5. Your Rights & Choices

Depending on where you live, you may have specific rights regarding your personal information. We honor these rights for all our clients, regardless of jurisdiction:

Right to Know / Access

Request a copy of the personal information we hold about you, including the categories of data, sources, purposes of processing, and third parties with whom we've shared it.

Right to Correct

Request correction of inaccurate or incomplete personal information we hold about you.

Right to Delete

Request deletion of your personal information, subject to legal retention requirements (for example, lending records we're required to maintain by law).

Right to Data Portability

Receive your personal information in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted directly to another controller.

Right to Opt Out

Opt out of the sale or sharing of your personal information (though we don't sell data). Opt out of non-essential marketing communications at any time using the unsubscribe link in our emails.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. You will not be denied services, charged different rates, or receive different quality of service.

How to exercise your rights

To submit a privacy request, contact us at privacy@cffundinginvest.com or call (617) 238-1314. We'll need to verify your identity before processing your request — typically by confirming information we already have on file. We respond to all verified requests within 45 days, as required by applicable law.

If we're unable to fulfill your request (for example, due to legal retention requirements), we'll explain why in writing.

6. State & International Privacy Laws

6.1 California Privacy Rights (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents have the right to know what personal information we collect, use, disclose, and sell (we don't sell). You also have the right to request deletion, correct inaccurate information, and limit the use of sensitive personal information. To exercise these rights, email privacy@cffundinginvest.com with "California Privacy Rights" in the subject line.

6.2 Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and Utah (UCPA)

Residents of these states have rights to access, correct, delete, and port their personal data, as well as the right to opt out of targeted advertising and profiling. We extend these rights uniformly. Submit requests to privacy@cffundinginvest.com.

6.3 GDPR (European Economic Area & UK)

If you're located in the EEA or UK, the following applies:

6.4 GLBA (Gramm-Leach-Bliley Act)

As a financial services provider, we comply with the GLBA Privacy Rule and Safeguards Rule which govern the collection, use, and protection of non-public personal financial information. Our GLBA-compliant privacy notice is provided to clients at the inception of the business relationship and annually thereafter.

7. Cookies & Tracking Technologies

7.1 Essential cookies

These are required for our website to function properly. They enable core functionality such as security, network management, and form submissions. You cannot opt out of essential cookies as the site wouldn't work without them.

7.2 Analytics cookies

We use privacy-focused analytics to understand how visitors interact with our website. All analytics data is anonymized and aggregated. We do not use third-party advertising cookies, tracking pixels for retargeting, or cross-site tracking.

7.3 Your choices

Most browsers allow you to control cookies through their settings. You can also:

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we'll:

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this privacy policy, want to exercise your rights, or need to report a privacy concern, we're here to help.

Mail

75 State Street, Suite 100
Boston, MA 02109

Data Protection Officer

For GDPR-related inquiries or to escalate a privacy concern, contact our Data Protection Officer:

dpo@cffundinginvest.com

Data Protection & Security

How we safeguard your information

At CF Funding & Investments Inc., protecting your personal and financial information is our highest priority. We implement comprehensive security measures to ensure your data remains safe and secure throughout the application process and beyond.

Encryption & Security

  • 256-bit SSL encryption for all data transmission
  • Encrypted databases for stored information
  • Regular security audits and penetration testing
  • Secure file storage with access controls

Compliance Standards

  • SOC 2 Type II compliance
  • Real estate industry privacy regulations
  • Financial services data protection standards
  • State and federal privacy law compliance
Your Data is Protected with Bank-Level Security

Contact Us About Privacy

Have questions about how we handle your data? We're here to help.

Our Office

75 State Street Suite 100
Boston, Massachusetts 02109

We respond to privacy inquiries within 3-5 business days. For urgent matters, please call us directly.

CF Funding and Investments logo

Your Trust is Our Priority

At CF Funding & Investments Inc., protecting your privacy isn't just a policy — it's a commitment. Apply with confidence knowing your information is safe with us.

We Don't Sell Your Data
Bank-Level Security
HIPAA Compliant
Apply with Confidence