|
Privacy Statement
We, our, and us, when used in this policy, mean Colombo Bank.
This is our Privacy Policy for our customers. When we use the words "you" and "your" we mean the following types of customers:
- Our consumer customers who have a continuing relationship by purchasing or holding financial products or services such as a(n):
- Deposit Account
- Loan Account
- Mortgage Brokerage services
We will tell you the sources of the information we collect about you. We will tell you what measures we take to secure that information.
|
We first define some terms.
- Nonpublic personal information means information about you that we collect in connection with providing a financial product or service to you. Non public personal information does not include information that is available from public sources, such as telephone directories or government records. Hereafter, we will use the term "information" to mean nonpublic personal information as defined in this section.
- An affiliate is a company we own or control, a company that owns or controls us, or a company that is owned or controlled by the same company that owns or controls us. Ownership does not mean complete ownership, but means owning enough to have control.
- A nonaffiliated third party is a person we do not employ or a company that is not an affiliate of ours. This is also known as nonaffiliated third party, or simply as "other party."
|
The Information We Collect
We collect information about you from the following sources:
- Information you give us on applications or other forms.
- Information about your transactions with us.
- Information about your transactions with other parties.
- Information from a consumer reporting agency.
|
The Confidentiality, Security, and Integrity of Your Information
We restrict access to information about you to those employees who need to know that information to provide products or services to you. We maintain physical, electronic, and procedural safeguards to protect this information.
|
Your Information and Other Parties
We will not disclose information about you to anyone except as disclosed in this policy or as permitted by law. Examples of this might include disclosures necessary to service your account or prevent unauthorized transactions.
|
Information About Former Customers
We do not disclose information about former customers, except as permitted by law.
|
Your Information and Affiliates - Future Changes
In the future, we may disclose information about you to affiliates, even though we are not doing so now. Here are the kinds of information we may disclose to our affiliates:
- Your transaction and experience information from our account records with us, such as:
- Name
- Address
- Account Balances
- Account Activity
- Types of accounts
- Payment History
- Deposit History
Federal Law allows us to disclose the information listed above with our affiliates. You do not have a right to opt out of the disclosure of this information.
|
Types of Affiliates
We may disclose information about you in the future to the following types of affiliates:
- Financial service providers, such as:
|
Online Banking
Visitors to Colombo Bank's Website remain anonymous. We do not collect identifying information about visitors to our
site. We may use standard software to collect non-identifying information about our visitors, such as:
- Date and time our site was accessed
- IP address (A numeric address given to servers connected to the Internet)
- Web browser used
- City, state, and country
The bank uses this information to create summary statistics and to determine the level of interest in information
available on our site. Visitors may elect to provide us with personal information via E-mail, online registration
forms, or our guest book. This information is used internally, as appropriate, to handle the sender's request. It is not
disseminated or sold to other organizations.
Some areas of our Website may use a "cookie" temporarily stored in the visitor's computer memory (RAM) to allow
the web server to log the pages you use within the site and to know if you have visited the site before.
|
Security Statement
This Internet Banking System brings together a combination of industry-approved security technologies to protect
data for the bank and for you, our customer. It features password-controlled system entry, an ITI host-based
password verification system, Secure Sockets Layer (SSL) protocol for data encryption, and a router loaded with a
firewall to regulate the inflow and outflow of server traffic.
|
Secure Access and Verifying User Authenticity
To begin a session with the bank's server, the user must key in a Log-in ID and a password. Our system, the Internet
Banking System, uses a "3 strikes and you're out" lock-out mechanism to deter users from repeated login attempts.
After three unsuccessful login attempts, the system locks the user out, requiring either a designated wait period or a
phone call to the bank to verify the password before re-entry into the system. Upon successful login, the Digital ID
from VeriSign, the experts in digital identification certificates, authenticates the user's identity and establishes a
secure session with that visitor.
|
Secure Data Transfer
Once the server session is established, the user and the server are in a secured environment. Because the server has
been certified as a 128-bit secure server, data traveling between the user and the server is encrypted with Secure
Sockets Layer (SSL) protocol. With SSL, data that travels between the bank and customer is encrypted and can only
be decrypted with the public and private key pair. In short, the bank's server issues a public key to the end user's
browser and creates a temporary private key. These two keys are the only combination possible for that session.
When the session is complete, the keys expire and the whole process starts over when a new end user makes a server
session.
|
Router and Firewall
Requests must filter through a router and firewall before they are permitted to reach the server. A router, a piece of
hardware, works in conjunction with the firewall, a piece of software, to block and direct traffic coming to the
server. The configuration begins by disallowing ALL traffic and then opens holes only when necessary to process
acceptable data requests, such as retrieving web pages or sending customer requests to the bank.
Using the above technologies, your Internet banking transactions are secure.
|
