Privacy Statement

Carrollton Bank ("we", "us", or "our") is committed to protecting your privacy. This privacy statement explains how we collect, use, disclose, and safeguard personal information when you visit our website, online banking, and mobile banking services, collectively referred to in this Statement as the “Online Services.”

Information We Collect

Through your use of Online Services, we may collect personal information about you. “Personal Information” is information that identifies or relates to you as an individual and along with other information, could identify you. We collect the following types of Personal Information:

Personal Information You Provide to Us

We may collect identification information such as your name, address, telephone number, email address, Social Security number, and birthdate, when you apply for an account with us. We may also collect your username, password, passcode, and account information when you use the Online Services.

Additional information collected may include your address or contacts where you choose to make them available.

We may collect other types of personal information that you provide voluntarily, such as any information requested by us if you contact us via email.

Information Collected from Third Parties

We may collect information from third parties, such as our service providers who assist us in providing Online Services, security, and payment processing. We also may collect certain information from identity verification services and consumer reporting agencies, including credit bureaus, to provide some of our services.

Information We Collect Via Technology

We, and our service providers, may automatically log information about you, your computer or mobile device, and your interaction with our Online Services and communications such as: device data, IP address, unique identifiers, language settings, radio/network information, and general location information. We, and our service providers, also may collect online activity relating to the details of your visit such as information about your activity on a page or screen, access times, and duration. If you have enabled location services on your phone and agree to the collection of your location when prompted by the Online Services, we will collect location data when you use the Online Services even when the app is closed or not in use. If you do not want us to collect this information, you may decline the collection of your location when prompted or adjust the location services settings on your device.

Information Collected from the Mobile Application

The mobile application requests access to information stored on your device such as location, camera, contacts, or other features you are enrolled in to enrich and simplify your own user experience and improve our services, as well as provide additional security to protect your account.

It is important for you to understand that:

Before granting access to this information, you will be prompted to give the application that permission.
If you do not wish to grant that permission, you may decline.
If you later change your mind, those permissions can be updated in your device's settings.

How We Use Your Personal Information

We may use Personal Information that we collect about you to:

Provide, manage, and improve our banking products and Online Services.
Process your online application for bank products and services.
Process your transactions and payments securely.
Communicate with you about your accounts and our services.
Personalize your experience and provide customer support.
Authenticate your identity when you use our Online Services.
Notify you of situations that may affect your ability to access one of our locations and/or services.
Comply with legal and regulatory requirements.

How We Disclose Your Personal Information

We may disclose your Personal Information collected through the use of Online Services as described below.

To service providers who help us deliver services related to your banking relationship with us.
To fulfill the purpose for which you provide it.
To financial institutions and credit bureaus for verification and credit reporting.
To government and regulatory authorities to comply with any court order, law, or legal process including to respond to any government or regulatory request.
To other parties with your consent or as necessary to protect our rights.

We do not share or sell your Personal Information with any third-party for marketing purposes.

Cookies Policy

We may use cookies, pixel tags, logs, and similar mechanisms (“Tracking Technologies”) to automatically collect information about your experience on our website and using our Online Services.

Cookies are small data files that are placed on users’ computers and devices to monitor how users interact with websites and other online services. Pixel tags, also called web beacons or single-pixel gifs, tag a graphic on a web page or in an email message to track pages viewed or email messages opened. Logs are continuous digital records of events and interactions that occur on a website. Cookies, pixel tags, logs, and similar mechanisms can be used to identify your IP address, device identifier, browser type, domain name, specific web pages through which you click and email messages you open.

We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies and other tracking technology to help us analyze how users interact with our site and our services. Visit Google’s Privacy & Terms page to learn more about Google’s privacy practices.

Right to Opt-Out of Marketing or Withdraw Consent

At any time, customers may tell us not to send optional marketing communications by email or text by clicking on the unsubscribe option within the emails you receive, replying “STOP” on text messages, or by contacting us.

If you are enrolled in any Online Service that provides text messages to you, you can opt-out of available alerts by disabling them.

Mandatory alerts that we are required to send to you cannot be disabled. Opt-out requests will not apply to information that we send you by email or text relating to your existing relationship with us.

How We Protect Your Information

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

The mobile application information is retained in accordance with state and federal record retention laws.

It is important to note that data transmission over the internet may contain security risks and any information you send online is transmitted at your own risk.

Third Party Site Disclaimer

Our website may contain links to other third-party websites that are not under our control. Carrollton Bank makes no endorsement or claims about the accuracy or content of the information contained in these sites. The security and privacy policies on these sites may be different than Carrollton Bank.

Children’s Online Privacy

Our website and social media sites are not intended for or directed to minors under 18 years of age. We do not knowingly solicit or collect online Personal Information from individuals under the age of 18.

California Residents – Notice of Collection

If you are a California resident, you may have rights related to your Personal Information under the California Consumer Privacy Act (the CCPA). The CCPA and this Notice of Collection does not apply to information that is otherwise covered by other laws, including the Gramm-Leach-Bliley Act and the Fair Credit Reporting Act.

Specifically, you may have rights that include a right to know the categories of Personal Information we collect, from what sources, the business purpose for the collection, if we share the information, and how long we retain the information. You also may have rights to request the deletion of your Personal Information, to opt out of sharing, to correct, and to not be discriminated against for exercising your rights.

During the last twelve months we may have collected the following categories of Personal Information directly from you or other sources such as service providers, and through your visits to our website and mobile applications, and through your device and browser automatically disclosing certain information to us utilizing cookies:

Identifiers such as name, signature, address, unique personal identifiers, IP address, email address, account name, social security number, driver’s license number, or passport number.
Personal Information such as bank account numbers, debit/credit card numbers, cardholder or accountholder name and details, or transaction details.
Characteristics of Protected Classifications under law such as race, ethnicity, birth date, age, gender, military/veteran status or marital status.
Commercial Information such as information related to products and services you have or applied for with us and financial information, such as account balances.
Internet or Electronic Network Activity Information such as browsing behavior, pages visited, and information viewed when accessing our Online Services.
Geolocation Data such as your location when you use an Online Service.
Audio, Electronic, Visual or Similar Information such as photographs of events, including attendees, security footage, recording of telephone calls, and electronic information, such as correspondence and information entered on our Online Services.
Professional or Employment Information such as title, salary, employer, employment files, or references.
Anonymized Behavior Insights helps us understand which pages are popular, how visitors navigate our website, or the time or times our website is accessed. Using this data, without your personal information or identifiers, helps us identify overall trends to understand how visitors use our Online Services and ways we could enhance how we provide services to you.

We collect and use Personal Information to conduct our business, which can include any of the following: communications; marketing; operating our websites and interacting with you via our websites and applications; management of IT and communication systems; financial management; physical and electronic security systems; investigations; legal and compliance requirements; improving and developing products and services; risk management programs; fraud prevention; and otherwise as needed to provide our products and services.

We retain Personal Information only as long as reasonably needed to achieve the business purposes for why the information was collected or as otherwise required by law.

We do not sell or share Personal Information for behavioral advertising purposes and have not done so in the past 12 months. We do not knowingly collect any personal information of children under 16 years of age without parental consent. We do not collect, use or disclose Sensitive Personal Information to infer any characteristics about you or in any manner that would result in a right to limit our business use of such information.

Contact Us

If you have questions about the Privacy Statement or how your information is handled, you can contact us at:

Carrollton Bank
Compliance Officer
315 Sixth St.
Carrollton, IL 62016
(888) 533-1877

Updates to This Statement

We may add to, delete, change or update information on this website at any time, without notice, and will revise the date posted at the top of this policy. Any changes to this policy will become effective when posted unless otherwise indicated. Carrollton Bank encourages our customers to revisit this policy to ensure they understand how we collect and use your information. Your use of the sites following the update to the Policy means you accept the updated Policy

Effective date October 27, 2025

Carrollton Bank

Privacy Statement