Print out Privacy Policy

Updated 12/23/2024

What does Castle Rock Bank do with your personal information?

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.

The types of personal information we collect and share depend on the product or service you have with us. This information can include:

• Social Security number and Transaction history
• Income and Overdraft history
• Account balances and Employment information

When you are no longer our customer, we continue to share your information as described in this notice.

All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Castle Rock Bank chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information

For our everyday business purposes-such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or to report to credit bureaus

For our marketing purposes-to offer our products and services to you

For joint marketing with other financial companies

For our affiliates’ everyday business purposes-information about your transactions and experiences

Reasons we do not share your personal information

For our affiliates’ everyday business purposes-we DO NOT share information about your creditworthiness

For non-affiliates to market to you-we DO NOT share information

Questions?

Call toll-free (651) 463-7590 or go to www.castlerockbank.net

What we do

How does Castle Rock Bank protect my personal information?

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

We also maintain other physical, electronic and procedural safeguards to protect this information and we limit access to information to those employees for whom access is appropriate.

How does Castle Rock Bank collect my personal information?

We collect your personal information, for example, when you

• open an account or apply for a loan
• make a wire transfer or make deposits or withdrawals from your account
• use your credit or debit card

We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.

Why can’t I limit all sharing?

Federal law gives you the right to limit only

• sharing for affiliates’ everyday business purposes – information about your creditworthiness
• affiliates from using your information to market to you
• sharing for nonaffiliates to market to you

State law and individual companies may give you additional rights to limit sharing.

Definitions

Affiliates: Companies related by common ownership or control. They can be financial and nonfinancial companies.

• Our affiliates include financial companies such as Castle Rock Agency.

Nonaffiliates: Companies not related by common ownership or control. They can be financial and nonfinancial companies.

• Castle Rock Bank does not share with our nonaffiliates so they can market to you.

Joint Marketing: A formal agreement between nonaffiliated financial companies that together market financial products or services to you.

• Our joint marketing partners include insurance companies

Other Important Information

For Alaska, Illinois, Maryland and north Dakota Customers. We will not share personal information with nonaffiliated either for them to market to you or for joint marketing – without your authorization.

For California Customers. We will not share personal information with non affiliated either for them to market to you or for joint marketing – without your authorization. We will also limit our haring of personal information about you with our affiliates to comply with all California privacy laws that apply to us.

For Massachusetts, Mississippi and New Jersey Customers. We will not share personal information from deposit or share relationships with nonaffiliated either for them to market to you or for joint marketing – without your authorization.

For Vermont Customers. We will not share personal information with nonaffiliated either for them to market to you or for joint marketing – without your authorization, and we will not share personal information with affiliates about your creditworthiness without your authorization.

GOOGLE PLAY USERS ONLY

THE TYPES OF INFORMATION WE COLLECT IN THE APP

Through your use of the Services, we may collect personal information from you in the following ways:

(a) Personal Information You Provide to Us.

• We may collect personal information from you, such as your first and last name, address, e-mail, telephone number, and social security number when you create an account.
• We will collect the financial and transaction information necessary to provide you with the Services, including account numbers, payment card expiration date, payment card identification, verification numbers, and transaction and payment history.
• If you provide feedback or contact us via email, we will collect your name and email address, as well as any other content included in the email, in order to send you a reply.
• We also collect other types of personal information that you provide voluntarily, such as any information requested by us if you contact us via email regarding support for the Services.

(b) Personal Information Collected from Third Parties. We may collect certain information from identity verification services and consumer reporting agencies, including credit bureaus, in order to provide some of our Services.

(c) Personal Information Collected Via Technology. We and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with our Services, our communications and other online services, such as:

Data/Technology	Description
Device data	such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 3G), and general location information such as city, state or geographic area.
Online activity data	such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access.
Cookies	which are text files that websites store on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns.
Local storage technologies	like HTML5 and Flash, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
Web beacons	also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked. Location Information. If you have enabled location services on your phone and agree to the collection of your location when prompted by the Services, we will collect location data when you use the Services even when the app is closed or not in use; for example, to provide our fraud detection services. If you do not want us to collect this information, you may decline the collection of your location when prompted or adjust the location services settings on your device.