California Notice at Collection
 

This website is owned and operated by Arbor Realty Trust, Inc. (“Arbor,” “us,” “we,” or “our”). We respect your concerns about privacy. This California Notice at Collection (“Notice”) applies to personal information we may obtain on this website and related websites where the Notice is posted (collectively, the “Web Site(s)”). The Notice also applies to Arbor’s handling of personal information we collect from you whenever you communicate or interact with us, whether by using the Web Sites or whenever you engage with us in respect of the services we provide (together we refer to the Web Sites and services we provide as the “Services”). More details on how Arbor handles Personal Information it collects are available in our Privacy Policy.
 

This Notice lists the categories of personal information Arbor collects and identifies the business or commercial purposes for which the categories of personal information will be used. This Notice also summarizes how third parties may receive and process your personal information on our behalf, and how we determine the length of time that we retain your personal information. Arbor reserves the right to change or update this Notice at any time.
 

This Notice was last updated on February 2, 2023.
 

This Notice does not apply to the personal information that we may collect from you if you are an employee or contractor of Arbor. If you work on behalf of Arbor, we will provide you with a separate privacy notice as applicable.
 

Information Collected
 

Personal information (“Personal Information”) is generally defined as information that, alone or in combination with other information, could identify, relate to, describe, reference, be reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. The information we collect may include certain kinds of Personal Information. Depending on where you reside, categories of Personal Information may include, but are not limited to, your name, shipping/billing address(es), telephone number, email address, username and password, IP address or other online identifiers, browsing or search history, credit/debit card number or other financial information, professional or employment-related information, office address and other business information, or any other type of information that, directly or indirectly, is reasonably capable of being associated with you.
 

When using the Services, the Personal Information we may collect includes contact information such as your name, address, email address, and phone number.
 

If you submit applications for loans or other Services, Arbor may collect unique identifiers about you, such as your signature and social security number.
 

To access Arbor Loan Express (ALEX) or certain other parts of the Services that require you to log in before using them, you may need to provide us with account information, such as your username and password.
 

Some Services will collect historical information about you, including your employment information and records of personal property.
 

We may gather certain navigational information in an automated manner about where visitors go on our Web Sites and information about the technical efficiencies of our Web Sites and Services. In the process of gathering navigational information, data that generally is non-personally identifiable information (i.e. domain type, browser version, service provider and IP address) may be collected which will provide information regarding a visitor’s use of our Web Site.
 

We may also gather voluntarily provided Personal Information through the ability to have questions answered through our ‘Contact Us’ section. Data we collect through these and other interactions you have with us may include demographic information that may include Personal Information such as your age and gender. Information that we may collect about you through online interaction includes information that you input and data resulting from your activity on the Web Sites or through the Services.
 

Other Personal Information we collect may include transaction information like your bank account information or other payment or financial data and general location information such as your address or zip code.
 

Arbor also may make inferences about you based on some combination of the preceding categories of collected Personal Information. To the extent Arbor does this and these inferences can reasonably by associated with you, Arbor will treat those inferences as Personal Information as well.
 

Certain categories of Personal Information that you provide to us voluntarily may be considered “Sensitive Personal Information,” meaning that it may be subject to additional protections under applicable law. Depending on where you reside, Sensitive Personal Information may include certain kinds of data mentioned above, such as transaction information and unique identifiers like your social security number. Other categories of Sensitive Personal Information are not actively collected through the Services, but you may be able to voluntarily provide other Sensitive Personal Information in any content or communications that you upload or make available to Arbor while using our Services. You hereby acknowledge and agree that any Sensitive Personal Information you voluntarily provide to Arbor may be processed as necessary to provide the Services as reasonably expected in accordance with your requests or instructions.
 

This Web Site may include social media features, such as widgets or other interactive features. These features may collect your Internet protocol address, which page you are visiting on the Web Site, and may set a cookie to enable the feature to function properly.
 

Using Information
 

The Personal Information Arbor collects allows us to improve our product and service offerings as well as improve a Web Site’s functionality. For example, borrower information collected is used to help us identify what loan products the borrower should have access to. It provides us a way to contact you and provide you with login credentials and other account information.
 

Depending on the nature of your interaction with Arbor, we may use collected Personal Information and other data to:
− process loan applications;
− maintain proper business records and other relevant records;
− respond to questions, comments or other messages;
− send Arbor newsletters or other updates with information or advertising relating to the Services;
− process loan transaction information;
− perform evaluations and surveys regarding your experiences with the Services;
− contact you if there are issues with information or content you provided through the Services;
− provide ongoing technical support related to the Web Sites and other Services;
− communicate with you regarding additional uses of your Personal Information beyond the scope of this list and this Notice;
− improve the content and general administration of the Services;
− perform internal operations related to the Web Sites (e.g., fraud prevention);
− troubleshoot software issues and operational problems with the Web Sites;
− conduct data analysis and testing; and/or
− monitor usage of the Web Sites.
 

Processing by Third-Party Service Providers
 

Arbor and certain third parties that provide services on our behalf will collect, process, and use your Personal Information as described and for the purposes set forth in this Notice and our Privacy Policy.
 

Except as noted herein, Arbor does not share or sell your Personal Information with any person or entity outside of Arbor. We will only use or disclose any Sensitive Personal Information collected from you as permitted by law and as disclosed in this Notice and our Privacy Policy. For instance, we may use your Sensitive Personal Information to perform or provide the requested products or services, detect security incidents, resist and prosecute illegal or fraudulent activity, ensure the physical safety of persons, or verify or maintain the quality or safety of our services or products.
 

We may disclose certain portions of your Personal Information to service providers or third parties as necessary to fulfill the business purposes for which the Personal Information was collected.
 

For example, we may provide contact information such as your name, address, or phone number to authorized marketing vendors to verify their accuracy prior to contacting you.
 

We also may disclose your Personal Information to other service providers and for other purposes with your permission, or for one or more of the following purposes:
 

− To carry out our obligations and enforce our rights arising from any contracts related to your use of the Services, including for billing and collections;
− As necessary or appropriate to protect the rights, property or safety of Arbor, our customers or others;
− To respond to law enforcement requests and as required by applicable law, subpoena, court order, other legal process or governmental regulations;
− As otherwise described to you at or before the point when we collect your Personal Information; or
− To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or to transfer some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us is among the assets transferred.
 

By providing to Arbor the Personal Information and other data referenced above or by otherwise using our Services, you agree that Arbor may collect, use, and share such Personal Information and other data in accordance with the terms of this Notice and our Privacy Policy. We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
 

If you do not agree with the terms of this Notice or our Privacy Policy, please do not provide any Personal Information to Arbor or use our Services. However, please note that some of our Services can only be offered if you provide or allow us to collect your Personal Information.
 

Right to Opt-Out
 

We may obtain your Personal Information from third parties to engage in online marketing efforts. Arbor does not engage in any direct sale of your Personal Information as a way to generate revenue, but we use certain third-party vendors which may have access to some of your data to help provide Services on our behalf as described in this Notice and our Privacy Policy. Arbor’s use of these third-party providers may cause you to receive targeted advertising based on your browsing behavior on our Services and elsewhere online. This third-party use of data may be viewed as a “sale” of Personal Information under California law, to the extent any data used for targeted advertising purposes reasonably can be linked to you, your device or your household. As a California resident, you may have the right, at any time, to direct us not to sell your Personal Information or not to share it with third parties for targeted advertising, as applicable. To submit a request to opt out, visit the Do Not Sell or Share My Personal Information Request Form. We will act upon opt-out requests within 15 days of receipt and will notify you and/or your authorized agent when the request has been processed.
 

Retaining Personal Information
 

For each category of collected Personal Information described in this Notice, Arbor retains each such collected category of information for a reasonable amount of time to fulfill the stated purpose for why the applicable information was collected. Arbor also retains collected information connected to business records for periods of time required by law. If Arbor determines that collected information is no longer needed, it will delete such information. Our collection times will be consistent with applicable law.