Privacy Policy

Introduction

At Anza Global, Inc. and its affiliates (collectively, "Anza," "we," "our," and "us"), we value the trust placed in us and make it a priority to protect the personal information we receive in connection with conducting our businesses, including our private mortgage insurance business. This Privacy Policy ("Policy") explains the types of personal information we collect or obtain, how we use, share, and process that information, and the measures we take to safeguard it.

In addition to reading this Policy, please also review our Terms, which govern your use of our website, www.anzaglobal.com. If you do not agree to our Terms and the collection, use, and sharing of our information as detailed in this Policy, please do not access or otherwise use our Sites or any information or content accessible on the Sites, or provide us with our personal information.

Personal Information We May Receive

"Personal Information" is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with any individual or household.

Categories of Personal Information

Depending on the context, we may collect or receive the following categories or Personal Information:

Identifiers

First and last name, e-mail address, mailing and billing addresses, telephone number, or other information you may provide when you contact or request information from us

Sensitive Information

Social Security number, driver's license, or governmental ID number, and similar sensitive data

Demographic Information

Age, gender, date of birth, race, information relating to military service

Financial Information

Credit and financial information and history, including consumer reports and other credit information in connection with underwriting mortgage insurance, as permitted by the Fair Credit Reporting Act

Commercial Information

Purchasing records and history; mortgage and personal transactions

Profession/Employment

Professional experience, employment information, and history

Education Information

Level of education attained and history

Internet/Network Activity

IP address, cookies, device identifiers, browsing history, search history, other interactions

Visual and Audio Information

Call recordings or images collected for quality assurance or security purposes, and may be retained as permitted by law and our internal retention schedules

Inferences

Profiles or insights drawn from personal information (preferences, characteristics, behaviors, risk assessments)

Whose Personal Information this Policy Covers

This Policy applies to any of your Personal Information that you provide to us directly, and any nonpublic personal information that:

• We receive from our customers, the financial institutions with which we conduct our mortgage insurance business ("Customers"), to underwrite, insure, and service our insurance coverage of their mortgage loans. Our Customers include loan originators, servicers, Fannie Mae and Freddie Mac, the government-sponsored enterprises (each a "GSE"), and other participants in the secondary residential mortgage market who are beneficiaries under our mortgage insurance policies. The vast majority of the Personal Information that Anza receives is related to the borrowers of the loans we underwrite and insure, which is provided to us by our Customers in the normal course, with the borrowers' express consent and direction;
• We collect from individuals who interact with us directly, including representatives of our Customers, contractors, and vendors, who may need to provide us with personal information to, for example, request and receive information about our mortgage insurance products, use our services, obtain credentials to access our business portals, and for contracting purposes;
• We collect from other visitors to our Sites who may provide their Personal Information voluntarily or through automated technologies such as cookies and similar tools; and
• We obtain online through our websites, business portals, and other interactive features we control that link to this Policy (collectively, the "Sites and each a "Site), regardless of the device used to access them.

How We Receive Personal Information

We receive Personal Information through a variety of means depending on the nature of the interaction and whether the Personal Information is provided to us (i) directly by the person to whom it belongs, (ii) by third-parties, e.g., our Customers, relating to the borrowers to whom the information belongs, in the normal course of business, or (iii) through automated data collection technologies with respect to users of our Sites.

Electronic Data Transmissions from our Customers

Borrower loan information is typically transmitted to us electronically by our Customers (such as lenders or servicers) through secure electronic data feeds or integrations with our Customers' or third-party loan origination systems, servicing platforms, or other integrated technology solutions.

Secure Business Portals and Online Services

Representatives of our Customers, contractors, and vendors may provide Personal Information directly to us by registering for and using our secure business portals, uploading documents, or submitting forms to us through various online means.

Websites and Online Interactions

We collect information when individuals visit our Sites, including www.anzaglobal.com, and provide information through web forms, inquiries, or other interactive features.

Email, Telephone, and Other Communications

We may receive Personal Information when individuals communicate with us by email, telephone, video conference, or other electronic or paper correspondence. Call recordings and related information may be collected for quality assurance and compliance purposes.

Employment and Recruitment Systems

Job applicants may provide Personal Information through online application systems, recruitment platforms, or by submitting resumes and related materials directly to us. Employees provide information through HR systems and processes.

Third-Party Service Providers and Partners

We may receive Personal Information indirectly from service providers, credit bureaus, fraud prevention partners, or other third parties that support our operations, where permitted by law.

How We Use Personal Information

We use the Personal Information we collect or receive for purposes consistent with our role as a mortgage insurer and to support our broader business operations. These purposes include:

Mortgage Insurance Operations

• To underwrite, insure, and service mortgage loans submitted by our Customers.
• To assess risk, set premiums, and manage claims.
• To perform actuarial analysis and develop pricing and product strategies.

Contractual and Business Obligations

• To carry out our contractual obligations to our Customers and business partners.
• To process requests, forms, and transactions submitted through our Sites or portals.
• To provide mortgage insurance products, services, and information requested by our Customers or their representatives.

Authentication and Access

• To authenticate users and provide secure access to our Sites, portals, and online services.
• To manage account registrations and enable the use of specific features.

Customer and User Support

• To respond to inquiries, provide customer service, and resolve issues.
• To customize and improve the user experience on our Sites and services.

Legal, Regulatory, and Compliance Purposes

• To meet our legal obligations, including regulatory reporting and compliance with applicable laws.
• To detect, investigate, and prevent fraud, security breaches, or other unlawful activity.
• To enforce our Terms and protect our rights, property, and the safety of our employees and Customers.
• To respond to lawful requests, subpoenas, or other legal processes.

Business Operations and Corporate Transactions

• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, including in bankruptcy or liquidation, where Personal Information may be among the assets transferred.
• To support internal business functions such as auditing, data analysis, and research.

Employment and HR Purposes

• To process job applications and manage recruitment.
• To administer employment relationships, including payroll, benefits, and compliance with employment laws.

Marketing, Analytics, and Improvement

• To anonymize or aggregate information for marketing, actuarial, and analytical purposes.
• To tailor our product offerings and improve our Sites, services, and content.
• To provide content or marketing materials that may be of interest to you.

Consent-Based Uses

• To use Personal Information for additional purposes where you have provided consent.

Who We Share Personal Information With

We may share Personal Information with third parties, consistent with our role as a mortgage insurer and subject to applicable law, for a variety of purposes, including the following:

• Customers and other authorized third parties in connection with underwriting, insuring, and servicing mortgage loans;
• Vendors and service providers who perform, participate or assist us with various aspects of our mortgage insurance operations or business needs, such as outsourced mortgage insurance underwriting vendors, technology providers, data hosting, analytics and modeling, capital planning, communications, fraud prevention, identity and background history verification, actuarial support, and professional advisors (including auditors, consultants, and legal counsel);
• Regulators and government authorities, including state insurance regulators, law enforcement, courts, and other governmental or supervisory bodies, when required to comply with applicable laws, regulations, or legal processes or to enforce our rights and protect our assets and companies;
• Our corporate affiliates, including Anza Services LLC, for purposes consistent with this Policy and our business operations;
• Employment and HR purposes, including third‑party providers who support our recruitment, payroll, benefits, and 401K plan administration, and other human resources functions;
• Business, reinsurance, and capital markets transactions;
• Other disclosures for additional purposes where we have been provided consent to share Personal Information.

We Do Not Sell Personal Information

We do not sell Personal Information, and we have not sold Personal Information in the preceding twelve (12) months. We also do not share Personal Information with third parties for their own marketing purposes. Any sharing of Personal Information is limited to the purposes described in this Policy, such as providing mortgage insurance services to our Customers, complying with legal and regulatory requirements, supporting our business operations, and other uses consistent with our role as a mortgage insurer.

Where state privacy laws provide consumers with the right to opt out of the "sale" or "sharing" of Personal Information, Anza does not engage in such practices.

Third-Party Tracking, Do Not Track, and Universal Opt-Out Mechanism

Third parties may use tracking technologies in connection with our Sites, which may include the collection of information about your online activities over time and across third-party websites. This Policy does not apply to those third-party technologies because we may not control them, and we are not responsible for them. "Do Not Track" is a browser setting that allows users to opt out of tracking. Currently, we do not monitor or take any action with respect to Do Not Track technology. Where required by applicable law, we do honor universal opt-out mechanisms.

Links to Third-Party Websites

Our Sites may include links to third-party websites or other online services. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. Those third parties may collect and use information about you independently of Anza. We encourage you to review the privacy policies of any third-party websites you choose to visit to understand how they collect, use, and share information.

How We Protect Personal Information

We use and maintain commercially reasonable and industry-standard administrative, technical, and physical safeguards designed to protect the Personal Information we collect and use against unauthorized access, use, disclosure, alteration, or destruction. Our information security program policies and standards are designed to help protect the confidentiality, integrity, and availability of the information we handle in connection with our mortgage insurance operations and broader business activities.

Our safeguards include:

• Administrative controls: Policies, standards, procedures, and training programs that promote responsible handling of Personal Information and compliance with applicable privacy and security requirements.
• Technical controls: Use of secure networks, encryption, firewalls, access controls, monitoring, and other technologies to protect information transmitted to or stored by us.
• Physical controls: Restricted access to facilities, secure storage, and other measures to protect information from unauthorized physical access.

While we take steps to protect the Personal Information that we handle, no system or method of transmission over the Internet or electronic storage is completely secure. For this reason, we cannot guarantee the absolute security of the information we process.

Information About Your Privacy Rights

Depending on where you live, you may have certain rights under applicable consumer privacy laws with respect to your Personal Information, subject to applicable exceptions. You may contact us at legal@anzaglobal.com for more information. We may need to verify your identity before fulfilling any request, and certain rights may be subject to exceptions under applicable law, as noted above.

Additional Notices

Users Outside of the United States

If you are located outside the United States, please be aware that if you submit Personal Information to us, it will be transferred to and processed in the United States. The data protection laws in the United States may differ from those in your country, and your Personal Information may be subject to access requests from U.S. government authorities, courts, or law enforcement. By providing Personal Information to us, you consent (and represent that you have authority to consent) to the transfer of such information to the United States for the purposes described in this Policy. For clarity, Anza does not maintain an establishment in, or target individuals located in, the European Economic Area or the United Kingdom.

Social Security Number Protection

It is our policy to protect the confidentiality of Social Security numbers (SSNs) from misuse and improper disclosure by maintaining and enforcing physical, electronic, and procedural safeguards. We prohibit unlawful disclosure of SSNs and limit access to SSNs to personnel who require such access to perform their job functions. We do not disclose SSNs to third parties except where required or permitted by law.

Children's Privacy

Our Sites are intended for general audiences and are not directed to, and we do not knowingly seek or collect Personal Information from, children under the age of eighteen (18). In accordance with the Children's Online Privacy Protection Act (COPPA), if we learn that we have collected Personal Information from a child under age thirteen (13) without verified parental consent, we will delete that information promptly. If you believe we may have collected information from or about a minor, please contact us at legal@anzaglobal.com.

Contact US

If you have any questions about this Privacy Policy or become aware of misuse of our Sites by any person, please contact us by email at legal@anzaglobal.com or by mail at:

Privacy Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. When we make updates, we will revise the "Last Updated" date at the top of this Policy. In some cases, we may provide additional notice (such as posting a statement on our Site or sending a communication to our Customers) if the changes are material.

Your continued use of the Site following the posting of an updated Privacy Policy constitutes your acceptance of the updated terms. We reserve the right to apply the amended terms to information we have already collected, subject to any legal constraints. We will not, however, use previously collected Personal Information in a manner materially different from what was represented at the time of collection.

If any provision of this Privacy Policy is found by a competent tribunal to be invalid or unenforceable, such provision shall be severed to the extent necessary, and the remainder of the Policy shall remain valid and enforceable.