Security Policy
Prospect Mortgage is committed to protecting the personal information and privacy of our customers. This statement is one way of sustaining trust in our company, our products and our services.
Privacy
Our Online Privacy Statement describes how we collect, protect and use customer information either during a visit to our Website or as an Prospect Mortgage customer.
Information We Collect during Online Visits
Website Visitors
During a customer's visit to our Website, we may collect and store information about the online visit (see cookies). This information may include the time and length of the visit, the pages viewed on our site, the last site visited before coming to ours, and the name of the customer's internet service provider.
We use this data on an aggregate basis to measure site activity, and on an individual basis to make the site more useful and provide information that may be of most interest to the customer.
Web Applicants Only
Information collected about web applicants is used and shared in accordance with our customer privacy notice and practices noted on the Website. A web applicant may use the site to provide information about themselves while completing an online contact form.
Security Statement
About our Website(s)
Cookies
We may use Web cookies for security purposes to recognize the Website user. We may also make use of Web cookies or similar data on certain parts of our Website for fraud prevention and other purposes.
Timed logout
Certain portions of our Website are protected with a timed-logout feature. This can help protect the customer's information from being viewed or used by others if the user's computer becomes unattended.
Encryption
We use encryption to protect customer information as it travels across the Internet. This can help prevent others from eavesdropping on the browser sessions with our Web servers. The database systems employ the latest mandated encryption methods for the transmission and storage of customer account data. Most traffic that is external to Prospect using VPN is encrypted using ESP 3DES HMAC SHA1. Other vpn traffic is encrypted using IKEv2 temporal key mechanisms to safeguard transmitted data. The internal database structure of Prospect's stored customer data is using 3DES encryption for the sensitive fields of data. All lead data is gathered using SSL-128 encryption.
Firewalls
Our Website is protected with firewall technology, which can help prevent customer information and our Website from being improperly accessed. This technology employs perimeter and local antivirus, anti spyware, and intrusion prevention techniques. The hardware used for this purpose is updated multiple times daily with the latest known definitions of these malicious attacks. The Sonicwall PRO 4060 devices use the latest wirespeed UTM solutions to safeguard attacks from within the networks of Prospect as well as external networks trying to communicate to Prospect.
Surveillance
Certain portions of our Website and internal network are monitored by advanced surveillance and logging technologies. These technologies can help to ensure that both customer information and our Web servers are protected from compromise. All web, email and internal networking transactions are monitored using multiple logging solutions including but not exclusive to, kaseya event monitoring, sonicwall email security monitoring and SGMS sonicwall network connection logging. These devices scan, protect and report on certain data based on use policy as well as malicious attack attempts. All lead transactions as well as customer data accesses are logged on a per user basis with timestamp. Reports can be generated for all of these products.
Information Collection and Sharing Practices for Existing Customers
Existing Customer
Information collected by Existing Customers and how it may be disclosed is contained in our Privacy Notice, which includes additional information regarding their privacy choices.
An example of the information collected from Existing Customers would be Date of Loan Application or Property Address. We also collect personal information from other sources, such as Credit Bureaus, Affiliates, and Employers.
Information We Share About Our Existing Customers
We may collect and subsequently share customer information to:
-
Run our everyday business
-
Respond quickly to customer needs
-
Help us communicate with our customer
-
Evaluate eligibility for additional products and services that may be of interest to the customer
What We Share
We may share personal information that includes, but is not limited to:
-
Name, address, and other account application information
-
Account balances, transactions, and payment history
-
Creditworthiness including credit history and credit score
With Whom We Share
We disclose some of the information we collect to third parties such as credit reporting agencies, regulators and loan investors. These types of third parties are called non-affiliated third parties.
We may also share some of this information with companies performing services on our behalf such as the vendor who prepares and mails our loan documents. These types of vendors are called service providers.
We may share information we collect with companies with whom we have formal agreements to offer financial products and services to the customer. These types of relationships are called joint marketing partnerships or arrangements.
Finally, we may share information we collect with companies related by common control to offer products and services that may be of interest to the customer. These types of companies are called affiliates.
Benefits of sharing
We need to collect and share information about our customers to help us communicate with them. We also may share customer and former customer information within our Prospect family and with valued partners (our employees) to evaluate eligibility, offer and recommend valuable products and services that may be right for the customer.
Customer Information Sharing Choices/Opt Out
Federal Law
Federal law requires us to disclose how we collect, share, and protect personal information about our customers. While Federal law allows us to share customer information in order to maintain our business, perform services and offer our products, Federal law also gives consumers the right to limit some, but not all, sharing of personal information.
Specifically, Federal law allows consumers to opt out and restrict us from sharing information as follows:
State Laws
State laws may offer additional rights regarding our information sharing limitations.
We share personal information as permitted by the law of the state in which our customers reside and in accordance with federal law. Customers of Prospect Mortgage receive our Privacy Notice during the loan process and receive our updated annual Privacy Notice each year they continue to be a customer.
Customers can limit us from sharing their information as permitted by law and as described in our Privacy Policy at any time by advising us of their Opt Out and information sharing choices by calling 800-974-0746. Customers may notify us of their choices at any time.
Customer Data Protection
We are a company committed to securing personal information and protecting the privacy of our customers. We use security measures that comply with federal law including assessing risk and using reasonable controls to protect customer information
Our company culture is to treat customer information the way we would want our own information treated. We train employees on handling and securing customer data to maintain a culture of protection and security and require our Loan Officers and processing staff to sign a Confidentiality Agreement addressing specific data security and the protection of customer information. It is the responsibility of every associate, affiliate, and non-affiliate to care for personal information about our customers.
Each Prospect associate with access to customer information is screened for any preexisting criminal record prior to gaining access to any customer information. To prevent unwanted access to company controlled documentation and information systems, access to the executive suite and sales floor is restricted to authorized employees only and controlled using an electronic entry system.
Our information network is designed to comply with the latest data protection protocols, updated on a regular basis. Each desktop computer unit is password and firewall protected to ensure the utmost security. All accounts are monitored to prevent unauthorized transmission or access from both internal and external sources.
Correcting Information
We are committed to maintaining accurate and up-to-date information on all of our customers. We may provide customers with access to account information in different ways, for example, over the telephone, online or on paper.
How to contact us regarding your account:
U.S. Mail:
Prospect Customer Care
6410 Oak Canyon #200
Irvine, CA 92618
Telephone: 800-974-0746
Identity Theft / Fraudulent Activities
Identity Theft/Fraud
Identity Theft occurs when someone uses sensitive information, called Personally Identifiable Information (or PII) of another person without their permission to commit fraud or other crimes, such as Account Takeover or Application Fraud. [Account Takeover has occurred when an individual acquires another person's existing credit account information and purchases products and services at the victim's expense. Application Fraud has occurred when an individual uses another's Social Security Number or other Personally Identifiable Information to open new credit accounts in the victim's name.]
In a concerted effort to prevent Identity Theft / Fraudulent Activities, Prospect employs the use of Authentication/Cross Check Reports provided by the risk management company CBCInnovis. This service provides authentication and cross checks based on all variations of the Customer's Name, Address, Social Security Number, Date of Birth and Phone Number in order to prove or disprove the identity of the customer. Additionally, the data is compared to all Federal and Credit watch lists to ensure compliance with the FACT Act.
If our customers believe they may be a victim of Identity Theft, they are advised to contact the three major credit bureaus to place a fraud alert message on their credit file.
Prospect Mortgage customers are advised to carefully review their credit reports for: accounts they did not open, inquiries from creditors they did not initiate, and for personal information (such as home address and social security number) that is not accurate. If they see anything they do not understand or any accounts they did not open, they are advised to call the credit reporting agency at the telephone number on the report.
If they decide not to place a fraud alert on their credit file, they can still obtain free copies of their credit report by going to the following Annual Credit Report Website (www.annualcreditreport.com) or by calling them toll-free at 1-877-322-8228. (Hearing impaired customers can access their TDD service at 1-877-730-4204.
To learn more about identity theft, visit the Federal Trade Commission's Website to receive further information and insights about how to protect one's identity from identity thieves.
Identity Theft Hotline: 877-438-4338
Web: www.consumer.gov/idtheft
Mail: Identity Theft Clearinghouse,
Federal Trade Commission
600 Pennsylvania Ave., N.W., Washington, DC 20580
