LEGAL

Privacy Policy

Effective date: May 1, 2026

Your privacy is important to us. This policy describes how One Mortgage (NMLS #13988) collects, uses, shares, and protects your personal information.

1. Who we are

One Mortgage provides direct, first-party mortgage lending services. Our office is located at 12 Main Street, Voorhees, NJ, 08043. Company NMLS #13988. References to "we," "us," or "our" in this policy refer to One Mortgage.

Website covered by this policy: https://mortgage.cerberuscrm.com. This website is provided by One Mortgage. The company remains the provider of mortgage services and the sender of SMS messages associated with inquiries submitted through this website, including when the website features an individual loan officer's branding.

2. Information we collect

Information you provide directly: Name, email address, phone number, mailing address, employment information, income, assets, liabilities, Social Security Number (during the loan application process), property details, and any other information you submit through forms, surveys, phone calls, emails, text messages, or in-person consultations.

Information collected automatically: IP address, browser type and version, device identifiers, operating system, referring URL, pages visited, time spent on pages, click data, and cookies or similar tracking technologies. We may use tools such as Google Analytics, Google Tag Manager, Meta Pixel, and HighLevel tracking to collect this information.

Information from third parties: Credit reporting agencies (with your authorization), real estate agents, financial institutions, and publicly available sources as needed to process your request. Information received from another party does not constitute SMS consent. We do not enroll purchased, shared, or third-party leads in our SMS program. SMS consent must be provided directly to One Mortgage through its own opt-in form.

Customer communication records: Records of inquiries and service requests, appointment details and preferences, service history and feedback, and opt-in records and timestamps for all communication channels (SMS, email, phone).

3. How we use your information

We use personal information to evaluate and process your mortgage application or inquiry; respond to your requests; schedule appointments; deliver requested services; improve our website and services; comply with legal and regulatory requirements; detect and prevent fraud; and enforce our terms of service.

SMS use: If you separately opt in, we use your phone number only to send mortgage inquiry acknowledgements, application status updates, document requests, appointment confirmations and reminders, and customer service responses. This SMS program does not send marketing or promotional messages, loan offers, rate offers, refinancing solicitations, pre-approval promotions, or home equity offers.

Other communications: Educational content and market updates may be provided through other channels where you have given any required consent. SMS consent does not authorize marketing by phone, email, or any other channel.

4. How we share your information

We do not sell your personal information.

Service providers: We share information with third-party vendors who help us operate our business, including our CRM platform, email service providers, scheduling tools, analytics providers, SMS aggregators and messaging platforms, and other technology providers. These providers are contractually obligated to use your information only for the services they perform on our behalf and to maintain confidentiality and security.

Mortgage processing: In connection with your loan application, we may share your information with lenders, underwriters, appraisers, title companies, insurance providers, settlement agents, and other parties necessary to process, close, and service your mortgage.

Legal and regulatory: We may disclose information as required by law, regulation, legal process, or governmental request, including to comply with the Gramm-Leach-Bliley Act (GLBA), the Real Estate Settlement Procedures Act (RESPA), the Truth in Lending Act (TILA), and applicable state regulations.

Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction and will remain protected under the terms of this policy.

SMS information and consent: The sharing provisions above do not permit mobile information to be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in information and consent are excluded from all other sharing categories and are not sold, rented, transferred, or shared for another party's use, including in a business transfer. Only service providers supporting our messaging and customer service may process the information necessary to perform those services on our behalf, subject to confidentiality and security obligations. They may not use it for their own purposes.

5. Gramm-Leach-Bliley Act (GLBA) notice

As a mortgage lender, One Mortgage is a "financial institution" subject to the privacy provisions of the Gramm-Leach-Bliley Act and Regulation P. We collect nonpublic personal information ("NPI") about you from information you provide on applications and forms, information about your transactions with us or others, and information we receive from consumer reporting agencies.

We do not disclose NPI about our customers or former customers to nonaffiliated third parties except as permitted or required by law. We restrict access to your NPI to those employees and service providers who need to know that information to provide products or services to you. We maintain physical, electronic, and procedural safeguards that comply with federal regulations to protect your NPI. You may receive a separate GLBA privacy notice from One Mortgage as part of the loan application process.

6. Telephone Consumer Protection Act (TCPA) and communications consent

Separate, express SMS consent: Submitting a form, providing your phone number, requesting information, or applying for a loan does not by itself enroll you in SMS. To receive service text messages, you must personally select the separate, optional SMS checkbox on One Mortgage's own form. The checkbox is unchecked by default. Consent applies only to One Mortgage and the message types disclosed at opt-in; it is not consent for another company to contact you.

Consent is optional: You may submit a form, request services, or purchase products or services without checking the SMS checkbox. SMS consent is not a condition of purchase. Consent for calls, including automated or artificial/prerecorded voice calls, must be obtained separately where required and is not granted by the SMS checkbox.

Automated and AI-assisted messages: Where used, automation or AI does not expand the message types or communication channels you authorized. Service texts remain limited to the purposes described in Section 7.

Opt-out and revocation: Reply STOP to any SMS message to unsubscribe. We honor SMS opt-outs promptly and send no further program messages after opt-out, except one confirmation, unless you provide new consent. You may also revoke consent or request help by calling (856) 552-0714 or emailing [email protected]. We honor reasonable requests to revoke consent in accordance with applicable law.

Consent records: We maintain records of the consent disclosure, your affirmative opt-in action, date and time, source form or URL, and available supporting information such as IP address. We retain consent records in accordance with applicable legal requirements.

Applicable requirements: Our communications are subject to applicable federal and state consent, calling, and messaging requirements.

7. SMS/text messaging terms

Program and sender: One Mortgage sends service-related SMS messages only to people who inquired directly with us and personally checked our SMS consent box. The program is limited to mortgage inquiry acknowledgements, application status updates, document requests, appointment confirmations and reminders, and customer service responses. It does not include advertising, new loan solicitations, rate offers, refinancing promotions, pre-approval promotions, or home equity offers.

How to opt in: Select the separate, optional SMS consent checkbox on our own website form at https://mortgage.cerberuscrm.com. The checkbox is visible and unchecked by default. Submitting the form alone does not give SMS consent. Consent is not required to submit the form, purchase anything, or obtain services. Third-party referrals, purchased lists, or consent given to another business do not enroll you.

Frequency and charges: Message frequency varies with your inquiry, application, appointments, and service needs. Message and data rates may apply.

How to opt out: Reply STOP to any message. We will stop program messages and may send one confirmation. You will not receive further program messages unless you opt in again.

Help and support: Reply HELP for assistance, call (856) 552-0714, or email [email protected].

Carrier information: Delivery depends on your wireless service and is not guaranteed. Carriers are not liable for delayed or undelivered messages.

SMS privacy: We do not sell, rent, or share mobile information with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent are excluded from all other sharing categories. Service providers may process only the information needed to support our messaging and customer service on our behalf, under confidentiality obligations, and may not use it for their own purposes. SMS consent cannot be transferred to another sender.

8. Use of artificial intelligence

Marketing content: We may use AI tools to assist in creating marketing materials, social media content, email campaigns, and educational resources. AI-generated content is reviewed by our team before publication.

Automated communications: As described in Section 6, we may use AI to assist with communications only within the specific consent you provided. AI-assisted SMS is limited to the service purposes in Section 7. SMS consent does not authorize voice calls or promotional texts.

Chatbots and virtual assistants: We may use AI-powered chatbots or virtual assistants. If you interact with an AI system, we will disclose that fact where required by applicable state law. You may request to speak with a human representative at any time.

AI does not make lending decisions: We do not use AI or automated decision-making systems to make credit decisions, determine loan eligibility, or set loan terms. All lending decisions are made by licensed human professionals in accordance with the Equal Credit Opportunity Act (ECOA) and the Fair Housing Act.

Data and AI training: We do not use your personal information to train AI models that are sold to or used by third parties. Where required by applicable state law, we will obtain your consent before using any personal data for training artificial intelligence systems.

9. Cookies and tracking technologies

We use cookies, pixels, and similar tracking technologies to analyze website traffic, measure advertising effectiveness, and improve your experience. These include essential cookies required for the website to function, analytics cookies to understand visitor behavior, and advertising cookies to deliver relevant advertising and track campaign performance.

You can control cookie preferences through your browser settings. We honor "Do Not Track" browser signals and Global Privacy Control (GPC) signals where required by applicable state law. Disabling cookies may limit your ability to use certain features of our website.

10. California residents (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Personal information collected, processed, sold, or disclosed pursuant to the Gramm-Leach-Bliley Act (GLBA) is exempt from the CCPA/CPRA.

For information collected outside the scope of GLBA, you may have the right to know what personal information we collect, use, and disclose; request deletion of your personal information; opt out of the sale or sharing of your personal information (we do not sell personal information); correct inaccurate personal information; and not be discriminated against for exercising your privacy rights.

To exercise your rights, contact us at [email protected] or (856) 552-0714.

11. Your rights and choices

You have the right to access, update, or delete your personal information; opt out of marketing emails by clicking "unsubscribe" in any email; opt out of SMS messages by replying STOP; request information on how we process your data; withdraw consent at any time for future communications; and lodge a complaint with a supervisory authority if you believe your rights have been violated.

To exercise these rights, contact us using the information in Section 17.

12. Data security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:

- Encryption of sensitive data in transit and at rest (SSL/TLS)

- Secure access controls and authentication mechanisms

- Regular security assessments and updates

- Employee training on data protection

- Breach notification protocols in accordance with applicable laws

- Secure backup systems and disaster recovery procedures

No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

13. Data retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Mortgage-related records are retained in accordance with federal and state requirements. Consent records are retained for a minimum of five years. Marketing data is retained until you opt out or request deletion, subject to legal retention requirements.

14. Children's privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will promptly delete it.

15. Third-party links and services

Our website may contain links to third-party websites and embed third-party services, including scheduling tools, survey platforms, webinar platforms, and social media widgets. These third parties have their own privacy policies, which we do not control. We are not responsible for the content, accuracy, or practices of any third-party service. This privacy policy applies only to information collected by One Mortgage.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date below. For significant changes, we will notify you by email or through a notice on our website. Updates to this policy or continued website use do not create or expand SMS consent. We obtain new consent before sending messages outside the scope you previously authorized.