include, among others, directly from you, employers, attorneys, banks, title insurers, insurance companies, and credit reporting agencies. We may also use your Personal Data to contact you through newsletters, marketing or promotional materials, and other information that may interest you. You may opt out of receiving any or all of these communications from us by following the unsubscribe link or instructions in any email we send.

3. How We Obtain Usage Data

We also collect information that your browser automatically sends whenever you visit our Service or access the Service through a mobile device (“Usage Data”). This Usage Data may include information such as your computer’s Internet Protocol address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data. When you access the Service with a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.

4. How We Obtain Location Data

We collect and store information about your location if you permit us to do so (“Location Data”). We use Location Data to provide our Service’s features and improve and customize our Service. You can turn location services on or off when you use our Service at any time through your device settings.

5. Tracking Cookies Data

We use cookies and similar tracking technologies to track the activity on our Service. Cookies are files with a small amount of data that may include an anonymous, unique identifier. Cookies are sent to your browser from a website and stored on your device. We may also use other tracking technologies, such as beacons, pixels, tags, and scripts to collect and track information and to improve and analyze our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may be unable to use some portions of our Service. Examples of Cookies we use:

Session Cookies. We use Session Cookies to operate our Service.
Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
Security Cookies. We use Security Cookies for security purposes.

Third-Party Cookies

We work with trusted third parties (such as Google Analytics and Meta Pixels,…) that may use cookies on our site for the following purposes:

To analyze how our website is used and enhance its performance.
To facilitate sign-in or enable integrations with their services.

Please note that the use of any third-party cookies is subject to the privacy policy of the party that places the cookie.

Contact Forms

If you fill out a contact form on our site, we store that information in a database and use the information to respond to you regarding the reason you contacted us. In addition, we collect phone contacts in the mobile app when you share the app. We do not sell or share SMS opt-ins.

1. Use of Data

We use the collected data for various purposes:

To Facilitate the Mortgage Process: We use your data to manage your inquiry and identify suitable mortgage products from our wholesale lender network.
To Provide Status Updates: We use your information to notify you of changes to your loan status or updates to our available programs.
To Enable Interactive Tools: We utilize your data to allow the use of mortgage calculators and pre-qualification tools.
To Deliver Dedicated Support: We use your details to provide personalized guidance and respond to your specific financing questions.
To Improve Our Offerings: We analyze data to gather insights that help us enhance the quality and accuracy of our mortgage services.
To Monitor Performance: We track usage data to ensure the integrity and efficient operation of our services.
To Secure Our Systems: We use your information to detect, prevent, and address potential technical or security issues.
To Provide Market Insights: We share mortgage rate alerts and news regarding financial products similar to those you have inquired about.
To Meet Legal Requirements: We use your data to comply with federal and state lending regulations and mandatory record-keeping obligations.

2. Cross-Border Data Transfer

If you are located outside the United States and choose to provide us with information, please be aware that your data, including Personal Data, will be transferred to and processed in the United States. The data protection laws in the United States may differ from those in your jurisdiction. By providing your personal information, you consent to this collection of data and its subsequent transfer to and processing in the United States.

Disclosure of Personal Data

1. Disclosure for Law Enforcement

Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

2. Legal Requirements

We may disclose your Personal Data in the good faith belief that such action is necessary to:

To comply with a legal obligation;
To protect and defend our rights or property;
To prevent or investigate possible wrongdoing in connection with the Service;
To protect the personal safety of users of the Service or the public; and
To protect against legal liability.

3. Service Providers

We engage specialized third-party companies and individuals to help us facilitate our services, perform loan-related functions, or assist us in analyzing how our services are utilized (“Service Providers”).

As a mortgage broker, this includes partnering with wholesale lenders, credit reporting agencies, and secure document-processing platforms. These third parties are granted access to your personal information solely to perform these specific tasks on our behalf. They are contractually and legally obligated to maintain the confidentiality of your data and are strictly prohibited from disclosing or using it for any other purpose.

Security of Data

We prioritize the security of your data. However, as no transmission method over the Internet or storage method is completely secure, we cannot guarantee the absolute security of your personal information, even though we use commercially reasonable measures to protect it.

Note: All sensitive data and financial transmissions are protected using HTTPS encryption and rigorous security protocols designed to safeguard the integrity of the loan process.

Links to Other Websites

Our Service may contain links to other websites or mobile applications that we do not operate. You will be directed to that third party’s website or mobile application if you click a third-party link. We strongly advise you to review the privacy policy of every website you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party websites, mobile applications, or services.

Social Media

We encourage you to review your privacy options and settings with the social media platforms and networks you use to understand your choices about disclosing your information through those platforms and networks with us.

Children’s Privacy

Our Service does not address anyone under the age of 18 (“Child” or “Children”). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and know that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from Children without verification of parental consent, we take steps to remove that information from our servers.

U.S. Data Subject Notice

A number of U.S. states have enacted privacy laws (“State Privacy Laws”). We are exempt from most State Privacy Laws by virtue of the federal Gramm-Leach-Bliley Act (“GLBA”). However, some of the personal information that we collect may be subject to certain State Privacy Laws – including California, Minnesota, and Oregon. Accordingly, we provide these additional disclosures regarding our collection and processing of personal information, and rights you may have, for U.S. residents.

The following information only applies to residents in states with State Privacy Laws (“consumers”) to which we are subject.

AS A COURTESY, THE FOLLOWING DISCLOSURES INCLUDE INFORMATION THAT MAY BE EXEMPT FROM THE STATE PRIVACY LAWS. THE COURTESY DISCLOSURES ARE MADE WITH A RESERVATION OF ALL RIGHTS WE HAVE UNDER THE STATE PRIVACY LAWS.

Notice At Collection

We collect “personal information,” defined as any information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device. This definition of personal information does not include: publicly available information; de-identified or aggregated information; or information covered by certain industry-specific privacy laws such as the Fair Credit Reporting Act (“FCRA”), the Gramm-Leach-Bliley Act (GLBA), and the California Financial Information Privacy Act (“CalFIPA”).

We have collected and will collect the following categories of personal information about our consumers:

“Sensitive Personal Information” such as Social Security numbers (SSNs), Driver’s license, financial account or card numbers, Precise geolocation, Racial and ethnic characteristics, Contents of mail, email and text messages, and Genetic and biometric data.
“Personal Identifiers” such as name, alias, address, unique identifier, internet protocol address, email address, account number, Social Security Number, or government identification number.
“Other Personal Information” includes any information that identifies, relates to, describes, or is capable of being associated with a particular individual. This includes the person’s name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information. This does not include publicly available information lawfully made available to the general public from federal, state, or local government records.
“Protected Characteristics” under federal or applicable state law for classifications such as age, race, color, ancestry, national origin, citizenship, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), or veteran or military status.
“Commercial Information” such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
“Internet or Other Electronic Network Activity Information” such as browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.
“Geolocation Data” such as physical movements or location.
“Sensory Data” such as audio, electronic, visual, thermal, olfactory, or similar information.
“Professional or Employment-Related Information” such as current or past job history or performance evaluations.
“Inferences” such as a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We will not use your collected personal information for new purposes or collect additional categories of personal information without providing you with prior notification.

Sources of Personal Information

Categories of sources from which we have collected the personal information:

Directly from you as an applicant/ borrower
Vendors, including both Service Providers and third parties
Automatically collected through your usage of our Service
Publicly available sources
Applicants and employees

Uses of Personal Information

We use personal information for the following purposes:

Performing services on behalf of us, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services on behalf of us.
Helping to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for these purposes.
Debugging to identify and repair errors that impair existing intended functionality.
Short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of a consumer’s current interaction with the business, provided that the consumer’s personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business.
Providing advertising and marketing services, except for cross-contextual behavioral advertising, to the consumer provided that, for advertising and marketing, a service provider or contractor shall not combine the personal information of opted-out consumers that the service provider or contractor receives from, or on behalf of, the business with personal information that the service provider or contractor receives from, or on behalf of, another person or personal or collects from its interactions with consumers.
Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
Undertaking internal research for technological development and demonstration.
Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business.
Support employment, infrastructure, and human resource management, including providing benefits to employees, beneficiaries, and dependents, such as healthcare and retirement plans.

Disclosure of Personal Information

We disclose categories of personal information with outside companies or organizations, including Service Providers subject to appropriate confidentiality and use restrictions, as part of providing products and services, completing transactions, supporting our everyday operations, business management or development, and compliance. Such third parties may include:

Affiliated Financial or Nonfinancial Companies: Personal Identifiers, Other Personal Information, Sensitive Personal Information, Protected Characteristics, Commercial Information, Internet or Other Electronic Network Activity Information, Geolocation Data, Sensory Data, Professional or Employment-Related Information, and Inferences.
Marketing Providers: Personal Identifiers, Other Personal Information, Sensitive Personal Information, Commercial Information, Internet or Other Electronic Network Activity Information, Geolocation Data, Sensory Data, and Inferences.
Advisors (examples include attorneys, consultants, and accountants): Personal Identifiers, Other Personal Information, Sensitive Personal Information, Protected Characteristics, Commercial Information, Internet or Other Electronic Network Activity Information, Geolocation Data, Sensory Data, Professional or Employment-Related Information, and Inferences.
Regulators and governmental agencies: Personal Identifiers, Other Personal Information, Sensitive Personal Information, Protected Characteristics, Commercial Information, Internet or Other Electronic Network Activity Information, Geolocation Data, Sensory Data, Professional or Employment-Related Information, and Inferences.
Shipping vendors: Personal Identifiers, Other Personal Information.
Credit reporting agencies and dispute vendors: Personal Identifiers, Other Personal Information, Sensitive Personal Information, Protected Characteristics, Commercial Information, Internet or Other Electronic Network Activity Information, Geolocation Data, Professional or Employment-Related Information, and Inferences.
Vendors: Personal Identifiers, Other Personal Information, Sensitive Personal Information, Protected Characteristics, Commercial Information, Internet or Other Electronic Network Activity Information, Geolocation Data, Professional or Employment-Related Information, and Inferences.
Law enforcement, government entities, courts, and pursuant to legal process: Personal Identifiers, Other Personal Information, Sensitive Personal Information, Protected Characteristics, Commercial Information, Internet or Other Electronic Network Activity Information, Geolocation Data, Sensory Data, Professional or Employment-Related Information, and Inferences.
Human resources, information security and workforce management vendors: Personal Identifiers, Other Personal Information, Sensitive Personal Information, Protected Characteristics, Commercial Information, Internet or Other Electronic Network Activity Information, Geolocation Data, Sensory Data, Professional or Employment-Related Information, Inferences.

We share personal information for cross-contextual behavioral advertising. In doing so, we disclose the following categories of personal information: Personal Identifiers, Other Personal Information, Sensitive Personal Information, Commercial Information, Internet or Other Electronic Network Activity Information, Geolocation Data, Sensory Data, and Inferences.

We do not sell the personal information of minors under 18 years of age without affirmative authorization.

Retention of Personal Information

We retain your personal information for as long as it is necessary to fulfill the purposes outlined in this policy, to comply with legal requirements, or as otherwise mandated by law. Specific retention periods can be found in the “Notice at Collection” table below.

The following “Notice at Collection” table details these categories, their intended uses, and our standard data retention policies.

Category (per CCPA/CPRA)	Such As	Intended Use	Retention Period
Sensitive Personal Information	Social Security Number (SSN), Driver’s license, financial account numbers, precise geolocation, racial/ethnic characteristics, and contents of communications.	To pull credit reports, verify legal identity, comply with federal “Know Your Customer” (KYC) laws, and facilitate loan processing.	While your inquiry is active + 7 years.
Personal Identifiers	Full name, alias, postal address, email address, IP address, and government identification numbers.	To verify your identity, maintain communication regarding your loan status, and prevent fraudulent activity.	While your inquiry is active + 7 years.
Other Personal Information	Signature, physical characteristics, passport number, bank account numbers, insurance policy numbers, and general financial information.	To evaluate loan eligibility, assess creditworthiness, and facilitate matching with our wholesale lender network.	While your inquiry is active + 7 years.
Professional or Employment Data	Current or past job history, employer name, and income performance evaluations.	To verify your ability to repay a mortgage and meet specific lender underwriting requirements.	While your inquiry is active + 7 years.
Commercial Information	Records of personal property, mortgage products considered, and purchasing or consuming tendencies.	To provide a personalized experience and maintain a historical audit trail of our brokerage services.	While your inquiry is active + 7 years.
Protected Characteristics	Age, race, national origin, marital status, medical conditions, or veteran/military status.	To comply with federal fair lending laws and demographic reporting requirements.	While your inquiry is active + 7 years.
Internet & Network Activity	Browsing history, search history, and interactions with our digital tools or advertisements.	For website security, fraud detection, and internal analytics to improve our mortgage calculators.	3 years.
Geolocation Data	IP-based location or physical movements.	To prevent fraudulent activity and ensure we provide state-specific rate data.	3 years.
Sensory Data	Audio recordings of support calls or electronic/visual information.	For quality control, training purposes, and dispute resolution.	2 years.

State Privacy Laws and Your Consumer Rights (California, Minnesota, and Oregon Residents)

If you are a resident of California, Minnesota, or Oregon, you have the following rights regarding your data. Please note that most financial information collected for your loan is exempt from these state laws under federal mandates (GLBA/FCRA).

1. Right to Know

You have the right to request a summary of the personal information we have collected about you, including:

The categories and specific pieces of information collected.
The sources from which we obtained your data.
Our business purpose for collecting or sharing that information.
The third parties (like wholesale lenders) with whom we have shared your data.

2. Right to Delete

You may request that we delete the personal information we have collected from you.

The Federal Exception: We are legally required to deny deletion requests for data that is necessary to complete your loan transaction, maintain security, or comply with federal record-keeping laws (which require a 7-year retention period for mortgage files).
What We Can Delete: We will delete non-essential data, such as information used for marketing or analytics.

3. Right to Correct

If you discover that any personal information we hold is inaccurate, you have the right to request that we correct it immediately to ensure your loan file remains accurate.

4. Right to Limit Use of Sensitive Info

You may direct us to limit the use of your Sensitive Personal Information (like your SSN or financial data) to only what is strictly necessary to perform our brokerage services. We do not use this sensitive data for any purpose other than facilitating your mortgage and ensuring security.

5. Right to Opt-Out of Sharing

You have the right to opt-out of the “sharing” of your data for cross-contextual behavioral advertising (targeted ads). We do not sell your personal information for money.

6. Right to Non-Discrimination

We will never discriminate against you for exercising your privacy rights. Choosing to exercise these rights will not result in denied services, different interest rates, or a lower quality of service.

How to Submit Your Request

To exercise any of the rights listed above, please use one of the following methods:

Online: Submit a privacy request form
Phone: Call us (469) 895-6968 or email us at info@lockitmtg.com
Authorized Agents: If you choose to use an authorized agent, we will need to verify both your identity and the agent’s authorization.
Global Privacy Control: We automatically honor GPC signals from your browser as a valid request to opt-out of data sharing.

Important notice: To protect your financial security, we must verify your identity before processing any request. In accordance with state laws, we will respond to your request within 45 days. If your request is particularly complex, we may extend this to 90 days, in which case we will notify you in writing.

Data Location & Transfers

Information submitted through our services is processed on secure servers located within the United States. To facilitate the mortgage process, we may transfer information to third-party partners (such as wholesale lenders or service providers). We require all such third parties to provide at least the same level of protection for your information as described in this Privacy Policy and to comply with applicable US privacy standards.

Accessing & Modifying Your Information

To modify or update the personal information you have provided to us, please contact your designated Loan Officer or our compliance team directly. As we do not utilize user-login accounts, we will verify your identity before making any changes. We may retain certain information as required by law for necessary business and audit purposes. Upon request, we will provide you with a copy of the personal information we maintain, subject to any fees permitted by law.

Communications

We may periodically send you service-related announcements and updates regarding your mortgage inquiry or transactions. We may also send marketing or promotional communications regarding current interest rates or new lending programs. You can opt out of marketing communications at any time by clicking the “unsubscribe” link included in those emails.

End-User Information

If you utilize our mortgage tools to facilitate your own professional services, we may process end-user information on your behalf in accordance with this Privacy Policy. In such cases, you are responsible for ensuring your own compliance with applicable privacy laws regarding your end-users.

Text Message (SMS) Disclosure

By providing your phone number, you consent to receive conversational SMS messages from Lock it Mortgage regarding your mortgage inquiry, loan status, and document reminders.

Opt-Out: You may opt-out at any time by replying STOP.
Support: Reply HELP for assistance.
Privacy: Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Policy Modifications

We may modify this Privacy Policy from time to time to reflect changes in the law or our brokerage practices. When we do, we will post the updated version and revise the “Effective Date”. If a modification meaningfully reduces your rights, we will notify you through a prominent notice on our website or via direct communication.

Google Services, Analytics & Integrations

We utilize Google’s suite of services to analyze how users interact with our tools and to deliver relevant mortgage updates across the web. To provide a seamless experience, we may integrate with Google services for secure document transfers or communication purposes.

Usage & AI Protection: We only request the minimum access necessary to facilitate your loan inquiry. We affirm that any data accessed through these integrations is used strictly for mortgage-related tasks and is never used to develop, improve, or train generalized AI or machine learning models.
Advertising & Opt-Out: Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our site. You may opt out of personalized advertising by adjusting your Google Ads Settings or by enabling Global Privacy Control (GPC) in your browser, which we honor automatically.