Privacy Policy
How Next Key Mortgage collects, uses, shares, and protects your personal information across all of our services and platforms.
1. Overview & Scope
Next Key Mortgage (“we,” “our,” or “the Company”) operates as a licensed mortgage broker and is committed to protecting the privacy of all individuals who interact with our website, mobile communications, video conferencing platforms, social media channels, and loan origination services.
This Privacy Policy (“Policy”) explains what personal information we collect, how we use it, with whom we share it, and what rights you have regarding your data. It applies to all services offered by Next Key Mortgage, including:
- Our website at main.nextkeymortgage.com
- SMS and text message communications (via Twilio)
- Email marketing and transactional emails (via Brevo/Sendinblue)
- Video consultations and webinars (via Zoom)
- Social media pages (Facebook, Instagram, LinkedIn, YouTube, X/Twitter)
- Mortgage application and loan origination services
Regulatory Notice: Next Key Mortgage is subject to the Gramm-Leach-Bliley Act (GLBA), the Equal Credit Opportunity Act (ECOA), the Fair Housing Act (FHA), the Telephone Consumer Protection Act (TCPA), the CAN-SPAM Act, California Consumer Privacy Act (CCPA/CPRA), and all applicable state mortgage lending privacy laws.
Effective Date: January 1, 2026 | Last Updated: January 1, 2026
2. Information We Collect
We collect information in several ways depending on how you interact with us.
2a. Information You Provide Directly
- Identity data: Full name, date of birth, Social Security number, government-issued ID
- Contact data: Home address, mailing address, email address, mobile phone number
- Financial data: Income, employment history, assets, liabilities, bank account information, credit history, tax returns, pay stubs, and bank statements
- Property data: Property address, estimated value, intended use (primary, secondary, investment)
- Communication preferences: SMS opt-in status, email subscription status, preferred contact method
2b. Information Collected Automatically
- IP address, browser type, operating system, device identifiers
- Pages visited, time spent, clicks, and referring URLs via cookies and analytics tools
- Location data (city/region level) from your IP address
2c. Information from Third Parties
- Credit bureaus: Equifax, Experian, TransUnion — credit reports and scores (with your authorization)
- Lender partners: Underwriting data from our network of 250+ lenders
- Public records: Property data, title information, recorded liens
- Social media platforms: Publicly available profile information if you contact us through social channels
Hard Credit Pull & Fair Credit Reporting Act (FCRA) Disclosure: Submitting a full mortgage application authorizes Next Key Mortgage and our lender partners to obtain your full credit report from one or more credit reporting agencies. This constitutes a hard inquiry and may temporarily affect your credit score. You will be notified before any credit pull is initiated.
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Process and evaluate mortgage applications | Contractual necessity; regulatory compliance |
| Match you with appropriate lender programs | Legitimate business interest; your consent |
| Verify identity and prevent fraud | Legal obligation (BSA, PATRIOT Act) |
| Send application status and loan updates via SMS | Express written consent (TCPA) |
| Send marketing emails and newsletters | Consent (CAN-SPAM / Brevo compliance) |
| Conduct virtual consultations via Zoom | Your consent; service delivery |
| Comply with HMDA reporting requirements | Legal obligation |
| Improve our website and marketing | Legitimate interest; cookie consent |
| Respond to inquiries via social media | Legitimate interest; your consent |
| Service your loan after closing (referrals to servicers) | Contractual necessity; legal obligation |
4. Information Sharing & Disclosure
We do not sell, rent, or trade your personal information. We share information only as described below:
4a. Lender Partners
With your authorization, we share your application data with lenders in our network to obtain loan offers and approvals. Each lender operates under its own privacy policy and is independently subject to GLBA and applicable regulations.
4b. Service Providers (Sub-processors)
All service providers are contractually required to protect your data, use it only for the purposes specified, and comply with applicable privacy laws.
4c. Required Disclosures
We may disclose information when required by law, including to: federal and state regulators (CFPB, HUD, state banking departments), law enforcement with valid legal process, courts pursuant to valid orders, and government agencies for HMDA reporting.
4d. Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity. We will notify you via email or prominent website notice prior to any such transfer.
We Never Sell Your Data: Next Key Mortgage does not sell, rent, or exchange your personal information to third parties for marketing or any other commercial purpose.
5. SMS / Text Message Communications
Next Key Mortgage uses Twilio to send SMS and MMS text messages. Our SMS program complies with the Telephone Consumer Protection Act (TCPA), Twilio’s Messaging Policy, and all applicable carrier guidelines including CTIA standards.
5a. Opt-In & Consent
- You will only receive marketing SMS messages after providing express written consent through our website opt-in form or a signed written agreement
- Consent is captured with a timestamp, IP address, and the specific disclosure language you agreed to
- Consent to receive SMS messages is never a condition of purchase — consent is not required to obtain a loan of obtaining a mortgage or any other service
- Pre-checked consent boxes are never used
5b. Message Types
- Transactional: Application status updates, document requests, closing date reminders, rate lock confirmations (these may be sent without marketing consent as they are necessary to service your loan)
- Marketing: Rate alerts, new loan program announcements, market updates, promotional content (require explicit marketing consent)
5c. Opt-Out / STOP
You may opt out of SMS communications at any time by replying STOP to any message. You will receive a single confirmation message and will receive no further marketing messages. Transactional messages related to an active loan application may continue.
5d. HELP Keyword
Reply HELP to any message for assistance. You will receive contact information and instructions. Reply HELP for help. You will receive: Next Key Mortgage SMS Support • (470) 457-6149 • info@main.nextkeymortgage.com • Msg&Data rates may apply. Reply STOP to cancel.
5e. Message Frequency & Rates
Message frequency varies based on your activity and preferences, typically 2–8 messages per month. Standard message and data rates may apply depending on your mobile carrier plan.
5f. Twilio Data Processing
Twilio processes your phone number and message content to deliver SMS communications on our behalf. Twilio is bound by its own Privacy Policy and Data Protection Addendum. For more information, visit twilio.com/legal/privacy.
Supported Carriers: Our SMS program operates on all major U.S. carriers including AT&T, Verizon, T-Mobile, Sprint, and regional carriers. Carrier support is subject to change.
6. Email Communications (Brevo / Sendinblue)
We use Brevo (formerly Sendinblue) to send transactional and marketing emails. Our email program complies with the CAN-SPAM Act, CASL (for Canadian contacts), GDPR (for EU contacts where applicable), and Brevo’s Anti-Spam Policy.
6a. Email Types
- Transactional emails: Application confirmations, document requests, status updates, pre-approval letters, closing disclosures
- Marketing emails: Rate newsletters, mortgage tips, market updates, promotional announcements
6b. CAN-SPAM Compliance
- All marketing emails clearly identify Next Key Mortgage as the sender
- Subject lines accurately reflect the content of the email
- Our physical mailing address is included in every marketing email
- Every marketing email includes a clear and functioning unsubscribe link
- Opt-out requests are honored within 10 business days
6c. Email Unsubscribe
To stop receiving marketing emails, click the “Unsubscribe” link in any email, or contact us at info@main.nextkeymortgage.com. Transactional emails related to your active loan application will continue until your loan is closed or withdrawn.
6d. Brevo Data Processing
Brevo processes your email address and message metadata to deliver and track email communications on our behalf. Brevo operates under its own Privacy Policy and Data Processing Agreement. For more information, visit brevo.com/legal/privacypolicy.
7. Video Meetings & Webinars (Zoom)
Next Key Mortgage uses Zoom to conduct virtual consultations, loan reviews, and educational webinars. Your use of Zoom in connection with our services is subject to this Policy and Zoom’s own Privacy Policy.
7a. Information Collected During Zoom Sessions
- Name and email address used to join the meeting
- Audio, video, and screen share content (if recorded with your consent)
- Chat messages sent during the session
- Meeting duration, attendance, and engagement data
- Device information and IP address (collected by Zoom)
7b. Recording Consent
We may record virtual consultations for quality assurance, loan documentation, and compliance purposes. You will be notified at the start of every recorded session and given the opportunity to consent or decline. If you decline, recording will not be initiated for that session. Recordings are stored securely and retained for a maximum of 90 days unless required longer for regulatory compliance.
7c. Webinars
If you register for a Next Key Mortgage webinar via Zoom, your registration information (name, email, and optionally phone number) is collected and used to send webinar access links, reminders, and follow-up resources. You may opt out of post-webinar marketing communications at any time.
7d. Zoom Data Processing
Zoom Video Communications, Inc. acts as a data processor for meeting data. Zoom operates under its own Privacy Policy and Data Processing Agreement. For more information, visit zoom.us/privacy.
9. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to improve your experience and analyze site usage.
Cookie Types We Use
| Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for website functionality and security | Session |
| Analytics Cookies | Google Analytics — page views, traffic sources, user behavior | Up to 2 years |
| Marketing Cookies | Facebook Pixel, LinkedIn Insight Tag — ad retargeting | Up to 90 days |
| Preference Cookies | Remember your settings and communication preferences | 1 year |
You may disable cookies through your browser settings. Note that disabling certain cookies may affect website functionality. We honor browser-based “Do Not Track” (DNT) signals where technically feasible.
10. Data Security
We implement administrative, technical, and physical safeguards to protect your personal information, including:
- 256-bit SSL/TLS encryption for all data transmitted through our website and loan portal
- Secure, access-controlled servers with multi-factor authentication
- Regular security assessments and penetration testing
- Employee training on data handling and privacy requirements
- Compliance with Federal Financial Institutions Examination Council (FFIEC) cybersecurity guidelines
- Incident response plan and breach notification procedures per applicable state laws
In the event of a data breach that affects your personal information, we will notify you in accordance with applicable state breach notification laws, typically within 72 hours of discovery.
11. Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Loan application records | 7 years from application date | ECOA, HMDA, RESPA requirements |
| Closed loan files | 7–10 years | Regulatory and legal requirements |
| Credit pull authorizations | 25 months (ECOA) | Fair lending compliance |
| SMS consent records | 5 years | TCPA compliance |
| Email consent records | 3 years after unsubscribe | CAN-SPAM / Brevo compliance |
| Zoom recording files | 90 days (unless legally required longer) | Quality & compliance |
| Website analytics data | 26 months | Business analytics |
| Declined application records | 25 months | ECOA adverse action compliance |
12. Your Privacy Rights
Depending on your state of residence, you may have the following rights regarding your personal information:
- Right to Know: Request what personal information we have collected about you
- Right to Access: Receive a copy of your personal data in a portable format
- Right to Correct: Request correction of inaccurate personal information
- Right to Delete: Request deletion of your personal information (subject to legal retention requirements)
- Right to Opt-Out of Sale: We do not sell personal information; this right is automatically satisfied
- Right to Limit Sensitive Data Use: Restrict use of sensitive personal information beyond what is necessary
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
- Right to Opt-Out of SMS: Reply STOP to any text message at any time
- Right to Opt-Out of Email: Click Unsubscribe in any marketing email
To exercise any of these rights, contact us at info@main.nextkeymortgage.com or (470) 457-6149. We will respond within 45 days (or sooner as required by applicable law). We may need to verify your identity before fulfilling your request.
13. Children’s Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from a person under 18, we will delete it promptly. If you believe we have collected information from a minor, please contact us immediately at info@main.nextkeymortgage.com.
14. Fair Lending & Equal Credit Opportunity
Next Key Mortgage is an Equal Housing Lender and complies fully with:
- Equal Credit Opportunity Act (ECOA) / Regulation B: We do not discriminate in any aspect of a credit transaction based on race, color, religion, national origin, sex, marital status, age, familial status, disability, or the receipt of public assistance.
- Fair Housing Act (FHA): We do not discriminate in residential real estate transactions based on any protected class.
- Home Mortgage Disclosure Act (HMDA): We collect and report loan data as required. This data does not include your name or address in public HMDA filings.
- Community Reinvestment Act (CRA): We are committed to serving the credit needs of all communities.
If you believe you have been subject to discriminatory treatment in connection with a mortgage loan, you may contact the Consumer Financial Protection Bureau (CFPB) at 1-855-411-2372 or the U.S. Department of Housing and Urban Development (HUD) at 1-800-669-9777.
15. Gramm-Leach-Bliley Act (GLBA) Financial Privacy
As a mortgage broker, we are subject to the GLBA’s Privacy Rule (Regulation P). In accordance with this rule:
- We provide you with an initial privacy notice at the time of establishing a customer relationship
- We provide annual privacy notices as required
- We give you the right to opt out of certain information sharing with nonaffiliated third parties
- We maintain a comprehensive information security program
Our GLBA privacy notice describes in detail our information sharing practices with affiliated and nonaffiliated companies. You may request a copy of our full GLBA notice by contacting us at info@main.nextkeymortgage.com.
Safeguards Rule Compliance
We comply with the FTC’s Safeguards Rule (updated 2023), which requires financial institutions to implement a comprehensive information security program including risk assessments, access controls, encryption, monitoring, and incident response planning.
16. State-Specific Privacy Rights
California Residents (CCPA / CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know, access, correct, delete, and restrict sensitive personal information. To submit a California consumer privacy request, contact us at info@main.nextkeymortgage.com. We will not discriminate against you for exercising your CCPA/CPRA rights.
Texas, Florida, Georgia & Other States
Residents of other states with comprehensive privacy laws (including Texas, Florida, Colorado, Virginia, Connecticut, Nevada, and others) may have similar rights under their respective state laws. We honor all applicable state privacy rights. Contact us to learn about rights specific to your state.
State Mortgage Licensing
Next Key Mortgage’s licensing information, including states of licensure and license numbers, is available at nmlsconsumeraccess.org .
17. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will:
- Update the “Last Updated” date at the top of this page
- Send an email notification to active customers and subscribers
- Post a notice on our website homepage for 30 days
- For material changes affecting SMS consent, send an SMS notification
Your continued use of our services after the effective date of the revised Policy constitutes your acceptance of the changes.
18. Contact Us
For privacy inquiries, data requests, opt-out requests, or to exercise any of your rights, contact us using the information below:
Next Key Mortgage — Privacy Compliance
📞 Phone: (470) 457-6149
💌 Email: info@main.nextkeymortgage.com
🌐 Website: main.nextkeymortgage.com
To opt out of SMS: Reply STOP to any text message
To opt out of email: Click Unsubscribe in any email
NMLS Consumer Access: nmlsconsumeraccess.org
8. Social Media
Next Key Mortgage maintains active pages on the following social media platforms. Each platform operates independently and is governed by its own terms of service and privacy policy.
8a. Information We Collect via Social Media
8b. Social Media Advertising
We may run paid advertising campaigns on Facebook, Instagram, and LinkedIn using custom audience targeting based on hashed contact data or pixel-based retargeting. We use these tools only in compliance with each platform’s advertising policies and applicable privacy laws, including providing proper disclosures when using lead generation forms.
8c. Do Not Share Sensitive Information
⚠️ Important: Do not share sensitive financial information (Social Security numbers, bank account numbers, income details) through social media messages or comment sections. For secure communications, use our website form, encrypted email, or call us directly at (470) 457-6149.
8d. Third-Party Platform Policies
Your interactions with our social media pages are also governed by those platforms’ privacy policies. We encourage you to review: Facebook · Instagram · LinkedIn · YouTube/Google · X/Twitter