Who we are
We are NeighborWorks Orange County, a 501(c)(3) tax exempt organization promoting homeownership since 1977. NeighborWorks Orange County empowers people and communities to build wealth through homeownership, financial education, and access to affordable homes. Our website address is: https://www.nwoc.org.
We are a Community Development Financial Institution and a HUD-approved Housing Counseling and Education agency, and Orange County’s only community-led realty services provider and mortgage loan broker.
What personal data we collect and why we collect it
If you choose to complete a contact form, we will save your name and the contact information you provide and use it to reply to you. We will not sell your information to third-party companies or use it to add you to mailing lists that you have not signed up for.
Registering for services and obtaining rate quotes
If you decide register for one of our services online or submit information to obtain a rate quote, you will have the option of entering your name, contact information, and possibly some detailed financial or other personal information. We will use this information to sign you up for the services you requested and/or to provide you the requested rate quote. We will not sell your information to third-party companies or use it to sign you up for services you did not register for.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
We gather data on people’s visits to, time spent on, and navigation through our website. Our analytics application may have access to your IP address, which we use only to determine our website’s geographic reach.
Who we share your data with
We do not share the information you enter into contact forms with anyone.
If you choose to receive services from NeighborWorks Orange County after registering for services or requesting a rate quote through our site, the information you submitted while registering for services or requesting a rate quote may become part of your customer file. Information in your customer file may need to be shared with other companies, as allowable by the Privacy Policies of the services you receive from us. For example, we may need to share identifying and financial information with the various agencies offering Down Payment Assistance in order to see if you qualify for their Down Payment Assistance programs. Our services’ Privacy Policies are given to our customers and can also be obtained by contacting us.
Who we share your data with
All information you submit to us through our contact forms, by registering for services on our site, or by submitting a request for a rate quote is saved and retained indefinitely.
What rights you have over your data
You can request that we erase any personal data we hold about you. This does not include data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor contact and metadata may be checked through an automated spam detection service.
What data breach procedures we have in place
Timing of Notification
Notice will be provided within a reasonable time following the discovery of a breach consistent with the legitimate needs of law enforcement and any measures necessary for the Census Bureau to determine the scope of the breach and, if applicable, to restore the reasonable integrity of the system/process that was compromised.
In some circumstances, law enforcement considerations may require a delay in notification if the investigation of the breach or of an individual affected by the breach requires it and notification would seriously impede the investigation. The delay should not exacerbate risk or harm to any affected individual(s) or be tied to the completion of the investigation, but rather be based on whether it would seriously impede the investigation to provide the notice promptly.
Method of Communication
Notice of the breach will be provided commensurate to the number of individuals affected by the breach and the availability of contact information NWOC has for the affected individuals. Correspondence must be prominently marked on the exterior reflecting the importance of the communication to help ensure the recipient does not discard or otherwise ignore the notification.
In general, the primary means of notification will be by first-class mail to the last known mailing address of the individual based on NWOC records.
Where we have reason to believe that the address is no longer current, reasonable efforts will be made to update the address using the U.S. Postal Service National Change of Address (NCOA) database.
Substitute notice may be made in instances where NWOC does not have sufficient contact information for those who need to be notified. In such instances, notice may consist of a conspicuous posting of the notice on the company’s home page of its web site and include additional information in a Frequently Asked Questions (FAQ).
Additional information on our data breach policies and procedures is available by contacting our office.
What automated decision making and/or profiling we do with user data
We use EziGDPR‘s European Union Visitor Blocker to check if visitor IP addresses originate in the European Union, and to block EU-based visitors from accessing our site. The EU Visitor Blocker will automatically activate when a user is identified as originating from the European Union. The log of blocked EU visitor IP addresses is anonymized.