Privacy Policy

The public inquiry form collects your full name, phone number, preferred contact method (phone call, text message or email), question or message, and confirmation of contact consent. An email address is optional unless you choose email as your preferred contact method.

This information is collected so Melanie Allison can review and respond to your inquiry using your contact details and preferences. The form is not a mortgage application. Please do not submit Social Security numbers, account numbers, tax returns, bank statements, income documents or other sensitive financial information. It does not accept files or attachments.

Unsubmitted form entries are held only while the current page remains open; this form does not save drafts in browser storage.

Private inquiry storage and access

Submitted inquiries are stored privately in this website’s database, together with consent confirmation and the wording-version identifier, submission time, and inquiry status and review timestamps. Inquiry viewing and management are limited to authorized administrators. Visitor contact details and messages are not displayed on public pages.

How information may be shared

Personal information submitted through this website is not sold.

Information may be used or shared only as reasonably necessary to respond to your inquiry, provide requested mortgage-related assistance, operate and protect the website, maintain appropriate business records, comply with legal or regulatory obligations, or follow your direction or consent.

This may include limited access or processing by Melanie Allison, 21st Century Lending when reasonably necessary to respond to or support a requested mortgage service, and service providers that help host, secure, authenticate or operate the website and its communications.

Information may also be disclosed when reasonably necessary to comply with law, respond to a lawful request, prevent fraud or misuse, protect rights or security, or resolve a dispute.

Retention and deletion

Inquiry information is retained only for as long as reasonably necessary to respond and follow up, maintain appropriate business records, comply with applicable legal or regulatory obligations, resolve disputes, and protect the website and its users.

Technical records used for spam prevention, repeated-request protection and submission receipts expire automatically according to the website’s configured protection periods.

Retention periods may vary depending on the nature of the inquiry and applicable requirements. To ask about information previously submitted through this website or request deletion when legally permitted, contact Melanie using the privacy contact information below. A request may need to be verified, and some information may need to be retained when required or permitted by law.

Generic email notifications

After a new inquiry is saved, the website attempts to send a generic administrator email alert. It includes the received date and time, preferred contact method when available, and a link to the private inbox, which requires administrator sign-in. It intentionally excludes your name, phone number, email address, message and consent information.

Spam and repeated-request protections

The form uses input checks, request-size limits, a hidden spam-check field, short-lived submission verification and limits on repeated requests. Temporary coded identifiers help detect repeated attempts and duplicate submissions without storing the submitted message in the technical protection records.

Where a network address is available to the submission service, it is converted to a keyed, coded identifier. Raw IP addresses are not stored in the inquiry database or its technical protection records. This statement does not describe separate hosting or service logs.

Technical protection records have automatic expiry timestamps: request-limit records expire one hour after their last update and duplicate-request receipts after 24 hours. The cleanup process removes expired technical records; these are separate from the saved inquiry and do not set its retention period.

Administrator sign-in and tracking

Administrator sign-in uses an email address and an emailed one-time code. Account, staff profile, role and session information are used to verify authorized access to private pages. A visitor does not need an administrator account to submit an inquiry.

Website services, security and essential technology

This website uses Lovable Cloud and associated technical infrastructure to host and operate the website, store private inquiry records, authenticate the administrator and protect the submission process.

Technical service providers may process limited information as necessary to provide, secure and maintain their services. Website and security systems may also create technical logs needed for operation, troubleshooting, abuse prevention and security.

Administrator authentication uses essential session technology so the private admin area can remain signed in and secure. The public website does not currently use advertising cookies, advertising trackers or installed visitor analytics.

The inquiry service uses a short-lived verification cookie to protect submissions.

Links to Calendly, the secure loan application, NMLS Consumer Access or other external websites are governed by those services’ own privacy and security practices.

External scheduling and application services

Schedule an Appointment opens Calendly. Apply Now — Secure Application opens the separate 21st Century Lending application website. Information you enter on those services is governed by their own privacy practices, rather than this website’s general inquiry form.

Your privacy questions and requests

Depending on applicable law and the circumstances, you may have rights concerning personal information you submitted, which may include asking to access, correct or delete it.

To submit a privacy question or request, contact:

Melanie Allison
Email: melanie@teamovermoe.com
Phone: 916-705-2192

Requests may need to be verified. Certain information may be retained when required or permitted for legal, regulatory, security or legitimate business purposes.