Privacy Policy Rev. 5/2019 FACTS WHAT DOES SECURITY FIRST DO WITH YOUR PERSONAL INFORMATION? Financial companies choose how they share your personal information. Federal law gives Why? consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. The types of personal information we collect and share depend on the product or service you What? have with us. This information can include: Social Security number and income Assets and payment history Transaction history and credit history When you are no longer our customer, we continue to share your information as described in this notice. All financial companies need to share customers’ personal information to run their business. In How? the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Security First chooses to share; and whether you can limit this sharing. Does Security Reasons we can share your personal information Can you limit this sharing? First share? For our everyday business purposes— such as to process your transactions, maintain Yes No your account(s), respond to court orders and legal investigations, or report to credit bureaus For our marketing purposes— to offer our products and services to you Yes No For joint marketing with other financial companies No We Don't Share For our affiliates’ everyday business purposes— information about your transactions and experiences No We Don't Share For our affiliates’ everyday business purposes— No We Don't Share information about your creditworthiness For nonaffiliates to market to you No We Don't Share Questions? Call 877-339-1156 or go to www.security1stbank.com Page 2 Who we are Security First Bank Who is providing this notice? Security First Insurance What we do How does Security First To protect your personal information from unauthorized access protect my personal information? and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. How does Security First We collect your personal information, for example, when you collect my personal information? Open an account or deposit money Pay bills or apply for a loan Apply for insurance or pay insurance premiums We also collect your personal information from others, such as credit bureaus or other companies. Why can’t I limit all sharing? Federal law gives you the right to limit only sharing for affiliates’ everyday business purposes—information about your creditworthiness affiliates from using your information to market to you sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing. Definitions Affiliates Companies related by common ownership or control. They can be financial and nonfinancial companies. Security First does not share with our affiliates. Nonaffiliates Companies not related by common ownership or control. They can be financial and nonfinancial companies. Security First does not share with nonaffiliates so they can market to you. Joint marketing A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Security First does not jointly market. Other important information For California Residents. We will not share information we collect about you with non-affiliated third parties, except as permitted by California law, such as to service or process your transactions or to maintain your account.