We disclose your Personal Information to 3rd parties for business purposes.

The general categories of 3rd parties that we share with are as follows:

-Our 3rd party service providers that, without their services, our website would not be able to function in its current manner;

-Affiliated websites and businesses in an effort to bring you and our users improved services, products, and offerings;

-Other companies, affiliate partners, and 3rd parties that help us advertise products, services, and offerings to you, other users, and potential new customers;

-Third (3rd) parties to whom you, or an authorized agent on your behalf, authorized us to disclose your Personal Information;

-Third (3rd) parties or affiliates in connection with a corporate transaction, such as a sale, consolidation, or merger of our financial institution or affiliated business; and

-Other third (3rd) parties to comply with legal requirements or to disclose Personal Information to government authorities per the rule of law. In the last 12 months, it is recognized that we have disclosed the aforementioned categories of Personal Information for business purposes.

RIGHT AND CHOICES.

This Section describes your rights and choices regarding how we collect, share, use, and protect your Personal Information, how to exercise those rights, and limits and exceptions to your rights and choices.

a.) Exceptions. The rights and choices in this Section do not apply to you if the information being collected is:

-Aggregate consumer information;

-Deidentified Personal Information; and

-Publicly available information.

b.) Access to Information. If the above exceptions do not apply, and you have not made this request more than twice in a 12-month period, you have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months from the date we receive your request. Once we receive and confirm your request on your behalf, we will disclose it to you or your representative:

-The categories of Personal Information we collect;

-The categories of sources for the Personal Information we collect;

-Our business or commercial purpose for collecting or selling such Personal Information;

-The categories of third parties to whom we sold or disclosed the category of Personal Information for a business or commercial purpose;

-The business or commercial purpose for which we sold or disclosed the category of Personal Information; and

-The specific pieces of Personal Information we collected about you in a form that you can take with you (also called a “Data Portability Request”).

c.) Deletion (Erasure) Request Rights. You have the right to request that we delete any of your Personal Information that we collect from you and retain, subject to certain exceptions. Once we Page 4 receive and verify your request, we will delete and direct our service providers to delete your Personal Information from our records unless an exception applies. We may deny your deletion request if retaining the Personal Information is necessary for us or our service providers to: -Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;

-Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those for such activity;

-Debug to identify and repair errors that impair existing intended functionality;

-Exercise free speech, or exercise another right provided by law;

-Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws when the businesses' deletion of the Personal Information is likely to render impossible or seriously impair the achievement of such research if you previously provided informed consent.

-Enable solely internal and lawful uses of such Personal Information that are compatible with the context in which you provided it.

d.) Exercising Access, Data Portability, and Deletion Rights. To exercise the access, data portability, deletion rights, or any other rights mentioned herein, a consumer or a consumer's authorized agent may submit a verifiable request to us by using the contact details mentioned herein.

e.) Requests. You may only make a verifiable consumer request for access or data portability in relation to this Section. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information is related to you. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided via a verifiable consumer request to verify the requestor's identity or authority to make the request.

f.) Authorized Agent. An authorized agent is any person or legal entity registered with the Secretary of State or similar office that you have authorized to act on your behalf. If a request is made by an authorized agent acting on your behalf, we may require the following:

-Submission of evidence by you with your permission for the authorized agent to submit a verifiable request on your behalf;

-For you to directly acknowledge, via electronic communication, that the authorized agent is allowed to act on your behalf;

-Require the authorized agent to verify their identity; or

-For a power of attorney document to be submitted that is signed in accordance with state law. We reserve the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on your behalf and cannot verify their own identity to us.

g.) Response Timing and Format. As required under privacy laws, we agree to respond to any verifiable consumer request within 45 days of its receipt. If we require more time, with a maximum of 90 days, we will inform you, in writing, of the reason. Such notification will be by e-mail unless there is another preferred communication method provided. Page 5 If applicable, the response we provide will also explain the reasons we cannot comply with a request. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the Personal Information from one entity to another entity without hindrance. No fee will be charged to process or respond to your verifiable consumer request.

h.) Right of Non-Discrimination. We do not discriminate against you for exercising any of your rights in this Privacy Policy and under applicable laws. Unless permitted by law, we will not:

-Deny you goods or services;

-Charge you different prices or rates for goods, services, and offerings, including through granting discounts or other benefits, imposing penalties; or

-Provide you with a different level of quality of goods or services.

CHANGES AND AMENDMENTS.

We reserve the right to amend this Privacy Policy at our discretion and at any time. When we make changes to this Privacy Policy, we agree to notify you by e-mail or other preferred communication methods.

LINKING TO 3RD PARTIES.

We may provide links to 3rd party sources such as websites, applications, content, or software (“3rd Parties”). When you use a link online to visit 3rd Parties, you will be subject to their privacy policy and the jurisdiction of governing law. It is recommended to familiarize yourself with its terms and disclosures regarding your Personal Information. We are not responsible for the handling of your Personal Information when using, accessing, or visiting 3rd Parties.

SECURITY & PROTECTION.

We use reasonable physical, electronic, and procedural safeguards that comply with federal standards to protect and limit access to Personal Information. This includes device safeguards used in accordance with industry standards. It is understood by you that the Personal Information you submit to us electronically may not be secure when it is transmitted to us. Specifically, we recommend that you do not use unsecured or public channels to communicate sensitive or confidential information.

CONTACT.

If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Information, your choices, or your rights regarding such use, or wish to exercise your rights, please do not hesitate to contact us by using the details mentioned in this Privacy Policy