Privacy Policy

Your privacy is important to us. This Online Privacy Policy explains how we collect, share, use, and protect information when you visit or use this online service and any other online services offered by Colonial Savings, F.A. (Colonial) that link to or reference this policy (collectively, our “online services”). This policy covers Colonial’s online services, including websites, mobile applications, and Colonial-branded social media sites or pages, as well as any interactions you may have while viewing content provided through one of Colonial’s digital advertising campaigns.

As you review this Online Privacy Policy, here are a few general principles to keep in mind:

• Our online services linking to this notice are intended for a U.S audience. If you visit or use one of these online services, your information will be transferred or processed in the United States.
• Our online services are not intended for children under 13. We do not knowingly collect personal information from children under 13 without parental consent.
• If you are a U.S. consumer and have a financial product or service with us, we will use and share any information that we collect from or about you in accordance with our Privacy Notice.
• If you are a California resident, you may have rights under the California Consumer Privacy Act.
• Colonial mobile and social media sites or pages may have additional terms from this policy about the privacy of your information. Please review the privacy policy for the specific online service you are using.

We collect information about you to help us serve your financial and credit needs; to provide you with quality products and services; and to fulfill legal and regulatory requirements. We consider non-public information about you in our possession to be personally identifiable information, even if you cease to be a customer. The personally identifiable information we collect about you may include:

• Identifying and contact information, such as your:
  
  • first and last name
  • age and date of birth
  • mailing and/or property address
  • phone number
  • e-mail address
  • social security number
• Employment information
• Account access information, such as username and password
• Demographic information (such as date of birth, gender, marital status, ethnicity, race)
• Government Identifying Information, such as:
  • Social security number
  • tax identification number
  • driver’s license number
  • passport
  • other government identification numbers
• Loan account information (such as loan number)
• Bank account and credit/debit card numbers
• Other personal information needed from you to provide loan-related, credit-related, and homeownership-related services to you
• Information for fraud detection and prevention
• Financial information such as your income, assets and liabilities, as well as information about your savings, investments, insurance and business.
• Device related information, such as:
  
  • Identifier information
  • Wi-Fi Service Set Identifiers
  • Brand, Model, Orientation, RAM Free and Disk Free (for crash-related analytics)
  • Software version
  • App version
  • Crash date
  • Stack Trace
• Other computer related information (through the use of log files):
  • IP address,
  • limited geographical location,
  • browser type,
  • referral source,
  • length of visit, and
  • page views

Typically, we collect this information on applications and other forms you complete; through conversations you may have with our loan originators, processors, representatives, and agents; through our service partners; through our website, online tools, virtual chatbots, and digital applications. We may also collect information from a wide range of other sources to process and/or underwrite your loan, or otherwise provide you with loan, credit, or homeownership-related products and services. These sources may include among others, lenders, mortgage brokers, employers, attorneys, banks, title insurers, insurance companies, credit reporting agencies, and partners for which, if necessary, we will provide you notice before sharing information and/or that we obtain your consent.

We (and/or our service providers) use aggregated computer information in the administration of our website to improve its usability and to evaluate the success of particular marketing/advertising campaigns, search engine optimization strategies, and other marketing activities. We (and/or our service providers) use non-identifying and aggregated information to help optimize our website based on the needs of our users. Additionally, third parties may collect certain similar information about your computer and other pages you may visit when you visit our website, as discussed further below.

We or our service provider may collect the following information and send it to a secure sever to verify your identity when you register to use this application:

• Last Name
• Social Security Number and/or Tax Identification Number
• Loan Number
• Date of Birth
• Email Address
• Phone Number

In the event you need to reset your password, we or our service provider will use the Email Address or Phone Number you provide to verify your identity. In addition, we or our service provider may collect and share data with a vendor for multi-factor authentication purposes, including but not limited to:

• Geolocation Elements;
• Device Identifier Information;
• Phone Number;
• Local or Country Area Code; and
• Wi-Fi Service Set Identifiers.

In the event the application experiences a crash, we or our service prover may collect information about the crash to support the functionality of this application. At this time, we or our service provider use Google Firebase Crashlytics to collect such information, including:

• Device Brand, Model, Orientation, RAM free, and Disk free
• Software Version
• App Version
• Crash Date
• Stack Trace

For your convenience, Colonial offers you the ability to access some of our products and services through mobile applications (“Colonial on the Move”, “Colonial Mobile Banking” and “Colonial Mortgage Services”), and mobile-optimized websites (“Colonial Mobile”). When you interact with us through Colonial Mobile, we may collect information such as unique device identifiers for your mobile device, your screen resolution and other device settings, information about your location, and analytical information about how you use your mobile device. We may ask your permission before collecting certain information (such as precise geo-location information) through Colonial Mobile.

We may also collect information about you from additional online and offline sources including from co-branded partner sites or commercially available third- party sources, such as credit reporting agencies. We may combine this information with the personal and other information we have collected about you under this Online Privacy Policy.

We use the information discussed above in the following ways:

• Processing applications and transactions, including pulling your credit report, underwriting and settling your loan;
• Verifying your identity (such as when you access your account information);
• Preventing fraud and enhancing the security of your account or our online services;
• Responding to your requests and communicating with you (which is the primary, but not the only, reason we request your address and phone number); We collect this information with a view toward maintaining regular communications with you as may be necessary to execute loan application, loan agreement, and certain stipulations such as identity verification, income verification and employment verification; to settle your mortgage loan, and perform title, escrow, and other loan settlement processes; to assist you in a real estate mortgage origination and related real estate settlement processes; or to otherwise complete your credit, loan, or homeownership-related transaction; enabling our partners to communicate with you about the loan settlement process, and other related services and processes, and contacting you if there is a problem completing a transaction you requested or to discuss a problem with your account, loan application, transaction, or product or service request;
• Managing your preferences;
• Performing analytics concerning your use of our online services, including your responses to our emails and the pages and advertisements you view;
• Providing you tailored content and marketing messages; operating, evaluating and improving our business (including developing new products and services; improving existing products and services; performing data analytics; and performing accounting, auditing and other internal functions);
• Complying with and enforcing applicable legal requirements, relevant industry standards, contractual obligations and our policies; and
• For any other purposes that we may specifically disclose at the time you provide or we collect your information.
• Implementing collection activities as needed.
• Enabling our financial services partners to implement automatic payments and funds transfer;
• Using data that we collect on an aggregate or anonymous basis (such that it does not identify any individual customers) for various business purposes, where permissible under applicable laws and regulations.
• In addition, we gather names and email addresses of people who contact us through our website with questions about our company or lending operations. We collect this information for the sole purpose of responding to such inquiries and do not store the contact information unless requested by these people.
• In addition, as noted above, we may collect certain information to assist in authenticating you through a website or mobile application, to aid in password reset, and/or to assist with “crash” recovery.

We or our third-party partners may also use cookies, web beacons or other technologies to collect and store other information about your visit to, or use of, our online services. In addition, we may later associate the usage and other information we collect online with personal information about you.

We may deploy and use cookies, web beacons, local shared objects and other tracking technologies for the following purposes: fraud prevention and monitoring our advertising and marketing campaign performance. Some of these tracking tools may detect characteristics or settings of the specific device you use to access our online services.

• “Cookies” are small amounts of data a website can send to a visitor’s web browser. They are often stored on the device you are using to help track your areas of interest. Cookies may also enable us or our service providers and other companies we work with to relate your use of our online services over time to customize your experience. Most web browsers allow you to adjust your browser settings to decline or delete cookies, but doing so may degrade your experience with our online services.
• Clear GIFs, pixel tags or web beacons—which are typically one-pixel, transparent images located on a webpage or in an email or other message— or similar technologies may be used on our sites and in some of our digital communications (such as email or other marketing messages). They may also be used when you are served advertisements or you otherwise interact with advertisements outside of our online services. These are principally used to help recognize users, assess traffic patterns and measure site or campaign engagement.
• Local Shared Objects, sometimes referred to as “flash cookies” may be stored on your hard drive using a media player or other software installed on your device. Local Shared Objects are similar to cookies in terms of their operation, but may not be managed in your browser in the same way.

You may see advertisements when you use many of our online services. These advertisements may be for our own products or services. Which advertisements you see is often determined using the information we have about you, including information about your relationships with us (e.g., types of accounts held, transactional information, location of banking activity). Please refer to the Information We Collect section and Use of Information section to learn how we may share your information with others.

Online behavioral advertising (also known as “OBA” or “interest-based advertising”) refers to the practice of collecting information from a computer or device regarding a visitor’s web-browsing activities across non-affiliated websites over time in order to deliver advertisements that may be of interest to that visitor based on their browsing history. Through OBA, we hope to deliver advertisements that are most likely to be of interest to you using information about your other web-browsing activities (e.g., the web pages you visit, search terms you enter, and the way you move through our online services on your computer or device) or your personal profile (e.g., demographic or location information). Certain companies we work with may set cookies and use related tracking technologies, such as the clear GIFs discussed above, throughout our online services or in our communications to support these OBA efforts. If you do not want your information collected and used by the companies we work with for OBA purposes, you can opt out of this form of OBA by following the instructions in the next section.

There are two (2) ways that you can opt out of OBA from certain Colonial ads on third-party websites. One way is through the cross-industry Self-Regulatory Program for Online Behavioral Advertising managed by the Digital Advertising Alliance (DAA). To opt out of OBA, please click on the following link and follow the instructions: https://youradchoices.com.

Another way to opt out of OBA is by clicking on the Advertising Options Icon featured on certain Colonial ads on third-party websites. When clicked it (i) describes the collection and uses of data gathered at the relevant third-party website and (ii) provides a way for you to opt out of data collection and use by the third parties listed for the purposes of OBA. If you choose to opt out, our service provider will communicate your opt out election to the relevant third-party advertising partners and a cookie will be placed on your browser indicating your decision to opt out.

Bear in mind that because cookies are stored by your browser, if you use different browsers on your computer, or multiple computers and devices that have browsers and you do not wish to have cookies collect information for OBA purposes, you will need to opt out of OBA from each browser on each of the computers and devices that you use. Please note that even if you opt out of OBA, you may still receive advertisements from us; however, they won’t be customized based on your web-browsing activities on third-party websites.

Colonial may provide links to websites that are owned or operated by other companies ("third-party websites"). When you use a link online to visit a third-party website, you will be subject to that website’s privacy and security practices, which may differ from ours. You should familiarize yourself with the privacy policy, terms of use and security practices of the linked third-party website before providing any information on that website.

Colonial maintains a Record Retention Policy that governs information retention and deletion in accordance with Federal and State law and legal practice. Information regarding Colonial’s document retention and deletion practices can be found here.

We use reasonable physical, electronic, and procedural safeguards that comply with legal and regulatory standards to protect and limit access to personal information. This includes device safeguards and secured files and buildings.

Please note that information you send to us electronically may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information (such as your tax identification number) to us.

Keeping your account information up-to-date is very important. You may review, or update certain account information by logging in and accessing the Delivery Preferences feature in the Document Center Section. If you cannot change the incorrect information online, or you prefer to request changes offline, please use the Contact Us option on our site, or call or write to us using the following contact information:

Phone: 800-937-6002

Written: PO Box 1301 Fort Worth, TX 76101-1301

Keeping your account information up-to-date is very important. You may review, or update certain account

information by logging in and accessing the self-service tab. Within the self-service tab, you can update your e-mail and phone number. You can also change your address in the self-service tab by accessing Service request – a change of address form can be submitted. If you cannot change the incorrect information online, or you prefer to request changes offline, please use the Contact Us option on our site, or call or write to us using the following contact information:

Phone # 817-877-9554

Written: 2600 West Freeway Attn: Banking Division Fort Worth, Texas 76102

We may change this Online Privacy Policy from time to time. When we do, we will let you know by appropriate means such as by posting the revised policy on this page with a new “Last Updated” date. Any changes to this Online Privacy Policy will become effective when posted unless indicated otherwise.