Privacy Policy
1. Who this policy covers
This draft explains how [CONFIRMED WEBSITE OPERATOR AND AFFILIATES] may collect and process personal information through the Site, inquiry forms, client portal, events, and other online interactions. Specific financial products may require additional privacy notices under applicable financial privacy laws. If a legally required product-specific notice differs from this policy, the applicable notice governs that product or relationship.
2. Categories of information collected
Depending on the interaction, information may include: name, company name, contact details, requested service, property or business information, financing needs, application details, documents voluntarily uploaded, appointment and communications records, payment transaction references, login and security information, device/browser identifiers, IP address, website usage, and marketing preferences. Sensitive financial or identity information should be requested only through approved secure channels and only when necessary. [CONFIRM EXACT FIELDS COLLECTED.]
3. How information is collected
Information may come directly from users; through submitted forms, portal activity, bookings, and communications; from authorized referral sources and service providers; and from technical tools such as cookies or analytics used on the Site. [IDENTIFY ACTUAL ANALYTICS, ADVERTISING PIXELS, AND COOKIE CHOICES.]
4. Purposes for using information
We may use personal information to respond to inquiries; evaluate or coordinate requested financing and financial services; communicate about applications, documents, appointments and services; manage accounts and invoices; provide educational programs; prevent fraud and unauthorized access; comply with law; maintain records; and conduct marketing only as permitted by applicable law and user choices.
5. Sharing and separate departments
Information may be shared, as appropriate and authorized, with the relevant NLI or NLFS service team, approved affiliates, lenders/capital partners, document and payment platforms, CRM/hosting providers, professional advisors, regulators, and other service providers needed to deliver requested services or comply with law. Mortgage inquiries are intended for the NLI team; non-mortgage financial-services inquiries for NLFS; and multi-service requests may reach both teams. Actual access permissions and disclosure practices must be validated. We do not make any representation here that information is never sold or shared for advertising unless confirmed. [LEGAL TEAM: ADD REQUIRED SHARING CATEGORIES, OPT-OUT RIGHTS, AND GLBA NOTICE LANGUAGE.]
6. Security and portal access
We use administrative, technical, and organizational measures appropriate to our services and legal obligations, subject to verification of the actual implementation. No online system is risk-free. Users should protect credentials, avoid sending sensitive files through unapproved channels, and report suspected security issues promptly to [SECURITY CONTACT]. [DO NOT CLAIM ENCRYPTION, MFA, OR CERTIFICATIONS WITHOUT TECHNICAL VERIFICATION.]
7. Cookies and analytics
The Site may use essential cookies for functionality and, if enabled, analytics or advertising technologies. [LIST VENDORS, PURPOSES, COOKIE DURATION, CONSENT CONTROLS, AND STATE-SPECIFIC OPT-OUT METHODS ACTUALLY IN USE.] Browser-level settings may provide additional controls, but site-specific preferences should be described accurately.
8. Communications choices
Users may request changes to marketing email preferences through available unsubscribe instructions or by contacting [PRIVACY EMAIL]. Text-message consent, message purpose and frequency, potential message/data rates, and opt-out instructions must be presented separately at relevant collection points. Consent to marketing is not a condition of submitting an ordinary financing inquiry unless a lawful, clearly disclosed exception applies. Service-related communications may continue where legally permitted and necessary.
9. Retention, rights, and requests
Information is retained for periods appropriate to service needs, legal obligations, regulatory recordkeeping, dispute resolution, and security. [ADD APPROVED RETENTION SCHEDULE.] Depending on location and applicable law, individuals may have rights to access, correct, delete, receive copies of, or opt out of certain uses of personal information. Requests may be sent to [PRIVACY CONTACT]. We may need to verify identity before responding, and some information may be retained where law requires.
10. Children, cross-border access, and updates
The Site is designed for adults and business users, not directed to children under 13. [VERIFY AGE RESTRICTIONS FOR SPECIFIC SERVICES.] If service providers or personnel access data from other locations, applicable safeguards and disclosures will be assessed. We may update this policy as practices change; legally required notices will be provided where applicable.
11. Privacy contact
[LEGAL OPERATOR NAME] | [MAILING ADDRESS] | [PRIVACY EMAIL] | [PHONE, IF USED]