Online Privacy Policy

Your privacy is important to us. This Online Privacy Policy explains how we collect, share, use, and protect information when you visit or use this online service and any other online services offered by Rolling F Credit Union (RFCU). This Policy covers RFCUs online services, including the RFCU website, RFCU Online & Mobile Banking, and RFCU branded social media sites or pages, as well as any interactions you may have while viewing content provided through one of RFCU’s digital advertising campaigns.

As you review this Online Privacy Policy, here are a few general principles to keep in mind:

• Our online services are intended for a U.S. audience. If you visit or use one of our online services, your information will be processed in the United States.

• Our online services are not intended for children under 13. We do not knowingly collect personal information from children under 13 without parental consent.

• If you have a financial product or service with us, we will use and share any information that we collect from or about you in accordance with our Federal Privacy and California Privacy Notices, which offer you certain choices with respect to the use and sharing of your personal information.

• RFCU Online & Mobile Banking and our social media sites or pages may have additional terms from this Policy about the privacy of your information. Please review the Privacy Policy for the specific online service you are using.

When you visit or use our online services, we may collect personal information from or about you such as your name, email address, mailing address, telephone number(s), account numbers, limited location information (for example, a zip code to help you find a nearby ATM), username and password. We may also collect payment card information, social security numbers, driver’s license numbers (or comparable) when you provide such information while using our online services and where we believe it is reasonably required for ordinary business purposes.

In addition to the personal information described above, we may collect certain information about your use of our online services. For example, we may capture the IP address of the device you use to connect to the online service, the type of operating system and browser you use, and information about the site you came from, the parts of our online service you access, and the site you visit next. We or our third-party partners may also use cookies, web beacons or other technologies to collect and store other information about your visit to, or use of, our online services. In addition, we may later associate the usage and other information we collect online with personal information about you.

If you are just visiting our website and not transacting with us online, you may browse our site anonymously. The Credit Union will not ask for personal information from you unless you initiate an application that requires us to begin and complete your request. We do gather data that is not personally identifiable to you to track website usage, such as number of hits, pages visited, and the length of user sessions in order to evaluate the usefulness of our site.

For your convenience, RFCU offers you the ability to access some of our products and services through mobile applications and mobile-optimized websites (“RFCU Online & Mobile Banking”). When you interact with us through RFCU Online & Mobile Banking, we may collect information such as unique device identifiers for your mobile device, your screen resolution and other device settings, information about your location, and analytical information about how you use your mobile device. We may ask your permission before collecting certain information (such as precise geo-location information) through RFCU Online & Mobile Banking.

We may also collect information about you from additional online and offline sources including from co-branded partner sites or commercially available third-party sources, such as credit reporting agencies. We may combine this information with the personal and other information we have collected about you under this Online Privacy Policy.

We use the information discussed above in several ways, such as:

• Processing applications and transactions
• Verifying your identity (such as when you access your account information)
• Preventing fraud and enhancing the security of your account or our online services
• Responding to your requests and communicating with you
• Managing your preferences
• Performing analytics concerning your use of our online services, including your responses to our emails and the pages and advertisements you view
• Providing you tailored content and marketing messages
• Operating, evaluating, and improving our business (including developing new products and services; improving existing products and services; performing data analytics;and performing accounting, auditing, and other internal functions)
• Complying with and enforcing applicable legal requirements, relevant industry standards, contractual obligations, and our policies
• For any other purposes that we may specifically disclose at the time you provide, or we collect your information

We may also use data that we collect on an aggregate or anonymous basis (such that it does not identify any individual customers) for various business purposes, where permissible under applicable laws and regulations.

We disclose personal information with third parties only as permitted by law in connection with the administration, processing, or servicing of accounts. We do not disclose personal information to third-parties or make available, any personal information about your online activities over time and across different web sites when you use our Site.

We will not share your personally identifiable information with third parties except as permitted by law to those third-party persons or entities that perform services for us on your behalf. This may include disclosure to a credit reporting agency or in response to a subpoena or other legal process; disclosure to protect against fraud, or as part of an audit or examination.

We, or our service providers, and other companies we work with may deploy and use cookies, web beacons, local shared objects, and other tracking technologies for various purposes, such as fraud prevention and monitoring our advertising and marketing campaign performance.

Some of these tracking tools may detect characteristics or settings of the specific device you use to access our online services.

“Cookies” are small amounts of data a website can send to a visitor’s web browser. They are often stored on the device you are using to help track your areas of interest. Cookies may also enable us or our service providers and other companies we work with to relate your use of our online services over time to customize your experience. Most web browsers allow you to adjust your browser settings to decline or delete cookies but doing so may degrade your experience with our online services.

Clear GIFs, pixel tags or web beacons—which are typically one-pixel, transparent images located on a webpage or in an email or other message—or similar technologies may be used on our sites and in some of our digital communications (such as email or other marketing messages). They may also be used when you are served advertisements, or you otherwise interact with advertisements outside of our online services. These are principally used to help recognize users, assess traffic patterns, and measure site or campaign engagement.

Local Shared Objects, sometimes referred to as “flash cookies” may be stored on your hard drive using a media player or other software installed on your device. Local Shared Objects are similar to cookies in terms of their operation but may not be managed in your browser in the same way. For more information on managing Local Shared Objects, click here.

RFCU does not respond to “Do Not Track” signals.

RFCU and third-party vendors use cookies to inform, optimize and provide advertisements based on a visitor’s past visits to our website. As you use our website, we obtain information that we use for targeted messaging as you browse the Internet. For example, our remarking campaigns with Google AdWords display content specific advertisements to visitors of our website when those visitors go to other websites that provideads through Google. We also participate in remarketing and retargeting campaigns with otherbusinesses and vendors. Importantly, we do not share personally identifiable information withGoogle, other businesses, or third-party vendors. For example, we do not collect or share your name, contact information, account information or any other membership information.

You will see advertisements when you use many of our online services. These advertisements may be for our own products or services (including pre-screened offers of credit) or for products and services offered by third parties. Which advertisements you see is often determined using the information we or our affiliates, service providers and other companies that we work with have about you, including information about your relationships with us (e.g., types of accounts held, transactional information, location of banking activity). To that end, where permitted by applicable law, we may share with others the information we collect from and about you.

Online behavioral advertising (also known as “OBA” or “interest-based advertising”) refers to the practice of collecting information from a computer or device regarding a visitor’s webbrowsing activities across non-affiliated websites over time to deliver advertisements that may be of interest to that visitor based on their browsing history. Through OBA, we hope to deliver advertisements that are most likely to be of interest to you using information about your other web-browsing activities (e.g., the web pages you visit, search terms you enter, and the way you move through our online services on your computer or device) or your personal profile (e.g., demographic or location information). Certain companies we work with may set cookies and use related tracking technologies, such as the clear GIFs discussed above, throughout our online services or in our communications to support these OBA efforts. If you do not want your information collected and used by the companies, we work with for OBA purposes, you can opt out of this form of OBA by following the instructions in the next section.

There are two (2) ways that you can opt out of OBA from certain RFCU ads on third- party websites. One way is through the cross-industry Self-Regulatory Program for Online Behavioral Advertising managed by the Digital Advertising Alliance (DAA). To opt out of OBA, please click on the following link and follow the instructions: http://youradchoices.com. Another way to opt out of OBA is by clicking on the Advertising Options Icon featured on certain RFCU ads on third-party websites. When clicked it (i) describes the collection and uses of data gathered at the relevant third-party website and (ii) provides a way for you toopt out of data collection and use by the third parties listed for the purposes of OBA. If you choose to opt out, our service provider will communicate your opt out election to the relevant third-party advertising partners and a cookie will be placed on your browser indicating your decision to opt out.

Bear in mind that because cookies are stored by your browser, if you use different browsers on your computer, or multiple computers and devices that have browsers and you do not wish to have cookies collect information for OBA purposes, you will need to opt out of OBA from each browser on each of the computers and devices that you use. Please note that even if you opt out of OBA, you may still receive advertisements from us; they just won’t be customized based on your web-browsing activities on third- party websites.

RFCU may provide links to websites that are owned or operated by other companies ("third-party websites"). When you use a link online to visit a third-party website, you will be subject to that website’s privacy and security practices, which may differ from ours. You should familiarize yourself with the Privacy Policy, terms of use and security practices of the linked third-party website before providing any information on that website.

The Children’s Online Privacy Protection Act of 1998 (“COPPA”) restricts the collection, use, or disclosure of Personal Information from and about children under the age of 13 on the internet. RFCU is committed to protecting the online privacy of the children who visit ourSite and complying with COPPA.

The Credit Union does not knowingly collect or use personal information from children under 13 without collecting verifiable consent from their parents. Should a child whom we know to be under 13 send personal information to us, we will only use that information to respond directly to that child, seek parental consent, or provide parental notice. We may collect information on domain names, dates and times of visits, and number of page views. This information contains no Personal Information and will only be used to continue to improve the overall value of our Site. For more information about the Children’s Online Privacy Protection Act (COPPA), visit the Federal Trade Commission website: www.ftc.gov.

RFCU is committed to protecting your personal information. We maintain physical, electronic, and procedural safeguards that comply with federal standards to guard your Personal Information. Visit our Privacy & Security Page for additional information about how we protect your Personal Information.

Please note that information you send to us electronically may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information (such as your Social Security Number) to us.

Keeping your account information accurate and up to date is very important. If you are using our online banking option, you may review or update certain types of account information by logging in and accessing your profile in the Preferences section. You may also request and/or update your information by calling or writing to us using the contact information listed on your account statements, records, or other account materials, or by visiting your local RFCU branch.

This Online Privacy Policy may be revised or modified at any time. Any changes to this Online Privacy Policy will be posted on this page with the revised “Effective Date” stated at the bottom of this Policy. Any changes to this Policy become effective when posted unless indicated otherwise. Your use of the Site(s) following these changes means that you accept the revised Policy.