Last Updated and Effective Date: October 2022

I.  INTRODUCTION TO CHIMERA PRIVACY POLICY

Chimera Investment Corporation (“Chimera”, “we”, “our” or “us”) recognizes that privacy is a concern for our business investors and users of our Website, so we have established the following privacy policy (this “Privacy Policy”). This Privacy Policy describes how Chimera will collect, use, share and store your Personal Information that we collect in connection with your use of our website at www.chimerareit.com (the “Website”). By using the Website or otherwise providing Personal Information to Chimera, you consent to our collection, use, and sharing of the data described in this Privacy Policy.

For purposes of this Privacy Policy, “Personal Information” is information relating to an identified or identifiable individual. For purposes of this Privacy Policy, Personal Information does not include de-identified or aggregated information and, to the extent permitted by law, does not include publicly available information that is lawfully made available to the general public or information that is lawfully made available from government records.

We do not collect other forms of personal information called “sensitive” personal information, which are subject to additional protections.

This Privacy Policy does not apply to (i) Personal Information collected when you apply for a job with Chimera nor to (ii) Personal Information collected as an employee of Chimera. We may provide different or additional notices of our privacy practices with respect to other Personal Information collection practices not within the scope of this Privacy Policy, in which case this Privacy Policy will not apply.

This Privacy Policy forms part of our Terms & Conditions. Any capitalized but undefined term in this Privacy Policy shall have the meaning given to it in the Terms & Conditions.

II.  PERSONAL INFORMATION COLLECTED BY CHIMERA

In order to provide you with the benefits of using our Website, Chimera collects certain information from you and your Devices.

  1. Personal Information that You Provide to Us

We may collect the following limited Personal Information about you, depending on your interactions with us:

  • Contact Information: Contact Information includes your name and email address and other similar information you may provide when you contact us. We may collect your Contact Information when you subscribe to our investor relations email alerts or contact us.
  1. Information Collected from Your Browser or Device

We automatically gather and store certain information about your Website visit from your browser or the computer, mobile phone, tablet or other device (“Device”) you use to access the Website. Such information includes your IP address, browser type, operating system type, length of time on the Website, and how you got to the Website. We may collect this information through the use of server log files and other methods. We, and our service providers, may use this information to administer the Website, help diagnose problems with our servers, and analyze usage trends.

  1. Do Not Track Signals

Certain web browsers may provide an option by which you may request your browser to inform websites you visit that you do not wish your activities to be tracked by cookies or other persistent identifiers, commonly called “Do Not Track” signals. The Website currently does not respond to Do Not Track signals.

III.  HOW WE USE THE INFORMATION WE COLLECT

We may use the Personal Information we collect from you for a variety of business or commercial purposes, such as to:

  • Respond to your inquiries, questions and requests;
  • Send you the investor relations email notifications and alerts for press releases, SEC filings, stock information, financial documents, governance documents or presentations;
  • Communicate with you about your activities on the Website and, in our discretion, changes to any Chimera policy or notice;
  • Operate, improve, maintain, administer and provide the Website;
  • Manage our business, including performing accounting, auditing, and other internal functions;
  • Evaluate and improve our services, conduct research and perform analysis, learn more about our users and customers, and enhance the customer experience, including to better optimize and target our marketing;
  • Comply with applicable laws and regulatory requirements, or as requested by government or regulatory authorities;
  • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity;
  • Protect and defend the rights or property of Chimera; and
  • For other purposes specifically disclosed at the time you provide your Personal Information or otherwise with your consent.

IV.  HOW WE SHARE INFORMATION

We may also share your Personal Information as disclosed at the time you provide your information, as set forth in this Privacy Policy and in the following circumstances:

Third Parties Providing Services On Our Behalf: We may share your Personal Information with other parties that perform functions on our behalf, such as our service providers and vendors that host or operate our Website, store data on our behalf, or provide technical or other processing needs.

Business Transfers: In the event that Chimera is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be sold or transferred as part of that transaction.

Legal Disclosure: We may transfer and disclose your information to third parties to comply with a legal obligation; when we believe in good faith that the law or a governmental authority requires it; to verify or enforce our Terms & Conditions or other applicable policies; to address fraud, security or technical issues; to respond to an emergency; or otherwise to protect our rights or property or security of third parties, visitors to our Website or the public.

We may also share non-Personal Information, such as anonymous information or aggregate data, with third parties.

V.  OPTING-OUT

At any time, you may choose not to receive the investor relations email notifications and alerts from us by (i) selecting the unsubscribe link at the bottom of each email that we send you or (ii) unsubscribing on this webpage. Please note that even if you opt out of receiving the foregoing emails, we may still send you a response when you contact us through investor inquiries.

VI.  CORRECTION AND DELETION OF YOUR CONTACT INFORMATION

If you would like to delete or correct any of your Contact Information that we may have collected about you, you may go to the Manage Email Alerts webpage. Unsubscribing from the investor relations email alerts will delete your associated Contact Information for the alerts.

VII.  RETENTION OF YOUR PERSONAL INFORMATION

We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.

VIII.  EXCLUSIONS

The Website may include links to other websites that we do not own or operate. We do not control, recommend or endorse and are not responsible for these websites or their content, products, services or privacy policies or practices. These other websites may send their own cookies to your Device, they may independently collect data or solicit Personal Information and may or may not have their own published privacy policies. Because Chimera has no control over the privacy practices or content of these linked websites, we recommend that you carefully review the privacy policy of each website you visit.

IX.  CONSENT TO PROCESSING AND TRANSFER OF INFORMATION

This Website is not intended for individuals outside of the United States. If you are located in the European Union, the United Kingdom or elsewhere outside of the United States and access this Website, please be aware that information we collect may be transferred to and processed in the United States.

X.  CHILDREN

The Website is not intended for or directed at children under the age of 13. In addition, we do not knowingly collect Personal Information from children under the age of 13. We also do not knowingly sell, share, use for targeted advertising or disclose the Personal Information of children under the age of 16.

XI.  CHANGES

From time to time, we may update this Privacy Policy. If we do, we will note near the top of this page the date that any changes are made and/or when they become effective. If the changes being made are material, we may alert you to the changes in a more prominent way. By using the Website after these changes are made, you agree to the revised version of the Privacy Policy.

XII.  DISCLOSURES FOR INDIVIDUALS IN CALIFORNIA

This section contains additional information for residents in California regarding our Personal Information handling practices and data privacy rights.

Summary of Prior 12-Month Personal Information Handling Practices

We provide in the chart below a summary of our prior 12-month Personal Information handling practices. You can learn more about the information we collect at or before the point of collection above in the Personal Information Collected By Chimera, How We Use the Information We Collect, and How We Share Information sections.

Category of Personal Information Sources Business or commercial purpose of disclosure and recipients of Personal Information
Identifiers, such as your name and email address. You

Sold for Monetary Consideration or Shared for Cross-Context Behavioral Advertising?

We have not sold your identifiers to third parties for monetary consideration or shared it for cross-context behavioral advertising.

Service Providers

We may have disclosed your identifiers with our service providers who help provide certain services for us, such as web hosting, data platforms, fraud detection services, and other technical and processing needs.

Internet or other electronic network activity information, such as your browser type, and browser ID. Cookies

Sold for Monetary Consideration or Shared for Cross-Context Behavioral Advertising?

We have not sold your identifiers to third parties for monetary consideration or shared it for cross-context behavioral advertising.

Service Providers

We may have disclosed your identifiers with our service providers who help provide certain services for us, such as web hosting, data platforms, fraud detection services, and other technical and processing needs.

Selling or Sharing of Personal Information

We do not sell or share your Personal Information with third parties. We also do not knowingly sell, share, use for cross-context behavioral advertising or disclose the Personal Information of children under the age of 16.

Your Rights

The CPRA affords consumers residing in California certain rights with respect to their Personal Information, subject to certain exceptions. If you reside in California, this section applies to you. Subject to certain limitations you have the following rights in California:

  • (1) Right to Delete. You have the right to request us to delete the Personal Information we have collected about you.
  • (2) Right to Correct. You have the right to request us to correct inaccurate Personal Information we maintain about you.
  • (4) Right to Know and Access. You have the right to know and access the Personal Information we have collected about you, including the categories of Personal Information, the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom we disclose Personal Information, and the specific pieces of Personal Information we have collected about you.
  • (5) Right to Data Portability. You have the right to receive the information under right (4) in a format, to the extent technically feasible, that is portable, usable, and allows you to transmit the Personal Information to a person without impediment, where the processing is carried out by automated means.
  • (6) Rights Related to Sharing for Targeted Advertising or Sale. We do not share your Personal Information for targeted advertising or sell your Personal Information. Please Contact Us below if you have any questions.
  • (7) Rights Related to Sensitive Personal Information or Data. Data privacy laws may provide additional protection for sensitive Personal Information or data. We do not collect your sensitive Personal Information.
  • (8) Right to No Discrimination. You have the right not to be discriminated against for exercising any of your privacy rights. This includes us not: (a) denying you goods or services; (b) charging you different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; (c) providing you a different level or quality of goods or services; and (d) suggesting to you that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

Instructions on How to Exercise Your Privacy Rights

You may exercise your privacy rights by calling our toll-free phone number at 888-895-6557, emailing us at investor-relations@chimerareit.com, or by unsubscribing to email alerts [here]. In some instances, we will need to verify your identity before honoring your privacy right request. We will verify your identity by asking you to provide personal information related to your recent interactions with us, such as your email address. We will honor your privacy rights request within 45 calendar days of receipt, unless we request an extension as permitted by the CPRA.

Authorized Agents

You may exercise your privacy rights through an authorized agent. If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, please Contact Us.

XV.  CONTACT US

If you have any comments or questions regarding this Privacy Policy, please contact us at:

By Postal Mail:
Chimera Investment Corporation
Attention: Investor Relations
630 Fifth Avenue
Suite 2400
New York, NY 10111

By Email:
investor-relations@chimerareit.com