Bank of Buffalo’s Privacy Policy

Your Privacy
At Bank of Buffalo, trust has always been the foundation of our relationship with customers. Because you trust us with your financial and other personal information, we are committed to respect your privacy and safeguard that information. In order to preserve that trust, our banks pledge to protect your privacy by adhering to the practices outlined in this policy.

Information We Collect
In general, we collect nonpublic personal information about you from the following sources:

• Information we receive from you on applications to us for our products and services and on other forms that you may provide us;
• Information that we receive from processing your accounts with us and the transactions in those accounts, such as deposit accounts and loans, as well as information that we receive from providing services to you, such as funds transfer services; and
• Information we receive from a consumer reporting agency [commonly known as a credit bureau].

Regarding our website, visitors to our bank’s website remain anonymous. We do not collect identifying information about visitors to our site. We may use standard software to collect non-identifying information about our visitors, such as:

• Date and time our site was accessed
• IP address (a numeric address given to servers connected to the Internet)
• Web browser used
• City, state, and country

The banks use this information to create summary statistics and to determine the level of interest in information available on our site.

Visitors may elect to provide us with personal information via E-mail, and online registration forms. This information is used internally, as appropriate, to handle the sender’s request and may be used to furnish the sender information of interest.

We Limit and Control the Sharing of Customer Information
We do not share personal information about our customers that we obtain from a consumer reporting agency, nor do we sell personal information about our customers. However, our Banks may share limited information in certain situations as listed below.

We may disclose nonpublic personal information about you to nonaffiliated third parties as permitted, or required by law. We do not disclose nonpublic personal information about our former customers to anyone, except as permitted or required by law. Examples of circumstances permitted or required by law are:

• Processing transactions at the consumers request;
• Disclosing information with the consumers consent;
• Disclosures necessary to protect the confidentiality or security of the bank or to prevent fraud or unauthorized transactions;
• Disclosures made to persons acting in a fiduciary or representative capacity on behalf of the consumer;
• Disclosures to the bank’s accountants, attorneys, or auditors;
• Disclosures to agencies under the Federal Right to Financial Privacy Act, disclosures to bank examiners and disclosures permitted or required under the Bank Secrecy Act;
• Disclosures to consumer reporting agencies;
• Disclosures in connection with a proposed or actual sale, merger, transfer or exchange of all or a portion of a business or operating unit of the bank;
• And other disclosures to comply with federal, state or local laws.

Information Security
We maintain physical, electronic, and procedural safeguards that comply with federal standards to guard your nonpublic personal information.

Employee’s Access To Customer Information
Our employees are trained to respect customer privacy. It is the bank’s policy that information it has about its customers is highly confidential and should only be available to employees who have a need for the information to properly service a customer’s account, act upon a customer’s request or to fulfill that person’s job responsibility.

Accuracy of Customer Information
Our banks have established internal control procedures to ensure that the information it has about its customers is accurate. If you believe the account or personal information we maintain is incorrect, please contact us and we will work diligently to correct the information.