Privacy Policy
Last Updated: August 31, 2021
Mortgage Bankers Association ("MBA" or "we") knows that you care how information about you is used and shared, and we appreciate your trust that we will do so carefully and sensibly. This statement describes our privacy policy (the "Privacy Policy"). By accessing and using mba.org and its affiliated websites operated by MBA (the "Website"), you acknowledge that you have read, understand and consent to this Privacy Policy. We may update this Privacy Policy at any time as we deem appropriate. You periodically should check back and make sure that you have reviewed the most current version of our Privacy Policy.
In some instances, we may post or provide additional materials that provide further description of privacy practices related to certain MBA web pages, affiliated websites, products and services. Such materials are supplemental to and should not be construed as modifying this Privacy Policy.
What Information Do We Gather and How Is It Used?
MBA collects information from our visitors and members at several different points on the Website. Visitors to the public areas of the Website browse anonymously. However, the MBA web server does collect aggregate data, such as number of access attempts by page. MBA also may collect information from you before allowing access to certain resources and personalization features on the Website, or to order products and services ("Personal Information").
"Personal Information" refers to data that could be used, alone or in combination with other data, to identify you as an individual. The types of Personal Information you may provide include contact information (such as name, email address, mailing address, and phone number), payment information (such as billing address, credit card information and bank account information) and account log-in credentials (such as user names). Personal Information is collected from visitors, including MBA members, and used by MBA to (i) improve web content, (ii) respond to visitors' interests, needs and preferences and for marketing purposes, (iii) develop new products and services, (iv) complete registration and purchase transactions for MBA conferences, webcasts, classes and meetings and other MBA products and services, and (v) provide various services to our members and administer their interactions with MBA. MBA may share Personal Information on a limited basis with its affiliated organizations as well as with a select group of affinity partners and other third parties. Also, third-party vendors providing services in connection with the Website or MBA products and services may have access to Personal Information. It is MBA's policy to require such vendors to hold Personal Information in confidence.
Cookies and Web Beacons
Cookies are files that contain information created by a web server that can be stored on your device for use either during a particular session ("session" cookie) or for future use ("persistent" cookie). MBA uses both session and persistent cookies to facilitate, track and limit automated activity, and to assist in the collection of site visitation statistics. We also use cookies to authenticate users, to validate membership prior to providing access to member-only resources and to provide a seamless experience across our systems as to not require additional logins. The Website also uses web beacons (either directly or from third parties), along with cookies, to determine if you have visited a particular website. These beacons aid in providing more relevant advertising to you, as well as measuring the success of an advertising campaign, but collect no personally identifiable information. Further, cookies are used as described in the "AdWords, LinkedIn and Other Social Media Platform Remarketing", "Email Remarketing" and "Feathr" sections below. If your browser settings do not allow the attachment of cookies, or if you decline the attachment of any cookie, you will not have access to the full benefits of the Website.
If you prefer not to accept cookies, you can set your Internet browser to notify you when cookies are received or to prevent cookies from being placed on your device. If you consent to our collection of cookies and you subsequently wish to withdraw your consent, you will need to manage the settings on your web browser to delete all cookies and disallow further acceptance of cookies. Please note that disabling cookies on your browser will prevent us from tracking your activities on the Website and may also disable some of the functions and features of the Website and prevent it from working properly.
AdWords, LinkedIn and Other Social Media Platform Remarketing
The Website uses the Google AdWords, LinkedIn and other social media platform remarketing services to advertise across the Internet on third party websites, in particular on the Google Display Network, as well as on LinkedIn. Remarketing services will display ads to you based on what parts of the Website you have viewed, or what services you have used, by placing a cookie on your web browser. This cookie does not identify you or give access to your computer, mobile or other device. The cookie is used to indicate to other websites that "This person visited a particular page on the MBA website, so show them ads relating to that page." The remarketing services allow us to tailor our marketing to better suit your needs and display ads that are relevant to you. Any data collected is used in accordance with this Privacy Policy and the remarketing services' privacy policies.
If you do not wish to see ads from MBA that come from us through a remarketing service, you can opt out in several ways:
Opt out of Google's use of cookies by visiting Google's Ads Settings.
- Opt out of a third-party vendor's use of cookies by visiting the Network Advertising Initiative opt-out page.
- Opt out of seeing ads from MBA that come from us through the LinkedIn remarketing service by visiting the "managing your ad preferences" on LinkedIn.
Email Remarketing
Our email remarketing platform uses cookies and other technologies to analyze trends, track users' movements on the Website and other related websites, gather demographic information about our user base as a whole and collect information about your browsing habits in order to make our email advertising relevant to you and your interests. You can unsubscribe from our email by clicking the "unsubscribe" link at the bottom of any of our broadcast email messages.
Feathr
Feathr uses cookies to power its platform in order to help enhance the performance and functionality of our Website. Feathr utilizes session, persistent and third-party "cookies". Feathr also uses cookies to understand users' browsing and buying activities so that we can measure the success of online advertising campaigns we run on the Website. Further, Feathr uses web beacons, along with cookies, to determine if you have visited a particular website. You can opt out of receiving personalized ads served by Feathr on our behalf by clicking on the blue icon that typically appears in the corner of the ads we serve and following the instructions provided or by visiting Feathr's Privacy Platform. Please note that this "opt out" function is browser-specific and relies on an "opt out cookie." If you delete your cookies or upgrade your browser after having opted out, you will need to opt out again or make sure to opt out from the device you intend to remove from targeting and personalization. In addition, the online advertising industry provides websites from which you may opt-out of receiving targeted ads from Feathr's data and advertising partners. You can access these at http://www.aboutads.info and at http://www.networkadvertising.org/choices/.
Log Files
Like most standard website servers we use log files that record internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks to analyze trends, administer the Website, track user's movement in the aggregate, and gather broad demographic information about aggregate use. IP addresses, etc., are not linked to personally identifiable information. You can opt-out of being tracked via Google Analytics via the Google Analytics Opt-Out Browser Add-on.
Links
The Website contains links to other websites. Please be aware that MBA is not responsible for the privacy practices of any other websites. We encourage you to be aware when you leave our Website and to read the privacy statements of any other websites that you visit. This Privacy Policy applies solely to information collected by the Website, and we are not responsible for the content, privacy practices or use of any websites that are not operated by MBA.
Sharing
LEGAL DISCLAIMER: ALTHOUGH WE MAKE EVERY EFFORT TO PRESERVE YOUR PRIVACY, WE MAY NEED TO DISCLOSE PERSONAL INFORMATION WHEN (I) REQUIRED BY LAW WHEREIN WE HAVE A GOOD-FAITH BELIEF THAT SUCH ACTION IS NECESSARY TO COMPLY WITH A CURRENT JUDICIAL PROCEEDING, A COURT ORDER OR LEGAL PROCESS SERVED ON US; OR (II) NECESSARY TO PROTECT AND DEFEND THE RIGHTS OR PROPERTY OF MBA OR MBA AFFILIATES, INCLUDING THEIR WEBSITES. MBA DOES NOT SHARE PERSONAL INFORMATION WITH THIRD PARTIES EXCEPT AS STATED IN THIS PRIVACY POLICY. IN ADDITION, WE MAY SHARE AGGREGATE DATA WITH THIRD PARTIES WHERE SUCH DISCLOSURE DOES NOT ENTAIL THE DISCLOSURE OF ANY PERSONALLY-IDENTIFIABLE INFORMATION.
Handling of Do Not Track Signals
California law requires us to inform you how the Website responds to Do Not Track ("DNT") signals from your web browser. We do not respond to DNT signals at this time because currently there is no industry standard for recognizing or responding to DNT signals.
Business Transitions
In the event MBA goes through a business transition, such as a merger or selling a significant portion of its assets, users' Personal Information will, in most instances, be part of the assets transferred. You will be notified via email and prominent notice will be posted on the Website for 30 days prior to a change of ownership or control of Personal Information. If as a result of the business transition Personal Information will be used in a different manner, this Privacy Policy will be updated and should be reviewed.
Security
We take commercially reasonable precautions to protect our users' information. All information entered by you on the Website is encrypted and is protected with SSL encryption. All purchase transactions that occur on our online store are transmitted via SSL secure communications with a digital certificate of authentication, and only the user's name, address and last four digits of the credit card are retained and stored. Data stored on our servers is encrypted in storage and passwords are protected by storing a one-way salted hash calculation, which is not reversible. If you have any questions about the security at the Website, you can send an email to [email protected].
Opting Out and Correcting Personal Information
If your Personal Information changes (such as phone, email or postal address) or if you no longer desire to access or use our services, email our Customer Support at [email protected] or click the "Contact" link on the Website in order to inform MBA of the changes.
Retention of Personal Information
We will keep your Personal Information for the minimum period necessary for the purposes set out in this Privacy Policy, namely (a) for as long as you are a user of our Website and related services, (b) for as long as your Personal Information is needed in connection with the lawful purposes set out in this Privacy Policy, for which we have a valid legal basis, or (c) for as long as is reasonably necessary for business purposes related to provision of the Website and related services, such as internal reporting purposes or to provide you with feedback or information you might request. In addition, if any relevant legal claims are brought, we may continue to process your Personal Information for such additional periods as are necessary in connection with that claim. Once the abovementioned periods, each to the extent applicable, have concluded, we will either permanently delete, destroy or de-identify the relevant Personal Information so that it can no longer reasonably be tied to you.
Residents of the European Union/European Economic Area
If you are in the European Union ("EU") or the European Economic Area ("EEA"), the following additional disclosures apply: (a) MBA acts as the Controller of your Personal Information, (b) when we process your Personal Information, we will only do so in the following situations: (i) we need to use your Personal Information to perform our responsibilities under our obligations with you (e.g., processing payments); (ii) we have a legitimate interest in processing your Personal Information (for example, we have a legitimate interest in processing your Personal Information to provide, improve and secure our Website and services and in communicating with you about our Website and services; (iii) we have your consent to do so; or (iv) we need to process your Personal Information to comply with our legal obligations. You may contact us to submit a request to exercise your rights in Personal Information (see Contact Information below). If you initially consented to our processing of your Personal Information, you may contact us to withdraw your consent. If you are an EU/EEA resident and have a concern about our practices concerning the processing of Personal Information that we are not able to resolve, you have the right to lodge a complaint with the data protection authority where you reside or in which you work, or in which the alleged infringement occurred. You may have the right to: (a) request confirmation of whether we are processing your Personal Information; (b) obtain access to or a copy of your Personal Information; (c) receive a portable copy of your Personal Information, or ask us to send that information to another organization (the "right of data portability"); (d) seek correction or amendment of inaccurate, untrue, incomplete, or improperly processed Personal Information; (e) restrict our processing of your Personal Information; (f) object to our processing of your Personal Information; and (g) request erasure of Personal Information held about you by us, subject to certain exceptions prescribed by law. If you would like to exercise any of these rights, please contact us as set forth below, Contact Information. We will process such requests in accordance with applicable laws. To protect your privacy, we may take steps to verify your identity before fulfilling your request. For some requests and where permitted by law, an administrative fee may be charged. We will advise you of any applicable fee prior to performing your request.
Data Transfers
MBA is headquartered in the United States and has operations and provides services in the United States. The Website and its related services may be accessed and used throughout the world, and data processing for some services offered by the Website occurs outside the U.S. As such, we and our service providers may transfer your Personal Information to, or store, process or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction. We will take steps to ensure that your Personal Information receives an adequate level of protection in the jurisdictions in which we store and process it.
Use of Website by Children
The Website is not targeted for use by children under the age of sixteen. We do not target any of our products or services or website content and features for use by children under the age of sixteen.
Notification of Changes
If we decide to change our policies regarding privacy, we will post those changes to this Privacy Policy and on other web pages we deem appropriate so you are always aware of what information we collect, how we use it and under what circumstances, if any, we disclose it. We will use information in accordance with the Privacy Policy under which the information was collected. If you do not wish to have your Personal Information used as described in this Privacy Policy, you should email MBA at the email address indicated below or, if registered with MyMBA, change your preferences through that mechanism.
Contact Information
If you have any questions or suggestions regarding our Privacy Policy, please contact us at: Phone: (202) 557-2700, ask for the Membership Department Email: [email protected] Postal Address: MBA, 1919 M Street, NW, 5th Floor, Washington, DC 20036, Attention: Membership
Miscellaneous
MBA may modify this Privacy Policy from time to time. You can determine whether the policy has been updated since you last reviewed it by checking the "Last Updated" date at the top of this web page.
If at any time you believe MBA has not adhered to this Privacy Policy, please notify us and we will use commercially reasonable efforts to promptly identify, diagnose and correct the problem. This is MBA's sole obligation and your sole remedy for MBA's breach of this Privacy Policy. You may reach us by email at [email protected] or by mail at MBA, 1919 M Street, NW, 5th Floor, Washington, DC 20036.