Last Updated 09/24/07

Crystal River Capital, Inc. (“Crystal River”) and its affiliates appreciate your concerns about the privacy of personally identifying information (“Personal Information”) that you provide to us through this website, http://www.crystalriverreit.com (the “Site”). Accordingly, Crystal River has posted this Privacy Policy to explain how your Personal Information is used. This Privacy Policy applies only to Personal Information collected through the Site and not to any Personal Information that we may receive or collect offline or through other means.

1. What This Covers
Crystal River collects Personal Information from users who register with the Site or request information through the Site. As a condition of registration or requesting information, users provide their name, address, email address, telephone number, and other information. Crystal River also may collect additional information from visitors to the Site through cookies as detailed below.

Crystal River is the sole owner of information collected through our Site. We do not and will not sell, share, or rent this information to others in ways different from what is disclosed in this Privacy Policy without your consent.

2. To Whom We Disclose the Personal Information:
Crystal River does not share any Personal Information with any third party, except in the following circumstances:

• We may disclose Personal Information when you consent to share your Personal Information or when we need to share your Personal Information to provide a product or service to you, or in order to respond to your inquiries.
• Crystal River may disclose Personal Information within the Crystal River, Brookfield Asset Management Inc. and Hyperion Brookfield Asset Management, Inc. family of companies. Direct access to Personal Information is limited only to those officers, directors, or employees of Crystal River, Brookfield Asset Management Inc., or Hyperion Brookfield Asset Management, Inc. who require access to that Personal Information for legitimate business purposes.
• Crystal River also may disclose Personal Information to unaffiliated third party contractors or service providers to process or service transactions for us or to perform functions for us or on our behalf. Examples include, but are not limited to, technical or computer-related support services or consulting. Those contractors are required to abide by the terms of this Privacy Policy, and, if their functions require the ability to access Personal Information, they may access Personal Information only for the purposes of which they have been retained. They will not disclose Personal Information to any third parties except at our direction, and consistent with this Privacy Policy and applicable law.
• Crystal River also may disclose Personal Information to enforce our rights, to prevent or investigate fraud, illegal activity or misuse of this website, or as may be required by subpoena, court order or other legal process, or as otherwise may be required by law or regulation.

3. Information Collected by Our Computer Systems:
The Company’s computer systems may automatically collect and store information about your Internet connection when you visit this website. This information is not attached in any way to a visitor’s Personal Information. This information includes the following:

• the date and time that you access this Site
• the pages that you visit
• if you linked to this Site from another website, the address of that site
• the type of browser (for example, Netscape 4.0) used to access this Site
• the IP (Internet Protocol) address (an IP address is a number that is automatically assigned to your computer whenever you are surfing the web) from which you access this Site
• the action that you tried to perform (for example, download a document) and whether or not you were successful

4. Use of Cookies:
In order to provide better service, track usage of this Site, and to address security hazards, Crystal River may occasionally use a "cookie." A cookie is a piece of data stored on a website visitor’s hard drive containing information about the visitor. We may use cookies for some administrative purposes; for example, to store your preferences for certain kinds of information or to store a password so that you do not have to input it every time you visit this Site. At no time are these linked to any Personal Information. Once you end your session by closing your browser, your cookie simply terminates.

5. Links
This Privacy Policy does not apply to sites outside of this Site to which this Site may link. We are not responsible for privacy policies of other websites linked to the Site. Please read the privacy statements of those websites to understand how they may use or disclose your Personal Information.

6. Email Alert Subscriptions
All information stored in our database for the purpose of delivering News and Event Alerts is not shared or sold to any third party. Subscribers wishing to unsubscribe from these News and Event Alerts can do so by clicking the ‘unsubscribe’ link on any News and Event Alert received from us.

7. Notification of Changes
We may decide to modify this Privacy Policy from time to time. Any such modifications take effect immediately upon posting for all information collected after the date of modification. For your convenience, we post the last date on which this Privacy Policy was revised at the start of this Privacy Policy. By visiting our Site, you agree to check back periodically to determine whether any changes have been made and consent to be bound by any changes once they are posted. However, we will never rely on a change in this Privacy Policy to permit us to disclose your Personal Information to third parties in a manner not permitted under this Privacy Policy in effect at the time the information was collected without first notifying you of our intent to do so and providing you with the opportunity to object.

8. Contacting Us
If you have any questions about this Privacy Policy, you may contact info@crystalriverreit.com.