DISCLOSURES, POLICIES & NOTICES

Click here for Business Agreements & Disclosures (PDF)

Click here for Business Schedule of Fees & Charges (PDF)

Click for Personal Agreements & Disclosures (PDF)

Click for Personal Schedule of Fees & Charges (PDF)

Effective Date: January 1, 2020; Last Updated: June 26, 2020

Applicability

This Policy applies only to visitors and members that reside in the state of California. This Policy does not apply to information we collect, process, or disclose about California residents who apply for or obtain our financial products and services for personal, family, or household purposes (i.e., information subject to the Gramm-Leach-Bliley Act or California Financial Information Privacy Act). For more information about how we collect, use, and disclose information for members, please refer to our Federal Privacy Notice.

Your Personal Information

This policy supplements our online and mobile privacy policy. Please review that policy to learn about the information we collect, the sources from which we collect it, the purpose for collecting it, and instances where we may share it.

In the past 12 months, we have collected the following categories of Personal Information relating to California residents:

• Identifiers, such as name, address and Social Security number;

• Personal information, as defined in the California safeguards law, such as contact information and financial information;

• Characteristics of protected classifications under California or federal law, such as sex and marital status;

• Commercial information, such as transaction and account information;

• Internet or network activity information, such as browsing history and interactions with our website;

• Geolocation data, such as device location;

• Audio, electronic, visual, or similar information, such as call and video recordings;

• Professional or employment-related information, such as work history and prior employer;

• Education information, such as school and date of graduation; and

• Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences and characteristics.

The purposes for which we use Personal Information that we collect depends on our relationship or interaction with a specific California resident. We may use Personal Information to operate, manage, and maintain our business, to provide our products and services, for our employment and vendor management purposes, and to accomplish our business purposes and objectives, including, for example, using Personal Information to personalize, develop, and market our products and services, conduct research and data analysis, detect and prevent fraud, maintain our facilities, systems and infrastructure, perform accounting, audit, and other internal functions, such as internal investigations, comply with law, legal process, and internal policies, maintain business records, and exercise and defend legal claims.

In the past 12 months, we have disclosed the following categories of Personal Information relating to California residents to third parties for our business purposes:

• Identifiers, such as name and Social Security number; Personal information, as defined in the California safeguards law, such as contact information and financial information;

• Characteristics of protected classifications under California or federal law, such as sex and marital status;

• Commercial information, such as transaction and account information;

• Internet or network activity information, such as browsing history and interactions with our website;

• Geolocation data, such as device location;

• Audio, electronic, visual, or similar information, such as call and video recordings;

• Professional or employment-related information, such as work history and prior employer;

• Education information, such as school and date of graduation; and

• Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences and characteristics.

Your Rights

If you reside in California and are not a job applicant, employee or employee of another company interacting with us in your job role, you have the right to ask us what information we collect and use. You also have the right to ask what information we disclose and sell. This covers the 12 months preceding your request. You also have the right to request that we delete information we have collected from you.

To exercise your rights contact us at 800-433-9727, or use a CCPA Request form to make requests by mail or in person. Upon submission of your request, we will take steps to verify your identity. Those steps may vary depending on how you have submitted your request and your relationship to us. We will not discriminate against you because you have exercised any of your rights under the California Consumer Privacy Act. You can designate someone else to make a request by having them execute a notarized power of attorney to act on your behalf. By opting out there maybe reduced functionality or reduced access to Online and Mobile Access.

Sale of Information

Under California law we are required to tell California residents if we “sell” information as that term is defined by applicable law. Sell means to share personal information with a third party for monetary or other valuable consideration. California residents, we do not do this based on our understanding of that term. We also do not sell personal information of minors under the age of 16.

Contact Us

If you have any questions about this Policy or our data practices, please contact us toll free at 800-433-9727, or write to us at:

AltaOne Federal Credit Union, PO Box 1209, Ridgecrest CA 93556

Updates

We may change this Policy from time to time. We will notify you of any material changes to our Policy as required by law. We will also post an updated copy on our website and app. Please check our site periodically for updates.

MKT 6/26/2020

Click for Courtesy Pay Overdraft Protection Agreement & Disclosure

Click here for Credit Card Disclosures (PDF)

Click here for Credit Line Account Agreement & Disclosure (PDF)

Click for AltaOne Federal Credit Union Expulsion Policy (PDF)

Click here for AltaOne’s Federal Consumer Privacy Notice (PDF)

Our general policy is to allow you to withdraw funds deposited in your account on the same business day we receive the deposit. In some cases, we may delay your ability to withdraw funds beyond the business day of the deposit. The funds will generally be available no later than the fifth business day after the deposit.

MKT 4/5/2023

This Mobile Deposit Service Agreement ("Agreement") contains the terms and conditions for the use of AltaOne Federal Credit Union's mobile deposit capture services that AltaOne Federal Credit Union "AltaOne", "us," or "we") may provide to you ("you," or "user"). The AltaOne Member Agreements and Disclosures that includes Electronic Services Agreement and Disclosure, E-SIGN Act Consent and Disclosure, governing your AltaOne account(s), collectively the "other agreements", are incorporated by reference and integrated into this Agreement. All conflicts between this Agreement and the other agreements, hall be resolved with this Agreement controlling the outcome. "Business Day" is every Monday through Friday, 7:00 a.m. to 7:00 p.m. Pacific Time, excluding Federal Holidays. "Service" refers to AltaOne Federal Credit Union's Mobile Check Deposit Service.

Service Description: This service allows you to deposit checks into eligible AltaOne Federal Credit Union accounts from home or any remote location by taking a photograph of the items using the camera of your compatible mobile device which then delivers the check images and related deposit information to AltaOne Federal Credit Union. Compatible mobile devices must be provided and maintained at your own expense and are not the responsibility of AltaOne Federal Credit Union.

Agreement Acceptance: By using this service, you agree to abide by the terms and conditions set forth in this agreement. Please read this agreement in its entirety and keep a copy for your records.

Eligibility Requirements: To qualify for this service, you must meet criteria as established by AltaOne Federal Credit Union including being eligible for online banking services ("AltaOne Online Banking") and maintaining your accounts in good standing. We reserve the right to suspend services to a member who is not in good standing. Members whose accounts are not in good standing may be opted out of the service without prior notification from AltaOne Federal Credit Union

Eligible Items for Deposit: You agree to scan and deposit only checks drawn on financial institutions within the 50 United States. Specifically, negotiable demand drafts drawn on or payable through or at an office of a bank or credit union; A Federal Reserve Bank or a Federal Home Loan bank; The Treasury of the United States; or A state or local government that is not payable through or at a bank or credit union. Any other items not meeting this requirement must be negotiated at your local AltaOne Member Service Center or by U.S. Mail.

The following items are not eligible for deposit using the Mobile Check Deposit service. You understand and agree not to deposit the following:

*Checks payable to any person or entity other than yourself.

*Post - dated checks.

*Money orders, travelers checks or AmEx Gift Cheques.

*Checks that have been altered in any way.

*Damaged, torn or illegible checks.

*Checks you believe may be fraudulent or otherwise dishonored by the issuing financial institution for any and all reasons including but not limited to insufficient funds.

*Checks not payable in US currency.

*Checks drawn on your own AltaOne Federal Credit Union share draft account.

*Consumer loan, credit card, and mortgage payments.

*Nonnegotiable checks (whether indicated by a stamp or a watermark)

*Savings bonds

*Cash

*Returned checks

*Stale dated checks

Deposit Limits: Deposits through the Mobile Check Deposit service may be limited to a maximum of $2,500 per day. This limitation is subject to change at our discretion and may be changed and anytime without notice. Deposits exceeding any limitation amount will not be accepted through the Mobile Check Deposit service and may instead be presented at your nearest Member ServiceCenter or via U.S. postal mail.

Please contact Member Services at (800) 433-9727 with any questions concerning limitations or other questions regarding Mobile Check Deposit services.

Endorsement Requirements: You agree to properly endorse the back of the item to be deposited. The endorsement shall include "for deposit only to AltaOne", your signature, and the account number to which the item is being deposited. You understand failure to properly endorse the item could result in a delayed or rejected deposit.

Image Quality: The image of any item presented for deposit through the Mobile Check Deposit service must be clear, legible and complete. Items not meeting these criteria shall be rejected.

Provisional Credit and Availability of Funds: Funds from deposits made through the AltaOne Mobile Deposit service before 3:00 p.m. Pacific Time, Monday through Friday, will be provisionally credited to your account before close of business the same day. The first $200 of your deposits will be available immediately, any remaining funds will typically be available on the third day. AltaOne Federal Credit Union reserves the right to place a longer hold on the funds in your account and will notify you in writing if a hold is placed beyond the timeframe stated above. Deposits made through the Mobile Check Deposit service after 3:00 p.m. and on weekends or holidays will be made available before close of business the following business day. You understand that any amount credited to your account for items deposited using the service is a provisional credit and you agree to indemnify us against any loss we suffer because of our acceptance of the remotely deposited check. Initial acceptance of any deposit does not limit our ability to reverse the deposit in the event that the check is not honored or is returned by the issuing institution for any reason. Any returned check deposited will result in immediate ineligibility for continued use of this service at AltaOne's sole discretion.

Retention and Disposal of Items: By using the AltaOne Mobile Check Deposit service, you agree to retain each item no fewer than sixty (60) business days after your funds have been posted to your account. Upon receipt of these funds to your account, you agree to clearly mark the item "void" and dispose of the item in such a way that it cannot be reproduced for representment. You agree to store items in a secure location until proper disposal of said items.

Security Requirements: To prevent unauthorized usage of the Mobile Check Deposit service, you agree to ensure the security of the mobile device you own and use to access the service and limit access to your log on information.

User Warranties: By using the Mobile Check Deposit service, you warrant to AltaOne Federal Credit Union that:

*You will only transmit eligible items that are properly endorsed.

*Images will meet the image quality standards.

*You will not transmit duplicate items.

*You will not deposit or re-present the original item, by any means, once it has been scanned and sent through this service, unless specifically requested to do so by AltaOne Federal Credit Union.

*All information is accurate and true.

*You will comply with this Agreement and all applicable rules, regulations and laws.

In using our mobile deposit service, you agree to comply with all laws, statutes, regulations and ordinances, and all laws relating to the banking transactions specified in this Agreement. In addition, you agree to be bound by any and all clearing house rules, agreements, operating circulars, image exchange agreements, and other documents to which AltaOne is a party that govern the services we provide. You agree to indemnify and hold us harmless from any and all damages, liabilities, costs, expenses (including attorneys' fees) or other harm arising out of any violation thereof. This indemnity clause shall survive both the termination of your account with us and this Agreement.

Change in Terms: AltaOne Federal Credit Union reserves the right to change the terms and conditions of this service and to terminate this service at any time without further notice.

Governing Law: This Agreement is controlled and governed by the laws of the State of California without respect to choice of law provisions and except to the extent that such laws are inconsistent with controlling federal law.

Monthly Statement: All remote deposits will be indicated in your monthly account statement. You understand and agree that you are required to notify us of any error relating to images transmitted using the service by no later than sixty (60) days after you receive the first statement in which the alleged erroneous transaction appears. You are responsible for any and all errors that you fail to bring to our attention within the previously specified period.

Termination of the Service: By written request you may terminate your use of this service. AltaOne may, solely at its discretion, terminate services at any time. In the event of termination of the service, you will remain liable for all transactions performed on your account.

Confidentiality: You acknowledge and agree that confidential information may be made available to you in connection with this Agreement. You understand and agree that you are prohibited from disclosing and any all such confidential information and agree to maintain the confidentiality even after termination of services.

Waiver: No failure of either party to seek redress for any and all violations, omissions, or to insist upon strict performance of any agreement term and/or provision, or condition of service shall be deemed to constitute the waiver of the rights and remedies otherwise available to either party to seek recourse for future violations and/or omissions.

Force Majeure: By entering into this Agreement you understand and agree that we are not responsible or liable for any loss, liability, damages, expenses, or cost of any kind resulting from any delay in the service due to causes beyond our reasonable control.

Hardware and Software Requirements: In order to use the service, you must obtain and maintain, at your expense, compatible hardware and software as may periodically be specified by AltaOne. AltaOne is not responsible for any third-party software or charges you may need to use the Mobile Check Deposit Service. By downloading any software, you are subject to that third party's terms and conditions, user agreement, software agreement, and fees and charges.

Compatible mobile devices include Apple devices using iOS5 or higher and Android devices using version 2.1.1+ operating system. All devices require a camera of at least 2.0 Megapixel resolution and autofocus. AltaOne reserves the right to update or alter hardware and/or software requirements upon written notification of the same via electronic mail or on our website with a link to the amended requirements. Your continued used of the service will be considered your consent to the amended requirements.

MKT 11MAR2024

Last Updated: 06/08/2023

AltaOne Federal Credit Union Mobile Banking -powered by Fiserv – helps you control your credit and/or debit cards through your mobile device, making it easy to manage your finances on the go.

The App allows you to:

• get real-time balances for your accounts

• manage your money

• view your transactions and statements

• make transfers

• pay your bills and manage billers

• deposit a check

• receive alerts

• manage cards

This Privacy Policy, in combination with other relevant privacy notices that we provide to you (e.g., pursuant to financial privacy laws), inform you of the policies and practices regarding the collection, use and disclosure of any personal information that we and our service providers collect from or about users in connection with the App’s website and mobile application (the “Services”).

THE TYPES OF INFORMATION WE COLLECT IN THE APP

Through your use of the Services, we may collect personal information from you in the following ways:

(a) Personal Information You Provide to Us.

• We may collect personal information from you, such as your first and last name, address, e-mail, telephone number, and social security number when you create an account.

• We will collect the financial and transaction information necessary to provide you with the Services, including account numbers, payment card expiration date, payment card identification, verification numbers, and transaction and payment history.

• If you provide feedback or contact us via email, we will collect your name and email address, as well as any other content included in the email, in order to send you a reply.

• We also collect other types of personal information that you provide voluntarily, such as any information requested by us if you contact us via email regarding support for the Services.

(b) Personal Information Collected from Third Parties. We may collect certain information from identity verification services and consumer reporting agencies, including credit bureaus, in order to provide some of our Services.

(c) Personal Information Collected Via Technology. We and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with our Services, our communications and other online services, such as:

• Device data, such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 3G), and general location information such as city, state or geographic area.

• Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access.

• Cookies, which are text files that websites store on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns.

• Local storage technologies, like HTML5 and Flash, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.

• Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

• Location Information. If you have enabled location services on your phone and agree to the collection of your location when prompted by the Services, we will collect location data when you use the Services even when the app is closed or not in use; for example, to provide our fraud detection services. If you do not want us to collect this information, you may decline the collection of your location when prompted or adjust the location services settings on your device.

HOW WE USE YOUR INFORMATION COLLECTED IN THE APP

(a) General Use. In general, we use your personal information collected through your use of the Services to respond to your requests as submitted through the Services, to provide you the Services you request, and to help serve you better. We use your personal information, in connection with the App, in the following ways:

• facilitate the creation of, and secure and maintain your account;

• identify you as a legitimate user in our system;

• provide improved administration of the Services;

• provide the Services you request;

• improve the quality of experience when you interact with the Services;

• send you administrative e-mail notifications, such as security or support and maintenance advisories; and

• send surveys, offers, and other promotional materials related to the Services.

(b) Compliance and protection. We may use your personal information to:

• comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities;

• protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);

• audit our internal processes for compliance with legal and contractual requirements and internal policies;

• enforce the terms and conditions that govern the Service; and

• prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

(c) Creation of Non-Identifiable Data. The App may create de-identified information records from personal information by excluding certain information (such as your name) that makes the information personally identifiable to you. We may use this information in a form that does not personally identify you to analyze request patterns and usage patterns to enhance our products and services. We reserve the right to use and disclose non-identifiable information to third parties in our discretion.

DISCLOSURE OF YOUR PERSONAL INFORMATION

We disclose your personal information collected through your use of the Services as described below.

(a) In Accordance with Our Other Privacy Notices. Other than as described in this Privacy Policy in connection with the App, this Privacy Policy does not apply to the processing of your information by us or third parties with whom we share information.

(b) Third Party Service Providers. We may share your personal information with third party or affiliated service providers that perform services for or on behalf of us in providing the App, for the purposes described in this Privacy Policy, including: to provide you with the Services; to conduct quality assurance testing; to facilitate the creation of accounts; to optimize the performance of the Services; to provide technical support; and/or to provide other services to the App.

(c) Authorities and Others. Regardless of any choices you make regarding your personal information, The App may disclose your personal information to law enforcement, government authorities, and private parties, for the compliance and protection services described above.

LINKS TO OTHER SITES

The App may contain links to third party websites. When you click on a link to any other website or location, you will leave the App and go to another site and another entity may collect personal and/or anonymous information from you. The App’s provision of a link to any other website or location is for your convenience and does not signify our endorsement of such other website or location or its contents. We have no control over, do not review, and cannot be responsible for, these outside websites or their content. Please be aware that the terms of this Privacy Policy do not apply to these outside websites. We encourage you to read the privacy policy of every website you visit.

YOUR CHOICES REGARDING YOUR INFORMATION

You have several choices regarding use of information on the Services.

(a) How We Respond to Do Not Track Signals. Some web browsers transmit “do not track” signals to the websites and other online services with which your web browser communicates. There is currently no standard that governs what, if anything, websites should do when they receive these signals. We currently do not take action in response to these signals. If and when a standard is established, we may revise its policy on responding to these signals.

(b) Access, Update, or Correct Your Information. You can access, update or correct your information by changing preferences in your account. For additional requests, please contact us.

(c) Opting Out of Email or SMS Communications. If you have signed-up to receive our email marketing communications, you can unsubscribe any time by clicking the "unsubscribe" link included at the bottom of the email or other electronic communication. Alternatively, you can opt out of receiving marketing communications by contacting us at the contact information under "Contact Us" below. If you provide your phone number through the Services, we may send you notifications by SMS, such as provide a fraud alert. You may opt out of SMS communications by unlinking your mobile phone number through the Services.

(d) Opting Out of Location Tracking. If you initially consented to the collection of geo-location information through the Services, you can subsequently stop the collection of this information at any time by changing the preferences on your mobile device. Please note, however, that if you withdraw consent to our collection of location information, you may no longer be able to use some features of the App.

SAFEGUARDS AND RETENTION

We implement reasonable administrative, technical and physical measures in an effort to safeguard the information in our custody and control against theft, loss and unauthorized access, use, modification and disclosure. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of your information.

A NOTE ABOUT CHILDREN

The Services are not directed towards individuals under the age of 18, and we do not, through the App, intentionally gather personal information about visitors who are under the age of 18. If a child under 18 submits personal information to us through the App and we learn that the personal information is the information of a child under 18, we will attempt to delete the information as soon as possible.

PRIVACY POLICY UPDATES

This Privacy Policy is subject to occasional revision. We will notify you of any material changes in its collection, use, or disclosure of your personal information by posting a notice on the Services. Any material changes to this Privacy Policy will be effective thirty (30) calendar days following notice of the changes on the Services. These changes will be effective immediately for new users of the Services. If you object to any such changes, you must notify us prior to the effective date of such changes that you wish to deactivate your account. Continued use of the Services following notice of any such changes shall indicate your acknowledgement of such changes.

CONTACT US

If you have any questions or complaints about this Privacy Policy or The App’s data collection or processing practices, or if you want to report any security violations to The App, please contact The App by email at: AskUs@altaone.net or by mail at:

AltaOne Federal Credit Union, PO Box 1209, Ridgecrest CA 93555

MKT 6/29/2023

AltaOne Federal Credit Union ("AltaOne") understands the importance of protecting your privacy. Our goal is to maintain your trust and confidence when handling your personal information. We are committed to maintaining the confidentiality of your personal information consistent with state and federal laws. This Online Privacy Policy ("Policy'') describes how AltaOne collects, uses, shares, and protects information when you visit or use www.altaone.org ("the Website"). By using the Website, you consent to the terms and conditions of this Policy, including your consent to our use and disclosure of information about you in the manner described in this Policy. The term "us," "we" or "our" in this Policy refers to AltaOne Federal Credit Union.

Collecting, Using and Sharing Information

How We Collect Information

"Cookies" are pieces of information that are stored directly on your computer, smartphone, or other internet access device. Browser cookies are assigned by a web server to the browser on your device. When you return to a website you have visited before, your browser gives this data back to the server. When you visit the Website, we may use cookies and other tracking technologies and information gathered through their use to personalize your experience with us based on the products, services, and other interactions you have with us. Information gathered using cookies and other tracking technologies may be used to make offers to you via online ads, email, U.S. mail or telephone, subject to the privacy preferences you have on file with AltaOne. Cookies we use do not contain or capture unencrypted personal information.

The browsers of most computers, smartphones and other internet access devices are set up to accept cookies. You can refuse to accept these cookies through your browser settings. You will need to manage your cookie settings for each device and browser you use. If you choose to reject cookies, you may not be able to use the full functionality of the Website. For example, if we are not able to recognize your device, you will need to answer a challenge question each time you log on. You also may not receive customized advertising or other offers from us that may be relevant to your interests and needs.

We may also use additional technologies such as pixel tags, web beacons, and clear GIFs. We use these technologies for purposes such as measuring the effectiveness of our advertisements or other communications, determining, and viewing response rates, and determining which offers to present to you on our own or on third party sites.

How We Respond To “Do Not Track” Signals

"Do Not Track" ("DNT") refers to an HTTP header used by Internet web browsers to request a web application disable its tracking or cross-site user tracking. When DNT is enabled, a user's web browser adds a header to content requests indicating that the user does not want to be tracked. California law requires us to disclose how we respond to web browser DNT signals. We do not respond to or take any action with respect to a DNT configuration set in your internet browser, and therefore, do not disable tracking.

Personal Information We Collect

When you interact with us via our Website, we will not obtain personal information about you unless you choose to provide such information. Personal information that we may collect about you through online interaction includes information that you provide, such as your name, mailing address, email address and other contact information; data resulting from your activity, such as transaction information; and limited location information (for example, a zip code to help you find a nearby ATM). We may also collect payment card information, social security numbers, and driver's license numbers when you provide such information while using our Website.

We will retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Other Information We Collect

In addition to the personal information described above, we also collect anonymous demographic information, which is not unique to you, such as your ZIP code, region, preferences, interests, favorites, and location if you access using the AltaOne Mobile Banking App. We may also automatically collect information about your computer hardware, such as the IP address of the device you use to connect to the Website, the type of operating system and browser you use, search engine used, access times, referring website addresses, the parts of our Website you access, and the site you visit next.

Third Party Widgets

We may allow certain widgets (e.g., social share buttons) on our Website that allow users to easily share information on another platform, such as a social media platform. The third parties that own these widgets may have access to information about your browsing on pages of our Website where these widgets are placed. You may wish to review information at the third-party sites, such as social media platforms where you have an account, to determine how these third parties collect and use such information.

How We Use Information

In addition to the uses described above, we use the information for purposes as allowed by law, such as:

• To process applications and transactions; To service your accounts with us;

• To send you important information regarding the Website, changes to terms, conditions and/or policies;

• To track Website usage, such as number of hits, pages visited, and the length of user sessions in order to evaluate the usefulness of our Website;

• To verify your identity (such as when you access your account information); To respond to your requests and to communicate with you;

• To send you marketing communications that we believe may be of interest to you; To allow you to participate in surveys, sweepstakes, contests and similar promotions;

• For our business purposes, including data analysis, developing and improving our products and services, and enhancing our Website;

• To prevent fraud and enhance the security of our Website.

How We Share Your Information with Third Parties

If you are a AltaOne member, we will use and share any information that we collect from or about you in accordance with our Privacy Notice and our Opt-Out Notice, which offers you certain choices with respect to the use and sharing of your personal information. Please click this link to see our Privacy Notices and information on Opting-Out.

AltaOne may share the information we collect from and about you with service providers with whom we work, such as data processors and companies that help us market products and services to you. When permitted or required by law, we may share information with additional third parties for purposes including response to legal process. Where appropriate, we will limit sharing of your information in accordance with the choices you have provided us in response to our Privacy Notice and Opt-Out Notice.

AltaOne uses Google Analytics to understand the way that visitors to our website interact with it. We have enabled the following Google Analytics advertising features: Remarketing with Google Analytics, Google Display Network Impression Reporting, Google Analytics Demographics and Interest Reporting, Integrated services that require Google Analytics to collect data for advertising purposes, including the collection of data via advertising cookies and identifiers.

We use Google AdWords re-marketing technology to market our website throughout the Internet. We place a cookie on your browser, and Google reads these cookies and may serve an ad on third-party website, after you have visited our website. If you do not want information collected using cookies, there is a simple procedure in most browsers that allows a customer to deny or accept the cookie feature; however, as aforementioned, you should note that the cookies may be necessary for a user to access and use certain features available on our website. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-On. Additional information regarding the Google Analytics Opt-Out Browser Add-On may be found at www.tools.google.com/dlpage/gaoptout . You may opt out of ad serving on Google's opt-out page through your Google account.

We also utilize Facebook Advertising re-marketing technology to market our website throughout the Internet. Facebook may use cookies, web beacons, and similar technologies to collect or receive information from our website and other websites using that information to provide measurement service s and ad targeting. You can opt out of the collection and use of information for ad targeting by following Facebook's published opt-out instructions which are available on Facebook's help center. Additionally, you may be able to opt out of additional web-tracking technologies via the Digital Advertising Alliance's consumer choice page.

The only unaffiliated third-party business partner with whom we currently share your personal non- public information is with our Accidental Death and Dismemberment (AD&D) insurance provider(s). They share the same standards for protecting the information we have about you, and they follow strict confidentiality requirements. Our AD&D provider(s) are a professional organization that serves thousands of credit unions. AD&D insurance provides you the opportunity to take advantage of free members-only insurance, as well as purchase additional coverage.

We only provide our AD&D insurance provider(s) with sufficient information to uniquely identify you, so they can mail you information that we consider to be of benefit to you. We do not provide any of your account details, such as PINs, balances, or transaction records at AltaOne; nor do we provide your Social Security Number.

You have the right to opt out of information sharing with our AD&D provider(s). Please see section, "Your Opportunity To Opt Out," for information on how to exercise your opt out election.

Children’s Online Information Policy

Our website is not intended for children under the age of 13. We do not knowingly collect, maintain, or use personally identifiable information from our Website about children under the age of 13 without parental consent. For more information about the Children's Online Privacy Protection Act (COPPA), visit the Federal Trade Commission website: www.ftc.gov.

Updating Your Personal Information

Keeping your account information up to date is important. You can access and/or update your personal information in connection with your account or application by logging on to your account online or telephoning our Call Center at toll free at 1-800-433-9727.

Security

To protect your personal information from unauthorized access and use, we use security measures that comply with applicable federal and state laws. These measures may include administrative, technical, and physical controls intended to safeguard data from misuse, unauthorized access or disclosure, loss, alteration, or destruction. We also limit access to your personal information to those who need it to do their jobs. However, no data transmission over the internet or other networks can be guaranteed 100% secure. As a result, while we endeavor to protect information transmitted on or through our website, we cannot guarantee the security of any information you transmit through the website, and you do so at your own risk.

Linking to Other Websites

The AltaOne Website may contain links to third party websites. Although these links were established to provide you with access to useful information, AltaOne does not control and is not responsible for any of these websites, their practices, or their contents. We do not know or control what information third-party websites may collect regarding your personal information. AltaOne provides these links to you only as a convenience, and AltaOne does not endorse or make any representations about using such third-party websites or any information, software or other products or materials found there, or any results that may be obtained from using them. We encourage you to review the privacy statements of websites you choose to link to from the AltaOne Website so that you can understand how those websites collect, use, and share your information. AltaOne is not responsible for the security or privacy practices of the linked websites, and you use them at your own risk.

Updates to this Online Privacy Policy

From time to time, we may change this Policy. The effective date of this policy, as indicated above, reflects the last time this Policy was revised. Any changes to this Policy will become effective when we post the revised Policy on our Website. Your use of the Website following these changes means that you accept the revised Policy.

MKT 6/13/2023

To help the government fight the funding of terrorism and money-laundering activities, Federal law requires all financial institutions to obtain, verify, and record information that identifies each individual or entity that opens an account.

What this Means for You

When you open an account, we will ask for your name, address, date of birth, and other information, which allows us to identify you. We may also ask to see your driver’s license or other identifying documents. In addition, on legal entity accounts, we will require identification for Beneficial Owners and Controlling Persons.

All New Accounts are Opened Using ChexSystems

ChexSystems, Inc. is a nationwide specialty consumer reporting agency and an indirect, wholly-owned subsidiary of FIS.

MKT 4/5/2023

IMPORTANT NOTICE:

Regulation D

The Federal Regulation D limits the number of transfers / withdrawals from your share (savings) or Traditional Money Market accounts to a combined total of six (6) transactions per calendar month. Checks that require an overdraft transfer from share (savings) accounts will count as one (1) Regulation D transfer for all checks clearing that day. The six (6) transactions may be made by any combination of the following: check, draft, debit card or transfers to third parties.

To avoid returned checks and subsequent fees, please keep track of transfers or withdrawals from your share (savings) or Traditional Money Market accounts. Per Regulation D, checks requiring an overdraft transfer from share (savings) accounts must be denied once the maximum of six (6) per month has been reached.

There are no limitations on the number of transfers or withdrawals made through an ATM, by mail, direct deposit, messenger requested in person at any AltaOne location or telephone requests if a check is mailed. Overdraft transfers from a Visa® line of credit are not subject to Regulation D, and are also unlimited, subject to the approved credit limit.

The following types of transactions are subject to Regulation D and will be individually counted against the transfer and withdrawal limit from shares (savings) or Traditional Money Market:

• VoiceOne audio response transfers

• AltaOne Online Banking transfers

• Overdraft transfers from share (savings) accounts

• Pre-authorized or automated third party withdrawals, and ACH/Electronic debits directly from share (savings) accounts

• Telephone transfers from share (savings) or Traditional Money Market accounts to other accounts at the credit union, and transfers to other financial institutions

• Wire transfers initiated by phone

• Checks or drafts written from Traditional Money Market

MKT 4/2017

This credit union participates in a shared branch network with other credit unions and accepts deposits for members of those other credit unions. While this credit union is federally insured, not all of these other credit unions are federally insured. If you need information on the insurance status of your credit union, please contact your credit union directly.

MKT 4/5/2023