Legal
Privacy Policy
Last updated 26 July 2026 · Reviewed at least every 12 months
This Privacy Policy explains how the website for David M. Honda and United American Mortgage Corporation (the “Site”) handles information. It is written to meet the EU/UK GDPR, the California CCPA/CPRA, and, where it applies, the Gramm-Leach-Bliley Act (GLBA). In plain terms: we collect as little as possible, we use it only to help you, and we never sell your personal information.
1. Information we collect
- Information you give us through a form. When you use the contact form or request the book, we receive the name, email, phone number, and any details you choose to share. This is voluntary and used to respond to you.
- Consent records. If you check the contact-consent box, we keep a record of that consent (the text shown, the date, and the number you provided) to comply with the TCPA.
- No tracking by default. We do not run analytics, advertising pixels, social-media trackers, or fingerprinting. Fonts are self-hosted, so loading a page makes no request to Google or other third parties.
- Hosting logs. Our host, Vercel Inc., processes standard server logs (IP address, browser type, time of request) to deliver and secure the Site, retained briefly for security.
2. Why we process it & legal basis (GDPR)
- To respond to you and provide the information or service you asked for: steps prior to a contract and legitimate interests (Art. 6(1)(b)/(f)).
- To contact you by phone or text where you have given express written consent (Art. 6(1)(a)); you can withdraw consent at any time by replying STOP or contacting us.
- To deliver and secure the Site: legitimate interests (Art. 6(1)(f)).
3. Financial privacy (GLBA)
If you later apply for a mortgage, the nonpublic personal information you provide is handled under the Gramm-Leach-Bliley Act and United American Mortgage Corporation's privacy practices, and you will receive the applicable privacy notice at application. This Site itself does not take loan applications.
4. Cookies & similar technologies
The Site itself uses only strictly necessary first-party local storage to remember your privacy choices, and sets no analytics or advertising cookies. The Contact page embeds a Calendly scheduling widget; if you choose to book a time, Calendly (as an independent service) may set its own functional cookies and processes the information you enter under its own privacy policy (calendly.com/privacy). You can review or change your choices any time via the “Cookie Preferences” link in the footer. We honor the Global Privacy Control (GPC) browser signal automatically as a valid opt-out; when GPC is present, the preference center confirms it has been applied.
5. How we share information
We do not sell or share your personal information for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We use a small number of service providers under contract, including Vercel (hosting), Resend (to deliver form emails), and Calendly (appointment scheduling on the Contact page), only to operate the Site. We disclose information if legally required.
6. Data retention
Messages and requests you send are kept only as long as needed to correspond with you and meet our records obligations, then deleted. TCPA consent records are retained for at least the period required by law. Hosting logs are retained by our host for a short period. Your cookie-preference flag lives on your own device until you clear it.
7. Your rights & your privacy choices
If you are in the EU/UK (GDPR), you have the right to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent. You may also lodge a complaint with your supervisory authority.
If you are a California resident (CCPA/CPRA), you have the right to know, delete, and correct your personal information, the right to opt out of the sale or sharing of personal information, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising your rights.
Do Not Sell or Share My Personal Information
We do not sell or share your personal information and we do not use sensitive personal information to infer characteristics, so there is nothing to opt out of or limit. We still honor the Global Privacy Control signal automatically. You may exercise any right above by contacting us below, free of charge and without creating an account.
8. How to exercise your rights
Email David@DavidHonda.com with the subject “Privacy Request.” We will verify your request and respond within the timeframes required by law (generally 30 days under GDPR; 45 days under CCPA, extendable once).
9. International transfers, children, changes
Our host operates a global network, so data may be processed in the United States and other countries, with appropriate safeguards such as Standard Contractual Clauses where required. This Site is aimed at adults seeking mortgage information and is not directed at children, and we do not knowingly collect information from children. We review and timestamp this policy at least every 12 months, and in the event of a personal-data breach affecting your rights, we will notify the relevant authority within 72 hours where GDPR requires and affected individuals without undue delay.
10. Contact
David M. Honda · United American Mortgage Corporation · David@DavidHonda.com · (818) 441-2605