Privacy

Rev. May 2018

FACTS	WHAT DOES COMMUNITY BANK OF SANTA MARIA DO WITH YOUR PERSONAL INFORMATION?
Row intentionally left blank
Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
Row intentionally left blank
What?	The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security number and income Credit history and account information Employment information and wire transfer instructions When you are no longer our customer, we continue to share your information as described in this notice.
Row intentionally left blank
How?	All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons Community Bank of Santa Maria chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information	Does Community Bank of Santa Maria Share?	Can you limit this sharing?
For our everyday business purposes: Such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus	Yes	No
For our marketing purposes: to offer our products and services to you	Yes	No
For joint marketing with other financial companies	No	We don't share
For our affiliates' everyday business purposes: information about your transactions and experiences	No	We don't share
For our affiliates' everyday business purposes: information about your creditworthiness	No	We don't share
For nonaffiliates to market to you	No	We don't share

Questions?	Call (805) 922-2900 or go to www.yourcbsm.com

Who we are
Who is providing this notice	Community Bank of Santa Maria
What we do
How does Community Bank of Santa Maria protect my personal information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. We also maintain other physical, electronic, and procedural safeguards to protect this information and we limit access to information to those employees for whom access is appropriate.
How does Community Bank of Santa Maria collect my personal information?	We collect your personal information, for example, when you Open an account or apply for a loan Make deposits or withdrawals from your account or give us your contact information Make a wire transfer We also collect your personal information from others, such as credit bureaus or other companies.
Why can't I limit all sharing?	Federal law gives you the right to limit only: sharing for affiliates' everyday business purposes - information about your creditworthiness affiliates from using your information to market to you sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing. [See below for more on your rights under state law.]
Definitions
Affiliates	Companies related by common ownership or control. They can be financial and non-financial companies. Community Bank of Santa Maria has no affiliates.
Nonaffiliates	Companies not related by common ownership or control. They can be financial and nonfinancial companies. Community Bank of Santa Maria does not share with nonaffiliates so they can market to you.
Joint marketing	A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Community Bank of Santa Maria doesn't jointly market.

Other Important Information
Special Notice For State Residents We will not share personal information with nonaffiliates either for them to market to you or for joint marketing - without your authorization. We will also limit our sharing of personal information about you with our affiliates to comply with California privacy laws that apply to us.

_____________________________________________________________________________________________________________________________________________________________________________

eBanking Privacy Statement

This eBanking Privacy Statement describes the types of information that is collected, directly or through service providers, in connection with the download and use of our mobile application ("App") and its related services (collectively, "Services") offered by Community Bank of Santa Maria ("Bank"). This statement is intended to supplement the Bank’s Online Banking Disclosure and Agreement, Privacy Policy, and disclosures that you have been provided in connection with other account products and services provided by the Bank.

Information Collected and Why
The App may request your permission to access information, media, or features on your mobile device, such as location, camera, and/or contacts to utilize some features you have enrolled in and enhance your user experience and app functionality. Some information is collected automatically and does not require any action on your part.

The type of information we may collect regarding your mobile device can include:

Permission	Function
Access to storage	Allows access to files/images/media on the device for mobile remote deposit, electronic statements, Secure Message attachments, and receipt images. Attachments received through download are saved on device.
Camera	Allows access to the device’s camera for mobile remote deposit capture.
Contacts	Allows access to contacts on device for Account to Account payments.
Images	Allows the collection of images for mobile remote deposit and is used/shared for deposit processing.
Location	Allows access to your location for maps and directions to branches and ATM locations. Your device location is shared with a third-party map provider. Geolocation data is used to prevent fraudulent debit card activity.
Notifications	Allows application to receive real-time alert notifications for requested account events and one-time passcodes for login authentication.
Other	Device settings and unique identifiers for risk and fraud evaluation as well as analytical information that may assist with diagnostics and performance.

If you do not wish to grant certain permissions, you may decline. When declining, some of the functions of the App may not be available (e.g., if you decline access to your camera, then you will not be able to deposit a check via the App). If you later change your mind, those permissions can be updated in your device's settings.

Please contact the Bank regarding questions about the information included in this eBanking Privacy Statement by calling (805) 922-2900.