Privacy Policy (Pilot)
Last updated: 2026-10-02 · Form version
lead-form-v1 · Consent version
consent-v1
This page covers a limited pilot form operated by [Company Name] ("we", "us") to test a marketing intake process. It is not a loan application and does not collect application, underwriting, credit, or financial-document information. This wording is pending review by a qualified attorney or compliance professional before any real consumer data is accepted.
What we collect
- Name, email address, telephone number, state, and your selected interest.
- Your per-channel contact consent selections and the exact consent wording shown to you.
- First-party campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the page URL, and the referring URL.
- Technical metadata: IP address, browser user-agent, and timestamp.
Do not submit Social Security numbers, dates of birth, bank-account or credit-card numbers, income or asset details, or loan documents. We do not want this data and the form rejects it.
Why we collect it
To evaluate the intake process and, where you have given consent, to have a licensed team member contact you about mortgage or refinance options using only the channels you selected. Consent for calls or texts is not a condition of any purchase.
Who receives it
Your submission goes directly to our own server and database. There is no third-party form processor, no advertising pixel, no session recording, and no third-party analytics on this site. We do not sell your information. If you ask us to delete your information, the one confirmation email we may send you goes through our email provider, which may be a third party.
How long we keep it
- We contact you only within 90 days of the permission you gave. After that we keep your details, marked so that nobody contacts you, in case you get in touch with us again. We keep them until you ask us to delete them.
- Encrypted backups of our records are kept for up to 120 days, then destroyed.
- Rejected submissions: up to 30 days. We keep none of what was typed.
- Security event logs: up to 30 days.
- Consent and audit records may be kept longer as evidence of consent.
Asking us to delete your information
Use the form below and tick Also delete my information. We stop contacting you straight away. Once we have checked the request, we erase your name, email address, telephone number and state; copies in our encrypted backups go as those backups expire, within 120 days. We keep the record that you gave and withdrew permission, and a coded form of your email address and telephone number, made with a secret key. It is kept with that record, to show which address and number the permission was for, and so that we never contact you again by mistake.
Your choices — opt out
To stop future contact, enter your email address and/or your full telephone number, with the area code, below; a request made here is recorded immediately. You can also reply STOP to a text message from us, or tell the person who contacted you, and they will record it.
Contact
Questions about this pilot: [privacy contact email / address].