Privacy Policy

1. Information We Collect

We collect information to provide you with the best possible banking experience. The types of information we collect include:

Personal Identifiers

Name, address, email address, phone number, Social Security number, date of birth, and government-issued identification numbers. We collect this information when you open an account, apply for a loan or credit card, or otherwise engage with our services.

Financial Information

Account balances, transaction history, credit scores, income information, employment details, and tax information. This data is necessary for account management, lending decisions, and regulatory compliance.

Digital Information

Device identifiers, IP addresses, browser type, operating system, geolocation data, and usage patterns from our website and mobile applications.

2. How We Use Your Information

We use your information for the following purposes:

• Processing transactions and managing your accounts
• Verifying your identity and preventing fraud
• Evaluating creditworthiness for lending decisions
• Communicating account activity, alerts, and updates
• Complying with federal and state regulations (Bank Secrecy Act, USA PATRIOT Act, GLBA)
• Improving our products, services, and customer experience
• Marketing financial products and services that may be relevant to you
• Conducting internal analytics and risk management

3. Information Sharing & Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We share data with trusted vendors who assist in operations, including payment processors, cloud hosting providers, and analytics services. These providers are contractually obligated to protect your information.
• Regulatory Authorities: We may disclose information to government agencies, regulators, and law enforcement as required by law or in response to valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
• With Your Consent: We may share information with third parties when you provide explicit authorization.

4. Data Security

Keystone National Bank employs industry-leading security measures to protect your information, including:

• 256-bit AES encryption for data at rest and TLS 1.3 for data in transit
• Multi-factor authentication for account access
• Continuous monitoring and intrusion detection systems
• Regular security audits and penetration testing
• Employee security training and background checks
• FDIC-insured deposits up to $250,000 per depositor

While we implement robust security measures, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and enable multi-factor authentication on your accounts.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. For complete details, please refer to our Cookie Policy.

Essential cookies required for banking functionality cannot be disabled. You may manage optional cookies through your browser settings or our cookie preference center.

6. Your Rights & Choices

Depending on your state of residence, you may have the following rights:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete information.
• Right to Deletion: Request deletion of your personal information, subject to regulatory retention requirements.
• Right to Opt-Out: Opt out of marketing communications at any time by clicking "unsubscribe" in emails or contacting us directly.
• Right to Data Portability: Request your data in a structured, commonly used, machine-readable format.

To exercise any of these rights, please contact our Privacy Office using the information provided below.

7. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete it promptly. If you believe we have collected information from a child, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you via email or a prominent notice on our website prior to the change becoming effective. We encourage you to review this page periodically.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: