Privacy Rights Policy for Pennymac Job Applicants Who Are California Residents

How to Submit Your Request If You are a Resident of California

To submit a request to know, access, delete, or correct your information, click on “Submit a Request” or call us toll-free at (866) 601-3518.

The California Consumer Privacy Act of 2018 (“CCPA”) provides California residents with privacy rights related to the personal information businesses collected about you and your household. The purpose of this privacy policy is to provide you with a description of our business practices regarding the collection, use, sale, sharing, and retention of your personal information and of your rights regarding your personal information.

Under the CCPA, you have the right to know/access what personal information Pennymac collects, uses, sells, shares, retains, the right to correct inaccurate personal information, the right to request the deletion of your personal information collected, and the right to opt-out of the sale or sharing of your personal information. However, these rights only extend to information covered by the CCPA, and because the CCPA does not cover all consumer information in all scenarios, only certain information is subject to the above referenced rights.

We adopt this privacy policy to comply with the CCPA, and it applies solely to persons who reside in the State of California (“consumer” or “you”).

In the preceding 12 months, Pennymac may have collected the following categories of personal information about you.

Categories of Sources From Which Personal Information is Collected

• Information you provided directly to us
• Information collected through our websites
• Information provided by entities, such as service providers, credit reporting agencies, or government entities
• Information collected through the use of Pennymac IT systems and devices (including email and collaboration platforms), through server and system logs, and internal application cookies, which record Internet or other electronic network activity.

Purpose For Collecting Personal Information

• Administrative Functions
• Applicant Identification
• Application Process
• Background Screening
• Contact Information
• Determine Website Used to Identify the Open Pennymac Position
• Employee Relations
• Equal Employment Opportunity Commission Requirements
• Hiring
• Obtaining E-Signatures
• Pre-Employment Assessment
• Rehire Eligibility
• Security and Building Access

Why We Might Disclose Your Personal Information to Entities (as further described below)

• To support business operations
• Fulfilment of job applicant background check

Sale or Sharing of Personal Information

Pennymac does not sell or share personal information. For the purposes of this policy, “share,” “shared,” or “sharing” means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising for the benefit of a business in which no money is exchanged.

Pennymac has no knowledge that we sold or shared the personal information of consumers under 16 years of age.

While we do not sell or share your information, we do disclose your information for the business purposes described below to the categories of entities parties outlined below.

Who We May Have Disclosed Your Personal Information To In the Preceding 12 Months and What We Might Disclose (Examples of each Category are included above)

Sensitive Personal Information

Pennymac only uses or discloses sensitive personal information for the following purposes:

• To perform Human Resources functions, such as background checks and education verification.
• Detect security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information;
• Resist malicious, deceptive, fraudulent, or illegal actions directed at Pennymac to prosecute those responsible for those actions; or
• Ensure the physical safety of natural persons;

Under the CCPA, you, as a California resident, have the following rights:

Right to Know/Access

As a California resident, you have the right to request that Pennymac disclose what specific/categorical personal data we collected about you, the sources and purposes for that collection, and a list of the categories and specific entities your data was sold, shared, or disclosed to. Pennymac does not sell or share your personal information.

Right to Delete

As a California resident, you have the right to request that Pennymac delete any personal information about you that it collected.

Pennymac may deny your request if there are any conflicts with our corporate record retention requirements, federal or state law, or if it falls under any other CCPA exception.

Right to Correct

As a California resident, you have the right to request that Pennymac correct inaccurate personal information Pennymac maintains about you.

Right to Opt-Out

As a California resident, you have the right to opt-out of the sale or sharing of your personal information, and the right to opt-out from Pennymac processing your personal information for the purposes of targeted advertising, or profiling you in furtherance of decisions that produce legal effects or effects of similar significance. Pennymac does not sell or share personal information.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

Pennymac does not discriminate against you for exercising your CCPA privacy rights.

These rights only extend to information covered by the CCPA, and because the CCPA does not cover all consumer information in all scenarios, only certain information is subject to the above referenced rights.

Authorized Third Party

If you are an authorized third party (such as an attorney-in-fact) making a request on behalf of someone else, please contact us using one of the methods provided below.

How to Submit Your Request If You are a Resident of California

To submit a request to know, access, delete, or correct your information, click on “Submit a Request” or call us toll-free at (866) 601-3518.

Pennymac will verify your identity using the personal information you provide, which must include your name, address, and email address.

Contact Information:

If you have any questions or concerns about our privacy policies and information practices, you may contact Pennymac using the information below.

This privacy policy was last updated on December 31, 2025 and is subject to change.

Rev. 12/2025