Last Updated 8/23/2023

These Privacy Practices apply to users and visitors to the mymidlandmortgage.com website ("Site") of Midland Mortgage, a division of MidFirst Bank ("Midland Mortgage" or "we" or "us" or "our") and describe generally how we collect, use and share personal information we obtain from, or about, users and visitors of the Site.

Personal Information We Collect and Where It Comes From

Personal information generally means information that identifies you or your device, and other information we associate with it.

Information you voluntarily provide to us when you engage with the Site, which may include:

• User name and password
• Name
• Home or other address
• Email address
• Account numbers
• Limited location information
• Telephone number(s)

Where it is required for businesses purposes, we may also request and collect social security numbers, driver's license numbers (or comparable), date of birth and other information.

A Site visitor may also choose to provide personal information by logging on to view account information, by completing online surveys or entry forms that may be available to website visitors from time to time, by contacting us by email or by applying for a product or service. Information provided to us by website visitors who are not current customers may be used (1) for the purpose for which the information was entered, or (2) to provide the visitor with additional information about products and services.

Information that is automatically collected when you visit or browse the Site, such as by our web servers or third party analytics tools we use may include:

• IP address
• Network provider or mobile carrier
• Mobile or tablet device type
• Operating system
• Mobile app version
• Geographic location
• Screen resolution or other device settings
• Analytic information regarding usage
• We also gather information collected through cookies, tags, and other technologies, as described further below

Other Information.

In addition to collecting personal information, we collect information that does not identify you and is not associated with your personal information. We may also de-identify or aggregate personal information so it no longer identifies you. Such information is outside the scope of this notice.

How We Use Personal Information

In addition to those ways described above, we generally use personal information for the following purposes:

• Site management, including, to improve Site functionality and navigation, provide technical assistance, tailor the content displayed on the Site, address performance issues, improve search engine placement, and to perform analytics.
• Security purposes, including, to maintain a secure session, authenticate you or your computer/device, to detect, prevent and investigate potential security incidents or fraud, and to verify transactions.
• Marketing purposes including, to serve and tailor Midfirst Bank advertising of products and services that may be of interest to you.

We may also use personal information as we believe to be necessary or appropriate for certain essential purposes, including:

• to comply with applicable law and legal process
• to respond to requests from public and government authorities, including authorities outside your country of residence
• to process job applications submitted to us
• to enforce our terms and conditions
• to protect our operations
• to protect our rights, privacy, safety, property, or security and/or that of you or others
• to allow us to pursue available remedies or limit the damages that we may sustain

How Personal Information May Be Shared or Disclosed

To the extent permitted by law, Midland Mortgage may disclose your personal information:

• to our service providers, which may include services such as data analysis, payment processing, infrastructure provision, IT services, auditing services and other services, to enable them to provide such services.
• to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business or assets (including in connection with any bankruptcy or similar proceedings).
• in connection with the essential purposes described above (e.g., to comply with legal obligations).

We may also disclose information that is passively collected when you use the Site to other vendors, as described further in the Cookies Section below.

How We Use Cookies and Similar Technologies

The Site does not use "cookies" to collect personal data. "Cookies" are pieces of information about your internet usage stored directly on your computer. In some instances, "session cookies" are used to ensure you remain on the same server during your browsing session in order to enhance your MyMidlandMortgage.com browsing experience. Even though "session cookies" don't collect personal information, we set them to expire within a day of usage.

To learn more about your choices regarding the collection of your online activity, visit https://www.aboutads.info/choices(opens in a new window). If you choose to opt out, a cookie will be placed on your browser indicating your choice. Because cookies are stored by your browser, any opt out election you make is valid only for the computer/device and browser combination used to opt out. Clearing your browser's cookies will remove your opt out because it is stored in a cookie, and you will need to opt out again.

Most internet browsers allow you to block cookies. If you block cookies on the Site, your browsing experience may be affected, and you may not be able to use all of the features of the Site. You can delete cookies that are already stored on your computer or device by following the instructions associated with your browser and operating system.

Midland Mortgage uses Google Analytics to collect statistical and usage information related to the Site in order to continually improve the design, functionality and content, to understand how account holders and visitors use the Site, and to assist us with resolving questions regarding the Site.

If you want to learn more about Google Analytics Privacy Policies, use the links provided below. If you do not want Google Analytics to collect information about your website use, you can opt out by clicking on the opt out link provided below and following the instructions.

Partner	Purpose	More Information
Google Analytics	Analytics	Google Privacy Policy Google Analytics Privacy Statement Google Analytics Opt-Out Browser Add On

Do Not Track

Midland Mortgage does not monitor or respond to Do Not Track ("DNT") signals because there is no standard interpretation or practice for DNT signals. Therefore, we handle all user information consistent with these Privacy Practices.

Third Party Sites

The Site may link to other websites or online services that are provided for your convenience. Once you leave the Site, the third party's online policy and privacy statement will determine what information is collected or shared. You should carefully review those materials to learn how third-party websites collect, use and share personal information.

Minors

Midland Mortgage does not knowingly solicit personal information from children under 13 without parental consent, nor do we knowingly collect or share the personal information of children under 16 without their express consent.

Security

We use technical, physical, and administrative security measures designed to comply with applicable law and protect the security of your personal information, including information you submit to us through the Site. This includes but may not be limited to device safeguards, encryption, and firewalls.

Please note that information you send to us electronically may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels (like email) to communicate sensitive or confidential information (such as your social security number) to us.

Retention Practices

Midland Mortgage will retain records, including personal information, as needed to provide our products and services to you and as required by applicable laws and regulations. Midland Mortgage may retain records beyond those required by applicable law and regulations where appropriate, including:

• for backup and disaster recovery systems in accordance with applicable policy; and
• for as long as necessary to protect our legal interests or otherwise pursue our legal rights and remedies.

Other information collection and sharing practices

Information we collect from or about individuals in connection with servicing customer accounts is treated in accordance with applicable federal and state privacy laws including the Gramm-Leach-Bliley Act (GLBA) and Fair Credit Reporting Act (FCRA). We therefore use and share any information that we collect from or about consumers of our financial products or services consistent with the disclosures in our Privacy Notice, posted here. We do not generally maintain personal information about individuals other than in connection with loan servicing activities, and therefore consumer disclosure, correction and deletion requests as specifically provided by the California Consumer Privacy Act (CCPA) are not applicable.

You may review or update certain account information and review your recent transaction history by logging in to the Site or by contacting us. You can also adjust certain profile and privacy settings in your account settings.