PRIVACY POLICY NOTICE

Protecting your privacy is important to Heritage Bank & Trust and our employees. We want you to understand what information we collect and how we use it. In order to provide our customers with a broad range of financial products and services as effectively and conveniently as possible, we use technology to manage and maintain customer information. The following policy serves as a standard for all Bank employees for collection, use, retention, and security of nonpublic personal information.

What Information We Collect
We may collect “nonpublic personal information” about you from the following sources;

• Information we receive from you on applications or other loan and account forms;
• Information about your transactions with us or others and;
• Information we receive from third parties such as credit bureaus.

“Nonpublic personal information” is nonpublic information about you that we obtain in connection with providing a financial product or service for you. For example, nonpublic personal information includes information regarding your account balance, payment history and overdraft history. Nonpublic, personal information does not include that which is available from government records, widely distributed media, or government-mandated disclosures.

What Information We Disclose
We are permitted under law to disclose nonpublic personal information about you to other third parties in certain circumstances. For example, we may disclose nonpublic personal information about you to third parties to assist us in servicing your loan or account with us, to government entities in response to subpoenas, and to credit bureaus. We do not disclose any nonpublic information about you to anyone, except as permitted by law.

The bank does not now, nor does it intend in the future, to disclose any personal financial information to any nonaffiliated or affiliated third party. By law the bank may disclose certain personally identifiable information without allowing consumers the right to opt out of the bank’s sharing agreements in the following circumstances:
To companies who perform transaction processing for the bank in the following circumstances:

• If the transaction, service, or product is requested or authorized by the consumer
• To maintain or service a consumer’s account as part of a private label credit card or other loan extension program
• In connection with a securitization, secondary market sale (including servicing rights), or similar transaction related to a consumer

If you decide to close your account(s) or become an inactive customer, we will continue to adhere to the privacy policies and practices described in this notice.

ONLINE PRIVACY

Information Gathering
When you visit our website to view any page or read product information, you do so without telling us who you are and without revealing any personal information; however, we do use IP addresses to analyze trends and administer the site. IP addresses are not links to personal information. The only information that we normally collect and store is:

• The name of your Internet Service Provider
• The website that referred you to us (if any)
• The type of browser used
• The page or pages you requested

“Cookies”
We do not place “cookies” on your computer when navigating our website. A “cookie” is a piece of data stored on the user’s hard drive containing personal information about the user. If we decide to use this technology in the future, we will notify you to the extent required by law.

Forms and Applications
When you input nonpublic personal information via one of our contact forms or applications, the information is encrypted or scrambled by your browser before it is transmitted back to our website. This prevents anyone from intercepting and reading your personal information. Encryption is in place when you use your web browser with one of our secure forms and while accessing your account information.

DO NOT SEND ANY NONPUBLIC PERSONAL INFORMATION TO US IN AN E-MAIL. ENCRYPTION DOES NOT TAKE PLACE WHEN YOU SEND AN E-MAIL, WHICH IS NOT A SECURE FORM OF COMMUNICATION WITH US

E-mail
Occasionally, we may contact you via e-mail to inform you of products or services that might be of interest. WE WILL NEVER E-MAIL YOU ASKING FOR NONPUBLIC PERSONAL INFORMATION. If you decide to contact us via e-mail, we remind you that communications sent over the internet are not secure. Also, we will not send confidential information back to you in an e-mail response. We may preserve the content of your e-mail and your e-mail address for follow-up purposes. We also do this to comply with regulatory requirements.

Identity Theft
Identity theft occurs when someone uses your personal information such as your name, Social Security number, credit card number or other identifying information, without your permission to commit fraud or other crimes. A few examples of why identity thieves want your personal information include:

• To open a new credit card account, using your name, date of birth and Social Security number.
• To call your credit card issuer, pretending to be you, changing the mailing address on your account, and then run up charges on your account.
• To open a bank account in your name and write bad checks on that account.

The law provides certain rights to victims of identity theft. If you believe you are a victim of identity theft with respect to any of your accounts or transactions with us, please notify us to protect these rights: Heritage Bank & Trust, 215 S. James Campbell Blvd., Columbia, TN 38401 (931) 388-1970. Please provide as much detail as possible about the accounts or transactions in question, including any dates and account or transaction numbers that apply. We will contact you to discuss additional information necessary to resolve the matter.

Click here for more information about Identity Theft, E-mail and Online Fraud. Here you will find helpful information about how to protect yourself. You will also find additional information on what to do if you believe you are a victim of identity theft.

How Can I Protect Myself?
Here are some ideas:

• Don’t share your User ID and password with anyone that you don’t want accessing your account.
• Create a very unique password.
• Commit your password to memory. Do not write it down or share it.
• Log off when you are done with Online Banking
• Be cautious about the e-mails you reply to
• Never click on a link in an e-mail message that asks you to provide sensitive personal, financial or account information.
• If you are asked to update or verify personal or account information, call Heritage first.
• When your computer is not in use, shut it down or disconnect it from the Internet if you are not protected by a firewall.

Important Information About Procedures For Opening A New Account :
(PATRIOT ACT)
To help the government fight the funding of terrorism and money laundering activities, Federal law requires all financial institutions to obtain, verify, and record information that identifies each person who opens an account.

What this means for you: When you open an account, we will ask you for your name, address, date of birth, and other information that will allow us to identify you. We may also ask to see your driver's license or other identifying documents.