Privacy Policy
What we collect, why, who ever sees it, and exactly how you make us stop. Including our mobile-messaging commitments in full.
This policy explains what personal information Genesis Home Loans (“Genesis,” “we,” “us”) collects, why we collect it, who ever sees it, how long we keep it, and exactly how you make us stop. We have written it to be read, not to be survived. Where the law requires specific words, we use those words and then say what they mean.
1. Who we are
Genesis Home Loans is the mortgage brokerage of Adriana de Anda, a California-licensed Real Estate Broker and Mortgage Loan Originator.
- NMLS Unique Identifier: #368880 — verify at NMLS Consumer Access
- California DRE License: #01447306 (Real Estate Broker), Graduate REALTOR® Institute
- Regulator: California Department of Real Estate; California Department of Financial Protection and Innovation
- Address: 1313 N Milpitas Blvd, Ste 235, Milpitas, CA 95035
- Phone: (408) 569-9288 · Email: deanda.adriana@gmail.com
Genesis is a mortgage broker, not a lender. We arrange loans; we do not fund them. When we place your file with a wholesale lender, that lender becomes an independent controller of the information you gave them, under its own privacy policy. We tell you which lender before we send anything.
Genesis is the business responsible for the personal information described in this policy. If you are a California resident, we are a “business” as defined in the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA”).
2. Information we collect
We collect only what a mortgage file actually requires, plus the ordinary technical data any website receives. We group it below using the categories the CCPA uses, so that this section and our California Privacy Rights notice describe the same thing in the same words.
| Category | What that means here | Do we collect it? |
|---|---|---|
| A. Identifiers | Name, postal address, email, telephone and mobile number, IP address, unique device or advertising identifiers. | Yes |
| B. Customer records (Cal. Civ. Code §1798.80) | Signature, physical characteristics as they appear on ID, address, telephone, employment, employment history, bank account number, credit card number, debit card number, or any other financial information. | Yes |
| C. Protected classifications | Age, race, colour, national origin, citizenship, religion, marital status, sex, gender, veteran or military status, disability. | Yes — only where a lender or federal law (HMDA, ECOA) requires it, and never to decide whether you get a loan. See §4. |
| D. Commercial information | Products or services considered or obtained; loan programmes you priced; calculator inputs. | Yes |
| E. Biometric information | Fingerprints, faceprints, voiceprints, iris scans. | No |
| F. Internet activity | Browsing on this site, pages viewed, referring URL, search terms, interaction with our advertisements. | Yes |
| G. Geolocation | Approximate location inferred from IP address; the city or county you type into a tool. | Yes — approximate only. We do not collect precise geolocation. |
| H. Sensory data | Audio, electronic, visual, thermal, olfactory. | Only if you leave a voicemail or consent to a recorded call. We will tell you before recording. |
| I. Professional or employment information | Employer, job title, income, self-employment, business ownership. | Yes |
| J. Education information | Records covered by FERPA. | No |
| K. Inferences | A profile of preferences, characteristics or predispositions drawn from the above. | Limited — e.g. which loan programmes are likely to fit you. We do not build advertising profiles. |
| L. Sensitive personal information | Social Security number, driver’s licence, state ID, passport; account log-in and financial account credentials; precise geolocation; racial or ethnic origin; contents of mail, email or texts; genetic data; biometrics used for identification; health, sex life or sexual orientation. | Yes — SSN or ITIN, government ID, and financial account numbers. Nothing else in this list. See §4. |
We collect your Social Security number or ITIN, your government ID and your financial account numbers for exactly one reason: a lender cannot underwrite a mortgage without them. Under the CCPA you have the right to limit the use of sensitive personal information to what is necessary to provide the service you asked for. We already limit it to that. We do not use or disclose sensitive personal information to infer characteristics about you, and we do not use it for advertising of any kind. There is therefore nothing to opt out of — but if you want that in writing, ask and we will send it.
You are never required to give us any of this to browse the site, run a calculator, or read a page. Every tool on this site works without an email address.
3. Where it comes from
- From you — forms, the booking drawer, the loan application, email, text, WhatsApp, phone calls, and documents you upload or hand us.
- From your devices — IP address, browser type, pages viewed, and similar technical data, automatically.
- From consumer reporting agencies — Experian, Equifax and TransUnion, once you authorise a credit report. See §8.
- From third parties you point us to — your employer for a verification of employment, your bank for a verification of deposit, your accountant for a profit and loss statement, your real estate agent, an appraiser, a title or escrow company.
- From advertising platforms — if you clicked one of our ads, the platform tells us that a click occurred. It does not tell us who you are.
- From public records — county recorder data, property records.
4. How we use it
We use personal information for these business purposes and no others:
- To answer you when you ask us something.
- To assess what loan programmes you may qualify for, and to tell you plainly when the answer is none of ours.
- To prepare, submit and track a loan application with wholesale lenders on your behalf.
- To verify your identity, income, assets and employment, as a lender requires.
- To comply with law — including the SAFE Act, the Bank Secrecy Act, anti-money-laundering rules, the Home Mortgage Disclosure Act, and record-retention rules imposed by the California DRE.
- To detect and prevent fraud and to secure our systems.
- To send you the specific communications you asked for — a booking confirmation, a rate update, a document request. See §5.
- To measure whether our own advertising works, in aggregate.
Where a lender or federal law requires us to record your race, ethnicity, sex or age — for example under the Home Mortgage Disclosure Act — we collect it solely for that regulatory reporting. It plays no part in any decision, recommendation or price, and it is not visible to anyone making one.
The Federal Equal Credit Opportunity Act prohibits creditors from discriminating against credit applicants on the basis of race, colour, religion, national origin, sex, marital status, age (provided the applicant has the capacity to contract); because all or part of the applicant’s income derives from any public assistance programme; or because the applicant has in good faith exercised any right under the Consumer Credit Protection Act. The federal agency that administers compliance with this law concerning this creditor is the Federal Trade Commission, Equal Credit Opportunity, Washington, DC 20580. You may also contact the Consumer Financial Protection Bureau at 1700 G Street NW, Washington, DC 20552, or at consumerfinance.gov/complaint.
We do business in accordance with the Federal Fair Housing Act and the Equal Credit Opportunity Act. Equal Housing Opportunity.
5. Text messaging and mobile data
This section governs SMS and MMS messages and the mobile telephone number you give us. It is the most important section in this policy, so we have not buried it.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors who provide support services on our behalf — for example the messaging platform that physically delivers a text — is permitted solely so that we can deliver the message you asked for, and those subcontractors may not use it for anything else.
Text messaging originator opt-in data and consent are excluded from every other category of sharing described in this policy. That information will not be shared with any third party. It is not sold. It is not rented. It is not shared for cross-context behavioural advertising. It is not passed to a lead buyer, an affiliate, a partner, or a data broker — not for value, and not for free.
How we obtain your consent
We only text you if you gave us your mobile number and affirmatively opted in — by ticking the consent box when you book a call or submit an application, by texting us first, or by telling us verbally and having us note it in your file. Consent to receive text messages is never a condition of any purchase, of any loan, or of any service we provide. You can get a mortgage from us and never receive a single text.
What we send, and how often
- Conversational messages — replies to something you texted us, and back-and-forth about your file.
- Transactional messages — booking confirmations, appointment reminders, document requests, rate-lock notices, closing updates.
- Message frequency varies and depends on how active your file is. A typical borrower receives fewer than ten messages a month.
Rates, help and stopping
- Message and data rates may apply. Your mobile carrier, not Genesis, decides what those rates are.
- Reply HELP to any message for help, or call (408) 569-9288.
- Reply STOP to any message to cancel. You will receive one final message confirming you have been unsubscribed, and then no further messages. You may also simply tell us on the phone or by email.
- Opting out of text messages does not affect your loan, your pricing, or how quickly we work your file. We will call or email you instead.
- Carriers are not liable for delayed or undelivered messages.
Our full SMS programme terms are in our Terms of Use.
6. Who we share with, and who we do not
We disclose personal information for a business purpose to the categories of recipients below. Each of them is contractually restricted to using it only for the purpose we gave it to them for.
| Who | Why | What they get |
|---|---|---|
| Wholesale lenders and investors | To price, underwrite, approve and fund the loan you asked us to arrange. | Your application and supporting documents — only after you tell us to submit. |
| Consumer reporting agencies | To pull a credit report you authorised. | Identifiers and your SSN or ITIN. |
| Verification services | Employment, income, asset and identity verification a lender requires. | Only the field being verified. |
| Appraisers, title and escrow companies, notaries | To close the transaction. | Name, contact details, property and loan terms. |
| Service providers — loan origination software, document storage, email, our messaging platform, our website host, calendaring | To run the business. | Only what the tool needs. All are bound by written contracts limiting use to our instructions. |
| Professional advisers — lawyers, auditors, compliance consultants | Legal advice, audits and regulatory examinations. | As required. |
| Regulators and law enforcement | Where required by law, subpoena, or a lawful request; or to establish or defend a legal claim. | As required. |
| An acquirer | If the business is ever sold or merged, personal information may transfer as a business asset — subject to this policy. | As applicable, and we will notify you. |
We do not sell your personal information. We do not share it for cross-context behavioural advertising. We do not sell or share your mobile number or your SMS consent under any circumstances. We do not sell your data to lead aggregators, lead buyers, affiliate networks, or data brokers. We have never done so, and this policy commits us not to.
In the twelve months before the effective date of this policy, Genesis Home Loans sold no personal information and shared no personal information for cross-context behavioural advertising, including of consumers under 16 years of age. Full detail is in our Do Not Sell or Share notice.
7. Financial privacy notice (Gramm-Leach-Bliley)
As a mortgage broker we are a financial institution under the Gramm-Leach-Bliley Act. Federal law gives you the right to limit some but not all sharing. This is our disclosure of what we share and whether you can stop it.
| Reasons we can share your personal information | Do we share? | Can you limit it? |
|---|---|---|
| For our everyday business purposes — to process your transactions, maintain your account, respond to court orders and legal investigations, or report to credit bureaus | Yes | No |
| For our marketing purposes — to offer our products and services to you | Yes | Yes — tell us and we stop |
| For joint marketing with other financial companies | No — we do not do this | N/A |
| For our affiliates’ everyday business purposes — information about your transactions and experiences | No — we have no affiliates | N/A |
| For our affiliates’ everyday business purposes — information about your creditworthiness | No | N/A |
| For our affiliates to market to you | No | N/A |
| For non-affiliates to market to you | No | N/A |
California residents have additional protection under the California Financial Information Privacy Act (Cal. Fin. Code §§4050 et seq.), which generally requires your affirmative consent before a financial institution shares your non-public personal information with a non-affiliated third party. We do not share it with non-affiliated third parties for their own marketing under any circumstances, with or without consent.
8. Credit reports and the Fair Credit Reporting Act
- We pull a credit report only when you authorise it. Browsing this site, using a calculator, or booking a call never pulls your credit.
- We pull it for a permissible purpose under the FCRA — to evaluate a credit transaction you initiated.
- If a lender takes adverse action based in whole or in part on a consumer report, you are entitled to a written adverse action notice telling you which agency supplied the report and that the agency did not make the decision. You may obtain a free copy of that report from the agency within 60 days.
- You are entitled to a free copy of your credit report from each nationwide agency every 12 months at annualcreditreport.com.
- Prescreened offers. When a lender pulls your credit for a mortgage, the bureaus may sell a “trigger lead” telling other lenders you are shopping. That is the bureaus doing it, not us — but the calls you suddenly start receiving are real. You can stop them: opt out at optoutprescreen.com or call 1-888-5-OPT-OUT (1-888-567-8688). Do it before we pull your credit, not after. We tell every client this, and it costs us nothing to say.
9. Cookies, tracking and Do Not Track
This site uses a small number of cookies and similar technologies:
- Strictly necessary
- Keep the site working — routing, security, remembering that you closed a drawer. These cannot be switched off and do not identify you.
- Analytics
- Aggregate, de-identified measurement of which pages are read and where people stop reading. We use it to fix the pages nobody finishes.
- Advertising
- If you arrived from one of our advertisements, the platform sets a cookie so it can tell us the click converted. We do not use these cookies to build a profile of you, and we do not use them to retarget you across unrelated websites.
Global Privacy Control and Do Not Track
We honour the Global Privacy Control (GPC). If your browser or extension transmits a GPC signal, we treat it as a valid request to opt out of any sale or sharing of personal information — automatically, without you having to ask, and without an account. You can check whether we are seeing your signal on our Do Not Sell or Share page, which reads it live.
As to legacy Do Not Trackbrowser signals: there is still no common industry standard for how a website should respond to them, so we do not respond to DNT headers differently. This disclosure is made under the California Online Privacy Protection Act (Cal. Bus. & Prof. Code §22575(b)(5)). GPC is the signal that actually works, and we honour it.
10. How long we keep it
| What | How long | Why |
|---|---|---|
| A funded loan file and everything in it | 4 years from the closing date, at minimum — in practice 7 | California DRE (10 Cal. Code Regs. §2729 / Bus. & Prof. Code §10148) and federal record-retention rules |
| A loan application that did not fund | 25 months from the date we notified you of the outcome | ECOA / Regulation B (12 CFR §1002.12) |
| Advertising and marketing records | 2 years | TILA / Regulation Z advertising rules |
| SMS consent and opt-out records | At least 5 years after the consent ends | TCPA — to prove you consented, and to prove we stopped when you said stop |
| An enquiry that never became an application | 24 months, then deleted | No longer needed |
| Website analytics | 14 months, aggregated | Measurement only |
When a retention period ends we delete or de-identify the information. Where the law requires us to keep a record, we keep the record and nothing more.
11. How we protect it
- Encryption in transit (TLS) on every page of this site and on every document upload.
- Encryption at rest for stored documents.
- Multi-factor authentication on every system that touches a borrower file.
- Access on a need-to-know basis. Adriana is the only person who reads your complete file.
- A written information security programme, as the GLBA Safeguards Rule requires.
- Vendors are contractually bound to equivalent standards.
No system is perfect and we will not pretend otherwise. If a breach occurs that affects your personal information, we will notify you and the California Attorney General as Cal. Civ. Code §§1798.29 and 1798.82 require.
12. Your rights
If you are a California resident, you have the right to know, to delete, to correct, to opt out of sale or sharing, to limit the use of sensitive personal information, to data portability, and to be free from retaliation for exercising any of them. Those rights, how to use them, and how we verify you, are set out in full in our California Privacy Rights notice — which includes a request form you can submit right on the page.
If you are not a California resident, we will still honour a request to access, correct or delete your information. Ask, and we will do it.
Marketing
- Email — click unsubscribe in any marketing email, or tell us. Transactional emails about a loan in progress will continue, because you need them.
- Text — reply STOP. See §5.
- Calls — tell us and we add you to our internal do-not-call list, permanently. We honour the National Do Not Call Registry.
- Shine the Light — under Cal. Civ. Code §1798.83, California residents may ask a business once a year for a list of the personal information it shared with third parties for those parties’ direct marketing. Our answer is: none. We share nothing for third-party direct marketing.
13. Children
This site is not directed at children. We do not knowingly collect personal information from anyone under 16. We do not sell or share the personal information of consumers under 16 under any circumstances — there is nothing to opt in to, because we do not do it. If you believe a child has given us information, write to us and we will delete it.
A California resident under 18 who is a registered user may request removal of content they posted, under Cal. Bus. & Prof. Code §22581. This site has no user-posted content, so there is nothing to remove — but the right exists and we will honour it if that ever changes.
14. Third-party sites
Where we link to another site — NMLS Consumer Access, a credit bureau, a calendar provider, a mapping service — that site has its own privacy policy and we do not control it. Read theirs. Linking is not endorsement of their data practices.
15. Visitors outside the United States
Genesis operates in California and lends only on California property. Our systems are located in the United States. If you use this site from outside the US — which foreign national borrowers routinely do — your information will be transferred to and processed in the United States, where privacy law differs from the law where you live. By using the site you understand that. If you are in the EEA or the UK and want to exercise a right under the GDPR, write to us; we will treat the request the same way we treat a California request.
16. Changes to this policy
We review this policy at least once a year, as the CCPA requires. If we change it materially we will update the effective date at the top, raise the version number, and — where the change affects how we use information you already gave us — tell you directly. We keep prior versions and will send you one on request.
17. Contact us
Privacy questions, requests, and complaints all go to the same place, and a human answers them.
- Email: deanda.adriana@gmail.com
- Phone: (408) 569-9288
- Mail: 1313 N Milpitas Blvd, Ste 235, Milpitas, CA 95035
- Online: the request form on our California Privacy Rights page
If you are not satisfied with our answer you may complain to the California Attorney General (oag.ca.gov), the California Privacy Protection Agency (cppa.ca.gov), the California Department of Real Estate (dre.ca.gov), or the Consumer Financial Protection Bureau (consumerfinance.gov/complaint). We would rather you told us first, but it is your right and we will not obstruct it.