Privacy Policy Supplement for the Baker Boyer National Bank Mobile App Service

INTRODUCTION: This Privacy Policy Supplement describes the types of "Personal Information" (information that is identifiable to a particular person) that is collected (directly or through service providers) in connection with the Baker Boyer Mobile App (“App”) and related services (collectively, the "Service"). This document supplements the disclosures in the Privacy Policy that you received or acknowledged in connection with opening an account or establishing your online banking, which is required to use the App; it may be viewed at www.bakerboyer.com/privacy-policy.

DEFINITIONS:

“Affiliates” means companies related by common ownership or control. They can be financial or nonfinancial companies.

“Nonaffiliates” means companies not related by common ownership or control. They can be financial or nonfinancial companies.

“Joint Marketing” means a formal agreement between nonaffiliated financial companies that together market financial products or services to you.

ELIGIBILITY: The Service is offered only to individual residents of the United States, excluding its territories, who can form legally binding contracts under applicable law. Without limiting the foregoing, the Service is not offered to minors. Other restrictions and eligibility requirements for the Service apply as described in the App’s Terms of Use. We do not knowingly collect any Personal Information from or about individuals under 18 years of age. Please do not submit such information to us, and as a parent or legal guardian, please do not allow your children to submit Personal Information without your permission. By using the App or the Service, you represent that you meet these requirements and that you agree to the terms of this Privacy Policy.

WHAT TYPES OF PERSONAL INFORMATION WE MAY COLLECT, FOR WHAT PURPOSE, AND HOW WE COLLECT IT:

We may collect the following Personal Information about you for the purposes listed:

-Contact information about you to allow us to verify your identity and use the App: Your name, postal address, zip code, social security number, e-mail address, telephone number, and User ID. The first four pieces of information are collected from you when you open an account with us. The remaining pieces of information may be collected when you open an account or when you sign up for on-line banking services. When you use the App, this information may transfer and be available from our core processing system.

-Card Controls: We may collect Personal Information about you, which may include name, postal address, zip code, e-mail address, telephone number, account numbers, card number, expiration date or verification numbers, social security number and mobile device location. This allows you to establish and receive alerts about certain types of card transactions. For instance, you may be asked to grant permission for access to your mobile device's geolocation data to verify the location of ATM or in-store transactions.

We generally use the Personal Information to manage risks related to: (a) information maintained about you by identity verification services and consumer reporting agencies, including credit bureaus; (b) payment and other historical transaction information in which you participate through the Service; and (c) any Personal Information that you may enter into information blocks present in the App interface or made available through the Service. We also may collect information regarding your mobile device such as device settings, device identifiers, your location, and analytical information that may assist with diagnostics and performance of the Service. We do not sell your personal information or share it with third parties for joint marketing purposes.

California: Under California law, we will not share information we collect about you with Nonaffiliates, unless the law allows. For example, we may share information with your consent, to service your accounts, or to provide rewards or benefits you are entitled to. We will limit sharing among our Affiliates to the extent required by California law.

HOW WE PROTECT PERSONAL INFORMATION ABOUT YOU: To protect Personal Information about you from unauthorized access and use, when you enter sensitive information (such as a debit or credit card number or mobile phone number) into the App, we encrypt the transmission of that information using secure socket layer technology (SSL).

DATA RETENTION: We will retain, protect, use, and share Personal Information about you if it is reasonably required for the purposes described in this Privacy Policy, and as required by law, including but not limited to for risk management, regulatory compliance, and audit purposes. Generally, unless otherwise required by law, transactional information is kept no longer than seven years, and personal identifying information is kept no longer than five years after the customer relationship has ended. Data is destroyed in a manner consistent with industry practice, such that the information may not later be reconstructed.

AMENDMENTS: We may amend this policy at any time by posting a revised version on www.bakerboyer.com. The revised version will be effective immediately at the time it is posted unless a delayed effective date is expressly stated therein. You may (in our discretion) also be provided with an email notification of such amendments. If we make any change in how we use your Personal Information, we will notify you by email or by means of a notice in the App prior to the change becoming effective. You may (in our discretion) be required to affirmatively acknowledge or accept the revised Privacy Policy in order to continue using the App and the Service. Any use of the App or the Service after a notice of change will constitute your express agreement to such changes.

CONTACTING US: If you have any questions about this Baker Boyer National Bank Mobile App Privacy Policy or wish to provide updates or corrections to information about you, please contact us at (509) 525-2000 or (800) 234-7923. Our customer service hours are Monday – Thursday 9:00a-5:00p and Friday 9:00a-6:00p Pacific Time.