Privacy Policy

MORTGAGE SOUTH

Website Privacy Policy

Effective : October 19, 2026

This policy describes Mortgage South’s ("LENDER," "we" or "our") collection, processing, transfer and storage of data from visitors to our website at www.mortgage-south.com (our "Website"). This Privacy Policy applies only to the data collected on the Website and not to other data collected or processed by Mortgage South. Mortgage South is a licensed mortgage company operating in Tennessee and Georgia.

If you are a Mortgage South customer, please see our Consumer Privacy Notice, which we provide to all our individual customers, for a comprehensive explanation of how we collect, use, and share personal information and your choices for limiting the use and sharing of your information as our customer.

To limit our sharing: Call 423-622-1269, submit a request online at https://www.mortgage-south.com/contact/, or email Candy Guerrero at admin@mortgage-south.com. You can contact us at any time to limit our sharing.

What We Do: To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. We collect your personal information when you apply for a loan, give us your contact or income information, or show us your driver's license. We also collect information from credit bureaus, affiliates, or other companies. Federal law gives you the right to limit only sharing for affiliates' everyday purposes regarding your creditworthiness, affiliates marketing to you, and non-affiliates marketing to you. Questions?

1. OUR COMMITMENT TO YOUR PRIVACY

This Privacy Policy describes:

• How information about you is collected through our Website;
• How we use and with whom we share this information;
• How you can access and update this information; and
• The choices you can make about how we collect, use and share your information.

If you have any questions regarding this Privacy Policy or our information collection and use practices, please contact us using the information in the "Contact Us" section below.

2. INFORMATION COLLECTED THROUGH OUR WEBSITE

Mortgage South collects information from Website visitors and also obtains information from third parties (including from service providers) in the course of providing our mortgage and loan origination services (our "Services"), which we may add to the data we obtain through the Website. The information collected through our Website, the sources from which we collect it, and the business purposes for which we use it are described below.

Personal and Loan-related Information. You may provide us information about you, which may include personal information and information relating to or necessary for the initiation, processing, or completion of certain financial transactions, including the issuance of loans. This includes identifiers such as your name, postal address, email address, Social Security number, and government-issued ID number; financial information such as income, account balances, payment history, and credit scores; and professional or employment information. Source: directly from you, and from third parties such as credit bureaus and other financial services companies. Purpose: to originate, process, and service mortgage loans and to comply with applicable legal obligations.

Transactional Information. We may also create transactional records of each of the transactions or other events occurring through our Website. This transactional information is generally collected (i) to enable our Services, including loan document creation, origination, management, and distribution, (ii) to enable the services provided by third parties (including determinations regarding qualification for loans or the interest rates to be applied to loans), and (iii) to enable Mortgage South to comply with various legal obligations. Source: automatically generated when you interact with our Website. Purpose: to enable our Services and satisfy legal and regulatory requirements.

Device and Usage Information. Like most online services, our Website automatically collects standard technical information when you use it, including internet protocol (IP) addresses, browser types, internet service providers (ISPs), the pages and content you view or interact with on our Website, the information you search for, dates and times of your visits, referring URLs, session duration, and device type and operating system. This constitutes internet and network activity information. Source: automatically from your device when you visit our Website. Purpose: to operate and improve our Website, to analyze usage trends, and to deliver relevant advertising.

Geolocation Data. We collect approximate geolocation information derived from your IP address, such as your general city, state, and ZIP code. We do not collect precise GPS-level location. Source: automatically from your device. Purpose: to tailor our Services to your location and to enable geographic advertising targeting.

Inferences. We and our third-party analytics and advertising partners draw inferences from the information described above to create a profile about you reflecting your preferences, characteristics, and behavior. Source: derived from other categories of information we collect. Purpose: to personalize content and to deliver targeted advertising.

Cookies and Other Technologies. Our Website collects certain information through the use of "cookies" and other tracking technologies. Cookies are small files that your browser places on your computer. We may use session cookies, persistent cookies, and other tracking technologies to better understand how you interact with our Website, to monitor usage by our users and web traffic routing on our services, and to improve and personalize our Website. Many Internet browsers automatically accept cookies. You may be able to instruct your browser to stop accepting cookies or to prompt you before accepting cookies from the websites you visit. We do not respond to "do not track" browser signals at this time. We may also use web beacons in our email marketing to track instances where a user clicks through a link in the email. For details on the specific third-party tracking technologies we use and how to opt out of each, see Section 11 below.

3. HOW WE USE INFORMATION

We and service providers working on our behalf use information collected on our Website in a variety of ways intended to provide our Website and Services and to operate our business, including the following:

To Provide our Services. We use the information that we collect (i) to operate, maintain, enhance and provide our Website and our Services, (ii) to provide other services and information that you request, and (iii) to provide customer support to you and other parties.

To Improve, Analyze, and Personalize our Website and Services. We use the information that we collect to understand and analyze usage trends and preferences; to monitor and analyze the effectiveness of our Website and Services; to improve our Website and Services and develop new products, services, features, and functionality; and to personalize our Website and Services, such as remembering your information so that you will not have to re-enter it during your visit or the next time you use our Website, or providing customized content and information.

To Contact You. We may use your email address or other information we collect to contact you for administrative purposes such as customer service or to send communications, including marketing or promotional communications, relating to our Website and Services. Generally, you have the ability to opt out of receiving promotional communications as described below.

Aggregate Data. We aggregate data collected through our Website and use it for purposes such as creating and sharing reports about the use of our products and services, including users' interests, usage patterns, and trends.

Advertising. We may use information that you provide or that we collect to improve or tailor the effectiveness of advertising on our Website and to provide advertisements and other content that is tailored to you.

4. HOW WE SHARE INFORMATION

We may share, transfer, or disclose your information if you consent to us doing so, as well as in the following circumstances:

To Third-Party Tracker Operators. As described in Section 11 below, our Website uses tracking technologies operated by Google LLC and LinkedIn Corporation. These companies receive user data — including identifiers, internet and network activity, geolocation data, and inferences — through the trackers embedded on our Website and use that data for their own independent advertising, analytics, and profiling purposes. The sharing of personal information with Google LLC and LinkedIn Corporation for cross-context behavioral advertising may constitute a "sale" or "sharing" of personal information under California law. To opt out, see Section 13 below or click the Do Not Sell or Share My Personal Information link in the footer of our Website.

To Service Providers. We work with third party service providers to provide services including loan or transaction processing or administration; Website hosting and other similar services, development and maintenance; advertising and marketing services; and other services related to our Website and Services for us. These third parties may have access to or process your information as part of providing those services for us. Generally, we limit the information provided to these service providers to that which is reasonably necessary for them to perform their functions, and we require them to agree to maintain the confidentiality of such information. Each service provider that processes personal information on our behalf does so pursuant to a written contract that restricts their use of that information to the performance of contracted services, as required by Cal. Civ. Code section 1798.140(v).

In Aggregate Form. We may make certain aggregated non-personal information available to third parties for various purposes, including (i) compliance with various reporting obligations; (ii) for business or marketing purposes; or (iii) to assist such parties in understanding our users' interests, usage patterns, and borrowing and loan origination trends.

Compliance with Laws and Law Enforcement; Protection of Our Rights. We may disclose your information (including your personal information) to a third party if (a) we believe that disclosure is reasonably necessary to comply with any applicable law, regulation, legal process or governmental request, (b) to enforce our agreements, policies and terms of service, (c) to protect the security or integrity of our Website or Services, (d) to protect the property, rights, and safety of Mortgage South, our users or the public from harm or illegal activities, (e) to respond to an emergency which we believe in good faith requires us to disclose information to assist in preventing the death or serious bodily injury of any person, or (f) to investigate and defend ourselves against any third-party claims or allegations.

In Significant Business Transactions. Your information, including personal information, may be disclosed and otherwise transferred to an acquirer, successor, or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, or in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.

4A. NOTICE AT POINT OF COLLECTION

When you submit a contact form, or other form on our Website, we collect personal information directly from you at that point. The categories of personal information collected at each form, the purposes for which we use it, and a link to this Privacy Policy are disclosed at or before the point of collection on each form. The online loan application requires you to create an account and collects sensitive personal information including your Social Security number and financial account information. This information is used solely to process your loan application and is not used for advertising or marketing purposes. If you have questions about what information is collected at a specific form, please contact us at admin@mortgage-south.com.

5. OUR POLICY CONCERNING CHILDREN

Our website is not directed to children under 13, and we do not knowingly collect any personal information from children under the age of 13 through our website. If we become aware that a child under 13 has provided us with personal information through our website, we will take steps to delete such information.

6. PRIVACY POLICIES OF LINKED SITES AND ADVERTISERS

Our Website may contain links to other sites, as well as advertisements from companies linking to their own sites. We are not responsible for the privacy practices or the content of such sites. If you have any questions about how these other sites use your information, you should contact them directly.

7. SECURITY

Mortgage South has certain measures in place to maintain the security, confidentiality and integrity of the information gathered through the Website, and to help protect against the loss, misuse and alteration of such information. While we take measures to protect your personal information against security breaches and unauthorized access, we cannot guarantee that our safeguards will be effective all of the time against all security threats. In the event of a breach of unencrypted personal information affecting California residents, we will provide notification as required by Cal. Civ. Code section 1798.82.

8. CHANGES TO OUR PRIVACY POLICY

This Privacy Policy is reviewed and updated at least once every 12 months. The next scheduled review date is October 19, 2027. If we decide to make material changes to our Privacy Policy, we will make reasonable efforts to notify you of the changes by sending a notice to the primary email address provided to us and/or by placing a notice on our Website. The effective date at the top of this Policy will reflect the date of the most recent revision.

9. HOW TO ACCESS AND UPDATE YOUR INFORMATION

You can access and update the information that you have provided to us as follows:

• If you are a Mortgage South customer, you can access and update certain personal information in connection with your account or application by contacting us.
• You may contact us at admin@mortgage-south.com and request to review, amend or delete certain personal information collected by us.
• Please note that we may not be able to delete all information we collect through our Website.
• You may opt-out of receiving marketing emails at any time by following the steps to "unsubscribe" described in the footer of our marketing emails. Your opt-out will become effective in 10 days or less.

10. CONTACT US

If you have any questions, comments or concerns regarding our Privacy Policy and/or practices, please contact us using any of the methods below. To submit a formal consumer privacy request, you must use one of the two designated methods below, as required by Cal. Civ. Code section 1798.130(a)(1).

Mortgage South

6576 E. Brainerd Rd, Suite B, Chattanooga, TN 37421

Telephone- 423-624-3878

Email (general inquiries): admin@mortgage-south.com

11. THIRD-PARTY TRACKERS ON OUR WEBSITE

Our Website uses the following third-party tracking technologies to analyze traffic, personalize content and ads, and improve our Website and Services. When you first visit our Website, a cookie consent banner will appear describing these technologies and giving you the option to accept all, decline non-essential, or manage your preferences by category. Non-essential trackers do not run until you select your preferences. If you accept, your consent is recorded with a timestamp. You may update your preferences at any time via the Cookie Preferences link in the footer of our Website. Mortgage South does not use retargeting advertising. The third parties who operate these trackers are separate from and independent of Mortgage South.

12. YOUR COOKIE CHOICES

When you first visit our Website, a cookie consent banner will appear. You may choose to accept all cookies, decline non-essential cookies, or manage your preferences by category. Non-essential trackers do not run until you make a selection. You may withdraw or change your consent at any time by clicking Cookie Preferences in the footer of any page on our Website.

Cookie categories are as follows:

• Strictly Necessary. Required for the Website to function. These cannot be disabled.
• Analytics. Google Analytics and Google Tag Manager. These help us understand how visitors use our Website.
• Advertising and Targeting. Google Ads, Google DoubleClick, and LinkedIn Insight Tag. These deliver and measure targeted advertising. Sharing data through these trackers for cross-context behavioral advertising may constitute a sale or sharing of personal information under California law. To opt out, use the Do Not Sell or Share My Personal Information link in the footer of our Website.

13. YOUR CALIFORNIA PRIVACY RIGHTS

This section applies to California residents under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), Cal. Civ. Code sections 1798.100-1798.199, and California's Invasion of Privacy Act (CIPA), Cal. Penal Code sections 638.50-638.56.

In the past 12 months, we have collected the following categories of personal information from Website visitors: identifiers (including name, email, IP address, device IDs, and cookie IDs); financial information (income, credit scores, account balances, and payment history); internet and network activity (pages visited, clicks, session duration, and referral URLs); geolocation data (approximate location derived from IP address); commercial information (loan application data and transaction records); and inferences drawn from the above for advertising and analytics purposes. We have disclosed each of these categories to service providers and third-party tracker operators as described in Sections 4 and 11 above. Mortgage South does not sell personal information for monetary compensation and does not share personal information with lead generation companies, mortgage brokers, or real estate partners. The only potential "sale" or "sharing" under California law is the transmission of tracker data to Google LLC and LinkedIn Corporation for cross-context behavioral advertising purposes, as described in Section 11.

As a California resident, you have the following rights:

To submit a verifiable consumer request, you must use one of the following two designated methods, as required by Cal. Civ. Code section 1798.130(a)(1):

• Designated Method 1 — Call 423-624-3878
• Designated Method 2 — Submit online: https://www.mortgage-south.com/contact/

We will respond to verifiable consumer requests within 45 days of receipt. We may extend this period by an additional 45 days where reasonably necessary, with prior notice. Cal. Civ. Code section 1798.130(a)(2). Responses cover the preceding 12 months of data. We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. We will not require you to create an account solely to submit a privacy request.

To opt out of the sale or sharing of your personal information, click the Do Not Sell or Share My Personal Information link in the footer of our Website, or contact us using one of the designated methods above. Once you opt out, we will not re-request your authorization for at least 12 months. Cal. Civ. Code section 1798.135.

14. DEFINITIONS

Affiliates. Companies related to Mortgage South by common ownership or control, which may be financial or nonfinancial companies.

Non-Affiliates. Companies not related to Mortgage South by common ownership or control, which may be financial or nonfinancial companies.

Joint Marketing. A formal agreement between non-affiliated financial companies that together market financial products or services to you.

Sale or Sharing. Under Cal. Civ. Code section 1798.140, selling or sharing personal information includes disclosing it to a third party for money or other valuable consideration, or for cross-context behavioral advertising purposes, whether or not money is exchanged.

Sensitive Personal Information. Under Cal. Civ. Code section 1798.140, sensitive personal information includes Social Security numbers, driver's license and passport numbers, financial account credentials, precise geolocation, racial or ethnic origin, religious beliefs, union membership, contents of personal communications, genetic data, biometric information, health information, and information about sex life or sexual orientation.

Mortgage South is licensed to conduct mortgage lending business in multiple states. Residents of the following states have additional privacy rights under their respective state laws. These rights are in addition to, and not in lieu of, any rights you have under federal law or the California sections of this Policy.

TENNESSEE RESIDENTS

Governing Law: Tennessee Information Protection Act (TIPA), Tenn. Code Ann. sections 47-18-3201 et seq., effective July 1, 2024.

As a Tennessee resident, you have the following rights:

To submit a TIPA request, use the designated methods listed in Section 10. We will respond within 45 days, with a possible 45-day extension with prior notice. If we decline your request, you may appeal by contacting us at admin@mortgage-south.com. If your appeal is denied, you may contact the Tennessee Attorney General.