PRIVACY POLICY - OUR SECURITY & PRIVACY PLEDGE

At Corp Bank Trust, we have dedicated ourselves to revolutionizing the home loan process and helping individuals use their home financing options as a tool to manage their financial lives. In that effort, we respect and protect the privacy of those who visit or use our website. When we collect information from you, we want you to know how it is used. To demonstrate our commitment to fair information practices, we have adopted leading industry privacy guidelines.

By using our website, you are consenting to the use of information and agreeing to these guidelines and the other Corp Bank Trust policies described on our website.

Corp Bank Trust does not share your personal information with outside companies for their promotional use without your consent.

Because of the financial nature of our business, our websites are not designed to appeal to children under the age of 13. Therefore, we don't knowingly attempt to solicit or receive any information from children.

CORP BANK TRUST MEDIA ADVERTISING GUIDELINES

At Corp Bank Trust, we want you to be comfortable and confident when using our website. Therefore, we would like to share with you the following principles that govern our information practices and other privacy aspects of our website:

We do not make our advertising decisions based on political affiliations or in support of, or against, any political or religious group. We firmly believe in the right of free speech, however, we also believe we have an obligation to ensure our advertising does not appear in content that is detrimental to our brand values. As one of our “ISMs” states, we “Do the Right Thing” when deciding where our advertising messages will appear. This means we will not advertise within programs that consistently exploit excessive or gratuitous violence or sexuality, which demean or denigrate any religion, race, sex or which are otherwise lacking in good taste.

Should our advertising appear within programming content that violates these guidelines we will review the content in question and make decisions about the appropriateness of that program for future consideration.

EU – U.S. Privacy Shield

Corp Bank Trust participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework. Corp Bank Trust is committed to subjecting all personal data received from European Union (EU) member countries, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerce’s Privacy Shield List: https://www.privacyshield.gov/list

Corp Bank Trust is responsible for the processing of personal data it receives, under the Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf in accordance with Corp Bank Trust’s contractual obligations with its customers.. Corp Bank Trust complies with the Privacy Shield Principles for all onward transfers of personal data from the EU, including the onward transfer liability provisions.

With respect to personal data received or transferred pursuant to the Privacy Shield Framework, Corp Bank Trust is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Corp Bank Trust may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

Under certain conditions, more fully described on the Privacy Shield website https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.

CONSUMER PRIVACY:

What information does Corp Bank Trust collect from consumers?

Web Services:
In general, when a consumer accesses the Corp Bank Trust website or interfaces with the Corp Bank Trust

Platform by visiting the website or by calling a unique phone number associated with one of our Clients, Corp Bank Trust collects that consumer’s personal information if it is made available by the consumer or by a third party. Corp Bank Trust will not knowingly collect personal information from children under the age of eighteen.

Corp Bank Trust or its Clients may also set up order forms, questionnaires or other mechanisms through which a consumer may be asked to provide certain information either online or via telephone or other communication medium. Corp Bank Trust will collect such consumer-supplied personal information. If, however, such communications are initiated by one of Corp Bank Trust’s Clients and the Client collects the information, Corp Bank Trust shall not be responsible for that information, though Corp Bank Trust does endeavour to ensure that its Clients comply with privacy regulations. Participation in any of these communications is purely voluntary; any consumer not wanting to participate or provide information may decline or terminate contact by navigating away from the web page or hanging up the phone.

When a consumer responds to or views an internet advertisement served by an Corp Bank Trust Client or visits an Corp Bank Trust website, Corp Bank Trust sends one or more cookies to the consumer’s computer to uniquely identify that consumer’s browser. As is common practice of doing business on the Internet, Corp Bank Trust uses cookies to improve the quality of the Services by storing user preferences and tracking user trends and also to determine how the Services are used and navigated. Cookies that Corp Bank Trust manages on third party websites only collect data in the aggregate. While many cookies are automatically deleted at the end of a web session, Corp Bank Trust may use persistent cookies that remain on a specific browser after termination of a session. Any consumer may set their browser to refuse cookies or automatically clear cookies after termination of a session.

If you want to learn more about cookies, or how to control or delete them please visit https://www.aboutcookies.org for detailed guidance.

Phone Services:
Corp Bank Trust provides its Clients with unique telephone numbers to be used on websites, emails, mobile or offline promotions. This enables Corp Bank Trust to both determine what the consumer was viewing when making a phone call and also personalize the experience for that consumer. Corp Bank Trust’s phone servers automatically collect the caller ID results when a consumer calls a number. Corp Bank Trust may also collect usage information from third-party databases, including the name, address and/or geographic location of the caller when such information is available to analyze information to optimize its marketing and product development initiatives in order to provide a better user and Client experience.

In addition, Corp Bank Trust’s phone servers use software that may be employed on behalf of a Client to record calls. This recorded information may be evaluated in order to determine the quality of that call from the Client’s perspective and for training or other purposes. The recorded information also enables Corp Bank Trust to identify high-quality calls and collect additional usage data which help improve the Services and boost sales for Clients.

Corp Bank Trust may also use third-party services or technology for the transcription or analysis of such recorded information. In the event that Corp Bank Trust records a call on behalf of a Client, Corp Bank Trust will ensure that call participants are advised of the existence and intent of the recording in a manner consistent with applicable state and federal laws. Corp Bank Trust is not responsible in any way for the accuracy or validity of the content of any such recordings, and takes no steps to evaluate such accuracy or validity.

While Corp Bank Trust strongly encourages Clients to adopt responsible approaches to marketing, Corp Bank Trust is not responsible for the information practices of Clients or their partners. The collection, use, and disclosure of information by Clients and their partners are subject to their respective privacy policies, which may differ from Corp Bank Trust’s policy.

What are Corp Bank Trust’s reasons for collecting usage information?

Corp Bank Trust collects usage information when an internet user clicks on a link, creates a lead, initiates a phone call, receives a phone call, makes a purchase on a Client’s website, sends Corp Bank Trust or a Client a text message, receives a text message from Corp Bank Trust or a Client or makes an inquiry or a purchase during a phone call to a Client. Primarily, Corp Bank Trust collects this information for the purpose of attributing calls back to the originating ads or paying commissions to third parties and also to personalize the internet or phone user’s experience. If the internet user revisits the Client’s site directly or if the phone user calls the Client using the unique phone number again, Corp Bank Trust is able to continue to track the user’s activities on the Client’s site and compensate third parties that referred the user. Corp Bank Trust reserves the right to retain all data as long as may be reasonably necessary for accounting and audit purposes.

Like most standard Website servers, Corp Bank Trust uses log files to collect Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, platform type, date/time stamp and/or clickstream data. Corp Bank Trust may use the information to analyze site usage, administer the site, understand usage and navigation trends in aggregate, and determine the relevance of content. Corp Bank Trust may link this automatically collected data to other information it collects about consumer.

Corp Bank Trust also may develop predictive statistical user profiles of generic consumers’ needs and interests by collecting both internet browsing and online purchase data and phone user data. For improved audience targeting, some Corp Bank Trust services may use marketing technology to allow advertisers to supplement non-personally-identifying demographic information, such as age, gender, area code, or ZIP code, to the non-identifiable profile data.

Corp Bank Trust will share this information only as described herein. Corp Bank Trust will retain this personal information for as long as the Client is active or as needed to provide the Services. Corp Bank Trust may also retain and use personal information as necessary to comply with any legal obligations, resolve disputes and/or enforce agreements.

Does Corp Bank Trust share usage information with others?

Corp Bank Trust does not share consumers’ personal information with companies or individuals outside of Corp Bank Trust except as described below:

Can a consumer opt-out of providing information?

For consumers accessing the Corp Bank Trust Platform through the internet, some of its cookies may have an “opt-out” option. This process does not remove the Corp Bank Trust cookie from a consumer’s system; it simply replaces the cookie with an opt-out cookie that does not contain any unique identifiers. Some of Corp Bank Trust’s cookies do not have an “opt-out” option, but consumers always have the option of blocking the use of cookies by changing a setting in their internet browser. Corp Bank Trust does not maintain a process for an individual consumer to opt-out of an Corp Bank Trust ad serving cookie. However, any consumer may set their browser to refuse cookies or automatically clear cookies after termination of a session. If you reject cookies, you may still use our website, but your ability to use some features or areas of our website may be limited.

With regard to phone services, consumers are able to submit their phone numbers to “do-not-call” registries. Corp Bank Trust will use its best efforts to observe do-not-call registries in any call campaign it performs or facilitates. However, consumers who have opted-in to receive such messages, either with a Client or with Corp Bank Trust, shall not be subject to any do-not-call restriction.

Corp Bank Trust also partners with third-party ad networks to either display advertising on the Corp Bank Trust website or to manage its advertising on other sites. These ad network partner(s) may use cookies and web beacons to collect non-personal information about a user’s activities on websites to provide the user with targeted advertising based upon its interests. If a user wishes to not have this information used for the purpose of being served targeted ads, a user may opt-out by clicking here (or if located in the European Union click here). Please note this does not opt a user out of being served all advertising. The user will continue to receive generic ads.

As mentioned above, we may use web beacons. Web beacons are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of internet users. Unlike cookies, which are stored on a user’s computer hard drive, web beacons are embedded invisibly on websites. We tie the information gathered by web beacons to personal information we otherwise collect, and use them in our HTML-based emails to learn which emails have been opened by recipients. This allows us to gauge the effectiveness of our Clients’ marketing campaigns as well as to operate and improve the Services. You can opt-out of these emails by following the unsubscribe instructions within such marketing emails.

Can a consumer access the personal information acquired by Corp Bank Trust?

Upon request Corp Bank Trust will provide you with information about whether we hold or process on behalf of a third party, any of your personal information. To request this information please, contact us at legal@Corp Bank Trust.com.

Corp Bank Trust’s Services are not directed toward individual consumers however if a consumer would like the personal information Corp Bank Trust holds about him/her corrected, updated or deleted, please contact legal@Corp Bank Trust.com. We will respond to your request within a reasonable timeframe.

CLIENT PRIVACY

What information does Corp Bank Trust collect from its Clients?

Corp Bank Trust collects personal information from all of our Clients, which include businesses, networks, agencies, advertisers and publishers. The collection of this information is part of Corp Bank Trust’s normal business practices. Advertisers, businesses or their representatives will be asked to provide personal information through the sign up and registration process either directly by Corp Bank Trust or indirectly through a network or agency partner. This information may include name, address, phone number, hours of operation, coverage areas and email address.

Technologies such as: cookies or similar technologies are used by Corp Bank Trust and our marketing partners, affiliates, or analytics or third-party administrators. These technologies are used in analyzing trends, administering the site, tracking users’ movements around the site and to gather demographic information about the users. We may receive reports based on the use of these technologies on an individual as well as aggregated basis.

When using the Corp Bank Trust Platform, Clients may enter third-party personal information on the platform, such as entering another user’s email. This information is only used to provide the Client access to the system and is not used for any other purpose.

How does Corp Bank Trust use its Clients’ information?

Much of the information collected from Clients is required to be collected for administrative needs, such as accounting and performance reporting. Periodically, Corp Bank Trust may use Clients’ information to communicate via email newsletters or other avenues to offer strategic marketing information and other communications to assist in business-related activities. Clients can opt-out from future communications by clicking on the unsubscribe links in such emails.

Please note that under the CAN-SPAM Act, an advertiser is required to provide an opt-out mechanism for consumers to unsubscribe from future emails from the advertiser. Corp Bank Trust is committed to proper Internet practices and full compliance with the CAN-SPAM Act of 2003 (15 U.S.C. § 7701). It is Corp Bank Trust’s policy to prohibit the sending of unsolicited or “Spam” e-mail by Corp Bank Trust or any of its marketing partners.

Except as otherwise provided, Corp Bank Trust keeps all personal information provided by Clients in strict confidence and treats such data with the same level of care and respect that Corp Bank Trust treats its own proprietary information. Corp Bank Trust may, from time to time, provide personal information to certain third-party administrative vendors for efficient purposes in providing administrative or program management services. Examples include an email service provider, marketing solutions provider and a blog provider. Any third-party vendor so used has agreed to protect the confidentiality of information provided by Corp Bank Trust.

Corp Bank Trust may also share information in connection with the sale, merger, consolidation, change in control, transfer of substantial asset, reorganization or liquidation of Corp Bank Trust. In this case, Clients will be notified via a prominent notice on our website of any change in ownership or uses of Client’s personal information, as well as any choices Clients may have regarding their personal information.

Corp Bank Trust may release information when it believes release is appropriate to respond to a subpoena, bankruptcy proceedings, or similar legal process or otherwise comply with the law, to enforce or apply Corp Bank Trust’s Terms of Service and other agreements or to protect the rights, property, or safety of Corp Bank Trust or others. This includes exchanging information with other companies and organizations for fraud protection.

Can a client opt out of providing information?

Collecting information from Clients is required as a part of doing business. Corp Bank Trust’s primary intent in collecting information is for administrative purposes. However, it may periodically use collected information for marketing and communication purposes targeted to our Clients. Clients wishing not to receive such communications may do so by informing their designated Corp Bank Trust representative in writing at any time or by clicking on the unsubscribe link in the promotional communication.

We will also send you service related email announcements on rare occasions when it is necessary to do so. For instance, if our service is temporarily suspended for maintenance, we might send you an email. You do not have an option to opt out of these emails, which are not promotional in nature.

When a Client logs on to any browser-based Corp Bank Trust reporting system, a cookie is placed within their computer. The cookie allows us to validate the Client’s identity and maintain the security and privacy of the Client’s account data. This cookie does not contain any personal information. It is required to log into Corp Bank Trust’s reporting systems and there is no method to opt-out of this cookie.

If you are a Client and would like the personal information Corp Bank Trust holds about you corrected, updated or deleted, please contact legal@Corp Bank Trust.com or contact your designated Corp Bank Trust representative. Corp Bank Trust will respond to your request to access information within a reasonable timeframe.

Information Related to Data Collected through the Service

Information Related to Data Collected for our Clients:

Corp Bank Trust collects personal information only on behalf of its Clients to provide them a service. Corp Bank Trust may transfer personal information to companies that help us provide our service. Transfers to subsequent third parties are covered by the provisions in this Policy regarding notice and choice and the service agreements with our Clients. If you are a customer of one of Corp Bank Trust’s Clients and would no longer like to be contacted by a Client that uses the Corp Bank Trust Services, please contact that Client directly as that Client controls such data.

Access and Retention of Data Controlled by our Clients:

Corp Bank Trust acknowledges that you have the right to access your personal information.  Corp Bank Trust has no direct relationship with the individuals whose personal information it processes on behalf of Client. An individual who seeks access to or otherwise seeks to correct, amend or delete inaccurate personal information should direct such inquiry to Corp Bank Trust’s Client. If you do contact Corp Bank Trust regarding such a request, Corp Bank Trust will respond within a reasonable timeframe.

Corp Bank Trust retains all information we process on behalf of our Clients for as long as a Client’s account is active or as needed to provide Services to the Client. If a Client wishes to cancel an account or request that Corp Bank Trust no longer use information to provide the Services, contact legal@Corp Bank Trust.com. Corp Bank Trust will retain and use a Client’s information as necessary to comply with any legal obligations, resolve disputes and enforce any agreements.

GENERAL:

Public Forums:
Corp Bank Trust’s website offers publicly accessible blogs or community forums. Any user of the Corp Bank Trust website should be aware that any information provided in these areas may be read, collected and used by others who access these sites. Our blog is also managed by a third-party application that may require you to register to post a comment.  We moderate information posted to the blog. To request removal of any personal information from the Corp Bank Trust blog or other community forum, contact us legal@Corp Bank Trust.com. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why.

Testimonials:

Corp Bank Trust will only post Client testimonials with the Client’s consent to do so. If you wish to update or delete your testimonial, you can contact us at legal@Corp Bank Trust.com.

Frame:

Some of our pages utilize framing techniques to serve content to/from our partners while preserving the look and feel of our website. Please be aware that you are providing your personal information to these third parties and not to www.Corp Bank Trust.com.

Links to other websites:

The Corp Bank Trust website and platform may include links to other websites whose privacy practices may differ from those of Corp Bank Trust. If a user submits personal information to any of those sites, that user’s information is governed by that third party’s privacy policies. We encourage users to carefully read the privacy policy of any website it visits.

Social Media Widgets:

Corp Bank Trust’s corporate website (www.Corp Bank Trust.com) includes Social Media Features and Widgets, such as the Facebook “Like” button and the “Share This” button, or other interactive mini-programs that run on the site. These Features may collect a user’s IP address and the page a user visits on the site and may also set a cookie to enable the Feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly on the Corp Bank Trust website. A user’s interactions with these Features are governed by the privacy policy of the company providing them.

How does Corp Bank Trust protect the security of personal information?

Corp Bank Trust takes appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data. When a user enters sensitive information (such as login information), Corp Bank Trust encrypts the transmission of that information using secure socket layer technology (SSL). Any data stored on Corp Bank Trust’s servers is treated as proprietary and confidential and is not available to the public. Corp Bank Trust restricts access to personal information to those employees or third parties who have a need to know such information for the purpose of effectively delivering Corp Bank Trust products and Services by means of user login and password requirements. Corp Bank Trust routinely evaluates its data security practices to identify security threats or opportunities for improvement.

No transmission of data over the Internet or the phones is guaranteed to be completely secure. It may be possible for third parties not under the control of Corp Bank Trust to intercept or access transmissions or private communications unlawfully. While Corp Bank Trust strives to protect users’ personal information, it cannot ensure or warrant the security of any information a user transmits. If you have any questions about the security of your personal information, you can contact us at legal@Corp Bank Trust.com.

Clients and Consumers in the European Union

Location of Systems
Corp Bank Trust’s systems are based in the United States, so personal data entered in the Corp Bank Trust websites or platform, or collected through the use of the services (i) will not be processed in the European Economic Area (EEA) and (ii) will be processed by Corp Bank Trust and its service providers in the United States.  By using the services, data subjects (a) agree to and accept the terms stated in this Privacy Policy and (b) expressly consent to the processing of personal data on equipment and by service providers outside the European Economic Area.  Corp Bank Trust offers a Data Processing Addendum to Clients upon request to legal@Corp Bank Trust.com.

Controller and Processor

Corp Bank Trust is the Controller of data collected from Clients and Consumers as described in this policy, as part of normal business practices, and in order to provide, monitor and maintain services through the Corp Bank Trust Platform.  Corp Bank Trust’s Clients are the Controllers of Consumer and other data that is collected through the use of the Corp Bank Trust platform.  Corp Bank Trust is the Processor on behalf of the Clients of that data.  Corp Bank Trust will process the data according to Client instructions, which are given in the process of contracting for the services.

Basis of Processing

Where Corp Bank Trust is the Controller of data collected, it processes that data on the basis of its legitimate business interest to provide the service, and on the basis of fulfilling contractual obligations with Clients.  In some instances, Corp Bank Trust may seek consent to process data, for example, if the data will be used for marketing communications.  If Corp Bank Trust has received consent to process, then that is the basis for processing, and that consent may be withdrawn at any time.  Where Corp Bank Trust is processing data as a Processor, it follows the instructions of the Controller.

Data Subject Rights

EU data subjects have additional rights under the General Data Protection Regulation:

Where Corp Bank Trust is the Controller of the data, the data subject may withdraw consent or exercise any of these rights by contacting Corp Bank Trust at legal@Corp Bank Trust.com.  Where Corp Bank Trust is the Processor of the data, the data subject should contact the appropriate data Controller to exercise these rights.

Right to Review, Delete and Control Use of Information

Data subjects have the right to request access to, and correction or deletion of, personal information, and to request that processing of the data be stopped.  Data subjects may always opt-out of direct marketing by unsubscribing from communications, or by contacting Corp Bank Trust.  Clients may review personal information through their account.  Clients and Consumers may also contact Corp Bank Trust at legal@Corp Bank Trust.com.  Where Corp Bank Trust is the Controller of the information, it will respond to the request in a timely manner.  Where Corp Bank Trust is the Processor of the data, the data subject should contact the Controller directly to exercise these rights.

Right to Data Portability

Data subjects may obtain a copy of personal information, structured in a commonly used and machine-readable format.  If requested and when technically feasible, and where Corp Bank Trust is the Controller of the information, Corp Bank Trust will send that information via electronic means to a designated third-party. Where Corp Bank Trust is the Processor of the data, data subjects should contact the appropriate Controller to exercise this right.

Retention

Corp Bank Trust is subject to various retention requirements and retains personal data as described in this policy, for as long as necessary for a specified purpose or legal requirement, and in accordance with any applicable regulations.

How are changes made to the Privacy Policy?

Corp Bank Trust may find it necessary or be legally obligated to update this Privacy Policy from time to time. When it does update this policy, Corp Bank Trust will post those changes on this page and update the effective date so that everyone is aware of the information that is collected, how Corp Bank Trust uses it and under what circumstances Corp Bank Trust discloses it. Except as otherwise required by law, modifications to this Privacy Policy will not affect the privacy of data collected by Corp Bank Trust prior to the effective date of the policy change. If Corp Bank Trust makes any material changes, Corp Bank Trust will notify you or our Client by email (sent to the email address specified in your account) or by means of a notice within the Services platform or the corporate website prior to the changes becoming effective. Corp Bank Trust encourages all users to periodically review this page for the latest information on Corp Bank Trust’s privacy practices.

What are Corp Bank Trust’s policies regarding children and SPAM?

The Corp Bank Trust Services are not developed for or directed at children. Children (persons under the age of 18) are not eligible to do business with Corp Bank Trust and it does not collect personal information from any person it actually knows is under the age of 18. If you believe your child has provided Corp Bank Trust with any personal information, please contact legal@CorpBankTrust.com to have that user removed.

Contact Corp Bank Trust:

For more information or if you have questions or concerns regarding the Corp Bank Trust Privacy Policy, please contact legal@Corp Bank Trust.com or send correspondence to the following address: Corp Bank Trust, Inc. Attn: Privacy, 1234 Main Street, Santa Barbara, CA 93101.

Policy Updated: March 28, 2019