Privacy Policy

1. Who this policy covers

This Privacy Policy describes the current practices for the MRC Capital Partners, LLC (“MRC”) public website and its guided business-purpose financing inquiry tool, Debbie. It covers visitors, individuals communicating with MRC, and people submitting business or investment financing opportunities. It should be read with our Terms & Conditions and more detailed Data Use Policy.

It does not purport to describe every information practice in a later, separate underwriting, financing, investor, servicing or other contractual relationship. If such a relationship progresses, additional privacy notices and secure document-handling procedures may apply.

2. Information you choose to provide

When you contact MRC by email or phone, you may provide your name, company, contact details and communications. When you use Debbie to submit an opportunity, the details can include your role, borrowing entity, contact name, email address, telephone number, financing strategy, property city and state, requested amount, acquisition basis, construction or rehabilitation budget, proposed value, project stage, sponsor experience, timing, exit strategy and other transaction information you choose to supply.

A successful Debbie submission also produces a structured conversation transcript, derived leverage calculations, an opportunity reference and an internal review record. MRC personnel may later add assignment, status, follow-up notes and activity history as part of their review.

Do not provide Social Security numbers, passwords, bank account credentials, driver's licenses, tax returns, credit reports or other sensitive underwriting records in Debbie or through unrequested ordinary email. The initial website workflow is not designed to collect those materials.

3. Technical and usage information

As with many websites, the hosting and security infrastructure may process details needed to receive and respond to requests, including IP address, date and time, page requested, referring information where available, user agent or browser details, error and response codes, and security event data. Server-side sessions or similar essential technologies may also be used for security, the protected administrative portal and Debbie request protection.

The current public site uses externally hosted Google Fonts, so a visitor's browser may connect to Google to retrieve typography. The Site does not currently deploy advertising pixels, a third-party behavioral advertising network, or a general-purpose third-party analytics tag. That statement describes the website configuration at the date shown above, not every technology that might be introduced in the future.

4. Why information is used

Depending on the context, information is used to deliver and secure the Site; organize, validate and evaluate business-purpose financing inquiries; calculate indicative transaction ratios; communicate about a request you initiated; route and document internal review; protect against suspected fraud and misuse; support troubleshooting and continuity; and address legal, regulatory or recordkeeping needs.

Submitting a financing inquiry does not automatically sign you up for general advertising or marketing messages. Business follow-up relating to your own inquiry is distinct from a separate promotional subscription or legally required marketing consent.

5. How Debbie inquiries are handled

Debbie guides an initial conversation in the visitor's browser. Information is sent to MRC's website application when a visitor intentionally submits the opportunity. The server validates fields, prepares a transcript and applicable indicative calculations, assigns a reference, and records the submitted opportunity in a database protected from direct public website access.

Authorized MRC administrators can review the information through a protected administrative area as part of opportunity management. Debbie is implemented as a website workflow; as currently deployed, it does not transmit the conversation to a third-party generative-AI service. It is not a substitute for a personal review by an MRC representative. More workflow details appear in our Data Use Policy.

6. When information may be disclosed

Information may be accessible to authorized MRC personnel and to service providers supporting website hosting, data storage, security, maintenance or business communications, according to their functions and applicable arrangements. If an inquiry advances, relevant information may need to be shared with appropriate counterparties, professional advisers, diligence providers or other authorized participants in the transaction, subject to applicable requirements and further communications.

Information may also need to be disclosed when required by lawful process, applicable regulatory obligations, or to investigate and address fraud, security incidents or threats to rights and safety. MRC does not operate a public marketplace selling Debbie submissions through this website. This policy does not assert that every category of disclosure or sharing is prohibited in a future, separately documented business transaction.

7. Cookies, sessions and browser controls

Session-related browser technologies may be necessary to maintain request security and protected portal functionality. Debbie's in-progress conversation is managed in the browser before an intentional submission; you should not assume that unfinished answers are securely backed up or available after closing the tool, reloading or leaving the page. Submitted inquiries are handled as described above.

Browser settings may let you delete or block cookies or site data, but blocking essential functionality can interrupt the portal or inquiry process. The current Site is not designed around cross-site behavioral advertising, and a browser “Do Not Track” preference may not affect essential operational traffic. If the Site later adds nonessential tracking or analytics, the associated disclosures and any legally required consent controls must be reviewed and updated first.

8. Information security

The website uses measures intended to restrict access to submitted opportunity records and protect information in transit and at rest where applicable, including HTTPS for the public site, a protected administrative area, and keeping the opportunity database outside publicly served website files. MRC and its technical service providers also maintain operational and access controls relevant to their responsibilities.

Security is an ongoing process, not an absolute guarantee. No system can promise complete protection against loss, unauthorized access or interruption. Do not send sensitive identity or account materials unless you are directed to a separately approved secure channel.

9. Retention and disposal

Submitted opportunities and related internal records may be retained while they are needed to review and follow up on an inquiry, administer business records, manage disputes, and address legitimate legal, security or compliance obligations. Hosting and security logs and operational backups may have different lifecycles.

A single fixed retention period for every class of website data is not stated here. The duration depends on the category of record and applicable requirements. Requests for review, correction or deletion can be made through the contact method below and will be evaluated based on applicable law, identity verification, recordkeeping needs and technical feasibility. Closing Debbie does not by itself delete an opportunity already submitted.

10. Privacy requests and choices

You may ask about personal information you supplied, request that clearly inaccurate details be corrected, or request access to or deletion of information where available under applicable law. MRC may need to verify your identity or authority, clarify your request, and retain records where legally necessary. The Site does not offer a self-service public borrower account or automatic data-deletion control.

Send privacy inquiries through MRC's contact page and indicate that your message concerns privacy or website data. Do not send identity documentation through ordinary email unless MRC provides an approved secure method. Rights and response obligations vary based on applicable state or federal law and the relationship involved.

11. Children and minors

This business-purpose lending website is intended for adults acting in a professional or investment capacity and is not directed to children. Please do not use Debbie or another site feature to submit personal information about a minor unless a separately authorized process specifically requires it.

12. Updates and contact

Website features, vendors and information handling may evolve. MRC may revise this policy to reflect material changes in practice, operational needs and applicable law. The “Last updated” date identifies the most recent published version; any additional notice required by law will be handled separately.

Questions about data handling, privacy or an accessible alternative to this policy can be submitted using the telephone number or email listed on the official MRC contact page. Please also review our Data Use Policy for a more detailed breakdown of current website information flows.