Privacy and Security

Your security is our top priority.

Protect your personal information and accounts by learning how to spot fraudulent activity and scams. As a reminder, Peoples Bank^® will never text, call or email asking for your security code, banking credentials or debit/credit card number. If you’re ever in doubt, contact your local branch or our Customer Care Center at 800.374.6123.

Locations

Contact Customer Care

ATM, Card and PIN Safety

Choosing an ATM

Where possible, use ATMs with which you are most familiar. Alternatively, choose well-lit, well-placed ATMs where you feel comfortable.

• Scan the whole ATM area before you approach it. Avoid using the ATM altogether if suspicious-looking individuals are around or it looks too isolated or unsafe.

• Avoid opening your purse, bag or wallet while in the ATM line. Have your card ready in your hand before you approach.

• Notice if anything looks unusual or suspicious about the ATM indicating alteration. If the ATM appears to have any attachments to the card slot or key pad, do not use it. Check for unusual instructions on the display screen and for suspicious blank screens. If you suspect that the ATM has been interfered with, proceed to another ATM and inform the bank.

• Avoid ATMs with messages or signs fixed to them indicating that the screen directions have been changed, especially if the message is posed over the card reader. Banks and other ATM owners will not put up messages directing you to specific ATMs, nor would they direct you to use an ATM which has been altered.

Using an ATM

• Be especially cautious when strangers offer to help you at an ATM, even if your card is stuck or you are experiencing difficulty with the transaction. Do not allow anyone to distract you while you are at the ATM.

• Check that other individuals in the line keep an acceptable distance from you. Be on the look-out for individuals who might watch you enter your PIN. Stand close to the ATM and shield the keypad with your hand when keying in your PIN (you may wish to use the knuckle of your middle finger to key in the PIN).

• Follow the instructions on the display screen (do not key in your PIN until the ATM requests you to do so).

• If you feel the ATM is not working normally, press the “Cancel” key and withdraw your card. Proceed to another ATM and report the matter to your financial institution.

• Never force your card into the card slot. 

• If your card gets jammed, retained or lost, or if you are interfered with at an ATM, report this immediately to the bank and/or police using the help line provided on the ATM.

• Keep your printed transaction record to compare your ATM receipts to your monthly statement.

• Do not be in a hurry during the transaction, and carefully secure your card and cash in your wallet, handbag, or pocket before leaving the ATM.

Managing Your ATM Use

• Memorize your PIN (if you must write it down, do so in a disguised manner and never carry it with your card).

• Never disclose your PIN to anyone, whether to a family member, bank staff or police.

• Do not use obvious and guessable numbers for your PIN, like your date of birth or the last four digits of your phone number.

• Change your PIN periodically, and if you think it may be compromised, change it immediately.

• Set your daily ATM withdrawal limit at your branch at levels you consider reasonable.

• Regularly check your account balance and bank statements and report any discrepancies to your bank immediately.

ATM Security Tip

An ATM scam involves thieves putting a thin, clear, rigid plastic sleeve into the ATM card slot. When you insert your card, the machine can’t read the strip, so it keeps asking you to re-enter your PIN number.

Meanwhile, someone behind you watches as you tap in your number. Eventually you give up, thinking the machine has swallowed your card, and you walk away. The thief removes the plastic sleeve, complete with card information and empties your account.

To avoid this, run your finger along the card slot before you put your card in. Feel for a couple of tiny prongs thieves need to get the sleeve out of the slot. 

Card and PIN Safety

• Report lost or stolen credit cards immediately.

• If you lose your card, you can temporarily deactivate it by logging into your mobile banking app and selecting the “Card Controls” tab.

• Sign your card on the signature panel as soon as you receive it.

• Protect your cards like cash—never let them out of your sight.

• Don’t leave your credit cards in your car’s glove compartment. An alarmingly high proportion of all credit card thefts are from car glove compartments.

• Never write down your PIN—memorize it.

• Never disclose your PIN to anyone. No one from a financial institution, the police or a merchant should ask for your PIN. You are the only person who needs to know it. When selecting a PIN, always avoid the obvious—your name, telephone number, date of birth or any simple combination thereof.

• Ensure you get your card back after every purchase.

• Always check sales vouchers for the correct purchase amount before you sign them, and keep copies of your vouchers and ATM receipts.

• Always check your billing statement and verify the amounts of your purchases.

• Make a comprehensive list of all your cards and their numbers and store it in a safe place.

• Don’t volunteer any personal information when you use your credit card other than by displaying ID as requested by a merchant.

• Don’t lend your card to anybody. You are responsible for its use. Some credit card misuse can be traced directly to family and friends.

• To ensure the proper use of your debit card while traveling in foreign countries, please contact a Peoples Bank representative for assistance.

Online and Email Security

Email Security

Peoples Bank does not request personal information from our clients via email. Contact our Customer Care team by phone or email if you are suspicious about email requests regarding your financial account information. Below are some helpful suggestions to protect you from phishing and fraudulent emails:

• Automatically be suspicious of unsolicited emails, especially those with attachments or links. Don’t trust the links or open the attachments.

• Hover your mouse cursor over links in email messages to verify a link’s actual destination, even if the link comes from a trusted source.

• Type in website addresses rather than using links from unsolicited emails.

• If an email from a friend or colleague seems suspicious, call them and ask if the email is legitimate.

• Be suspicious of phone numbers in emails. Use the phone number on your card or statement or in a trusted directory instead.

• Scammers are always looking for opportunities to steal your account information by crafting emails that appear to be from Peoples Bank or your credit card providers. Responding to these emails with your account information could lead to financial losses or identity theft. 

• Be especially cautious of any email message that requests personal data, such as passwords, PINs or your social security number or sends you to a website that asks for such information. These messages may be attempts to steal your identity, account information or login credentials.  

• Never send payment information via email. Unlike secure websites that protect your private data, email or any other information exchange over the Internet, such as instant messaging, is not fully protected from being read by outside parties.

• Fraudulent emails may claim to be from the IRS or other government agencies. These emails try to get you to act by inciting fear or enticing you with false claims that you have committed tax fraud or with refunds and benefits. Trust your intuition – if it sounds suspicious, it probably is. Directly contact the IRS or government agency if you are unsure (do not use the numbers or data in the email, as they may be fraudulent). 

• If you have received a fraudulent email that appears to be from Peoples Bank, please notify us of the specifics of the illegal email (including a print screen of the email would be helpful).

Note: Never send personal information via email.

If you are using Bill Pay and a new screen appears out of context asking you to provide sensitive information, do not provide this information. If you doubt the validity of a Bill Pay screen, contact Customer Care at 800.374.6123, option 0.

Malware

Malware is malicious software that includes computer viruses, spyware, destructive agents and ransomware. You can get malware on your computer in many ways, but it most commonly comes from compromised websites or email messages. Some malware will merely track your browsing and searching habits, recording where you go and how often. However, some more dangerous malware can cause you to fall victim to hackers who use it to steal your identity, your account credentials and other personal information from your computer. Other malware may destroy or disable files on your computer. Below are some recommendations to help avoid getting malware and help you protect your privacy and security.

• Always run Anti-Virus software on your computer or mobile device and update it regularly.

• Never open attachments or run files sent to you via a suspicious email (see email precautions above).

• Use extreme caution when visiting unfamiliar websites, especially if they ask you to enter personal information or login credentials.

• Don’t use the same password on all of your accounts. If hackers steal your password on one of your accounts, they will have access to everything.

• If you think you have malware on your computer, stop using it immediately and disconnect it from the Internet. Seek technical assistance from your product vendor or a local computer service shop.

Identity Theft, Frauds and Scams

Identity Theft Protection

Identity theft occurs when someone uses your personal information, such as your name, Social Security Number, credit card number or other identifying information, without permission to commit fraud or other crimes.

Identity theft is a serious crime. People whose identities have been stolen can spend months or years – and much of their hard-earned money – cleaning up the mess thieves have made of their good name and credit record. In the meantime, victims may lose job opportunities, be refused loans, education, housing or cars, or even get arrested for crimes they didn’t commit. If you think your identity has been stolen, here’s what to do now:

1. Contact the fraud departments of any of the three major credit bureaus to place a fraud alert on your credit file. The fraud alert requests creditors to contact you before opening new accounts or making any changes to your existing accounts. As soon as the credit bureau confirms your fraud alert, the other two credit bureaus will be notified to place fraud alerts, and all three credit reports will be sent to you free of charge. The companies’ toll-free numbers are: Equifax, 1.800.525.6285; Experian, 1.883.397.3742; and TransUnion, 1.800.680.7289.

2. Close the accounts you know or believe have been tampered with or opened fraudulently. Use the ID Theft Affidavit when disputing new unauthorized accounts.

3. File a police report. Get a copy of the report to submit to your creditors and others that may require proof of the crime.

4. File your complaint with the FTC. The FTC maintains a database of identity theft cases used by law enforcement agencies for investigations. Filing a complaint also helps us learn more about identity theft and the problems victims are having so that we can better assist you. (FTC Hotline 1.877.438.4338)

For more detailed information on recovering after ID Theft, visit the FTC website.

Mail and Phone Safety

Mail and telephone solicitation bring many tempting offers, but not all are legitimate. What can you do to protect yourself? Find out more here.

As a reminder: Peoples Bank will never call, text or email asking for your account information or debit card number. Do not share your online banking credentials, passwords or pin numbers. Be very cautious with unsolicited emails, phone calls and texts. If you suspect someone is trying to gain access to your account, contact us at 800.374.6123.

Frauds and Scams

Peoples Bank will never call, email or text you to ask for your personal information or online banking credentials. If you suspect someone is trying to gain access to your account, contact us at 800.374.6123.

Scams take many forms, but common indicators are: unexpected contact, great urgency to take an action and situations that seem too good or bad to be true. Trust your instincts. If something feels wrong, it probably is.

Whether it’s winning the lottery despite never entering it or the IRS contacting you about taxes that need paid immediately, scams can trick you into giving away personal details or doing something you typically wouldn’t do. Scammers will create a sense of urgency and danger where none exists.

Read over this list of red flags below, and if you answer yes to one or more red flags, exercise extreme caution!

• Was the contact with this person or business unexpected?

• Did they contact you about a product or service you don’t use anymore or have never used?

• Are they asking for personal details, such as account numbers, date of birth, Social Security Number or other private information?

• Are they requesting immediate payment?

• Are they requesting payment via unusual methods, such as cryptocurrency, gift cards or online payments, like Paypal, Zelle, Cash App or Facebook Pay?

• Does the amount of payment seem too high?

• Do you not know very much about the business or website?

• Does the deal seem too good, such as free or inexpensive products only cost shipping?

Common tactics of scammers include, but are not limited to:

• Phone calls purporting to be a representative of a government agency, tech support department, bank, doctor or other trusted business. A legitimate representative will not ask you for personal information. If they want immediate payment, ask them to send you a bill.

• Phone calls claiming you won a prize, but you need to pay taxes on or shipping.

• Phone calls impersonating a relative in legal or medical trouble during an international trip.

• Computer pop up ads with a warning and a phone number to call.

• Social media messages (including Facebook, Twitter, Instagram and others) from scammers pretending to be friends or relatives.

• Social media ads (including Facebook, Twitter, Instagram and others) that lead to fake sites or offering amazingly cheap deals, only to get your financial information.

• Scammers on dating apps or sites impersonating potential romantic interests and asking you to accept money on their behalf or to send them money.

Remember: Peoples Bank will never call, email or text you to ask for your personal info or online banking credentials. If you suspect someone is trying to gain access to your account, contact us at 800.374.6123.

If the situation feels wrong to you, it probably is.

How We Protect Your Privacy and Security

For privacy and security reasons, the use of cameras and/or audio or video recording devices is strictly prohibited inside Peoples’ offices without the express permission of Peoples. 

Privacy Statement

Dear Valued Client,

Peoples Bank is required by law to provide its customers with a notice that accurately describes our Privacy Policy and practices. Beyond the requirements of the law, we value your relationship and your privacy, and we are committed to protecting your personal information and honoring your privacy preferences.

We promise to protect your privacy.

Peoples Bank does not share nonpublic information about you with third-party marketers outside of the Peoples family of companies without your consent, except as explained in the enclosed notice. We are permitted to disclose nonpublic personal information to nonaffiliated companies with which we have entered into joint marketing agreements (examples include mutual fund companies, broker dealers, and insurance companies). We choose such non-affiliates carefully and require them to not use your private information other than to service your account or make you aware of special offers that may be of interest to you.

We may share customer information within the Peoples family of companies in an effort to better serve your financial needs. If you prefer, you can opt out of this sharing of information as outlined in our notice.

We promise to honor your privacy preferences.

In terms of sharing information within our family of companies, we will honor your privacy preference. If in the past you have already opted out of sharing information within the Peoples family of companies, there is no need to do anything further. If you have not, and do not want your information shared within the Peoples family of companies, please inform us as outlined in our notice.

We promise to secure your information.

Security of information is a top priority for the Peoples family of companies. We comply with federal standards to protect your information through physical, electronic, and procedural safeguards.

We want to assure you that the Peoples family of companies protects your privacy. If you have any questions about our Privacy Notice or practice, or how we protect your information, please call us at 800.374.6123 or contact any Peoples associate. Our company’s core values are based on conducting business with integrity, and we are committed to maintaining your trust and confidence. Thank you for the opportunity to serve your financial needs.

Sincerely,
Mark Augenstein
Senior Vice President, Operations

VIEW PRIVACY NOTICE

Peoples Bank

PRIVACY POLICY

Effective May 29, 2025

This Privacy Policy (“Policy”) governs the manner in which Peoples Bank and its subsidiaries and affiliates (collectively “Peoples”, “we”, “us”, or “our”) collects, uses, maintains and discloses information collected from users (“Visitor Information” and each, a “User,” or “you”) of its services through our websites, which include, but are not limited to, the www.peoplesbancorp.com website, the www.peoplespf.com website, the  www.northstarleasing.com website, the www.vantagefncl.com website, and their features, and any other Peoples branded or co-branded websites and applications (including sub-domains, international versions, widgets, mobile versions, and mobile apps) (collectively, the “Site”), as well as what information we may collect through any third-party application or third-party sites, social networks, or social media sites (such as Twitter, LinkedIn, Google, etc.). This Policy also describes your choices and rights regarding the use, access, and correction or deletion of your personally identifiable information.  By using our Site or services, you signify your acceptance of this Policy. Notwithstanding the foregoing, if you have a financial product or service with us, we may share and use any information we collect from or about you through these products or services in accordance with our Privacy Notice, which offers some choices with respect to the use and sharing of your personally identifiable information.

This Site is owned and operated by Peoples.
By accessing or using this Site you agree to this Policy.

Information We Collect

Your Visitor Information may be collected, used, and shared. As detailed below, the type of Visitor Information collected may vary based on how it was gathered, but may include, among other things, your name, email address, address, and other information that you voluntarily submit, information automatically collected about your usage of our Site that does not include personally identifiable information (e.g., the content that you choose to view and how you interact), and information about you that third parties may share with us if such third parties have previously received your consent to do so. In general, your personally identifiable information means any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device. It does not include (i) publicly available information from government records; (ii) de-identified or aggregate information; or (iii) certain other personal data protected by other sector-specific state or federal laws. Accordingly, we collect the following types of Visitor Information:

Financial Information: Personally identifiable financial information you provide to us in connection with our financial products and services is subject to our annual Privacy Notice, which is expressly incorporated into this Policy.

Personally Identifiable Information: We may collect personally identifiable information in a variety of ways, including, but not limited to, when Users provide information to us directly and indirectly, including from activity on our Site, and from third parties that interact with us in connection with the services we perform or in connection with our marketing efforts. Personally identifiable information means any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable natural person or household. Personally identifiable information does not include publicly available information from government records, deidentified or aggregate information, or information excluded from the scope of applicable laws. We may collect, use, store, and transfer different kinds of personally identifiable information about you, which we have grouped together as follows:

• Identity Data:  includes first name, maiden name, last name, alias, profile picture, username or similar identifier, marital status, title, date of birth, gender, postal address, unique personal identifier (such as a device identifier, cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, internet protocol address, email address, account name, Social Security number, driver’s license number, passport number, and other similar identifiers;
• Contact List: When you use the Peoples Bank Mobile application to facilitate Zelle^® transfers, we may access, collect, and share your contact list names, email addresses, and phone numbers with Zelle^®. We will always ask for your permission before doing this in the mobile application. For more information, please see our Mobile Privacy Notice attached as an Addendum and made a part of this Policy.
• User-generated Content: includes comments or messages provided in free text boxes;
• Marketing and Communications Data: includes your preferences in receiving marketing from us and your communication preferences;
• Additional Data Subject to Cal. Civ. Code § 1798.80: signature, physical characteristics or description, state identification card number, insurance policy number, education, bank account number, credit card number, debit card number, and other financial information, medical information, and health insurance information;
• Protected Classifications: characteristics of protected classifications under California or federal law, such as race, color, national origin, age, sex, gender, and military and veteran status;
• Commercial Information: commercial information, including records of personal property, products or services purchased, obtained, or considered, and other purchasing or consuming histories or tendencies;
• Online Activity: Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with websites, applications or advertisements;
• Sensory Information: audio, electronic, visual, and similar information;
• Employment Information: professional or employment-related information;
• Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Sensitive Personally Identifiable Information: We may collect sensitive personally identifiable information revealing your: Social Security number, driver’s license number, passport number, financial information, and racial or ethnic origin. Sensitive personally identifiable information qualifies as a special category of personally identifiable information.

Deidentified Information:We may collect deidentified information from you that may not by itself reasonably identify you as the source when you navigate the Site. Deidentified information may include: (i) device type, (ii) device operating system, (iii) internet browser type, (iv) internet service provider, (v) referring/exit pages, (vi) date/time stamp, and (vii) clickstream information. We will take reasonable measures to ensure that deidentified information we collect is not personally identifiable and may not later be easily used to identify you as required by applicable law.

How We Collect Information

We may collect Visitor Information in the following ways:

Directly from Users: We may collect personally identifiable information and sensitive personally identifiable information from Users if they voluntarily submit such information to us. Users can always refuse to supply personally identifiable information; however, refusing to provide personally identifiable information may prevent a User from engaging in certain Site-related activities or limit our ability to provide services.

Through Your Use of the Site, Cookies and Trackers: We automatically collect certain information when you visit, use or navigate the Site. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your Internet Protocol (IP) address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our and other technical information. This information is primarily needed to maintain the security and operation of our Site, and for our internal analytics and reporting purposes.

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Policy.

Like many businesses, we collect information through cookies and similar technologies. A cookie is a small data file that is written to a computer’s hard drive by a web browser. A cookie file can contain and/or automatically collect information, such as a user identification code or IP address that a website will use to track the pages and number of times you have visited. The data read from these cookies may be linked to personally identifying information and non-personally identifying information. We may collect and use non-personally identifying information to help us improve our services, customize your experience and analyze use of our services. This Policy does not limit our use or disclosure of collected non-personally identifying information. We reserve the right to collect, use and disclose such non-personally identifying information to our partners, advertisers and other third parties at our sole discretion.

We and our partners may use cookies and similar technologies on the Site to personalize and optimize your browsing experience by: providing you tailored content, enabling social media features, safeguarding against spam and malware, analyzing trends, traffic, and user behavior, administering the website, gathering demographic information about our user base as a whole, tracking web and advertising analytics throughout the Site, remembering preferences and voluntarily-submitted information (e.g. name, email), performing location-related functionalities and analytics, participating in market research (e.g., website ratings), and educating Peoples about how the Site can continue to be improved. You may turn off cookies in your browser or have your browser warn you before accepting cookies. If you choose to turn off cookies, you may not be able to experience all of the features on our Site.

Cookies fall into the subcategories below:

• Essential Cookies. Certain cookies are used for specific purposes that are essential to your secure use and navigation of the Site. Without them, Peoples may not be able to provide core Site functions and features to you, and the Site would not operate as well as you or Peoples would like. These cookies collect and use information such as your server preferences, single-session data and corresponding identifier, web beacons and log files, and other credential-related information. Essential cookies also help inform Peoples whether you require, or have already been served, an affirmative consent request in connection with our data policies. Essential cookies also include analytics cookies, which provide us data that allows Peoples to better understand its users and improve the Site based on what we have learned from that data.

• Preference Cookies. Other cookies are used to collect and process information about your preferences and similar choices in connection with the Site in order to optimize your browsing experience. Preference cookies include social media cookies, which collect information about your social media usage and other data you may have provided in connection with such usage (if you access the Site through a social media website or mobile application, you may have social media cookies). If you wish to modify or change your social media cookies, please visit the appropriate social media website and review the settings related to your applicable social media account(s).

• Advertising Cookies. To help support the Site and further tailor your experience, Peoples and certain of our third-party providers may also use cookies on the Site to personalize the content you may be shown. Some advertisements may use advertising cookies to provide targeted advertisements that may be more consistent with your interests than non-targeted advertisements. Peoples does not provide user information to third parties except in connection with the Site or as required by law.

We may later associate the usage and other information we collect online with other information about you, as permitted or required by law. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If you reject cookies, you may still use the Site but please note that blocking or disabling certain necessary cookies may limit your ability to use some parts of the Site.

Web Beacons: Our web pages may contain electronic images known as web beacons (invisible images often referred to as pixel tags or clear GIFs) on the Site in order to recognize users, assess traffic patterns, identify preferred content, and measure Site engagement. We may also include web beacons in our e-mail messages in order to count how many e-mail messages have been opened, for example.

Some of these web beacons may also be placed by third-party service providers to help determine the effectiveness of advertising campaigns. These web beacons may be used by third-party service providers to place a persistent cookie on your computer. This allows the service provider to recognize your computer each time you visit certain web pages and compiles anonymous information in relation to those page views, which in turn enables us and our third-party service providers to learn which advertisements bring you to our website and how you use the Site.

Log Files: Our servers log information about your IP address, your browser type, and the current URL you are requesting. This information is always provided by your browser and automatically logged. These log files are stored in a secure location and used in our internal analysis of traffic patterns.

Analytics: Services providing analytic tools (“Analytic Services”), which may include, without limitation Google Analytics®, may be used with the Site which transmits website traffic data to servers in the United States. Analytic Services do not collect personal information, identify individual users, or associate your IP address with any other data. We do not share any personally identifiable information with our Analytic Services in connection with their performing of any services on our Site. We use reports provided by Analytic Services to help us understand website traffic and webpage usage. Each of these services has their own Policy that you should refer to.

From Third Party Services: We may collect personally identifiable information and sensitive personally identifiable information about you from third parties whose privacy practices may differ from the practices described in this Policy. We do not make any representations or warranties concerning, and will not in any way be liable for, any informational content, products, services, software, or other materials available through third parties. Your use of third parties’ services and/or third party websites is governed by and subject to the terms and conditions of those third parties and/or third party websites.

How We Use Collected Information

We may collect and use Visitor Information for lawful business purposes: (i) as necessary for the performance of our contract with Users, (ii) for our legitimate interests, so long as they are not overridden by Users’ own rights and interests, or (iii) as required by law. These purposes include:

• To run and operate our Site and services – We may use your personally identifiable information and share it with select third parties in order to display content on the Site correctly and to otherwise make the Site function properly. We also use your personally identifiable information and share it with select third parties in order to operate our business, provide our services, and maintain and develop the Site.

• To improve customer service – We may use the personally identifiable information you provide to help us respond to customer service requests and support needs more efficiently.

• To research our services – We may use personally identifiable information and/or deidentified information in the aggregate to understand how our Users as a group use our services and our Site and to evaluate the effectiveness of our services, the Site, and our marketing and business efforts. 

• To improve our services – We may use Users’ personally identifiable information, deidentified information, and/or feedback and share it with select third parties to improve our products and services.

• To provide Users with information, products and services – We may use your personally identifiable information and share it with select third parties on an ongoing basis to provide you with information, products, and services, including news and marketing information about our services and the services of select third parties.

• To send periodic emails – We may use your email address to send you information and updates or to respond to your inquiries, questions, and/or other requests.

• To send direct marketing – We may use your personally identifiable information to send you promotional materials. You have the right to opt-out of receiving direct marketing.

• For safety and security purposes – We may use your personally identifiable information and/or deidentified information to promote the safety and security of our Site, our users, and other parties. For example, we may use the information to authenticate users, facilitate secure payments, protect against fraud and abuse, respond to a legal request or claim, conduct audits, and enforce our terms and policies.

• As necessary to provide information or services – We may occasionally hire other companies to provide limited services on our behalf, such as handling the processing of information submitted on any contact form on the Site, the delivery of any mailings or correspondence, processing transactions, or performing statistical analysis of our services. We provide those companies the information they need to deliver the service. In some instances, these companies may collect information directly from you and you will be notified of the involvement of the external service provider. Such companies are subject to agreements that require them to maintain the confidentiality of your information and they are prohibited from using that information for any other purpose. We reserve the right to not track how you interact with any of the provided services.

• As required by law – Peoples may disclose your personal information if required to do so by law, such as to comply with a subpoena or in the good faith belief that such action is necessary to conform to the edicts of the law, investigate fraud or comply with a judicial proceeding, court order, or legal process served on Peoples, or to protect and defend the rights or property of Peoples.

We will not collect additional categories of information or use information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Third-Party Use of Cookies

Some content or applications, including advertisements, on the Site are served by third-parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use the Site. The information they collect may be associated with your personally identifiable information or they may collect information, including personally identifiable information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

How We Protect Your Information

We have adopted appropriate data collection, storage and processing practices and security measures to help protect against misuse, interference, loss, modification, unauthorized access, alteration, disclosure or destruction of your Visitor Information and data stored in connection with our business. Our measures include implementing appropriate access controls, investing in the latest information security capabilities to protect the IT environments we leverage, and ensuring we encrypt and anonymize personal data wherever possible. Access to your Visitor Information is only permitted among our employees and agents on a need-to-know basis and subject to strict contractual confidentiality obligations when processed by third parties. However, no data transmitted over or accessible through the internet can be guaranteed to be 100% secure. As a result, while we attempt to protect your information, we cannot guarantee or warrant that your information will be completely secure (i) from misappropriation by hackers or from other nefarious or criminal activities, or (ii) in the event of a failure of computer hardware, software, or a telecommunications networks.

Your information may be stored on servers owned and operated by Peoples and its affiliates or by other cloud/software service providers (“SaaS Services”) and located in the United States.Our SaaS Services are committed to using industry-standard physical, electronic, and organizational safeguards to protect information against loss or theft as well as unauthorized access and disclosure to protect individuals’ privacy and to employing security techniques to protect such data from unauthorized access.

How Long We Keep Your Information

We will only keep your Visitor Information for as long as it is necessary for the purposes set out in this Policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). No purpose in this Policy will require us to keep your personal information for longer than reasonably necessary.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. We will actively review the personal data we hold and delete it securely, or in some cases, anonymize it when there is no longer a legal, business, or consumer need for it to be retained.

How We Share Your Information

We may share and disclose any collected information, including personally identifiable information, with third parties for a business purpose, as described below:

To Our Affiliates: We may disclose your personally identifiable information to an affiliate, including companies in the Peoples Bank group, if that affiliate requires information for the provision of services.

To Contractors and Service Providers: We may disclose your personally identifiable information to our contractors and service providers that assist us in the provision of our services or otherwise provide services to us related to our provision of our services and/or the Site. For example, we may use contractors and service providers to help us operate our business and the Site or administer activities on our behalf, such as sending out newsletters or surveys. We may share your personally identifiable information with these parties for such limited purposes.

To Third Party Marketers: We may disclose your personally identifiable information to third parties for marketing or other related purposes, if you have not opted out of such disclosures. We contractually require these third parties to keep your personally identifiable information confidential and use it only for the purposes for which we disclose it to them.

Law Enforcement, Safety, and Legal Processes: We may disclose your personally identifiable information to law enforcement or other government officials if it relates to a criminal investigation or alleged criminal activity. We may also disclose your personally identifiable information: (i) if required or permitted to do so by law; (ii) for fraud protection and credit risk reduction purposes; (iii) in the good-faith belief that such action is necessary to protect our rights, interests, or property; (iv) in the good-faith belief that such action is necessary to protect your safety or the safety of others; or (v) to comply with a judicial proceeding, court order, subpoena, or other similar legal or administrative process.

Sale or Acquisition of Assets: We may disclose your personally identifiable information if a third party purchases or otherwise acquires us, in which case your information will likely be among the assets transferred.

As Disclosed or Consented To: We may disclose your personally identifiable information (i) to fulfill the purpose for which you provide it; (ii) for any other purpose disclosed by us when you provide the information; or (iii) otherwise with your consent.

We do not sell, rent, or lease personally identifiable information, nor do we disclose it to third parties except as disclosed in this Privacy Policy without your permission.

Data Retention

We will retain Users’ personally identifiable information while they maintain an account with us or to the extent necessary to provide the services through the Site. Thereafter, we will keep information for as long as necessary: (i) to respond to any queries from Users; (ii) to demonstrate we treated Users fairly; (iii) for ordinary business continuity procedures; or (iv) to comply with any applicable laws. We delete information within a reasonable period after we no longer need the information for the purposes set out in this Policy.

Third-Party Websites

The Site may contain links to other websites or applications (“Linked Sites”) that are not owned by us. We do not control the collection or use of any information, including personally identifiable information, which occurs while you visit Linked Sites. Therefore, we make no representations or warranties for —and will not in any way be liable for—any content, products, services, software, or other materials available on Linked Sites, even if one or more pages of the Linked Site are framed within a page of the Site.

Furthermore, we make no representations or warranties about the privacy policies or practices of the Linked Sites, and we are not responsible for the privacy practices of those Linked Sites. We encourage you to be aware of when you leave the Site and read the privacy policies of Linked Sites.

California Privacy Rights

California residents please see the California Privacy Rights Addendum attached to and made a part of this Policy.

Other Privacy Rights

Residents of certain other states, and of countries outside of the United States, may have additional rights and choices related to their personally identifiable information that are not explicitly set out in this Policy, such as rights to correct inaccuracies or opt out of certain uses and disclosures, and more. If you believe that you may have such rights and wish to exercise them, where applicable, please contact us please contact us at 800.374.6123 or [email protected]. Please be aware that your rights are limited to the extent permitted by applicable law.

Nevada provides its residents with a limited right to opt-out of certain personal information sales. However, please know we do not currently sell data triggering that statute’s opt-out requirements.

Changes to this Policy

We have the discretion to update this Policy at any time. When we do, we will post a notification on the main page of the Site. We encourage Users to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this Policy periodically and become aware of modifications. Your continued use of the Site or our services following the posting of changes to this Policy will be deemed your acceptance of those changes. If you do not agree with the changes made, we will honor any opt-out requests made after the Effective Date of a new privacy policy.

Children’s Privacy

The Site is not designed to solicit or collect data from individuals under the age of 13.  In accordance with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect or store any personal information, even in aggregate, about children under the age of 13.  If we discover we have received any information from a child under the age of 13 in violation of this Policy, we will delete that information within a reasonable time.  If you believe that we have any information from or about anyone under the age of 13, please contact us at the contact points specified below.

Do Not Track Disclosure

Some internet browsers may transmit “do-not-track” signals to websites with which the browser communicates. The Site does not currently respond to these “do-not-track” signals.

SPAM

We do not participate in bulk email solicitations that you have not consented to receiving (i.e., “Spam”).  We do not sell or disclose customer lists or email address lists to unrelated third parties. Except as otherwise provided herein, we do not share personally identifiable information with any third party advertisers.

Controlling and Updating Your Personally Identifiable Information

If you ever wish to request any changes to your personally identifiable information or how we handle it, including by requesting any update, correction, deletion, or opt-out of us sharing, you may do so by contacting us at the Contact Information provided below. To help us process your request, please provide sufficient information to allow us to identify you in our records. We reserve the right to ask for additional information verifying your identity prior to disclosing any personally identifiable information to you. Should we ask for verification, the information you provide will be used only for verification purposes, and all copies of the information will be destroyed when the process is complete.

If you wish to opt-out of receiving update messages and/or direct marketing communications from us, you may opt-out by (i) following any instructions included in the communication or (ii) contacting us at the Contact Information provided below. Please be aware that although you may opt-out of update messages and/or direct marketing communications, we reserve the right to email you administrative notices regarding the Site, as permitted under the CAN-SPAM Act.

We will make commercially reasonable efforts to respond to opt-out requests and handle requests to access, update, change, or delete personally identifiable information without unreasonable delay. Please be aware that requests may be limited to the extent permitted by applicable law.

Contacting Us

If you have any questions about this Policy, the practices of this Site, or our data practices, please contact us at 800.374.6123 or [email protected].

Mobile Privacy Notice Addendum to Peoples Bank Policy

Mobile Privacy Notice

What does Peoples Bank do with your personal information from our mobile banking application? 

Our mobile application requests access to information stored on your device such as location, camera, contacts, or other features you are enrolled in. We request access to this information to enhance your mobile app user experience. Additionally, it allows us to provide enhanced security to protect your account.  All information collected is subject to our Privacy Policy which is expressly incorporated herein by reference.

What information will Peoples Bank request? 

Some examples of information your app will request access to are: 

• Location
• Contact List
• Camera
• Photos or Images

How do we use it? 

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. 

The application information is retained in accordance with state and federal record retention laws. Please contact us to determine specific timeframes for your personal stored information and if that information may be deleted. 

Questions? 

Please contact our Customer Care Center at 800.374.6123 regarding questions about the information included in this Mobile Privacy Disclosure or questions about our mobile application. 

California Privacy Rights Addendum to Peoples Bank Privacy Policy

(California Residents)

CALIFORNIA PRIVACY RIGHTS

California Residents

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”), California residents have certain rights and privileges. Please be aware that your rights (including those enumerated elsewhere in this Policy) are limited to the extent permitted by applicable law.

• Right to Access: You have the right to request a copy of the specific pieces of personally identifiable information that we have collected about you in the previous twelve (12) months. The information will be delivered by mail or electronically. Upon receipt of a Verifiable Consumer Request, as described below, we will disclose:
  • The categories of personally identifiable information we have collected about you;
  • The categories of sources from which personally identifiable information is collected;
  • Our business purpose for collecting personally identifiable information;
  • The categories of third parties with whom we share personally identifiable information, if any; and
  • The specific pieces of personally identifiable information we have collected about you.
• Right to Data Portability: You have the right to receive your information in a portable, readily usable format that allows you to transmit your information to another entity without hindrance.
• Right to Correct Inaccuracies: You have the right to request that we correct any mistakes or inaccuracies in the personally identifiable information we maintain about you.
• Right to Deletion: You have the right request that we delete your personally identifiable information.
• Right to Be Free from Discrimination: You have the right to not be discriminated against by us for exercising any of your rights under the CCPA.
• Right to Sue for Security Breaches: You also have the right to sue in the event your nonencrypted or nonredacted personally identifiable information is subject to an unauthorized access and exfiltration, theft, or disclosure as a result of the our violation of the duty to implement and maintain reasonable security procedures and practices. Prior to exercising this right, you must provide us with 30 days’ written notice by emailing us at [email protected]  and providing us with an opportunity to fix this violation.

To exercise your rights, you can submit a Verifiable Consumer Request to us by:

• Calling us at 800.374.6123;
• Emailing us at [email protected]; or
• Visiting us at https://www.peoplesbancorp.com/ccpa.

Only you, or someone legally authorized to act on your behalf, may make a Verifiable Consumer Request related to your personally identifiable information. Making a Verifiable Consumer Request does not require you to create an account with us. You may only make a Verifiable Consumer Request for access to personally identifiable information twice in a 12-month period.

The Verifiable Consumer Request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We reserve the right to ask for information verifying your identity and residency prior to disclosing any information to you or acting on your request.  Should we ask for verification, the information you provide to verify your identity and residency will be used only for that purpose, and all copies of this information in our possession will be destroyed when the process is complete. We strive to respond to your request within 45 days of receiving a verifiable consumer request however, we reserve the right to respond within 90 days when reasonably necessary. Any disclosures we provide will only cover the 12-month period preceding the Verifiable Consumer Request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to verifiable consumer requests, unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

California’s “Shine the Light” law also permits Users of the Site that are California residents to request certain information regarding our disclosure of personally identifiable information to third parties for their direct marketing purposes. To obtain this information from us, please contact us at the following email address: [email protected] and write “Request for California Privacy Personally Identifiable Information” for the subject of your message.

In the last twelve (12) months, we have disclosed the following categories of personally identifiable information and sensitive personally identifiable information to third parties for a business purpose. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract.

Information Category	Category of Third-Party Recipients
Identity Data	Affiliates, Service Providers/Contractors, Internet Cookie Data Recipients, Data Analytic Providers, Government Entities, Social Networks, Advertising Networks
Marketing and Communications Data	Affiliates, Service Providers/Contractors, Internet Cookie Data Recipients, Government Entities, Social Networks, Advertising Networks
Additional Data Subject to Cal. Civ. Code § 1798.80	Affiliates, Service Providers/Contractors, Government Entities
Online Activity	Affiliates, Service Providers/Contractors, Internet Cookie Data Recipients, Data Analytical Providers, Government Entities, Social Networks, Advertising Networks

We will not disclose or share your personally identifiable information with third parties for the purposes of third-party marketing to you without your prior consent. 

We do not currently sell personally identifiable information about Users who reside in California. We disclose for business purposes the categories of personally identifiable information identified above for the purposes more particularly described elsewhere in the Policy.