Privacy Policy for Pennymac Employees & Contractors Who Are California Residents

Privacy Policy for Pennymac Employees and Contractors Who Are California Residents

How to Submit Your Request If You are a Resident of California

To submit a request to know, access, delete, or correct your information, click on “Submit a Request” or call us toll-free at (866) 601-3518.

The California Consumer Privacy Act of 2018 (“CCPA”) provides California residents, including employees and contractors, with privacy rights related to the personal information businesses collected about you and your household. The purpose of this privacy policy is to provide you with a description of our business practices regarding the collection, use, sale, sharing, and retention of your personal information and of your rights regarding your personal information.

Under the CCPA, you have the right to know what personal information Pennymac collects, uses, sells, shares, retains, the right to correct inaccurate personal information, the right to request the deletion of your personal information collected, and the right to opt-out of the sale or sharing of your personal information. However, these rights only extend to information covered by the CCPA, and because the CCPA does not cover all consumer information in all scenarios, only certain information is subject to the above referenced rights.

We adopt this privacy policy to comply with the CCPA, and it applies solely to persons who reside in the State of California (“consumer” or “you”).

Information We May Collect

Category Examples Collected Within the Previous 12 Months
Identifiers A real name, alias, mailing address, unique personal identifier, online identifier Internet Protocol address, email address, account name, social security number, driver’s license number or state identification card number, date of birth, passport number, or other similar identifiers. Yes
Any categories of personal information described in the California Customer Records Act (Cal. Civ. Code section 1798.80(e)) A name, signature, social security number, address, telephone number, passport number, driver’s license or state identification card number, education, employment, employment history, criminal history, credit history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Yes
Characteristics of protected classifications under California or federal law Race, color, age (40 and older), national origin, ancestry, citizenship, mental or physical disability, sex/gender (includes pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity and gender expression, military or veteran status, marital status, medical condition, political affiliations or activities, primary language, immigration status, protected medical leaves Yes
Commercial Information Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. No
Biometric information Physiological, biological or behavioral characteristics that can be used to establish individual identity, such as a fingerprint. Yes
Internet or other electronic network activity Browsing history, search history, and information regarding interaction with an Internet Web site, application, or advertisement. Yes
Geolocation data Physical location or movements. No
Sensory data Audio, electronic, visual, or similar information, such as a picture. Yes
Professional or employment-related information Current or past employment history, or performance evaluations. Yes
Non-public education information, per the Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99) Education records that are directly related to a student and maintained by an educational agency or institution or by a party acting for the agency or institution, such as transcripts, graduation information, degree, licenses or certifications. Yes
Inferences drawn from any personal information A profile reflecting the employee’s or contractor’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes, or a profile used to authorize clearance to work in a Pennymac office. Yes
Sensitive Personal Information Personal information that reveals a consumer’s social security, driver’s license, state identification card, or passport number. A consumer’s racial or ethnic origin, citizenship or immigration status, religious or philosophical beliefs, or union membership. The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication. The processing of biometric information for the purpose of uniquely identifying a consumer. Yes

Categories of Sources From Which Personal Information is Collected

  • Information you provided directly to us
  • Information collected through our websites
  • Information provided by third parties, such as service providers, credit reporting agencies, or government entities
  • Information collected using web technologies

Purpose For Collecting Personal Information

  • Acknowledge Receipt of Documents and Policies
  • Administrative Functions
  • Applicant Identification
  • Application Process
  • Benefits (including administration of benefits involving dependents and beneficiaries)
  • Business Resource Groups
  • Career Progression/Internal Transfers
  • Company Correspondence and/or Gifts
  • Determine Website Used to Identify the Open Pennymac Position
  • Diversity Inclusion
  • Emergency Response and Contact Information
  • Employee Relations
  • Employment Authorization
  • Equal Employment Opportunity Commission Requirements
  • Equity Awards
  • Expense Reimbursement
  • External Due Diligence Reviews of Pennymac Operations
  • Family and Medical Leave Act Requirements
  • Fulfillment of Philanthropy Requests
  • Fulfillment of Specific Role Based Responsibilities
  • Hiring and Background Screening
  • Leave of Absence
  • Mentorship Program
  • Monitor Call Recordings for Training and Quality
  • Obtaining E-Signatures
  • Payroll
  • PennyPantry Access
  • Performance Reviews
  • Pre-Employment Assessment
  • Regulatory Compliance, such as Access Persons and Know Your Customer Requirements
  • Rehire Eligibility
  • Security and Building Access
  • Special Accommodations
  • State Licensing Requirements
  • System Access
  • Tax Purposes
  • Training & Education
  • Vitality
  • Work Equipment Distribution
  • Workplace Monitoring

Why We Might Disclose Your Personal Information to Third Parties

  • To support business operations
  • Fulfillment of employment benefits you have selected (401K, medical, etc.)

Sale or Sharing of Personal Information

Pennymac does not sell or share personal information. For the purposes of this policy, “share,” “shared,” or “sharing” means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising for the benefit of a business in which no money is exchanged.

Pennymac has not sold or shared the personal information of consumers under 16 years of age.

While we do not sell or share your information, we do disclose your information for the business purposes described below to the categories of third parties outlined below.

Who We May Have Disclosed Your Personal Information To In the Preceding 12 Months and What We Might Disclose (Examples of each Category are included above)

Suppliers or Professional Service Firms Affiliates Regulators, Legal Authorities, or Other Similar Authorities and/or Agencies
Personal Information Categories
Protected Classification Characteristics
Commercial Information N/A N/A N/A
Biometric Information
Internet or other electronic network activity
Geolocation data N/A N/A N/A
Sensory data N/A
Professional or employment-related information
Non-public education information
Inferences drawn from any personal information
Sensitive Personal Information

Sensitive Personal Information

Pennymac only uses or discloses sensitive personal information for the following purposes:

  • To perform Human Resources functions, such as insurance enrollment and payroll.
  • Detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information;
  • Resist malicious, deceptive, fraudulent, or illegal actions directed at Pennymac to prosecute those responsible for those actions; or
  • Ensure the physical safety of natural persons;

Right to Know

You have the right to request that Pennymac disclose the personal information Pennymac has collected about you, including the categories of personal information, categories of sources from which the personal information was collected, the purpose for collecting, selling, or sharing personal information, and the categories of third parties to whom we disclose personal information.

Right to Access

You have the right to request that Pennymac disclose the specific pieces of personal information we have collected about you.

Right to Request Deletion

You have the right to request the deletion of the personal information we collected about you.

Pennymac may deny your request if there are any conflicts with our corporate record retention requirements, federal or state law, or if it falls under any other CCPA exception.

Right to Request Correction

You have the right to request that Pennymac correct inaccurate personal information Pennymac maintains about you.

Right to Opt-Out of the Sale or Sharing of Personal Information

You have the right to opt-out of the sale or sharing of your personal information. Pennymac does not sell or share personal information.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

Pennymac does not discriminate against you for exercising your CCPA privacy rights.

Authorized Third Party

If you are an authorized third party (such as an attorney-in-fact) making a request on behalf of someone else, please contact us using one of the methods provided below.

How to Submit Your Request If You are a Resident of California

To submit a request to know, access, delete, or correct your information, click on “Submit a Request” or call us toll-free at (866) 601-3518.

Pennymac will verify your identity using the personal information you provide, which must include your name, address, and email address.

Contact Information:

If you have any questions or concerns about our privacy policies and information practices, you may contact Pennymac using the information below.

PennyMac Loan Services, LLC
Attention: Corporate Privacy
PO Box 788
Moorpark, CA 93020-9903
P: (866) 601-3518

This privacy policy was last updated on March 25, 2024, and is subject to change.

Rev. 03/2024