How Do We Collect Information via our Online Website, through a Mobile Device or Application?

We collect personal information in a variety of contexts. We may collect personal information:

• Directly from you. You voluntarily provide personal information to us when you apply for our products online, subscribe to communications, email our representatives, create an account, use our mobile app, respond to surveys, participate in contests, sweepstakes, or promotions, provide feedback or engage in other similar activities.
• Automatically and passively when you use our Online Services. We collect device data, online/mobile activity data and other information, including when you visit our websites, download and use our mobile apps, and interact with our online ads.
• Third Party Content and Links From Third parties, including social media sites and apps. Our business partners, service providers, joint marketing partners, and other third parties we work with may provide information about you and your online and mobile activity. We may collect information about you when you interact with our pages, forum, or blogs on social media sites, such as YouTube, Twitter, Instagram, Facebook, and LinkedIn. What each social media site may disclose to us is subject to their privacy policies, terms of use, and the advertising settings.

We may combine and create inferences from the online information we collect with information we collect in other contexts, such as from phone calls, SMS text messages, e-mails, and other written correspondence, and in-person visits to our branches, open houses, or events.

What Information Do We Collect Online?

Information Collected from a PC, Tablet, or Mobile Device. We collect various types of personal information depending on how and to what extent you use our Online Services. When you browse our websites or use our mobile apps via a PC, tablet, mobile or other device, we may actively and passively collect:

• Device data. The types of data we may collect from your device include your device type, device identifiers, web browser type and version, operating systems type and versions, iOS or macOS, MAC ID, MAID ID, display/screen settings, language preferences, documents and photos stored in your device (e.g., to upload requested documents or identification cards we need to perform a service for you), internet protocol address (IP Address), mobile network information, mobile configuration data, general location (e.g., city, state, or country), geolocation/precise location (e.g., latitude/longitude), mobile advertising IDs (e.g. Apple’s IDFA or Google’s Ad ID), which version of our app is installed on your device, ISP or mobile carrier, mobile session ID and events (crash logs, up-time, run-time, and general performance and usage data) connections among different browsers and devices that you use (collectively “Device Data”).
• Important Note Regarding Location Data. When you access our online services or mobile app with your mobile device, location information may be available when your device communicates with a cell tower, Wi-Fi router or access point. Therefore, we may collect general location and geolocation information from the device you use when accessing our Online Services that tells us your approximate physical location. You control our ability to access your mobile location information. Refer to your device user guide and settings regarding how to allow, block, or limit collection of location information. If you choose not to provide location information, some Online Services may not operate correctly or be available to you.
• Online and mobile activity. We may collect your search history, information about how you use and interact with our Online Services or advertisements (such as, content viewed, links clicked, and features used), when and how often you use our Online Services, the webpage from which you clicked a link to visit our Online Services (e.g. referrer URL), browsing behavior within our websites and webpages, use of webtools (ex. Cookies and Pixel Tags), and feedback you may provide (collectively “Online Activity”).

Information We Collect

Our websites and mobile applications may collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). In particular, our websites may have collected the following categories of personal information from consumers since January 1, 2020. Though not all categories apply to an individual, customer or applicant, the summary purposes and uses for the information we collect are also listed.

Personal information does not include:

• Publicly available information from government records.
• De-identified or aggregated consumer information.
• Information excluded from the CCPA’s scope: Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

We do Not Collect or Store Biometric Information via your use of Touch ID, Finger Print, Face ID Authentication Certain devices are eligible for enrollment in Touch ID®, Face ID® or fingerprint login. Fingerprint/Face ID Authentication is an optional authentication method offered to log in to Mobile App. It is available for iOS devices with Touch ID™ capability and Android devices that have compatible Fingerprint/Face ID support (running Android 6.0 or higher). While Fingerprint/Face ID is a biometric recognition feature, designed, released and trademarked by Apple Inc., we do not collect your biometric information nor store biometric information from you. Your Fingerprint/Face ID is stored on your device when you set up your Fingerprint/Face ID enabled device. Apple, the Apple logo, iPhone, iPad, Apple Watch and Touch ID are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. Google Pay and Android is a trademark of Google Inc. Samsung is a registered trademark of Samsung Electronics Co., Ltd.

Information Use

Marketing: Use for "Marketing," as described in the chart above, means contacting you through means other than telephone (for example, email or postal mail) to offer and market to you services or products, including special offers or advertisements, any of which may be tailored to you.

Performing Services: Use for "Performing services" means using information about you to: (1) allow you to participate in the product, features, services we offer or to provide related customer service; (2) process your registration, including to verify that information you provide is valid; (3) process a transaction you initiate; (4) improve the App and our products, and for internal business purposes, including the measurement of the App's functionality and/or effectiveness; and (5) contact you with regard to your use of the App and, in our discretion, changes to our policies.

In addition to the uses described above, to analyze our App, we may use various analytics services, which may independently collect Usage Information, set and access their own tracking technologies, and otherwise collect or have access to non-personally or personally identifiable information about you.

We may also use your information for purposes disclosed at the time you provide your information, or with your consent.

Information Sharing for Legal Purposes

Sharing for "Legal Purposes," as described in the chart above, means we may disclose your information (i) if we are required or permitted to do so by law or legal process, (ii) to law enforcement authorities, or (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity.

In addition to the information sharing described in the chart above, we may also share your information with third parties with your consent or at your request, or as disclosed at the time you provide us with information. We also reserve the right to disclose and transfer your information if our Company goes through a business transition, such as a merger, acquisition by another company, sale of all or a portion of its assets, or other corporate change, including during the course of any due diligence process.

Information Sharing Non-Personal information

We may also share non-personal Information, such as aggregate user statistics (e.g., number of downloads and registrations, and most popular merchants), demographic information and Usage Information, with affiliates and third parties, including advertisers, content providers, and analytics providers.

Third parties may collect non-personal Information when you download or use the App. Some third parties may collect your personal information when you visit the App. We do not control the information collection, use, or sharing practices of third parties, including analytics providers.

Information Sharing with our Affiliates

Our Affiliates offer products and services that may be of interest to you. We may share personal information with our Affiliates to provide information to you about their products and services that may be of interest to you.

Retention and Deletion Practices We retain your information only as long as necessary to provide the products and services for which the information was collected, to process and maintain a record of transactions, and as long as necessary for legal process or to satisfy government retention requirements. To determine whether the data is needed, we consider the reason your data was collected and used and any legal requirements to hold onto your data. We review your data periodically to ensure it is still needed to fulfill the purpose for which it was collected or any other legal requirements. When the retention period expires, we destroy data that was maintained in any form in a manner that renders it completely unusable and incapable of restoration.

Security We take commercially reasonable security measures to help protect your information, both during transmission and once we receive it. However, no method of electronic transmission or method of electronic storage is 100% secure. Therefore, we cannot guarantee the security of any information you submit and you do so at your own initiative and risk.

Consent to Transfer If you are located outside of the United States, please be aware that our products are intended for a United States audience. If you are located outside of the United States, be aware that any information we collect through the Mobile App will be transferred to and processed in the United States. By using the Mobile App or providing us with any information, you fully understand and unambiguously consent to this transfer, processing and storage of your information in the United States, a jurisdiction in which the privacy laws may not be as comprehensive as those in the country where you reside and/or are a citizen.

Online Employment Applicant Information. If you are a Non-California resident and apply for employment online, we may collect personal information about you that includes personal identifier, work history, prior employer information, and education. If you are a California resident and you have inquired about or applied for a job with us, or are a former employee, please refer to our California Applicant Privacy Notice for more information.

Be aware that if you apply and/or disclose any personal information of another while using our Online Services, you represent that you are doing so with their permission, or you otherwise have the authority to do so. By continuing to use our Online Services, you permit us the use of the information in accordance with this Online Privacy Notice and applicable laws. If you do not have permission or authority to provide another’s information, please do not disclose their personal information to us.