Your Privacy.
Our Responsibility.

1. Information We Collect

Depending on how you interact with our website, we may collect the following categories of information.

Information You Provide Directly

This may include:

• First and last name.
• Email address.
• Telephone number.
• State or general geographic location.
• Information submitted through contact or inquiry forms.
• Details about mortgage financing needs that you voluntarily provide.
• Communications sent to BridgePoint through our website.

If you choose to begin a mortgage application, additional financial, identity, employment, and property information may be collected through the applicable loan application system and handled under additional privacy notices and applicable financial privacy requirements.

Information Collected Automatically

When you access our website, we and our service providers may collect:

• IP address.
• Browser type.
• Device type.
• Operating system.
• Pages visited.
• Referring website.
• Approximate location derived from technical information.
• Date and time of website interactions.
• Cookie identifiers and related technical information.

The specific information collected depends on the website technologies and services in use.

Financial Calculator Information

BridgePoint provides interactive financial calculators for educational purposes, including a Mortgage Calculator and Rent vs. Buy Calculator.

Information entered into these tools may include estimated purchase prices, down payments, mortgage rates, loan terms, rental expenses, and financial assumptions.

Calculator inputs are intended to generate educational estimates. Our calculators perform their calculations within your web browser; the figures you enter are not submitted to BridgePoint or stored by the calculators.

2. How We Use Information

We may use personal information to:

• Respond to inquiries and requests.
• Communicate about mortgage financing options.
• Provide information about our services.
• Facilitate requests for pre-approval or mortgage applications.
• Operate and maintain the website.
• Improve website functionality and user experience.
• Understand website performance and usage patterns.
• Detect and prevent spam, fraud, unauthorized activity, and security threats.
• Maintain appropriate business records.
• Comply with applicable laws and regulatory requirements.

We may also use information for other purposes disclosed at the time of collection or otherwise permitted by law.

3. Cookies and Website Analytics

Our website may use cookies and similar technologies to support essential website functionality, measure performance, maintain security, and understand visitor interactions.

Depending on the services enabled, these technologies may include:

• Essential website cookies.
• Analytics cookies.
• Performance monitoring technologies.
• Security and fraud-prevention technologies.
• Advertising or marketing technologies, if implemented.

You may be able to manage certain cookies through your browser settings or through privacy controls made available on the website.

Some website features may not function properly if essential cookies are disabled.

Where legally required, BridgePoint will provide appropriate notice, consent mechanisms, or opt-out choices.

4. How We Share Information

We may disclose personal information to the following categories of recipients when appropriate:

Authorized BridgePoint Personnel

Employees, loan originators, managers, and other authorized personnel who need information to respond to inquiries or provide requested services.

Service Providers

Companies providing website hosting, form processing, email delivery, customer relationship management, technology support, analytics, cybersecurity, and related services.

Mortgage Service and Transaction Participants

When you request mortgage financing services, information may be disclosed to lenders, investors, credit reporting agencies, settlement providers, and other parties as permitted or required for the requested services and subject to applicable financial privacy laws.

Legal and Regulatory Authorities

We may disclose information when required by law, regulation, court order, legal process, or a valid governmental or regulatory request.

Business Transactions

Information may be disclosed as permitted by law in connection with a merger, acquisition, restructuring, or other business transaction.

BridgePoint does not sell personal information or share it for cross-context behavioral advertising and has not done so during the preceding 12 months.

5. Financial Privacy

BridgePoint operates in the mortgage lending industry and may be subject to federal and state financial privacy laws.

When applicable, nonpublic personal information collected in connection with mortgage products or services is governed by the Gramm-Leach-Bliley Act, implementing regulations, and other applicable requirements.

Consumers may receive additional financial privacy notices describing the collection, use, sharing, and protection of nonpublic personal information.

This general website Privacy Policy does not replace any legally required financial privacy notice.

6. Information Security

BridgePoint maintains administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and loss.

We seek to limit access to personal information to authorized individuals and service providers with legitimate business purposes.

Although we take reasonable precautions, no internet-based system or electronic transmission can be guaranteed completely secure.

Visitors should avoid submitting sensitive financial information through general website contact forms unless specifically directed to an approved secure application system.

7. Information Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, comply with applicable legal and regulatory obligations, maintain business records, resolve disputes, and protect legitimate business interests.

Rather than a single fixed retention period, retention is determined by the category of information, the purpose for which it was collected, the status of the relationship or request, applicable recordkeeping requirements, and any need to resolve disputes or preserve records under a legal hold.

When information is no longer needed, we take reasonable steps to delete, de-identify, or securely dispose of it, subject to applicable retention obligations.

8. Your Privacy Rights and Choices

Depending on your state of residence and applicable privacy laws, you may have certain rights regarding personal information.

These rights may include the ability to:

• Request access to certain personal information.
• Request correction of inaccurate personal information.
• Request deletion of eligible personal information.
• Obtain information about categories of personal information collected or disclosed.
• Opt out of certain information uses or disclosures where applicable.
• Exercise applicable privacy rights without unlawful discrimination or retaliation.

Certain rights may be limited by legal exceptions, including those involving information subject to applicable federal financial privacy laws.

We may need to verify your identity before processing certain requests.

To submit a privacy inquiry or exercise an applicable right, contact us using the information at the end of this Policy.

9. California Privacy Rights

BridgePoint is subject to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"). This section applies to California residents and personal information covered by the CCPA, including covered website visitor and recruiting information.

The CCPA exempts certain personal information collected, processed, sold, or disclosed pursuant to the Gramm-Leach-Bliley Act and its implementing regulations. This is an information-specific exemption, not a blanket exemption for BridgePoint or all information we handle.

Preceding 12 Months

As of the effective date, BridgePoint reports no collection of non-exempt website visitor, general inquiry, or applicant records during the preceding 12 months, and no corresponding business-purpose disclosures of those records to outside recipients. Accordingly, no historical categories, sources, purposes, or recipients are reported for those records. This statement excludes mortgage information governed by separate financial privacy notices and does not describe technical processing performed by website hosting or security providers, discussed in Section 1.

Sections 1, 2, and 4 describe information that may be collected, its sources and purposes, and potential recipients as visitors use the website and recruiting services. These prospective descriptions are not a statement that every listed category was collected in the preceding 12 months.

Sale, Sharing, and Opt-Out Signals

BridgePoint has not sold personal information or shared it for cross-context behavioral advertising during the preceding 12 months, including information about individuals under 16. Because BridgePoint does not engage in sale or sharing, there is currently no sale or sharing to opt out of through a Global Privacy Control signal, and a sale/sharing opt-out link is not currently provided. If these practices change, BridgePoint must provide the required notices and opt-out methods and honor applicable opt-out preference signals before engaging in sale or sharing.

Your California Rights

• Right to know and access: Request the categories and specific pieces of personal information collected about you, categories of sources, collection purposes, categories of recipients, and categories disclosed for business purposes or sold or shared.
• Right to deletion: Request deletion of your personal information, subject to exceptions such as legal recordkeeping obligations, security, and completing requested transactions.
• Right to correction: Request correction of inaccurate personal information, taking into account its nature and the purposes of processing.
• Right to portability: Receive information supplied in response to an access request in a portable and, where technically feasible, readily usable format.
• Right to opt out: Direct a business that sells personal information or shares it for cross-context behavioral advertising to stop that sale or sharing.
• Right to limit: Limit the use and disclosure of sensitive personal information when it is used beyond purposes permitted by the CCPA. This right does not apply to every use of sensitive information.
• Right to non-discrimination: Exercise your rights without unlawful discrimination, including retaliation against an employee, applicant, or independent contractor.

Requests and Identity Verification

You may submit a privacy request by emailing Compliance@BridgePointMTG.com or calling our toll-free number, (844) 79-MORTGAGE (844-796-6784). Telephone privacy requests are forwarded to our compliance team. You may also write to the mailing address in Section 14. Describe the right you wish to exercise and provide sufficient information for us to locate relevant records. Do not include Social Security numbers, account passwords, or complete financial account numbers in an ordinary email.

Requests to know, delete, or correct are subject to reasonable identity verification. Depending on the request, verification may involve matching information already held by BridgePoint or obtaining additional confirmation through an appropriate secure method. You do not need to create an account to make a request.

You may designate an authorized agent. Where permitted by law, we may require proof of signed authorization and ask you to verify your identity directly or confirm the agent’s authority. A valid power of attorney is handled in accordance with California law. Opt-out requests do not require identity verification.

Response Timing

The CCPA generally requires acknowledgment of requests to know, delete, or correct within 10 business days and a substantive response within 45 calendar days after receipt. An extension of up to an additional 45 calendar days is permitted when reasonably necessary, with notice and an explanation. If a request cannot be fulfilled, the response must explain the reason, subject to applicable law.

Requests are generally handled without charge. The CCPA permits a reasonable fee or refusal for manifestly unfounded or excessive requests, subject to its requirements, and generally limits requests to know to twice in a 12-month period.

Retention and Other Privacy Notices

The criteria used to determine retention are described in Section 7. Categories of information, sources, purposes, and recipient types are described in Sections 1, 2, and 4. Recruiting-specific information is addressed in the Applicant Privacy Notice. These descriptions do not replace any separate notice required at or before collection.

10. Third-Party Websites and Services

Our website may contain links to third-party websites, mortgage application systems, scheduling platforms, or other external services.

These third parties may maintain their own privacy policies and information-handling practices.

BridgePoint is not responsible for the privacy practices of independently operated third-party websites.

We encourage visitors to review the applicable privacy notices before submitting information through external services.

11. Children’s Privacy

Our website and mortgage services are not directed toward children under the age of 13.

We do not knowingly solicit personal information from children under 13 through our general website.

If we learn that information was collected from a child in circumstances requiring deletion under applicable law, we will take appropriate action.

12. Careers and Employment Inquiries

Individuals interested in employment, loan origination, management, or other professional opportunities with BridgePoint should review our separate Applicant Privacy Notice.

That notice explains how information submitted through our Careers page is handled.

13. Changes to This Policy

We review this Privacy Policy at least once every 12 months and update it as needed to reflect changes in our services, website technologies, information practices, or legal obligations.

When changes occur, we will update the effective date displayed at the top of the Policy.

We will provide additional notice of material changes when required by applicable law.

14. Contact Information

BlackRock Capital Group, Inc. dba BridgePoint Mortgage
Company NMLS: 2083598
Website: https://www.BridgePointMTG.com
Privacy Inquiries: Compliance@BridgePointMTG.com
Toll-Free Privacy Requests: (844) 79-MORTGAGE (844-796-6784)
Mailing Address: 22485 E. La Palma Ave., #104, Yorba Linda, CA 92887

For questions about this Privacy Policy or our information-handling practices, please contact BridgePoint using the information above.