Privacy

At Cardinal Financial Company, Limited Partnership (“Cardinal Financial”), we understand the importance of your personal and financial information (“Financial Information”). To protect your Financial Information, Cardinal Financial has adopted the following privacy policy. By sharing Financial Information with Cardinal Financial, whether through the Internet, over the phone, or other, you are indicating that you understand and consent to the following.

Because of the financial nature of our business, our websites are not designed to appeal to children under the age of 13. Therefore, we don’t knowingly attempt to solicit or receive any information from children.

Cardinal Financial will use your Financial Information (such as name, address, social security number, telephone number, email address, etc.) to provide you with the financial services you request, to provide you with information about our financial services and offerings, and for our other everyday business purposes, such as to respond to court orders, comply with regulatory requirements, and conduct internal analysis.

Cardinal Financial may use your Financial Information or website activity to send you email marketing communications. Cardinal Financial may also use your Financial Information and website analytics (described below) to deploy targeted digital marketing and targeted offers.  If you do not want to receive these offers or promotions, send an email to [email protected] or call 855.561.4944.

Cardinal Financial will not sell or share your Financial Information with outside companies for their promotional use. While credit reporting agencies may share your information with other companies when you apply for a home loan, Cardinal Financial will not do so. You can stop these calls and emails by opting out of these prescreened credit offers, call (888) 567-8688 or visit www.optoutprescreen.com.

Cardinal Financial may record and save the Financial Information you share with us. We may share that Financial Information, on a confidential basis, to service providers such as title companies, credit reporting agencies, appraisers, and others who we work with in handling your loan (“Service Providers”). If you submit a loan application or a request to be prequalified to us, you authorize us to share your credit report and other Financial Information with our Service Providers for the purpose of processing your loan application or request.

In some instances, third parties (such as consultants, auditors, accountants, attorneys, or software developers) may need to access your Financial Information as part of services that they are providing to Cardinal Financial. If any such third parties are given access to your Financial Information, they are strictly prohibited from using it for any reason other than to provide the service that Cardinal Financial requested.

If you call Cardinal Financial, we may record and/or transcribe the phone call. We do this to help ensure that we are providing you with the best possible customer service.

You may choose what Financial Information to share with Cardinal Financial; however, some Financial Information may be necessary in order for us to fulfill your request. If you choose not to provide necessary Financial Information, we will not be able to provide you with the requested service.

If Cardinal Financial is involved in a sale, merger, transfer, exchange, or other disposition, your Financial Information may be transferred to another entity as a part of that process.

In certain situations, Cardinal Financial may be required to share Financial Information to comply with laws, court orders, subpoenas, search warrants, or law enforcement requests.

Cardinal Financial takes care to protect the Financial Information you provide us. For Financial Information provided over the Internet, Cardinal Financial uses both physical and digital security measures to keep your Information safe.

Cookies

Cardinal Financial may use “cookies” to help us better understand how customers use our website and to troubleshoot problems with sessions. We may also use cookies to make the experience of using our website easier for our customers. Your browser may be required to accept cookies from Cardinal Financial in order to use certain features of our website.

Managing Cookies

If you wish to opt out of allowing certain cookies, you may do so by changing your browser settings so that cookies from our website cannot be set. Please note that if you delete, block, or otherwise restrict cookies, or use a different computer or Internet browser, you will need to renew your cookie management choices.

Most Internet browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies or to notify you when a cookie is being placed on your computer. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links:

(a) https://support.google.com/chrome/answer/95647 (Chrome);

(b) https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop (Firefox);

(c) https://help.opera.com/en/latest/security-and-privacy/ (Opera);

(d) https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);

(e) https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac (Safari); and

(f) https://support.microsoft.com/en-gb/help/4468242/microsoft-edge-browsing-data-and-privacy (Edge).

Please note that this cookie policy does not apply to, and we are not responsible for, the privacy practices of third party websites which may be linked to our websites.

Web Analytics and Web Session Recording Technology

Cardinal Financial uses industry standard web analytics and other technologies to track web visits, to develop new services, learn about the effectiveness of our advertising, and to learn what Cardinal Financial offerings may be of interest to you. You may have seen a disclaimer asking for your consent to this policy and use of such technologies on your first visit to our website.

Cardinal Financial may also track usage data, including your IP address, which pages you view, how you came to our site, and other information about your experience with Cardinal Financial’s website. This information is used to help us understand what parts of our website are most valuable to visitors, and what we can do to improve our website.

When you visit our website, we also use site visit recordation technologies, to memorialize site visits, third-party cookies, beacons, tags and scripts to help collect the categories of information described above and aggregated information from your internet browser such as your behavior on our website.  

We and third parties also use tools that enable us to track certain aspects of a user’s visit to our websites. These technologies help us better manage content on our websites by informing us what content is effective, how consumers engage with our websites, and how consumers arrive at and/or depart from our websites. The software typically uses two methods to track user activity: (1) “tracking pixels” and (2) “clear gifs.” Tracking pixels are pieces of executable code that are embedded in a web page that track usage activity including which pages are viewed, when they are viewed, and how long the pages are viewed. Clear gifs are tiny graphics with unique identifiers which are embedded in web pages and email messages that track whether a user views a web page or email message. User activity information may be associated with additional information about a user’s session and Personal Information, if provided by the user.

We may use the following technologies across our websites:

We use Google Analytics, an independent web analytics service offered by Google Inc. that tracks and reports website traffic. Google Analytics uses cookies and similar technologies to analyze how users use the Domains. The information generated about Domain usage (including your shortened IP address) is transmitted to Google in the U.S. This information is used to evaluate visitors’ use of the Domain, compile statistical reports on Domain activity, and provide other services related to the Site and Internet use. Google may also collect information about Domain visitors’ use of other websites. For more information about Google’s policies and practices, please see Google’s privacy policy at https://www.google.com/intl/en/policies/privacy. You may opt out of the aggregation and analysis of data collected about you on our website by Google Analytics by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout. Please note that if you opt out, analytics companies other than Google Analytics may continue to aggregate and analyze data collected about you on our website.

We use Jornaya to independently document users’ consent to be contacted. These scripts may be embedded on our website and collect the following information when you interact with the page(s) where the script is present: page URL, mouse movements and clicks, contact information inputted by the user, a snapshot of the page, including IP address of the user’s computer, time on the page, date and time that the script was loaded, as well as the date and time of the various user interactions with the page, and HTTP headers from the user’s browser. For more information about Jornaya’s data use and collection policies and practices, please review the Jornaya Privacy Policy, located at https://www.jornaya.com/consumer-privacy-policy/.

We also use Facebook Pixel to identify the visitors of our online content as a target group for displaying advertisement (known as “Facebook ads”). Accordingly, we use Facebook Pixel to display our posted Facebook ads only to Facebook users who have shown an interest in our services or who share certain factors (such as interests in certain topics or products determined on the basis of visited web pages), which we transmit to Facebook (which is known as Custom Audiences). Facebook Pixel also helps us understand the effectiveness of Facebook ads for statistical and market research purposes, by showing whether users have been redirected to our services after clicking on a Facebook ad (known as conversion, and allowing to determine on which devices a user is performing an action), in order to create so-called lookalike audiences or statistical twins (i.e. to broadcast ads to target groups that are similar to existing customers) and to obtain comprehensive statistics about the use of the website. Facebook Pixel establishes a direct connection to the Facebook servers when you visit our website. This way, the Facebook server is notified that you have visited our website and Facebook assigns this information to your personal Facebook user account.

For more information about Facebook’s collection and use of data and your privacy protection rights and options, please see the Facebook data protection policy at https://www.facebook.com/about/privacy/update. For specific information and details about Facebook Pixel and how it works, please visit the Facebook help section at https://www.facebook.com/business/help/651294705016616. You can disable this function at https://www.facebook.com/settings?tab=ads. You must be logged into Facebook to do this.

We also use Hotjar, a web analytics tool provided by Hotjar Ltd. Hotjar enables us to measure and analyze user behavior, including clicks, mouse movements, and keystrokes, on our website. The information generated by the tracking code and cookies during measurement and evaluation is transmitted to the Hotjar server and stored there. The sole purpose of this data collection is to improve your user experience on our Hotjar-based website. Hotjar also uses third-party services, such as Google Analytics and Optimizely, to provide services. These third-party companies may store information that your browser sends as part of the website visit, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please refer to their respective privacy statements found at https://www.google.com/intl/en/policies/privacy and https://www.optimizely.com/privacy/.

We use Pinterest cookies to deliver ads to you and to find other people who might be interested in our products and show them online ads relating to our products on Pinterest. For more information about these cookies, please visit your Pinterest privacy settings and also see here https://help.pinterest.com/en/article/personalization-and-data and here https://help.pinterest.com/en/article/personalized-ads-on-pinterest.

We also use Twitter pixels to collect information about how our website is used. This allows us to understand how our users engaged with our content and to make improvements on our website. We may use Twitter pixels to track conversions and to understand the effectiveness of our Twitter ads, create custom audiences for targeted advertising, and collect data on website usage, including pages visited and actions taken on our website. For more information about Twitter’s collection and use of data and your privacy protection rights and options, please see the Twitter’s privacy policy at https://help.twitter.com/en/rules-and-policies/x-cookies. You can disable this function at https://twitter.com/settings/your_twitter_data/your_twitter_data. You must be logged into Twitter to do this.

Chat Bot Technology

We may also use third-party service providers, such as Zoom Contact Center or Botsplash to provide chat services for our clients and website visitors to communicate with us regarding your account, payments, and other general questions you may have. As you navigate our websites and use the chat systems with us, we attempt to protect your privacy to the maximum extent possible. However, some of the information that we receive through this website and your interactions with the chat systems may be tracked, such as the date you communicate with us, the last day you contacted us, and other messages, comments and conversations made through the chat messages. The chat system collects the information that you voluntarily type in the chat bot when you initiate a query through the chat system and respond to a query from the chat system. Additionally, when you are using our chat system, it collects interactions that you have made into the chat system while communicating with a customer service representative. This data is used to understand your preferences, provide personalized responses, and enhance the performance and functionality of the chat bot. We may retain this information for a reasonable period unless you request its deletion. You can maximize the benefits of your privacy partnership with us by making informed decisions about whether to share personally identifiable information with us through our website. Third party chat bot systems may capture, record, or analyze your chat bot communications with us. 

Through Zoom Contact Center or Botsplash, Cardinal Financial may use AI technology (“Bot”) to power its chat functionality that is intended to provide immediate responses to your questions. While we have made every effort to ensure that the Bot provides accurate and up-to-date information, please understand that it may not be able to address more complex queries fully and sometimes, it might even give a completely wrong answer.

The information provided by the Bot should not be solely relied upon for making critical decisions or resolving complex issues. Users are responsible for verifying and cross-referencing the information provided and should exercise caution and judgment when relying on its responses.

Under no circumstances shall Cardinal Financial be liable for any direct, indirect, special, incidental, or consequential damages arising out of or in connection with the use of the chat bots on its websites. This includes, without limitation, any damage, loss, or injury caused by error, omission, interruption, deletion, defect, delay in operation or transmission, computer virus, communication line failure, theft or destruction, or unauthorized access to, alteration of, or use of the chat bot.

While we make efforts to ensure the availability and reliability of the chat bot, there may be instances where it is unavailable or experiences technical issues. Inferences about or derived from any of the information above that may relate to your preferences or other matters. Cardinal Financial shall not be held responsible for any inconvenience or damages arising from such occurrences. For more information about Zoom’s data use and collection policies and practices, please see Zoom’s privacy policy, located at https://explore.zoom.us/en/privacy/. For more information about Botsplash’s data use and collection policies and practices, please see Botsplash’s privacy policy, located at https://www.botsplash.com/privacy-policy.

We reserve the right to remove or add new analytic technologies.

For more information about how Cardinal Financial protects your Financial Information, or to get answers to any questions about our privacy policy, email us at [email protected].

California Consumer Privacy Policy & Notice at Collection

The California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) (the CCPA and CPRA are referred to herein as “California Law”) grants California residents some rights over how Cardinal Financial manages your “personal information,” which we refer to herein as your Financial Information. The following California-specific privacy policy supplements our general Privacy Policy (set forth above) and serves as our “notice at collection” under California Law. Please be aware the following applies solely to California residents. If you are a California resident applying for a job at Cardinal Financial or employed by Cardinal Financial, please review the California Employee Privacy Policy & Notice at Collection.

California Law gives California residents the following rights:

  1. the right to know why we collect Financial Information (including whether we sell it), what we collect, and how we collect it;
  2. the right to have your Financial Information deleted; and
  3. the right to receive equal treatment if you exercise your rights under California Law

Financial Information: Why, What, and How we collect

As set forth more fully in our Privacy Policy, we collect Financial Information in order to conduct our business (making and servicing mortgage loans) and carry out our business purposes. We may share your Financial Information, on a confidential basis, with outside companies, but we DO NOT sell your Financial Information or allow these outside companies (with whom we have shared your Financial Information) to utilize your Financial Information for any reason other than to complete the business purpose for which the information was shared.

Below are the categories (along with examples) of Financial Information we collect and the business purpose(s) for its use:

CategoryExamplesBusiness Purpose(s)
Identifiersname, alias, address, emailPerforming services; providing financing and customer service; protecting against fraud
Sensitive informationsocial security number, bank account numbersPerforming services; providing financing; protecting against fraud
Protected classifications (under CA or Federal law)age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, and veteran or military statusPerforming services; providing financing; protecting against fraud; compliance with mortgage lending laws
Commercial informationrecords of products or services considered or obtainedProviding customer service; internal analytics; marketing and advertising
Internet activitybrowsing history, interactions with our website and advertisementsProviding online products and services; performing marketing and advertising
Professional or employment-related informationcurrent or past job history or performance evaluations or reference checksProviding financing; servicing accounts; protecting against fraud

As set forth more fully in our Privacy Policy, we generally collect Financial Information directly from you, either through your interactions with our website or employees, during the mortgage application process, or as we service your mortgage loan. We may also collect Financial Information from outside sources, such as your prior mortgage servicer, governmental entities / public records, and internet advertisers and lead generators.

Requests to Know and Delete

As explained in more detail below, in some cases and upon proper request, California residents may be entitled to a report detailing the Financial Information we have collected and shared about them (“Right to Know”) and/or deletion of their Financial Information (“Right to Delete”).

California residents only have the Right to Know or Right to Delete in some cases because California Law does not apply in certain situations. For example, California Law does not apply to Financial Information collected, processed, sold, or disclosed pursuant to the federal Gramm-Leach-Bliley Act (GLBA) or the California Financial Information Privacy Act. This means that Financial Information we collect, store, or share in connection with providing you a financial product or service is exempt, as well of our use of this information for our everyday business purposes (disclosed above).

In order to exercise any Right to Know or Right to Delete you may have, you will need to submit a request to our Consumer Advocacy Department by calling (888) 531-0386 or sending an email to [email protected]. This request will need to be “verifiable,” meaning we must be able to confirm:

  1. you are the California resident; or
  2. you are the California resident’s authorized agent, which will require (i) written evidence of the agent’s authority, which can include a valid power of attorney, and (ii) your personal information, so we can verify that you are the authorized agent.

Cardinal Financial will attempt to respond to a verifiable consumer request within 45 days of receipt. If we require more time (up to 90 days) we will inform you in writing of the reason for requiring more time and the additional time required to respond.