Privacy Policy

Last updated: January 6, 2026.

1. Introduction.  At Idaho Housing and Finance Association (“IHFA,” “we,” “our,” or “us”), your trust means everything to us. We’re dedicated to handling your information with care. Please take a moment to read this policy—it explains how we collect, use, protect, and share your data when you visit our website located at www.idahohousing.com (our “Website”).

This policy covers the information we gather on this Website. It doesn’t apply to data collected offline, through other methods, or on other sites run by us or third parties (including our affiliates). It also doesn’t cover information from third parties, even if their content or apps link to or appear on our Website.

If you don’t agree with our policies or our Terms of Use, please do not use the Website. By visiting or using our Website, you agree to this policy and our Terms of Use. We might update this policy occasionally, so check back now and then.

2. Jurisdiction-Specific Information.  Head to Section 8 for details on your rights under your state’s privacy laws. If you live in California, we’ve got a special Supplemental Notice for you at the end.

3. What Info We Collect and How. We gather several types of information from Website users, such as:

• Personal details like your name, address, email, phone number, or anything else that could identify you.
• Non-identifying information about you.
• Details about your internet setup, device, and how you use the Website.

We collect this information:

• Directly from you when you provide it to us.
• Automatically as you navigate the Website. Information collected automatically may include usage details, IP addresses, and information collected through cookies, web beacons, and other tracking technologies.
• From third parties, for example, our business partners.

3.1 Information You Provide to Us.  This includes information that you enter into forms or in the emails you send us.

3.2 Information Through Automatic Means.  As you navigate through and interact with our Website, we may use automatic data collection technologies to gather certain information about your equipment, browsing actions, and patterns, including:

• Details of your visits to our Website, including traffic data, location data, logs, and other communication data and the resources that you access and use on the Website.
• Information about your computer and internet connection, including your IP address, operating system, and browser type.

The information we collect automatically may include personal information, or we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and to deliver a better and more personalized service, including by enabling us to:

• Estimate our audience size and usage patterns.
• Store information about your preferences, allowing us to customize our Website according to your individual interests.
• Speed up your searches.
• Recognize you when you return to our Website.
• Improve the navigation and usability of our Website.
• Enhance the overall user experience.
• Inform you of other services available from IHFA or its affiliates, including contacting you via surveys to conduct research about your opinion of current services or of potential new services that may be offered.

The technologies we use for this automatic data collection include:

• Cookies.  A cookie is a small file placed on the hard drive of your computer. We use both session and persistent cookies. Session cookies are cookies that disappear from your computer or browser when you turn off your computer. Persistent cookies stay on your computer even after you have turned it off.  The cookies on our Website fall into three categories: (1) Strictly Necessary Cookies, (2) Performance/Analytics Cookies, and (3) Functional Cookies. Strictly Necessary Cookies are required to run the Website, keep it secure, prevent fraud, enable load balancing, and store your privacy choices. These cookies do not track you across websites and cannot be turned off in our systems. Performance/Analytics Cookies help us understand how the Website is used so we can improve performance and user experience. Last, Functional Cookies enable enhanced functionality and personalization, such as remembering preferences (e.g., language or region) and enabling media features. You may refuse to accept cookies by activating the appropriate setting on your browser. However, if you select this setting, then you may be unable to access certain parts of our Website. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.
• Web Beacons. Pages of our Website may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity) or gather data about your use of our Website, your account, and how you interact with emails that we have sent to you. Additionally, we may put web beacons in marketing emails that notify us when you click on a link in the email that directs you to our Website. We use web beacons to operate and improve our Website and email communications to you.
• Google Analytics. We use Google Analytics to receive and record the following information from every site visitor’s browser: IP address, browser type, referrer page, domain name, access time, entry page, exit page, operating system type, and search engine keywords used. Google Analytics uses a first party cookie and JavaScript code to collect visitor site usage data, including a user’s interaction and activity on the Website. This information is collected in an aggregate and anonymized form such that it cannot be easily manipulated to identify any particular individual user. 

3.3 Information Through Third Parties.  Some content or applications on the Website are served by third parties, which may include advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Website. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.  We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, please reach out to those third parties with your questions.

3.4 Third-Party Websites. Links to and from third-party websites are provided for your convenience only. Links to information on sites other than those operated by or on behalf of the Idaho Housing and Finance Association are for your convenience only and are not an endorsement or recommendation of those sites. We make no representations and no warranties of any kind with respect to those sites or their content. We do not endorse and are not responsible for the accuracy or reliability of such content or information, and any use is at your own risk.  Certain organizations may choose to link this Website to their own website. Such linkage is not meant to imply that we agree with or support the content such sites may contain.

4. How We Use Your Data. We use information that we collect about you or that you provide to us, including any personal information:

• To present our Website and its contents to you.
• To provide you with information, products, or services that you request from us.
• To contact you about goods and services that may be of interest to you.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us.
• To notify you about changes to our Website or any products or services we offer or provide though it.
• To allow you to participate in interactive features on our Website.
• To fulfill any other purpose for which you provide it.
• In any other way we may describe when you provide the information.

5. Sharing Your Information. We may disclose aggregated, non-identifying information about you without restriction.  We may also disclose personal information that we collect or you provide as described in policy:

• To our subsidiaries and affiliates.
• To contractors, service providers, and other third parties we use to support our business.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of IHFA’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by IHFA about our Website users is among the assets transferred.
• To fulfill the purpose for which you provide it.
• For any other purpose disclosed by us when you provide the information.

We may also disclose your personal information:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our Terms of Use or other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of IHFA, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

6.  Your Choices. 

• Tracking Technologies and Advertising.  We and our selected partners use common information-gathering tools such as cookies, web beacons, pixels and other similar tracking technologies to automatically collect information as you navigate our Website, or when you interact with emails, texts or other electronic communications sent by us to you.  We use cookies and similar technologies to make our Website work, improve performance, and personalize content and ads.  When you click “Accept All,” you consent to non‑essential cookies. By clicking “Reject Non‑Essential,” you consent to using only strictly necessary cookies. You can also set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, then please note that some parts of this Website may then be inaccessible or not function properly.
• Network Advertising Initiative. Some of our selected partners may process personal information obtained from cookies and similar technologies for targeted advertising. Under certain U.S. state laws, this may be considered a “sale” or “sharing” of personal information. We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s website. Residents of certain states may have additional personal information rights and choices. Please see Section 8, Your State Privacy Rights, for more information.
• Do Not Track.  Some browsers allow a “Do Not Track” (DNT) setting that requests that a web application disable its tracking of an individual user. When you choose to turn on the DNT setting in your browser, your browser will send a special signal to websites, analytics companies, ad networks, plug-in providers, and other web services you encounter while browsing and stop tracking your activity. Please note that we do not currently have the functionality to handle DNT requests. This means that even if you have enabled the DNT feature in your browser, we may still collect and store anonymous data for analytics purposes.
• Promotional Offers. Don’t want promo emails? Please contact us using links on our contact page to opt out, or use the “unsubscribe” function in the emails.

7. Updating Your Information.  You can update your personal information by contacting us at our contact page. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

8. Your State Privacy Rights.  Your state consumer privacy laws may provide you with additional rights regarding your personal information.  The exact applicability and scope of these rights may vary by state.  To inquire about any of these rights, please contact us at our contact page. If you’re a resident of California, then please see our Supplemental Notice for California Residents located at the end of this policy.  

9. Data Storage and Security. We take reasonable physical and electronic measures to protect your personal information from accidental loss and from unauthorized access, disclosure, alteration, or destruction. For example, we store your personal information on computer systems with limited access, located in controlled facilities, protected through industry standard encryption technologies. Unfortunately, no transmission over the Internet can be guaranteed to be completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Personal information collected on this Website may be stored and processed in the United States or any other country in which we or our affiliates, subsidiaries or agents maintain facilities.  By using this Website, you consent to any such transfer of information outside of your country.  We abide by the safe harbor framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of data from the European Union.

10. Children’s Privacy.

Our Website is designed for users who are 16 years old and older. We do not knowingly collect personal information from users under the age of 16. If we learn that we have collected or received personal information from a user under the age of 16 without verification of parental consent, then we will delete that information.

11. Text Messaging.

By opting in to receive text message communications from HomeLoanServ, a servicer of Idaho Housing and Finance and Association, you consent to receive messages at the mobile number you provide. These messages are strictly limited to regulated purposes, including payment reminders and pre-default payment notifications, to help borrowers stay on track with their mortgage obligations. Message frequency may vary. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.  Your consent is not a condition of receiving any services or completing your mortgage application. Idaho Housing and Finance Association will not sell, share, or disclose your personal information to third parties for marketing or any other non-regulated purposes. Text messaging will never be used for promotional or unrelated communications.  You may opt out of text message communications at any time by replying STOP to any message you receive or by contacting our customer service team at 800-526-7145 or support@ homeloanserv.com. 

12. Policy Changes. We reserve the right to update this Privacy Policy from time to time. We will notify you of any changes by updating the effective date on this page. You are responsible for periodically reviewing this policy.

13. Contact Us. Questions or concerns? Please do not hesitate to contact us via our contact page. We value your feedback and will respond promptly to any inquiries. If you need to provide us with sensitive information, such as your bank account, charge card, or social security number, please use our contact page to ask for the best contact method.

14. Accessibility. Our Website uses industry-standard technologies and was developed in line with the World Wide Web Consortium’s (W3C) Web Content Accessibility Guidelines 2.2 (WCAG 2.2) at the AA level.If you wish to print this policy, then please do so from your web browser or by saving the page as a PDF.

15. Supplemental Notice for California Residents. This Supplemental Notice for California Residents only applies to our processing of data about California residents.  This policy was last reviewed on December 18, 2025.

15.1 Do Not Track.  We do not support the DNT browser setting or respond to DNT signals. For more details about DNT, including how to enable or disable this preference, visit https://termsfeed.com/do-not-track.

15.2 Your Rights. The California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act (“CPRA”) (collectively, “CCPA”), provides California residents with specific rights regarding their personal information.  Personal information does not include deidentified or aggregate consumer information (Cal. Civ. Code § 1798.140(v)(2), (3)). 

If you are a California resident, then you have the right to:

• Limit sensitive personal information (SPI) use and disclosure for Non-Permitted SPI Purposes (Cal. Civ. Code § 1798.121; Cal. Code Regs. tit. 11, § 7027).
• Opt-out of personal information sales and sharing (Cal. Civ. Code § 1798.120).
• Know what personal information we collect about you and how we use and share it (Cal. Civ. Code §§ 1798.110 and 1789.115).
• Correct inaccurate personal information (Cal. Civ. Code § 1798.106).
• Equal treatment that prohibits us from discriminating against you for exercising your rights (Cal. Civ. Code § 1798.125).
• Delete personal information (Cal. Civ. Code § 1798.105).

(Cal. Civ. Code §§ 1798.100(a) and 1798.130; Cal. Code Regs. Tit. 11, § 7011(e)(2)).

15.3 Consumer Requests. You may submit a verifiable consumer request to us to exercise any of these rights by contacting us at our contact page. We will process such requests in accordance with applicable laws. To protect your and others’ privacy, we will take steps to verify your identity before fulfilling your request. When you make a request, we will ask you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. We verify consumer requests by matching personal information that you provide with information in our possession, in order to confirm your identity. Any additional information you provide will be used only to verify your identity and not for any other purpose.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may designate an authorized agent to make requests on your behalf. You must provide an authorized agent written permission to submit a request on your behalf, and we may require that you verify your identity directly with us. Alternatively, an authorized agent that has been provided power of attorney under Probate Code sections 4000-4465 may submit a request on your behalf. To designate an authorized agent, please contact us at our contact page.

15.4 “Sales” or “Sharing” of Information. We may “sell” or “share” personal information through the use of analytics-related cookies and pixels on our website. You may adjust your cookie preferences on your device or remove them by adjusting your browser or devices preferences, as they permit, and you may exercise your opt-out right by contacting us at our contact page to request that we do not collect or use your personal information for behavioral advertising.

SPI is a subtype of personal information consisting of specific information categories. While we collect information that falls within the sensitive personal information categories listed in the table below, the CCPA does not treat this information as sensitive because we do not collect or use it to infer characteristics about a person. We only use SPI for Permitted SPI Purposes.  Permitted SPI Purposes include:

• Perform services or provide goods that an average consumer requesting those goods or services would reasonably expect.
• To prevent, detect, and investigate security incidents compromising personal information.
• To resist malicious, deceptive, fraudulent, or illegal actions directed at our business and to prosecute those responsible for those actions.
• To ensure individuals’ physical safety.
• For short-term, transient use, including, but not limited to, non-personalized advertising shown as part of your current interaction with us. In doing so, we do not disclose SPI to another third party or use it to build a profile about you or otherwise alter your experience outside your current interaction with us.
• To perform services for the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services for the business.
• For products, services, or devices that the business owns, manufactures (directly or indirectly), or controls, to verify or maintain the quality or safety of the product, service, or device; or improve, upgrade, or enhance the service or device.
• For other purposes that do not infer characteristics about a consumer.

The categories of sources from which we collect personal information are set forth below.  We do not collect personal information regarding characteristics of protected classifications under California or United States federal law, such as race, national origin, religion, gender, or sexual orientation, or biometric information such as fingerprints, faceprints, voiceprints, sleep, health or exercise data.

Category of Personal Information Collected by Us	Category of Third Parties Information is Disclosed to for a Business Purpose	Category of Third Parties Information is “Sold to” or “Shared”
Identifiers A real name, alias, postal address, online identifier, Internet Protocol address, email address, or other similar identifiers.	Data storage and hosting providers Business operations, communications, and collaboration tools Sales and marketing tools Internet Service Providers Product infrastructure tools	Advertising networks and providers Analytics providers
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) Education, employment or employment history, credit card number, debit card number, or any other financial information.	Data storage and hosting providers Business operations, communications, and collaboration tools Sales and marketing tools Internet Service Providers Product infrastructure tools	Advertising networks and providers Analytics providers
Internet or other electronic network activity Browsing history, search history, information on a consumer’s interaction with an internet website, application, or advertisement.	Data storage and hosting providers Business operations, communications, and collaboration tools Sales and marketing tools Internet Service Providers Product infrastructure tools	Advertising networks and providers Analytics providers
Geolocation data Physical location or movements.	Data storage and hosting providers Business operations, communications, and collaboration tools Sales and marketing tools Internet Service Providers Product infrastructure tools	Advertising networks and providers Analytics providers
Inferences Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Data storage and hosting providers Business operations, communications, and collaboration tools Sales and marketing tools Internet Service Providers Product infrastructure tools	Advertising networks and providers Analytics providers