About This Policy

This Privacy Policy describes how Forest Hills Mortgage (“we,” “our,” or “us”) collects, uses, shares, and protects information about visitors to our website at foresthillsmortgage.com and users of our mortgage brokerage services. By using this website or our services, you consent to the practices described in this policy.

As a licensed mortgage brokerage, we are subject to federal financial privacy regulations including the Gramm-Leach-Bliley Act (GLBA), as well as applicable state privacy laws in Florida, Pennsylvania, Texas, and other jurisdictions where we operate.

Information We Collect

Information You Provide Directly

We collect information you provide when you:

• Submit a contact form, rate quote request, or other inquiry through our website
• Communicate with us by phone, text message, or email
• Apply for a mortgage loan or pre-approval
• Provide documentation required for loan processing

This information may include:

• Contact information: name, email address, phone number, mailing address
• Financial information: income, employment, assets, debts, credit history, tax returns, bank statements, pay stubs
• Loan information: loan amount, property type, intended use, down payment, transaction timeline
• Identification information: Social Security Number, date of birth, government-issued ID (when required for loan application)
• Property information: property address, value, type, and characteristics for loans involving specific properties

Information Collected Automatically

When you visit our website, we may automatically collect:

• Technical information: IP address, browser type, device type, operating system, referring URL
• Usage information: pages visited, time spent on pages, links clicked, navigation patterns
• Cookies and similar technologies: small data files stored on your device that help the website function and allow us to understand site usage

We may use standard analytics tools (such as Google Analytics) to understand how visitors use the site. These tools collect aggregated, non-personally-identifying information about site usage.

Information From Third Parties

In the course of evaluating and processing loan applications, we may receive information about you from:

• Credit reporting agencies (with your authorization)
• Employers (for income and employment verification)
• Financial institutions (for asset verification)
• Wholesale lenders we work with on your loan
• Title companies, appraisers, and other settlement service providers
• Public records (property records, court records, government databases)

How We Use Your Information

We use your information to:

• Respond to your inquiries and provide information about mortgage products
• Evaluate your loan scenario and qualifications
• Place your loan with a wholesale lender and process your application
• Communicate with you about your loan, the application process, and closing
• Comply with legal and regulatory requirements (including Anti-Money Laundering, Truth in Lending, and Real Estate Settlement Procedures Act requirements)
• Maintain records as required by law
• Improve our services and website
• Send you information about mortgage products or services that may interest you (you can opt out at any time)

Information Sharing

We share your information only as necessary to provide mortgage services or as required by law. Specifically, we may share information with:

Wholesale Lenders and Loan Partners

To place your loan, we share your application and supporting documentation with the wholesale lender selected to fund your loan. These lenders are bound by their own privacy obligations under federal law.

Settlement Service Providers

To complete your loan, we may share information with title companies, escrow agents, appraisers, surveyors, insurance providers, and other parties involved in your real estate transaction.

Service Providers

We may share information with third-party service providers who help us operate our business, including:

• Loan origination system providers
• Document management and e-signature services
• Email and communication services
• Website hosting and analytics providers
• Customer relationship management (CRM) systems

These service providers are contractually obligated to use information only as needed to provide their services to us and to protect it appropriately.

Legal and Regulatory Disclosure

We may disclose your information when required to do so by law, including in response to:

• Court orders, subpoenas, or other legal process
• Requests from regulatory authorities (state mortgage regulators, FinCEN, the CFPB, etc.)
• Law enforcement investigations
• Suspicious activity reporting required under Anti-Money Laundering laws

What We Do Not Do

We do not sell your personal information. We do not share your information with third parties for their own marketing purposes without your explicit consent. We do not share your information with affiliates for joint marketing where prohibited by law.

How We Protect Your Information

We use industry-standard security measures to protect your information from unauthorized access, disclosure, or misuse. These measures include:

• Encrypted transmission of sensitive information (SSL/TLS)
• Secure document storage and transmission
• Access controls limiting who can view your information
• Regular security reviews and updates
• Compliance with applicable data security regulations

However, no system is perfectly secure. While we work to protect your information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately.

Your Choices and Rights

Opting Out of Marketing Communications

You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email we send, or by contacting us directly. Even after opting out, you may still receive transactional communications related to your loan or account.

Accessing and Updating Your Information

You can request access to the information we have about you, ask us to correct inaccurate information, or request that we delete your information (subject to legal retention requirements). Contact us using the information below.

State-Specific Rights

Depending on where you live, you may have additional rights under state law (such as California’s CCPA/CPRA, Florida’s privacy law, or similar state regulations). To exercise these rights, contact us using the information below.

Do Not Track

Some browsers offer a “Do Not Track” signal. We currently do not respond to Do Not Track signals because no industry standard has been established for how they should be interpreted. However, we limit our tracking practices as described in this policy regardless of browser settings.

Cookies and Tracking Technologies

Our website uses cookies to provide functionality, analyze site usage, and improve user experience. Cookies are small data files stored on your device. You can control cookies through your browser settings, though disabling cookies may affect site functionality.

We use:

• Essential cookies required for the website to function properly
• Analytics cookies to understand how visitors use the site (e.g., Google Analytics)
• Functional cookies to remember your preferences

We do not use cookies for cross-site tracking or to build profiles of you across third-party sites.

Children’s Privacy

Our services are not directed to children under the age of 18, and we do not knowingly collect information from children. If you believe we have collected information from a child, please contact us and we will delete it.

Data Retention

We retain your information for as long as needed to provide our services and as required by law. Mortgage records are generally retained for the period required by federal and state regulations (typically a minimum of three to five years after loan closing or denial, depending on the jurisdiction and document type). After the required retention period, we securely delete or anonymize the information.

Third-Party Links

Our website may contain links to third-party websites (such as the NMLS Consumer Access registry or wholesale lender portals). We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party site you visit.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. When we make material changes, we will update the “Effective Date” at the top of this policy and, where appropriate, provide additional notice. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how your information is handled, please contact us:

Regulatory Information

Forest Hills Mortgage

Company NMLS #1982611
Loan Originator Matthew Mergo, NMLS #563819
Licensed in Florida, Pennsylvania, and Texas

You can verify our licensing at NMLS Consumer Access.

Effective Date: May 22, 2026. Last Updated: May 22, 2026.