NOTICE TO CALIFORNIA RESIDENTS REGARDING YOUR PRIVACY RIGHTS
Effective Date: 01/08/2026
This notice is provided pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”). This notice applies solely to California residents and describes Griffin Funding, Inc.’s (“Griffin Funding”) practices regarding the collection, use, disclosure, and retention of personal information, as well as the rights available to California residents.
This notice supplements our Privacy Policy and applies only where California law applies. Certain information we collect is subject to federal privacy laws, including the Gramm-Leach-Bliley Act (“GLBA”), the California Financial Information Privacy Act (“CFIPA”), and the Fair Credit Reporting Act (“FCRA”), and may therefore be exempt from certain CCPA/CPRA requirements.
PERSONAL INFORMATION WE COLLECT
“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.
In the past twelve (12) months, Griffin Funding has collected, and may continue to collect, the following categories of personal information, as applicable and to the extent necessary to provide mortgage-related services or respond to inquiries:
• Identifiers (such as name, postal address, email address, IP address, and other similar identifiers)
• Customer records information
• Commercial information
• Internet or electronic network activity information
• Approximate geolocation data
• Audio or electronic information (where permitted by law)
• Professional or employment-related information
• Education information (where relevant)
• Sensitive personal information (as permitted by law)
We do not collect all categories of personal information from every consumer.
SOURCES OF PERSONAL INFORMATION
We collect personal information directly from consumers and from service providers, credit reporting agencies, government entities, and technology platforms used to support mortgage-related services.
PURPOSES FOR COLLECTING AND USING PERSONAL INFORMATION
Griffin Funding collects and uses personal information for business and commercial purposes including:
• Providing mortgage products and services
• Processing, underwriting, and servicing loan transactions
• Customer support and communications
• Security, fraud prevention, and compliance
• Analytics, attribution, and marketing measurement
• Improving and maintaining our website and services
• Complying with legal and regulatory obligations
DISCLOSURE OF PERSONAL INFORMATION
Griffin Funding may disclose personal information to service providers and other parties as necessary to provide mortgage services, comply with legal obligations, or support business operations. These disclosures are limited to what is reasonably necessary for the stated purposes.
Griffin Funding does not sell personal information for monetary consideration. We may share limited personal information with advertising and analytics partners for purposes such as marketing measurement and attribution, as permitted under California law and as described in our Privacy Policy.
Use of Cookies and Advertising Technologies
We use cookies and similar technologies to support analytics, attribution, and advertising measurement. California residents may manage cookie preferences and opt out of sharing for advertising purposes through our cookie consent tools, as described in our Cookie Policy:
https://griffinfunding.com/cookie-policy/
We do not knowingly sell or share the personal information of consumers under 16 years of age.
RETENTION OF PERSONAL INFORMATION
We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide services, meet legal and regulatory requirements, and maintain records as required by applicable law.
YOUR CALIFORNIA PRIVACY RIGHTS
Subject to applicable exceptions, California residents have the right to request access, correction, or deletion of certain personal information, to limit use of sensitive personal information where applicable, and to not be discriminated against for exercising privacy rights.
EXERCISING YOUR RIGHTS
Requests may be submitted by:
Email: compliance@griffinfunding.com
Mail: Griffin Funding, Inc., Attn: Compliance – CA Privacy Rights Request, 2245 5th Ave., Suite 401, San Diego, CA 92101
For additional information, please review our Privacy Policy.

