Effective date: August 12, 2026

1. Scope and Company

This Privacy Policy explains how Blue Harbor Asset Group LLC (“Blue Harbor,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information through blueharborassetgroup.com, our contact forms, telephone and text communications, and inquiries or services relating to unclaimed property or surplus funds.

Blue Harbor is a private company and is not affiliated with the California State Controller’s Office, any county, court, tax collector, foreclosure trustee, or other government agency.

2. Information We Collect

Information you provide directly may include your name, email address, telephone number, mailing address, communication preferences, inquiry details, property or claim-related information, documents you choose to provide through an approved method, and records of your communications and authorizations.

Information collected automatically may include your Internet Protocol address, browser and device type, operating system, referring page, pages viewed, dates and times of visits, approximate location derived from an IP address, cookie or similar-technology identifiers, and security or error logs.

We may also obtain information from lawfully available public records, government records, county records, court records, foreclosure trustees, property records, and information supplied by authorized representatives or service providers.

Please do not submit Social Security numbers, government identification, banking information, passwords, or other highly sensitive records through our general website contact form. If sensitive information is reasonably necessary for an eligible matter, we will provide instructions for an approved method.

3. How We Use Information

We may use personal information to respond to inquiries; conduct an initial records review; identify the type and possible location of funds; determine whether we may lawfully offer assistance; communicate about consultations, appointments, documents, and authorized services; prepare or support permitted administrative claim activity; maintain records of disclosures, agreements, authorizations, consent, and opt-out requests; prevent fraud and protect security; comply with legal obligations; establish or defend legal claims; and operate, analyze, and improve the Website and our services.

Submitting information does not establish ownership, eligibility, or a client relationship. The office holding the funds determines eligibility, priority, approval, distribution, and payment.

4. Sources of Information

We may collect information directly from you; from a person you authorize; from public, government, county, trustee, property, or court records; from service providers that operate our Website, forms, customer-relationship system, communications, security, and analytics; and from your interactions with our messages and Website.

5. How We Disclose Information

We may disclose personal information to service providers that host or operate the Website, forms, customer-relationship management, email, telephone, text messaging, security, data storage, and analytics; to attorneys and other professional advisers when review or representation is requested or reasonably necessary; to the State Controller’s Office, counties, courts, tax collectors, trustees, or other offices when authorized and necessary for an eligible matter; to prevent fraud or protect rights and security; when required by law, subpoena, court order, or lawful government request; or as part of a merger, financing, reorganization, or transfer of the business, subject to appropriate protections.

We do not sell personal information. Based on our current practices, we do not share personal information for cross-context behavioral advertising.

No mobile information will be shared with third parties or affiliates for their own marketing or promotional purposes. We may provide information to service providers that help operate our messaging program solely to perform those services. Text-message originator opt-in data and consent will not be sold or shared with unaffiliated third parties for their own marketing.

6. Cookies, Security Tools, and Analytics

The Website may use cookies and similar technologies that are necessary for site operation, form functionality, preferences, security, fraud prevention, performance, and analytics. Our current providers may include Excess Elite or LeadConnector for website, form, customer-relationship, and communication functions; Cloudflare for security and website analytics; and Google reCAPTCHA for fraud and abuse prevention. These providers may process device, usage, and network information under their own privacy terms.

You can adjust browser settings to block or delete cookies, but some Website functions may not operate correctly. We do not currently respond to browser “Do Not Track” signals because there is no uniform industry standard for those signals. We do not knowingly permit third parties to collect personally identifiable information through our Website over time and across unrelated websites for their own targeted advertising. Some security and infrastructure providers may collect device or usage information as described in their own policies.

7. Calls, Text Messages, and Email

Providing a telephone number does not by itself enroll you in marketing messages. If you separately and affirmatively opt in, we may send the categories of messages described in the consent language presented to you. Consent to marketing messages is not a condition of purchasing or receiving services. Message frequency varies, and message and data rates may apply.

You may revoke text-message consent at any time by replying STOP, QUIT, END, REVOKE, OPT OUT, CANCEL, or UNSUBSCRIBE, or by another reasonable method that clearly communicates your request. We may send one non-promotional confirmation message. For help, reply HELP, call (866) 954-2466, or email [email protected].

You may opt out of marketing email by using the unsubscribe mechanism in the message or contacting us. Service-related communications may continue when permitted and reasonably necessary for a requested matter.

8. Retention

We retain personal information only as reasonably necessary for the purposes described in this Policy and to comply with legal, contractual, accounting, fraud-prevention, and dispute-resolution requirements. As a general practice, we may retain inquiries that do not become service matters for up to three years after the last interaction; service and claim records for up to seven years after the matter closes, unless a longer period is required; consent and do-not-call or opt-out records for at least five years; and technical logs and analytics according to operational need and provider settings, generally for no longer than twenty-four months. We may retain limited information longer when reasonably necessary to comply with law, preserve legal rights, or prevent unwanted communications.

9. Your Choices and Requests

You may ask to access, correct, or delete personal information you provided to us, subject to identity verification and legal exceptions, by emailing [email protected] or calling (866) 954-2466. We may retain information necessary to comply with law, complete an authorized matter, protect security, resolve disputes, or document an opt-out request.

If Blue Harbor becomes subject to the California Consumer Privacy Act, California residents will receive all rights and disclosures required by that law, including applicable rights to know, correct, delete, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service. Blue Harbor will not discriminate against a consumer for exercising an applicable privacy right.

10. Security

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the information. No Internet transmission or storage system is completely secure, and we cannot guarantee absolute security. Use only an approved secure method when we request sensitive documentation.

11. Children

The Website and our services are not directed to children under 18, and we do not knowingly collect personal information from children through the Website. If you believe a child has provided personal information, contact us so we can review and delete it when appropriate.

12. Third-Party Links

The Website may link to government or third-party websites. Their privacy and security practices are governed by their own policies, not this Policy.

13. Changes to This Policy

We may update this Policy prospectively. We will post the revised Policy and effective date on this page and may provide an additional notice when a change is material.

14. Contact Us

Blue Harbor Asset Group LLC

117 Bernal Rd STE 70 Unit 629

San Jose, California 95119

Email: [email protected]

Phone: (866) 954-2466