Privacy & Security

As a reminder, do not click any links from unsolicited texts and emails from anybody claiming to be Peoples Bank. When in doubt, visit your local branch or give us a call at 1.800.374.6123.

ATM, Card, and PIN Safety

Choosing an ATM

Where possible, use ATMs with which you are most familiar. Alternatively, choose well-lit, well-placed ATMs where you feel comfortable.

• Scan the whole ATM area before you approach it. Avoid using the ATM altogether if suspicious-looking individuals are around or it looks too isolated or unsafe.

• Avoid opening your purse, bag or wallet while in the ATM line. Have your card ready in your hand before you approach.

• Notice if anything looks unusual or suspicious about the ATM indicating alteration. If the ATM appears to have any attachments to the card slot or key pad, do not use it. Check for unusual instructions on the display screen and for suspicious blank screens. If you suspect that the ATM has been interfered with, proceed to another ATM and inform the bank.

• Avoid ATMs with messages or signs fixed to them indicating that the screen directions have been changed, especially if the message is posed over the card reader. Banks and other ATM owners will not put up messages directing you to specific ATMs, nor would they direct you to use an ATM which has been altered.

Using an ATM

• Be especially cautious when strangers offer to help you at an ATM, even if your card is stuck or you are experiencing difficulty with the transaction. Do not allow anyone to distract you while you are at the ATM.

• Check that other individuals in the line keep an acceptable distance from you. Be on the look-out for individuals who might watch you enter your PIN. Stand close to the ATM and shield the keypad with your hand when keying in your PIN (you may wish to use the knuckle of your middle finger to key in the PIN).

• Follow the instructions on the display screen (do not key in your PIN until the ATM requests you to do so).

• If you feel the ATM is not working normally, press the "Cancel" key and withdraw your card. Proceed to another ATM and report the matter to your financial institution.

• Never force your card into the card slot.

• If your card gets jammed, retained, or lost, or if you are interfered with at an ATM, report this immediately to the bank and/or police using the help line provided.

• Keep your printed transaction record to compare your ATM receipts to your monthly statement.

• Do not be in a hurry during the transaction, and carefully secure your card and cash in your wallet, handbag, or pocket before leaving the ATM.

Managing Your ATM Use

• Memorize your PIN (if you must write it down, do so in a disguised manner and never carry it with your card).

• Never disclose your PIN to anyone, whether to a family member, bank staff, or police.

• Do not use obvious and guessable numbers for your PIN, like your date of birth or the last four digits of your phone number.

• Change your PIN periodically, and if you think it may be compromised, change it immediately.

• Set your daily ATM withdrawal limit at your branch at levels you consider reasonable.

• Regularly check your account balance and bank statements and report any discrepancies to your bank immediately.

ATM Security Tip

• An ATM scam involves thieves putting a thin, clear, rigid plastic sleeve into the ATM card slot. When you insert your card, the machine can't read the strip, so it keeps asking you to re-enter your PIN number.

• Meanwhile, someone behind you watches as you tap in your number. Eventually you give up, thinking the machine has swallowed your card, and you walk away. The thief removes the plastic sleeve, complete with card information and empties your account.

• To avoid this, run your finger along the card slot before you put your card in. Feel for a couple of tiny prongs thieves need to get the sleeve out of the slot.

Card and PIN Safety

• Report lost or stolen credit cards immediately.

• If you lose your card, you can temporarily deactivate it by logging into your mobile banking app and selecting the “Card Controls” tab.

• Sign your card on the signature panel as soon as you receive it.

• Protect your cards like cash—never let them out of your sight.

• Don't leave your credit cards in your car's glove compartment. An alarmingly high proportion of all credit card thefts are from car glove compartments.

• Never write down your PIN—memorize it.

• Never disclose your PIN to anyone. No one from a financial institution, the police, or a merchant should ask for your PIN. You are the only person who needs to know it. When selecting a PIN, always avoid the obvious—your name, telephone number, date of birth, or any simple combination thereof.

• Ensure you get your card back after every purchase.

• Always check sales vouchers for the correct purchase amount before you sign them, and keep copies of your vouchers and ATM receipts.

• Always check your billing statement and verify the amounts of your purchases.

• Make a comprehensive list of all your cards and their numbers and store it in a safe place.

• Don't volunteer any personal information when you use your credit card other than by displaying ID as requested by a merchant.

• Don't lend your card to anybody. You are responsible for its use. Some credit card misuse can be traced directly to family and friends.

• To ensure the proper use of your debit card while traveling in foreign countries, please contact a Peoples Bank representative for assistance.

Online and Email Security

Email Security

Peoples Bank does not request personal information from our clients via email. Contact our Customer Care team by phone or email if you are suspicious about email requests regarding your financial account information. Below are some helpful suggestions to protect you from phishing and fraudulent emails:

• Automatically be suspicious of unsolicited emails, especially those with attachments or links. Don't trust the links or open the attachments.

• Hover your mouse cursor over links in email messages to verity a link's actual destination, even if the link comes from a trusted source.

• Type in website addresses rather than using links from unsolicited emails.

• If an email from a friend or colleague seems suspicious, call them and ask if the email is legitimate.

• Be suspicious of phone numbers in emails. Use the phone number on your card or statement or in a trusted directory instead.

• Scammers are always looking for opportunities to steal your account information by crafting emails that appear to be from Peoples Bank or your credit card providers. Responding to these emails with your account information could lead to financial losses or identity theft.

• Be especially cautious of any email message that requests personal data, such as passwords, PINs, or your social security number or sends you to a website that asks for such information. These messages may be attempts to steal your identity, account information, or login credentials.

• Never send payment information via email. Unlike secure websites that protect your private data, email or any other information exchange over the Internet, such as instant messaging, is not fully protected from being read by outside parties.

• Fraudulent emails may claim to be from the IRS or other government agencies. These emails try to get you to act by inciting fear or enticing you with false claims that you have committed tax fraud or with refunds and benefits. Trust your intuition - if it sounds suspicious, it probably is. Directly contact the IRS or government agency if you are unsure (do not use the numbers or data in the email, as they may be fraudulent).

• If you have received a fraudulent email that appears to be from Peoples Bank, please notify us of the specifics of the illegal email (including a print screen of the email would be helpful).

Note: Never send personal information via email.

If you are using Bill Pay and a new screen appears out of context asking you to provide sensitive information, do not provide this information. If you doubt the validity of a Bill Pay screen, contact Customer Care at 1.800.374.6123, option 0.

Malware

Malware is malicious software that includes computer viruses, spyware, destructive agents, and ransomware. You can get malware on your computer in many ways, but it most commonly comes from compromised websites or email messages. Some malware will merely track your browsing and searching habits, recording where you go and how often. However, some more dangerous malware can cause you to fall victim to hackers who use it to steal your identity, your account credentials, and other personal information from your computer. Other malware may destroy or disable files on your computer. Below are some recommendations to help avoid getting malware and help you protect your privacy and security.

• Always run Anti-Virus software on your computer or mobile device and update it regularly.

• Never open attachments or run files sent to you via a suspicious email (see email precautions above).

• Use extreme caution when visiting unfamiliar websites, especially if they ask you to enter personal information or login credentials.

• Don’t use the same password on all of your accounts. If hackers steal your password on one of your accounts, they will have access to everything.

• If you think you have malware on your computer, stop using it immediately and disconnect it from the Internet. Seek technical assistance from your product vendor or a local computer service shop.

Identity Theft, Frauds and Scams

Identity Theft Protection

Identity theft occurs when someone uses your personal information, such as your name, Social Security Number, credit card number, or other identifying information, without permission to commit fraud or other crimes.

Identity theft is a serious crime. People whose identities have been stolen can spend months or years – and much of their hard-earned money - cleaning up the mess thieves have made of their good name and credit record. In the meantime, victims may lose job opportunities, be refused loans, education, housing or cars, or even get arrested for crimes they didn't commit.
If you think your identity has been stolen, here's what to do now:

1. Contact the fraud departments of any of the three major credit bureaus to place a fraud alert on your credit file. The fraud alert requests creditors to contact you before opening new accounts or making any changes to your existing accounts. As soon as the credit bureau confirms your fraud alert, the other two credit bureaus will be notified to place fraud alerts, and all three credit reports will be sent to you free of charge. The companies' toll-free numbers are: Equifax, 1.800.525.6285; Experian, 1.888.397.3742; and TransUnion, 1.800.680.7289.

2. Close the accounts you know or believe have been tampered with or opened fraudulently. Use the ID Theft Affidavit when disputing new unauthorized accounts.

3. File a police report. Get a copy of the report to submit to your creditors and others that may require proof of the crime.

4. File your complaint with the FTC. The FTC maintains a database of identity theft cases used by law enforcement agencies for investigations. Filing a complaint also helps us learn more about identity theft and the problems victims are having so that we can better assist you. (FTC Hotline 1.877.438.4338)

For more detailed information on recovering after ID Theft, visit the FTC website.

Frauds and Scams

Peoples Bank will never call, email, or text message you to ask for your personal information or online banking credentials. If you suspect someone is trying to gain access to your account, contact us at 1.800.374.6123.

Scams take many forms, but common indicators are: unexpected contact, great urgency to take an action, and situations that seem too good or bad to be true. Trust your instincts. If something feels wrong, it probably is.

Whether it’s winning the lottery despite never entering it or the IRS contacting you about taxes that need paid immediately, scams can trick you into giving away personal details or doing something you typically wouldn’t do. Scammers will create a sense of urgency and danger where none exists.

Read over this list of red flags below, and if you answered yes to one or more red flags, exercise extreme caution!

• Was the contact with this person or business unexpected?

• Did they contact you about a product or service you don't use anymore or have never used?

• Are they asking for personal details, such as account numbers, date of birth, Social Security Number, or other private information?

• Are they requesting immediate payment?

• Are they requesting payment via unusual methods, such as cryptocurrency, gift cards, or online payments, like Paypal, Zelle, Cash App, or Facebook Pay?

• Does the amount of payment seem too high?

• Do you not know very much about the business or website?

• Does the deal seem too good, such as free or inexpensive products only cost shipping?

Common tactics of scammers include, but are not limited to:

• Phone calls purporting to be a representative of a government agency, tech support department, bank, doctor, or other trusted business. A legitimate representative will not ask you for personal information. If they want immediate payment, ask them to send you a bill.

• Phone calls claiming you won a prize, but you need to pay taxes on or shipping.

• Phone calls impersonating a relative in legal or medical trouble during an international trip.

• Computer pop up ads with a warning and a phone number to call.

• Social media messages (including Facebook, Twitter, Instagram, and others) from scammers pretending to be friends or relatives.

• Social media ads (including Facebook, Twitter, Instagram and others) that lead to fake sites or offering amazingly cheap deals, only to get your financial information.

• Scammers on dating apps or sites impersonating potential romantic interests and asking you to accept money on their behalf or to send them money.

Remember: Peoples Bank will never call, email or text message you to ask for your personal info or online banking credentials. If you suspect someone is trying to gain access to your account, contact us at 1.800.374.6123.

If the situation feels wrong to you, it probably is!

Mail and Phone Safety

Mail and telephone solicitation bring many tempting offers, but not all are legitimate. What can you do to protect yourself? Find out more here.

As a reminder: Peoples Bank will never call, text or email asking for your account information or debit card number. Do not share your online banking credentials, passwords, or pin numbers. Be very cautious with unsolicited emails, phone calls, and texts. If you suspect someone is trying to gain access to your account, contact us at 1.800.374.6123.

How do we protect your privacy and security?

For privacy and security reasons, the use of cameras and/or audio or video recording devices is strictly prohibited inside Peoples' offices without the express permission of Peoples.

Privacy Statement

Dear Valued Client,

Peoples Bank is required by law to provide its customers with a notice that accurately describes our Privacy Policy and practices. Beyond the requirements of the law, we value your relationship and your privacy, and we are committed to protecting your personal information and honoring your privacy preferences.

We promise to protect your privacy.

Peoples Bank does not share nonpublic information about you with third-party marketers outside of the Peoples family of companies without your consent, except as explained in the enclosed notice. We are permitted to disclose nonpublic personal information to nonaffiliated companies with which we have entered into joint marketing agreements (examples include mutual fund companies, broker dealers, and insurance companies). We choose such non-affiliates carefully and require them to not use your private information other than to service your account or make you aware of special offers that may be of interest to you.

We may share customer information within the Peoples family of companies in an effort to better serve your financial needs. If you prefer, you can opt out of this sharing of information as outlined in our notice.

We promise to honor your privacy preferences.

In terms of sharing information within our family of companies, we will honor your privacy preference. If in the past you have already opted out of sharing information within the Peoples family of companies, there is no need to do anything further. If you have not, and do not want your information shared within the Peoples family of companies, please inform us as outlined in our notice.

We promise to secure your information.

Security of information is a top priority for the Peoples family of companies. We comply with federal standards to protect your information through physical, electronic, and procedural safeguards.

We want to assure you that the Peoples family of companies protects your privacy. If you have any questions about our Privacy Notice or practice, or how we protect your information, please call us at 1-800-374-6123 or contact any Peoples associate. Our company\'s core values are based on conducting business with integrity, and we are committed to maintaining your trust and confidence. Thank you for the opportunity to serve your financial needs.

Sincerely,
Mark Augenstein
Senior Vice President, Operations

VIEW PRIVACY NOTICE

Peoples Bank

PRIVACY POLICY

Effective September 18, 2023

This Privacy Policy (“Policy”) governs the manner in which Peoples Bank and its subsidiaries and affiliates (collectively “Peoples”) collects, uses, maintains and discloses information collected from users (each, a “User,” or “you”) of its services, the www.peoplesbancorp.com website, the www.northstarleasing.com website, the www.vantagefncl.com website, and their features, as well as any other Peoples branded or co-branded websites and applications (including sub-domains, international versions, widgets, mobile versions, and mobile apps) (collectively, the “Site”).[1] By using our Site or services, you signify your acceptance of this Policy. Notwithstanding the foregoing, if you have a financial product or service with us, we may share and use any information we collect from or about you through these products or services in accordance with our Privacy Notice, which offers some choices with respect to the use and sharing of your personally identifiable information.

Information We Collect

Financial Information: Personally identifiable financial information you provide to us in connection with our financial products and services is subject to our annual Privacy Notice, which is expressly incorporated into this Policy.

Personally Identifiable Information: We may collect personally identifiable information in a variety of ways, including, but not limited to, when Users provide information to us directly and indirectly, including from activity on our Site, and from third parties that interact with us in connection with the services we perform or in connection with our marketing efforts. Personally identifiable information means any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable natural person or household. Personally identifiable information does not include publicly available information from government records, deidentified or aggregate information, or information excluded from the scope of applicable laws. We may collect, use, store, and transfer different kinds of personally identifiable information about you, which we have grouped together as follows:

Identity Data: includes first name, maiden name, last name, alias, profile picture, username or similar identifier, marital status, title, date of birth, gender, postal address, unique personal identifier (such as a device identifier, cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, internet protocol address, email address, account name, Social Security number, driver’s license number, passport number, and other similar identifiers;

Contact List: When you use the Peoples Bank Mobile application to facilitate Zelle® transfers, we may access, collect, and share your contact list names, email addresses, and phone numbers with Zelle®. We will always ask for your permission before doing this in the mobile application

User-generated Content: includes comments or messages provided in free text boxes;

Marketing and Communications Data: includes your preferences in receiving marketing from us and your communication preferences;

Additional Data Subject to Cal. Civ. Code § 1798.80: signature, physical characteristics or description, state identification card number, insurance policy number, education, bank account number, credit card number, debit card number, and other financial information, medical information, and health insurance information;

Protected Classifications: characteristics of protected classifications under California or federal law, such as race, color, national origin, age, sex, gender, and military and veteran status;

Commercial Information: commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies;

Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements;

Sensory Information: audio, electronic, visual, and similar information;

Employment Information: professional or employment-related information;

Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Sensitive Personally Identifiable Information: We may collect sensitive personally identifiable information revealing your: Social Security number, driver’s license number, passport number, financial information, and racial or ethnic origin. Sensitive personally identifiable information qualifies as a special category of personally identifiable information.

Deidentified Information: We may collect deidentified information from you that may not by itself reasonably identify you as the source when you navigate the Site. Deidentified information may include: (i) device type, (ii) device operating system, (iii) internet browser type, (iv) internet service provider, (v) referring/exit pages, (vi) date/time stamp, and (vii) clickstream information. We will take reasonable measures to ensure that deidentified information we collect is not personally identifiable and may not later be easily used to identify you as required by applicable law.

How We Collect Information

Directly from Users: We may collect personally identifiable information and sensitive personally identifiable information from Users if they voluntarily submit such information to us. Users can always refuse to supply personally identifiable information; however, refusing to provide personally identifiable information may prevent a User from engaging in certain Site-related activities or limit our ability to provide services.

Through Your Use of the Site, Cookies and Trackers: We may collect personally identifiable information and deidentified information that your browser transmits when you visit the Site. We may automatically collect deidentified information about Users whenever they interact with our Site through the use of cookies and similar technologies such as web beacons. A cookie is a small data file that is transferred to an internet browser, which enables the Site to remember and customize your subsequent visits. We may use session cookies to make it easier for you to navigate the Site.

We may later associate the usage and other information we collect online with other information about you, as permitted or required by law. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If you reject cookies, you may still use the Site but please note that blocking or disabling certain necessary cookies may limit your ability to use some parts of the Site.

From Third Party Services: We may collect personally identifiable information and sensitive personally identifiable information about you from third parties whose privacy practices may differ from the practices described in this Policy. We do not make any representations or warranties concerning, and will not in any way be liable for, any informational content, products, services, software, or other materials available through third parties. Your use of third parties’ services and/or third party websites is governed by and subject to the terms and conditions of those third parties and/or third party websites.

How We Use Collected Information

We may collect and use our Users’ personally identifiable information for lawful business purposes: (i) as necessary for the performance of our contract with Users, (ii) for our legitimate interests, so long as they are not overridden by Users’ own rights and interests, or (iii) as required by law. These purposes include:

To run and operate our Site and services - We may use your personally identifiable information and share it with select third parties in order to display content on the Site correctly and to otherwise make the Site function properly. We also use your personally identifiable information and share it with select third parties in order to operate our business, provide our services, and maintain and develop the Site.

To improve customer service – We may use the personally identifiable information you provide to help us respond to customer service requests and support needs more efficiently.

To research our services - We may use personally identifiable information and/or deidentified information in the aggregate to understand how our Users as a group use our services and our Site and to evaluate the effectiveness of our services, the Site, and our marketing and business efforts.

To improve our services - We may use Users’ personally identifiable information, deidentified information, and/or feedback and share it with select third parties to improve our products and services.

To provide Users with information, products and services - We may use your personally identifiable information and share it with select third parties on an ongoing basis to provide you with information, products, and services, including news and marketing information about our services and the services of select third parties.

To send periodic emails - We may use your email address to send you information and updates or to respond to your inquiries, questions, and/or other requests.

To send direct marketing - We may use your personally identifiable information to send you promotional materials. You have the right to opt-out of receiving direct marketing.

For safety and security purposes - We may use your personally identifiable information and/or deidentified information to promote the safety and security of our Site, our users, and other parties. For example, we may use the information to authenticate users, facilitate secure payments, protect against fraud and abuse, respond to a legal request or claim, conduct audits, and enforce our terms and policies.

We will not collect additional categories of information or use information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Third-Party Use of Cookies

Some content or applications, including advertisements, on the Site are served by third-parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use the Site. The information they collect may be associated with your personally identifiable information or they may collect information, including personally identifiable information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

How We Protect Your Information

We have adopted appropriate data collection, storage and processing practices and security measures to help protect against unauthorized access, alteration, disclosure or destruction of your personally identifiable information, sensitive personally identifiable information, username, password, transaction information and data stored in connection with our business. However, no data transmitted over or accessible through the internet can be guaranteed to be 100% secure. As a result, while we attempt to protect your information, we cannot guarantee or warrant that your information will be completely secure (i) from misappropriation by hackers or from other nefarious or criminal activities, or (ii) in the event of a failure of computer hardware, software, or a telecommunications networks.

How We Share Your Information

We may share and disclose any collected information, including personally identifiable information, with third parties for a business purpose, as described below:

To Our Affiliates: We may disclose your personally identifiable information to an affiliate, including companies in the Peoples Bank group, if that affiliate requires information for the provision of services.

To Contractors and Service Providers: We may disclose your personally identifiable information to our contractors and service providers that assist us in the provision of our services or otherwise provide services to us related to our provision of our services and/or the Site. For example, we may use contractors and service providers to help us operate our business and the Site or administer activities on our behalf, such as sending out newsletters or surveys. We may share your personally identifiable information with these parties for such limited purposes.

To Third Party Marketers: We may disclose your personally identifiable information to third parties for marketing or other related purposes, if you have not opted out of such disclosures. We contractually require these third parties to keep your personally identifiable information confidential and use it only for the purposes for which we disclose it to them.

Law Enforcement, Safety, and Legal Processes: We may disclose your personally identifiable information to law enforcement or other government officials if it relates to a criminal investigation or alleged criminal activity. We may also disclose your personally identifiable information: (i) if required or permitted to do so by law; (ii) for fraud protection and credit risk reduction purposes; (iii) in the good-faith belief that such action is necessary to protect our rights, interests, or property; (iv) in the good-faith belief that such action is necessary to protect your safety or the safety of others; or (v) to comply with a judicial proceeding, court order, subpoena, or other similar legal or administrative process.

Sale or Acquisition of Assets: We may disclose your personally identifiable information if a third party purchases or otherwise acquires us, in which case your information will likely be among the assets transferred.

As Disclosed or Consented To: We may disclose your personally identifiable information (i) to fulfill the purpose for which you provide it; (ii) for any other purpose disclosed by us when you provide the information; or (iii) otherwise with your consent.

Data Retention

We will retain Users’ personally identifiable information while they maintain an account with us or to the extent necessary to provide the services through the Site. Thereafter, we will keep information for as long as necessary: (i) to respond to any queries from Users; (ii) to demonstrate we treated Users fairly; (iii) for ordinary business continuity procedures; or (iv) to comply with any applicable laws. We delete information within a reasonable period after we no longer need the information for the purposes set out in this Policy.

Third Party Websites

The Site may contain links to other websites or applications (“Linked Sites”) that are not owned by us. We do not control the collection or use of any information, including personally identifiable information, which occurs while you visit Linked Sites. Therefore, we make no representations or warranties for —and will not in any way be liable for—any content, products, services, software, or other materials available on Linked Sites, even if one or more pages of the Linked Site are framed within a page of the Site.

Furthermore, we make no representations or warranties about the privacy policies or practices of the Linked Sites, and we are not responsible for the privacy practices of those Linked Sites. We encourage you to be aware of when you leave the Site and read the privacy policies of Linked Sites.

California Privacy Rights

California residents please see the California Privacy Rights Addendum attached to and made a part of this Policy.

Other State Privacy Rights

Residents of certain other states may have additional rights and choices related to their personally identifiable information that are not explicitly set out in this Policy. If you believe that you may have such rights and wish to exercise them, where applicable, please contact us please contact us at 800.374.6123 or [email protected]. Please be aware that your rights are limited to the extent permitted by applicable law.

Nevada provides its residents with a limited right to opt-out of certain personal information sales. However, please know we do not currently sell data triggering that statute's opt-out requirements.

Changes to this Policy

We have the discretion to update this Policy at any time. When we do, we will post a notification on the main page of our Site. We encourage Users to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this Policy periodically and become aware of modifications. Your continued use of the Site or our services following the posting of changes to this Policy will be deemed your acceptance of those changes. If you do not agree with the changes made, we will honor any opt-out requests made after the Effective Date of a new privacy policy.

Children’s Privacy

The Site is not designed to solicit or collect data from individuals under the age of 13. In accordance with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect or store any personal information, even in aggregate, about children under the age of 13. If we discover we have received any information from a child under the age of 13 in violation of this Policy, we will delete that information within a reasonable time. If you believe that we have any information from or about anyone under the age of 13, please contact us at the contact points specified below.

Do Not Track Disclosure

Some internet browsers may transmit “do-not-track” signals to websites with which the browser communicates. The Site does not currently respond to these “do-not-track” signals.

SPAM

We do not participate in bulk email solicitations that you have not consented to receiving (i.e., “Spam”). We do not sell or disclose customer lists or email address lists to unrelated third parties. Except as otherwise provided herein, we do not share personally identifiable information with any third party advertisers.

Controlling and Updating Your Personally Identifiable Information

If you ever wish to request any changes to your personally identifiable information or how we handle it, including by requesting any update, correction, deletion, or opt-out of us sharing, you may do so by contacting us at the Contact Information provided below. To help us process your request, please provide sufficient information to allow us to identify you in our records. We reserve the right to ask for additional information verifying your identity prior to disclosing any personally identifiable information to you. Should we ask for verification, the information you provide will be used only for verification purposes, and all copies of the information will be destroyed when the process is complete.

If you wish to opt-out of receiving update messages and/or direct marketing communications from us, you may opt-out by (i) following any instructions included in the communication or (ii) contacting us at the Contact Information provided below. Please be aware that although you may opt-out of update messages and/or direct marketing communications, we reserve the right to email you administrative notices regarding the Site, as permitted under the CAN-SPAM Act.

We will make commercially reasonable efforts to respond to opt-out requests and handle requests to access, update, change, or delete personally identifiable information without unreasonable delay. Please be aware that requests may be limited to the extent permitted by applicable law.

Contacting Us

If you have any questions about this Policy, the practices of this Site, or our data practices, please contact us at 800.374.6123 or [email protected].

California Privacy Rights Addendum to Peoples Bank Privacy Policy

(California Residents)

CALIFORNIA PRIVACY RIGHTS

California Residents

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”), California residents have certain rights and privileges. Please be aware that your rights (including those enumerated elsewhere in this Policy) are limited to the extent permitted by applicable law.

Right to Access: You have the right to request a copy of the specific pieces of personally identifiable information that we have collected about you in the previous twelve (12) months. The information will be delivered by mail or electronically. Upon receipt of a Verifiable Consumer Request, as described below, we will disclose:

The categories of personally identifiable information we have collected about you;
The categories of sources from which personally identifiable information is collected;
Our business purpose for collecting personally identifiable information;
The categories of third parties with whom we share personally identifiable information, if any; and
The specific pieces of personally identifiable information we have collected about you.

Right to Data Portability: You have the right to receive your information in a portable, readily usable format that allows you to transmit your information to another entity without hindrance.

Right to Correct Inaccuracies: You have the right to request that we correct any mistakes or inaccuracies in the personally identifiable information we maintain about you.

Right to Deletion: You have the right request that we delete your personally identifiable information.

Right to Be Free from Discrimination: You have the right to not be discriminated against by us for exercising any of your rights under the CCPA.

Right to Sue for Security Breaches: You also have the right to sue in the event your nonencrypted or nonredacted personally identifiable information is subject to an unauthorized access and exfiltration, theft, or disclosure as a result of the our violation of the duty to implement and maintain reasonable security procedures and practices. Prior to exercising this right, you must provide us with 30 days’ written notice by emailing us at [email protected] and providing us with an opportunity to fix this violation.

To exercise your rights, you can submit a Verifiable Consumer Request to us by:

Calling us at 1-800-374-6123;
Emailing us at [email protected]; or
Visiting us at https://www.peoplesbancorp.com/ccpa.

Only you, or someone legally authorized to act on your behalf, may make a Verifiable Consumer Request related to your personally identifiable information. Making a Verifiable Consumer Request does not require you to create an account with us. You may only make a Verifiable Consumer Request for access to personally identifiable information twice in a 12-month period.

The Verifiable Consumer Request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We reserve the right to ask for information verifying your identity and residency prior to disclosing any information to you or acting on your request. Should we ask for verification, the information you provide to verify your identity and residency will be used only for that purpose, and all copies of this information in our possession will be destroyed when the process is complete. We strive to respond to your request within 45 days of receiving a verifiable consumer request however, we reserve the right to respond within 90 days when reasonably necessary. Any disclosures we provide will only cover the 12-month period preceding the Verifiable Consumer Request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to verifiable consumer requests, unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

California’s “Shine the Light” law also permits Users of the Site that are California residents to request certain information regarding our disclosure of personally identifiable information to third parties for their direct marketing purposes. To obtain this information from us, please contact us at the following email address: [email protected] and write “Request for California Privacy Personally Identifiable Information” for the subject of your message.

In the last twelve (12) months, we have disclosed the following categories of personally identifiable information and sensitive personally identifiable information to third parties for a business purpose. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract.

Information Category	Category of Third-Party Recipients
Identity Data	Affiliates, Service Providers/Contractors, Internet Cookie Data Recipients, Data Analytic Providers, Government Entities, Social Networks, Advertising Networks
Marketing and Communications Data	Affiliates, Service Providers/Contractors, Internet Cookie Data Recipients, Government Entities, Social Networks, Advertising Networks
Additional Data Subject to Cal. Civ. Code § 1798.80	Affiliates, Service Providers/Contractors, Government Entities
Online Activity	Affiliates, Service Providers/Contractors, Internet Cookie Data Recipients, Data Analytical Providers, Government Entities, Social Networks, Advertising Networks

We will not disclose or share your personally identifiable information with third parties for the purposes of third party marketing to you without your prior consent.

We do not currently sell personally identifiable information about Users who reside in California. We disclose for business purposes the categories of personally identifiable information identified above for the purposes more particularly described elsewhere in the Policy.