MULTI-STATE NOTICE AT COLLECTION AND PRIVACY POLICY

Effective Date: January 1, 2023

Last Revised/Reviewed on: July 1, 2023

This Multi-State Notice at Collection and Privacy Policy ("State Privacy Disclosure") explains how Mi Casa Housing. and its subsidiaries and affiliates ("Mi Casa", "Company", "us", "our", or "we") collect, use, disclose, sell, share, and/or retain personal information ("Information Practices") subject to applicable state privacy laws.

The terms used in this State Privacy Disclosure shall have the same or similar meaning as those terms in each of the respective state laws, or the closest approximation of such term, as defined in each statute. Similarly, different states may provide different rights to state residents.

NOTICE AT COLLECTION

The following notice identifies the categories of personal information to be collected from you and the purposes for which the personal information will be used, including whether that information is sold or shared for the purposes of cross-context behavioral advertising (e.g., targeted advertising).

General Personal Information

Categories of Personal Information	Purposes for Collection and Use	Sold to Third Parties or Shared with Third Parties for Cross-Context Behavioral Advertising
Identifiers: For example, a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver's license number, passport number, or other similar identifiers.	To fulfill or meet the reason for which the information is provided For our internal operation purposes For auditing relating to consumer transactions including ad impressions and compliance with regulations Fraud and security detection, investigation, and resistance Debugging to identify and repair errors Short-term data use for the current interaction that is not used to build a profile Servicing transactions and accounts (e.g., customer service, maintaining and servicing accounts, customer verification, payment processing) and providing services on behalf of business or service provider (e.g., financing, advertising or marketing, analytics) To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred. Undertaking internal research for technological development and demonstration Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us To share the personal information with service providers to carry out other business purposes.	No
(Pursuant to California Law) Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, a name, social security number, address, telephone number, credit card number, or debit card number.		No
(Pursuant to California Law) Characteristics of CA or Federal Protected Classifications: For example, race, religion, national origin), age (40 and over), gender, sexual orientation, medical condition, ancestry, pregnancy (includes childbirth, breastfeeding and/or related medical conditions), familial status, disability, veteran status, or genetic information.		No
Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.		No
Biometric Information: For example, physiological, biological or behavioral characteristics, including an individual's deoxyribonucleic acid (DNA), that can be used, singly or in combination with each other or with other identifying data, to establish individual identity. Biometric information includes, but is not limited to, imagery of the iris, retina, fingerprint, face, hand, palm, vein patterns, and voice recordings, from which an identifier template, such as a faceprint, a minutiae template, or a voiceprint, can be extracted, and keystroke patterns or rhythms, gait patterns or rhythms, and sleep, health, or exercise data that contain identifying information.		No
Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer's interaction with an Internet Web site, application, or advertisement.		No
Geolocation Data: For example, information that can be used to determine a device's physical location.		No
Sensory or Surveillance Data: For example, audio, electronic, visual, thermal, olfactory, or similar information that can be linked or associated with a particular consumer or household.		No
Profile Data: For example, inferences drawn from personal information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, predispositions, behavior, attitudes, abilities, and aptitudes.		No

We do not collect: professional or employment related information or education information outside of an individual acting in their commercial or employment-related context or under this policy.

Sensitive Personal Information

Categories of Sensitive Personal Information	Purposes for Collection and Use	Sold to or Shared with Third Parties for Cross-Context Behavioral Advertising
(Pursuant to California Law) Social Security Number, iTIN, Driver's License, State Identification Card, or Passport Number	To fulfill or meet the reason for which the information is provided For our internal operation purposes For auditing relating to consumer transactions including compliance with regulations Fraud and security detection, investigation, and resistance Debugging to identify and repair errors Short-term data use for the current interaction that is not used to build a profile Servicing transactions and accounts (e.g., customer service, maintaining and servicing accounts, customer verification, payment processing) and providing services on behalf of business or service provider (e.g., financing, advertising or marketing, analytics) To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred. Undertaking internal research for technological development and demonstration Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us. To share the personal information with service providers to carry out other business purposes.	No
(Pursuant to California Law) Account log-in, financial account, debit card, or credit card number when provided with any required security or access code, password, or credentials allowing access to an account		No
(Pursuant to California and Virginia Law) Precise Geolocation		No
Racial or ethnic origin, or religious or philosophical beliefs		No
Biometric data for the purpose of uniquely identifying an individual		No

We do not collect: other sensitive personal information under the applicable state laws.

Retention Periods

We retain information for different periods of time depending on the purposes for which we collect and use it. We will delete or de-identify information when it is no longer needed to fulfill the purposes listed for each category above, unless a longer retention period is required to comply with applicable laws. There may be technical or other operational reasons where we are unable to fully delete or de-identify your information. Where this is the case, we will take reasonable measures to prevent further processing your information.

Notice of Sale and/or Share

Our use of tracking technologies may be considered a sale or sharing with third parties for cross-context behavioral advertising (e.g., targeted advertising) under applicable state law. You can opt-out of being tracked by these third parties by clicking the "Do Not Sell or Share My Personal Information" link and selecting your preferences. Please note that this link provides opt-out rights under all applicable state laws, also known as “opt-out rights” or “personal data use opt-out”.

Please review our Multi-State Privacy Policy below.

The purpose of this privacy policy is to provide you with a comprehensive description of our online and offline practices regarding our Information Practices. You have certain rights to control the use of your personal information. This privacy policy describes your rights as it relates to our Information Practices as to your personal information and how you can exercise those rights.

The following table includes disclosures for the preceding 12 months of: categories of personal information we have collected about consumers, the categories we have disclosed for a business purpose, and categories of third parties with whom we shared the personal information during that period.

General Personal Information

Category	In the preceding 12 months this category was:		Business or Commercial Purpose for Collection & Disclosure	Categories of third parties to whom the information was disclosed
Category	Collected	Disclosed
Identifiers			To fulfill or meet the reason for which the information is provided For our internal operation purposes For auditing relating to consumer transactions including ad impressions and compliance with regulations Fraud and security detection, investigation, and resistance Debugging to identify and repair errors Short-term data use for the current interaction that is not used to build a profile Servicing transactions and accounts (e.g., customer service, maintaining and servicing accounts, customer verification, payment processing) and providing services on behalf of business or service provider (e.g., financing, advertising or marketing, analytics) To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred. Undertaking internal research for technological development and demonstration Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us. To share the personal information with service providers to carry out other business purposes.	Cloud storage providers Payment processors Web analytics and advertising providers Web hosting service providers E-mail distribution service providers Help Desk service providers SMS text message providers Financial and accounting service providers Cybersecurity service providers Logistics and planning tool providers Customer relationship management tool providers Property preservation and inspection services
(Pursuant to California Law) Personal Information Categories from Cal. Civ. Code § 1798.80(e)
(Pursuant to California Law) Characteristics of California or Federal protected Classifications
Commercial Information
Biometric Information
Internet or Other Similar Network Activity
Geolocation Data
Sensory or Surveillance Data
Profile Data

We do not collect: professional or employment related information or education information outside of an individual acting in their commercial or employment-related context or under this policy.

Sensitive Personal Information

Unless otherwise allowed by applicable state law, we will only collect certain types of sensitive personal information with your consent. We do not use or disclose the below sensitive personal information for purposes other than those business purposes specifically enumerated under applicable state law, including California. As a result, we do not offer a right to limit our use or disclosure of these categories of sensitive personal information.

Category	In the preceding 12 months this category was:		Business or Commercial Purpose for Collection & Disclosure	Categories of third parties to whom the information was disclosed
Category	Collected	Disclosed
(Pursuant to California Law) Social Security Number, Driver's License, State Identification Card, or Passport Number			To fulfill or meet the reason for which the information is provided For our internal operation purposes For auditing relating to consumer transactions including compliance with regulations Fraud and security detection, investigation, and resistance Debugging to identify and repair errors Short-term data use for the current interaction that is not used to build a profile Servicing transactions and accounts (e.g., customer service, maintaining and servicing accounts, customer verification, payment processing) and providing services on behalf of business or service provider (e.g., financing, advertising or marketing, analytics) To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred. Undertaking internal research for technological development and demonstration Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us. To share the personal information with service providers to carry out other business purposes.	Cloud storage providers Payment processors Web analytics providers Web hosting service providers E-mail distribution service providers Help Desk service providers Financial and accounting service providers Cybersecurity service providers Logistics and planning tool providers Customer relationship management tool providers Property preservation and inspection services
(Pursuant to California Law) Account log-in, financial account, debit card, or credit card number when provided with any required security or access code, password, or credentials allowing access to an account
(Pursuant to California and Virginia Law) Precise Geolocation
Racial or ethnic origin, or religious or philosophical beliefs
Biometric data for the purpose of uniquely identifying an individual

We do not collect: other sensitive personal information under the applicable state laws.

The categories identified as collected in the tables above were collected from the following categories of sources:

You directly
Consumer data resellers
Marketing partners
Data analytics providers
Operating systems and platforms
Social networks

What We Sell to Third Parties or Share with Third Parties for Cross-Context Behavioral Advertising and Right to Opt-Out

We have not sold or shared with third parties for cross-context behavioral advertising (e.g., targeted advertising) personal information to third parties in the preceding 12 months as disclosed in the table below. We do not sell or share your sensitive personal information.

Categories sold to or shared with Non-Service Providers over the last 12 months	Categories of Non-Service Providers to whom this category of personal information has been sold or shared
Identifiers	Analytics providers Advertising partners
Internet or Other Similar Network Activity	Analytics providers Advertising partners
Geolocation Data	Analytics providers Advertising partners

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We do not sell or share: other personal information mentioned in the charts above.

The purpose of the notice of Right to Opt-Out is to inform you that you have the right to direct us to stop selling or sharing your personal information, which is called the "Right to Opt-Out."

You may exercise your Right to Opt-Out by: (1) clicking "Do Not Sell or Share My Personal Information" to use the interactive form, or (2) submitting your request through an opt-out preference signal/universal opt-out mechanism (described further below in the section titled "Opt-Out Preference Signals/Universal Opt-Out Mechanism ").

Once you make an opt-out request, we will comply within 15 business days.

We do not have actual knowledge that we sell the personal information of minors under 16 years of age.

The rights afforded under this State Privacy Disclosure apply solely to state privacy laws applicable to us, namely California, Colorado, and Virginia residents (“consumers” or “you”).

Your Right to Know

Depending on the applicable state law, you may have the right to request that we disclose any of the following:

the categories of personal information we have collected about you
the categories of sources from which the personal information is collected
the business or commercial purpose for collecting, selling, or sharing with third parties for cross context behavioral advertising (e.g., targeted advertising)
the categories of third parties to whom we disclose personal information
the specific pieces of personal information we have collected about you

You can do this through a verified consumer request. That process is described below in the section, "How to Exercise Your Rights."

Your Right to Request Correction of Inaccurate Personal Information

You have the right to request correction of inaccurate personal information maintained by us. We may request documentation from you to determine the accuracy of the information. If you provide us documentation either upon our request or through your own initiative, that documentation will only be used for the purpose of correcting your personal information and complying with our recordkeeping requirements.

As an alternative to correction, we may delete the inaccurate information if it does not negatively impact you or if you consent to this deletion. We reserve the right to deny this request if allowed under applicable law, or if we determine that the contested information is more likely than not accurate, based on the totality of circumstances. You can submit a correction request through a verified consumer request. That process is described below in the section, " How to Exercise Your Rights."

Your Right to Request Deletion of Your Personal Information

You have the right to request that we delete any of your personal information collected by us, subject to certain exceptions. You can do this through a verified consumer request. That process is described below in the section, "How to Exercise Your Rights."

There may be scenarios where we deny your deletion request. If that occurs, we will provide you with an explanation as to why we could not delete all or some of your personal information.

How to Exercise Your Rights

You have the right to exercise your rights and submit verified consumer requests to know information (and to receive your personal information in a portable format), to correct information, or for deletion.

The response to a request to know will provide the personal information we have collected and maintained about you, in a portable format, unless an exception under applicable state law applies. Please note that, depending on the applicable state law, we may not be required to provide personal information to you if you make multiple requests in a certain time period. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

You can submit requests using the following web form or by calling (210) 622-0450. Your request will be verified using information you provide as described on the web form. If you call (210) 622-0450 you will be asked to provide the same information requested on the web form for verification purposes.If you submit a request that is not through one of the above designated methods or is deficient in some manner unrelated to verification, we will provide you with information on how to submit the request or remedy any deficiencies with your request.

Once we receive your verifiable consumer request, we will confirm receipt of the request within 10 business days, or as allowed under applicable law, describing our verification process. We will respond to your request within 45 calendar days, or as allowed under applicable law, if we are able to verify your identity. Requests for deletion will require a separate confirmation that you want your information deleted.

Requests to Know or Delete for Child Under the Age of 13: We do not knowingly collect information of minors under the age of 13.

Opt-Out Preference Signals/Universal Opt-Out Mechanism

Our use of tracking technologies may be considered a sale/sharing for targeted advertising under applicable state law. You can opt-out of being tracked by these third parties by clicking the "Do Not Sell of Share My Personal Information" link at the bottom of our website and selecting your preferences, or by broadcasting an Opt-Out Preference Signal/Universal Opt-Out Mechanism, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. Because the signal is browser-specific, you will need to broadcast subsequent signals if you are accessing our website through different online devices (e.g., computers, smartphones, tablets).

Your Right to Non-Discrimination for the Exercise of a Privacy Right

We will not discriminate against you for exercising any of your state privacy rights. However, we may still offer you certain financial incentives permitted under applicable state law, such as discounts, rewards, premium features, loyalty accounts, or club card programs that can result in different prices, rates, or quality levels.

Other California Privacy Rights

Company responds to Do Not Sell or Share Opt-Out requests as disclosed in the section “What We Sell to Third Parties or Share with Third Parties for Cross-Context Behavioral Advertising and Right to Opt-Out.” Other parties may collect personally identifiable information about your activities over time and across different websites when a consumer uses our website or service.

Using an Authorized Agent to Submit a Request

Only you, or a natural person or a business entity registered with the Secretary of State to conduct business in California that you have authorized to act on your behalf, may make a verifiable consumer request related to your personal information, to opt-out of sale or sharing, or to limit the use or disclosure of your sensitive personal information. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465. If a power of attorney that meets those provisions is not submitted, you will be required to verify your identity directly by submitting a verified consumer request according to the procedures in the section “How to Exercise Your Rights”. If anyone purporting to be an authorized agent for a consumer contacts us, we will require proof that the authorized agent has been authorized to act on the consumer's behalf.

Notice to Colorado and Virginia Residents – Supplemental Privacy Rights

Using an Authorized Agent to Submit a Request

If you use an authorized agent, you may provide a power of attorney executed pursuant to applicable state law. If a power of attorney that meets those provisions is not submitted, you will be required to verify your identity directly by submitting a verified consumer request according to the procedures in the section “How to Exercise Your Rights”. If anyone purporting to be an authorized agent for a consumer contacts us, we will require proof that the authorized agent has been authorized to act on the consumer's behalf.

Right to Appeal

You have the right to appeal our refusal to take action on, or respond to, a verified consumer request. Upon receipt of our denial or refusal to take action on, or to respond to, a verified consumer request, a Colorado or Virginia resident has 30 days to submit a request to appeal our decision by using the web form or by calling toll-free 877-353-6053. Your appeal will be verified using information you provide as described on the web form. If you call 877-353-6053 you will be asked to provide the same information requested on the web form for verification purposes. We will timely inform you in writing of any action taken or not taken in response. We will also include a written explanation of the reasons for our decision.

Right to Opt-Out of Certain Profiling

You have the right to opt-out of our use of profiling when used to make decisions that produce a legal or similarly significant effect concerning you or your interactions with us. Currently, Company does not engage in such profiling.

Changes to Our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the website and update the notice’s effective date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.

Contact for More Information

If you have any questions or comments about this notice, the ways in which Mi Casa collects and uses your information, your choices and rights regarding such use, or wish to exercise your rights under applicable state law, please do not hesitate to contact us at:

Phone: (210) 622-0450

Website: web form