Privacy Policy

Privacy Policy

California Consumer Privacy Policy

Last Updated and Effective: April 3, 2023

Your privacy is important to us. This California Consumer Privacy Policy (“Privacy Policy”) explains how SESLOC Federal Credit Union (hereinafter “we,” “us,” or “our”) collects, shares, uses, and protects your personal information through your online and offline interactions with us.

For California residents, this Privacy Policy is adopted in accordance with the California Consumer Privacy Act of 2018 (“CCPA”) and the California Online Privacy Protection Act (“CalOPPA”), and any terms defined in the CCPA and CalOPPA have the same meaning when used in this Privacy Policy.

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information includes, but is not limited to, the following if it identifies, relates to, describes, is reasonably capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular consumer or household.

In the following instances, the rights and choices of the CCPA do not apply to you:

  • If you are not a California resident.
  • If we collected personal information covered by certain financial sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994. How we collect, share, use and protect your personal information covered under the GLBA is covered under our United States Consumer Privacy Policy.
  • Aggregate consumer information.
  • Deidentified personal information.
  • Publicly available information.

This Privacy Policy also includes references and links to our other privacy policies which serve different purposes under various laws and regulations that apply to us.

I. CATEGORIES OF INFORMATION WE COLLECT

In the preceding 12-months, we have collected the following categories of personal information (please note that some categories overlap):

Category Examples
 A. Identifiers A real name or alias; postal address; signature; home phone number or mobile phone number; bank account number, credit card number, debit card number, or other financial information; physical characteristics or description; email address; account name; Social Security number; driver’s license number or state identification card number; passport number; or other similar identifiers.
B. Personal information categories described in Cal. Civ. Code § 1798.80(e) Signature; state identification card number; physical characteristics or description; insurance policy number; education; employment or employment history; bank account number, credit card number, debt card number, or any other financial information; or medical information or health insurance information.
C. Protected classification characteristics under state or federal law Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
D. Commercial information Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
E. Biometric information Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, keystroke, gait, or other physical patterns, or health data.
F. Internet or other similar network activity Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.
G. Geolocation data Physical location or movements.  For example, city, state, country, and ZIP code associated with your IP address or derived through Wi-Fi triangulation; and, with your permission in accordance with your mobile device settings, and precise geolocation information from GPS-based functionality on your mobile devices.
H. Sensory data Audio, electronic, visual, or similar information
I. Professional or employment-related information. Current or past job history, performance evaluations, disciplinary records, workplace injury records, disability accommodations, and complaint records; Emergency contact information, such as the name, phone number, address and email address of another person in the context of having an emergency contact on file; Personal information necessary for us to collect and retain to administer benefits for you and another personal relating to you (e.g., your spouse, domestic partner, and dependents), such as their name, Social Security Number, date of birth, telephone number, email, and address.
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Educational records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
K. Sensitive Personal Information. A consumer’s social security, driver’s license, state identification card, or passport number; A consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; A consumer’s precise geolocation; A consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership; The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication; The processing of biometric information for the purpose of uniquely identifying a consumer.

II. CATEGORIES OF SOURCES OF INFORMATION WE COLLECT

We obtain the categories of personal information listed above from one or more of the following categories of sources:

a. From You or Your Authorized Agent

We may collect information directly from you or your authorized agent.  For example, when you provide us your name and Social Security number to open an account and become a member.  We also collect information indirectly from you or your authorized agent.  For example, through information we collect from our members in the course of providing services to them.

b. From Our Website and Applications That You Access on Your Mobile Device

We collect certain information from your activity on our website, on our online channels and your use of applications on your mobile device.  We may collect your IP address, device and advertising identifiers, browser type, operating system, Internet service provider (“ISP”), pages that you visit before and after visiting our website, the date and time of your visit, information about the links you click and pages you view on our website, and other standard server log information.  We may also collect your mobile device’s GPS signal, or other information about nearby Wi-Fi access points and cell towers.

i.  The Role of Cookies and Other Online Tracking Technologies

We, or our service providers, and other companies we work with may deploy and use cookies, web beacons, local shared objects and other tracking technologies for various purposes, such as fraud prevention and to promote our products and services to you. Some of these tracking tools may detect characteristics or settings of the specific device you use to access our online services.

“Cookies” are small amounts of data a website can send to a visitor’s web browser.  They are often stored on the device you are using to help track your areas of interest.  Cookies may also enable us or our service providers and other companies we work with to relate your use of our online services over time to customize your experience.  Most web browsers allow you to adjust your browser settings to decline or delete cookies, but doing so may degrade your experience with our online services.

Clear GIFs, pixel tags or web beacons—which are typically one-pixel, transparent images located on a webpage or in an email or other message—or similar technologies may be used on our sites and in some of our digital communications (such as email or other marketing messages).  They may also be used when you are served advertisements, or you otherwise interact with advertisements outside of our online services.  These are principally used to help recognize users, assess traffic patterns and measure site or campaign engagement.

“First party” cookies are stored by the domain (website) you are visiting directly.  They allow the website’s owner to collect analytics data, remember language settings, and perform useful functions that help provide a good experience.  “Third-party” cookies are created by domains other than the one you are visiting directly, hence the name third-party. They may be used for cross-site tracking, retargeting and ad-serving.  We also believe that cookies fall into the following general categories:

  • Essential Cookies: These cookies are technically necessary to provide website functionality. They are a website’s basic form of memory, used to store the preferences selected by a user on a given site. As the name implies, they are essential to a website’s functionality and cannot be disabled by users. For example, an essential cookie may be used to prevent users from having to log in each time they visit a new page in the same session.
  • Performance and Function Cookies: These cookies are used to enhance the performance and functionality of a website, but are not essential to its use. However, without these cookies, certain functions (like videos) may become unavailable.
  • Analytics and Customization Cookies: Analytics and customization cookies track user activity, so that website owners can better understand how their site is being accessed and used.
  • Advertising Cookies: Advertising cookies are used to customize a user’s ad experience on a website. Using the data collected from these cookies, websites can prevent the same ad from appearing again and again, remember user ad preferences, and tailor which ads appear based on a user’s online activities.

ii. Online Advertising & Online Behavioral Advertising

You may see advertisements when you use our online services.  These advertisements will be for our own products or services (including pre-screened offers of credit).  Which advertisements you see on our online services is often determined using the information we or our affiliates, service providers and other companies that we work with have about you, including information about your relationships with us (e.g., types of accounts held, transactional information, location of banking activity).  To that end, where permitted by applicable law, we may share with others the information we collect from and about you.

Our advertising service providers may deliver our advertisements to you on non-affiliated websites.  Such service providers control the manner in which the advertisements are delivered to you on such non-affiliated websites.  You should generally be able to opt-out of receiving such advertisements from the service provider responsible for delivering the advertisement.  Please contact us if you have any difficulty doing so.

Cross-context behavioral advertising refers to the targeting of advertising to a consumer based on the consumer’s personal information obtained from the consumer’s activity across businesses, distinctly branded websites, applications, or services, other than the business, distinctly-branded website, application, or service with which the consumer intentionally interacts.  We do not engage in cross-context behavioral advertising.

c. Third-party service providers in connection with our services or our business purposes

We collect information from third-party service providers that interact with us in connection with the services we perform or for our operational purposes.  For example, a credit report we obtain from a credit bureau to evaluate a loan application.  Another example is a third-party service provider that provides us information to help us detect security incidents and fraudulent activity.

d.  Information we collect from third-parties for a commercial purpose

We collect information from third-parties for our commercial purposes.  We partner with a limited number of third-party analytics and advertising firms. These third parties may use cookies or code processed by your browser to collect public information about your visits to our and other websites in order to provide customized experiences, advertisements or services.  These parties may also collect information directly from you by contacting you telephonically, via email or through other communication channels.  We do not disclose any information about you to such third-parties except as permitted by applicable laws and regulations, and we require such third-parties to follow applicable laws and regulations when they collect information from you to transfer such information to us.

III.    HOW WE USE YOUR PERSONAL INFORMATION

We may use or disclose personal information we collect for one or more of the following business purposes:

  • To fulfill or meet the reason for which the information is provided. For example, you apply for a loan, and we use the information in your loan application to give you the loan.
  • To provide you with information, products or services that you request from us.
  • To evaluate your candidacy for employment or for an independent contractor engagement, and to administer employment-related benefits for you, your spouse or domestic partner, and your dependents.
  • To provide you with email alerts, event registrations or other notices concerning our products or services, or events or news, that may be of interest to you.
  • To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collections.
  • To improve our website and present its contents to you.
  • For testing, research, analysis to improve our products and services and for developing new ones.
  • To protect the rights, property or safety of us, our employees, our members or others.
  • To detect security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
  • To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
  • As described to you when collecting your personal information.
  • To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of our assets, in which personal information held by us is among the assets transferred.

We also use your personal information to advance our commercial or economic interests (“commercial purpose”), such as advertising our membership, products and services, or enabling or effecting, directly or indirectly, a commercial transaction.

We do not use or disclose your sensitive personal information for any purpose other than, as reasonably necessary and proportionate, for the following purposes:

  • To perform the services or provide the goods reasonably expected by an average consumer who requests those goods and services.
  • To prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted personal information.
  • To resist malicious, deceptive, fraudulent, or illegal actions directed at the business and to prosecute those responsible for those actions.
  • To ensure the physical safety of natural persons.
  • For short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of your current interaction with the business, provided that the personal information is not disclosed to another third party and is not used to build a profile about you or otherwise alter your experience outside of your current interaction with us.
  • For our service providers or contractors to perform services on our behalf, such as maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on our behalf; provided, however, that the use of your sensitive personal information is reasonably necessary and proportionate for this purpose.
  • To verify or maintain the quality or safety of a service or device that is owned, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured for, or controlled by us; provided, however, that the use of your sensitive personal information is reasonably necessary and proportionate for this purpose.
  • To collect or process sensitive personal information where such collection or processing is not for the purpose of inferring characteristics about you.

IV.  DISCLOSURE OF PERSONAL INFORMATION

a. Disclosure for Business or Commercial Purposes

We disclose your personal information to a third-parties for our business purposes.  The general categories of third-parties that we share with are as follows:

  1. Our third-party service providers;
  2. Our affiliated websites and businesses in an effort to bring you improved service across our family of products and services, when permissible under relevant laws and regulations
  3. Other companies to bring you co-branded services, products or programs;
  4. Third parties that help us advertise products, services or membership with us to you;
  5. Third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you;
  6. Third parties or affiliates in connection with a corporate transaction, such as a sale, consolidation or merger of our financial institution or affiliated business; and
  7. Other third parties to comply with legal requirements such as the demands of applicable subpoenas and court orders; to verify or enforce our terms of use, our other rights, or other applicable policies; to address fraud, security or technical issues; to respond to an emergency; or otherwise to protect the rights, property or security of our customers or third parties.

In the preceding 12-months, we have disclosed the following categories of personal information for a business purpose and, for each category, the following categories of third-parties with whom such personal information was shared:

Category of Personal Information
(Represented in alphabetical form from the categories listed in Section I)

Category of Third-Parties
(Represented in numerical form from the categories of third-parties identified in this Section IV)

A 1, 3, 4, 5, 6, 7
B 1, 3, 4, 5, 6, 7
C 1, 3, 5, 6, 7
D 1, 3, 5, 6, 7
E 6, 7
F 1, 4, 6, 7
G 1, 4, 6, 7
H 1, 7
I 1, 6
J 1, 3, 4, 5, 6, 7

b. Disclosure for Business or Commercial Purposes

We have not shared your personal information to third-parties for cross-context behavioral advertising.

c. Selling Personal Information

It is not our policy to sell personal information and we have not done so in the preceding 12-months.

We do not have actual knowledge of selling personal information of minors under 16 years of age.

 

V.  RIGHTS AND CHOICES FOR CALIFORNIA RESIDENTS

If you are a California resident, this section describes your rights and choices regarding how we collect, share, use, and protect your personal information, how to exercise those rights, and limits and exceptions to your rights and choices under the CCPA.

a.    Exceptions

In the following instances, the rights and choices in this Section VI do not apply to you:

  • If you are not a California resident.
  • If we collected personal information covered by certain financial sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994. How we collect, share, use and protect your personal information covered under the GLBA is covered under our United States Consumer Privacy Policy. 
  • Aggregate consumer information.
  • Deidentified personal information.
  • Publicly available information.

b.    Access to Specific Information and Data Portability Rights

If the above exceptions do not apply, and you have not made this request more than twice in a 12-month period, you have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months from the date we receive your request.  Once we receive and confirm your request and verify that the request is coming from you or someone authorized to make the request on your behalf, we will disclose to you or your representative:

  • The categories of personal information we collected about you.
  • The categories of sources for the personal information we collected about you.
  • Our business or commercial purpose for collecting or selling that personal information.
  • The categories of third parties to whom we sold or disclosed the category of personal information for a business or commercial purpose.
  • The business or commercial purpose for which we sold or disclosed the category of personal information.
  • The specific pieces of personal information we collected about you in a form that you can take with you (also called a “data portability request”).

c.    Deletion Request Rights

You have the right to request that we delete any of your personal information that we collect from you and retained, subject to certain exceptions.  Once we receive and verify your request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.  We may deny your deletion request if retaining the information is necessary for us or our service providers to:

  1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
  2. Help to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for those purposes.
  3. Debug to identify and repair errors that impair existing intended functionality.
  4. Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law.
  5. Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
  6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses’ deletion of the information is likely to render impossible or seriously impair the achievement of such research, if you previously provided informed consent.
  7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us and compatible with the context in which you provided the information.
  8. Comply with a legal obligation.

d.  Right of Correction

      You have the right to request changes to any of your personally identifiable information that we have collected through our website and online services.

      e.    Exercising Access, Data Portability, Deletion and Correction Rights

      To exercise the access, data portability, and deletion rights described above, a consumer or a consumer’s authorized agent may submit a verifiable consumer request to us by either:

      • Calling us at 888-777-4986
      • Completing the CCPA Request Form available at sesloc.org/ccpa-request.
      • Visiting one of our branch locations.

      f.  General Statement Regarding Identity Verification

      In order to verify your identity in connection with a request, we will require you to provide us with your name, address, and other information about you, your accounts, or transactions that we can use to match with the information we have on file.  The amount and type of information we request may vary depending on the sensitivity of personal information covered by the request.

      We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.  Making a verifiable consumer request does not require you to create an account with us.  We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.  We will ask you to complete the CCPA Request Form which will ask you for information that will help us verify your identity.  The verification process includes matching the information you provide us with the information we have in our records.  The stringency of the verification process depends on the sensitivity of the request, whether or not the consumer is a current customer with a password-protected account, the need to prevent unauthorized access and disclosure of personal information and other factors.  Within 10-days of your submission of your CCPA request, we will notify you of any additional information we might need to verify your identity.

      An authorized agent is any person or legal entity registered with the California Secretary of State that you have authorized to act on your behalf.  If we receive a request through your authorized agent, we may require:

      1. Submission of a written document signed by you with your permission for the authorized agent to submit a verifiable request on your behalf and require the authorized agent to verify its own identity to us; or
      2. You to directly verify with us that you have provided the authorized agent to submit the request.
      3. We will not require either of the above if your authorized agent provides a copy of a power of attorney pursuant to California Probate Code sections 4000 to 4465 and we are able to verify authorized agent’s identity.

      We will deny a request from an agent that does not submit proof that they have been authorized by you to act on your behalf and cannot verify their own identity to us.

      g.    Response Timing and Format

      We endeavor to respond to a verifiable consumer request within 45 days of its receipt.  If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.  Our response may be done in the form of mailing or delivered to you electronically, and the method of the response will consider the contact information provided to us which may differ for members or non-members.

      Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt.   The response we provide will also explain the reasons we cannot comply with a request, if applicable.  For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

      We do not charge a fee to process or respond to your verifiable consumer request.

      h.    Right of Non-Discrimination

      We will not discriminate against you for exercising any of your rights in this Privacy Policy and under applicable laws.  Unless permitted by law, we will not:

      • Deny you goods or services.
      • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
      • Provide you a different level or quality of goods or services.
      • Suggest that you may receive a different price for goods or services or a different level or quality of goods or services.
      • Retaliate against you as our employee, applicant for employment, or independent contractor.

      VI.  DO NOT TRACK (“DNT”) SIGNALS

      We honor web browser DNT signals. You may elect to set your web browser to inform you when cookies are set, prevent them from being set, or enable your web browser’s DNT signal or similar mechanism.

      VII.  CCPA OPT-OUT PREFERENCE SIGNALS

      The following expresses how we address opt-out preference signals to comply with our obligations to California consumers under the CCPA.  The CCPA defines an “opt-out preference signal” as a signal that is sent by a platform, technology or mechanism, on a consumer’s behalf, that communicates the consumer’s choice to opt-out of the sale and sharing of personal information for cross-context behavioral advertising purposes and that complies with certain technical requirements.

      Since we do not sell or share your personal information for cross-context behavioral advertising purposes, we do not respond to opt-out preference signals.

      VIII.  CHANGES TO OUR PRIVACY POLICY

      We reserve the right to amend this Privacy Policy at our discretion and at any time.  When we make changes to this Privacy Policy, we will notify you by email or through a notice on our website homepage.

      IX.  CHILDREN’S ONLINE INFORMATION PRIVACY

      Our website is not intended for children under the age of 13. We do not knowingly collect, maintain, or use personally identifiable information from our website about children under the age of 13 without parental consent. For more information about the Children’s Online Privacy Protection Act (COPPA), visit the Federal Trade Commission website: www.ftc.gov.

      X.  LINKING TO THIRD-PARTY WEBSITES

      We may provide links to websites that are owned or operated by other companies (“third-party websites”).  When you use a link online to visit a third-party website, you will be subject to that website’s privacy and security practices, which may differ from ours. You should familiarize yourself with the privacy policy, terms of use and security practices of the linked third-party website before providing any information on that website.  We are not responsible for the third-party website’s use, collection, sale or sharing of your personal information.

      XI.  SECURITY

      We use reasonable physical, electronic, and procedural safeguards that comply with federal standards to protect and limit access to personal information.  This includes device safeguards and secured files and buildings.

      Please note that information you send to us electronically may not be secure when it is transmitted to us.  We recommend that you do not use unsecure channels to communicate sensitive or confidential information (such as your Social Security number) to us.

      XII.  CONTACT INFORMATION

      If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights please do not hesitate to contact us at:

      Phone: 888-777-4986
      Website:  www.sesloc.org
      Email:  [email protected]
      Mail:

      Attn: CCPA Request
      SESLOC FCU
      P.O. Box 5360
      San Luis Obispo, CA 93403-5360

      Privacy Policy

      Your Privacy is SESLOC’s Priority

      Since 1942, trust has been the cornerstone of our relationship with our members. From the beginning, we have worked diligently to safeguard members’ privacy and maintain the confidentiality of each member’s financial records, consistent with state and federal laws. The following explains our policies regarding the use and protection of information about our members.

      Facts about SESLOC and your personal information

      Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information.

      The types of personal information we collect and share depend on the product or service you have with us. This information can include:

      • Social Security number and income
      • Account balances and payment history
      • Credit history and credit score

      When you are no longer our member, we continue to share your information as described in this notice.

      All financial companies need to share customers’/members’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’/members’ personal information; the reasons SESLOC FCU chooses to share; and whether you can limit this sharing.


      Reasons we can share your personal information

      Reason Does SESLOC FCU share? Can you limit this sharing?
      For our everyday business purposes – such as to process your transactions, maintain your accounts(s), respond to court orders and legal investigation, or to report to credit bureaus. Yes No
      For our marketing purposes – to offer our products and services to you. Yes No
      For joint marketing with other financial companies No N/A
      For our affiliates’ everyday business purposes – information about your transactions and experiences No N/A
      For our affiliates’ everyday business purposes – information about your credit worthiness No N/A
      For non affiliates to market to you No N/A

       

      FACT Act Notice: We may report information about your account to credit bureaus. Late payments, missed payments or other defaults on your account may be reflected on your credit report

      Questions? Call (805) 543-1816.

      How does SESLOC FCU protect my personal information?

      To protect your information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

      We limit access to your information to employees who have a business reason to know. A Privacy Coordinator monitors compliance.

      How does SESLOC FCU collect my personal information?

      We collect your personal information, for example, when you

      • Open an account or deposit money
      • Pay your bills or apply for a loan
      • Use you credit or debit card

      We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.

      Why can’t I limit all sharing?

      Federal law gives you the right to limit only

      • Sharing for affiliates’ everyday business purposes–information about your creditworthiness
      • Affiliates from using your information to market to you

      State laws and individual companies may give you additional rights to limit sharing. SESLOC has no affiliates, so no information is shared.

      Definitions

      Affiliates – Companies related by common ownership or control. They can be financial and nonfinancial companies.

      Non affiliates – Companies not related by common ownership or control They can be financial and nonfinancial companies.

      Joint Marketing – A formal agreement between nonaffiliated financial companies that together market financial products or services to you.

      Other Important Information

      When you browse our public web site at www.sesloc.org, you do so anonymously. We do not gather user-specific information. We use browser cookies to track user sessions in order to evaluate web site effectiveness and facilitate the use of our site. Session cookies expire 20 minutes from the last time you visit the site or when you close your browser.

      Our web site may contain links to other sites. The privacy policy at these sites may be different from ours. You should review the privacy policy of these sites before providing any personal information. SESLOC FCU will never ask you to follow a link and provide personal information.

      When you log on to our secure Online Banking site and register your computer, a cookie is used for authentication purposes and remains until you unregister your computer.

      Caution: When you open an email link from our web site, information you send us is not encrypted nor secure.

      Privacy Notice

      Your privacy is important to us.  This PRIVACY NOTICE AT COLLECTION OF PERSONAL INFORMATION (“NOTICE”) supplements the information contained in the California Consumer Privacy Policy of SESLOC Federal Credit Union (“we,” “us,” or “our”) and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020.  Any terms defined in the CCPA have the same meaning when used in this notice.  This notice provides a summary of how we collect, use and share your personal information.  We encourage you to read our California Consumer Privacy Policy, which is available online at www.sesloc.org.

      I. APPLCATION OF THIS NOTICE

      This notice applies to natural residents of the State of California from whom we collect personal information in the course of their acting as a borrower, guarantor or party to a commercial loan or, for legal entity borrowers, guarantors, or parties, their individual respective owners, directors, officers, employees, or agents.

      Below are the categories of personal information we collect and the purposes for which we intend to use this information.

      II. CATEGORIES OF INFORMATION WE COLLECT

      We collect the following categories of personal information when you visit our premises, use our ATMs, complete an application for our products, services and employment with us, participate in sweepstakes that we sponsor, or through your other personal interactions with us (please note that some categories overlap):

      Category Examples
      A. Identifiers A real name or alias; postal address; signature; home phone number or mobile phone number; bank account number, credit card number, debit card number, or other financial information; physical characteristics or description; email address; account name; Social Security number; driver’s license number or state identification card number; passport number; or other similar identifiers.
      B. Personal information categories described in Cal. Civ. Code § 1798.80(e) Signature; state identification card number; physical characteristics or description; insurance policy number; education; employment or employment history; bank account number, credit card number, debt card number, or any other financial information; or medical information or health insurance information.
      C. Protected classification characteristics under state or federal law Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
      D. Commercial information

      Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies

      E. Biometric information

      Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, keystroke, gait, or other physical patterns, or health data.
      F. Internet or other similar network activity Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.
      G. Geolocation data Physical location or movements.  For example, city, state, country, and ZIP code associated with your IP address or derived through Wi-Fi triangulation; and, with your permission in accordance with your mobile device settings, and precise geolocation information from GPS-based functionality on your mobile devices.

      I. Professional or employment-related information.

      Current or past job history, performance evaluations, disciplinary records, workplace injury records, disability accommodations, and complaint records; Emergency contact information, such as the name, phone number, address and email address of another person in the context of having an emergency contact on file; Personal information necessary for us to collect and retain to administer benefits for you and another personal relating to you (e.g., your spouse, domestic partner, and dependents), such as their name, Social Security Number, date of birth, telephone number, email, and address.

      J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). Educational records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
      K. Sensitive Personal Information A consumer’s social security, driver’s license, state identification card, or passport number; A consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; A consumer’s precise geolocation; A consumer’s racial or ethnic origin, religious or philosophical beliefs, or union membership; The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication; The processing of biometric information for the purpose of uniquely identifying a consumer.

       

      Personal information for purposes of the CCPA does not include:

      • Publicly available information.
      • De-identified or aggregated consumer information.
      • Information excluded from the CCPA’s scope, like personal information covered by certain financial sector laws, such as the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA).

      III.     USE OF PERSONAL INFORMATION

      We may use or disclose personal information we collect for one or more of the following business or commercial purposes:

      • To fulfill or meet the reason for which the information is provided. For example, to process a transaction over an Automated Teller Machine (“ATM”) or, for job applicants, to evaluate your candidacy for a job and to administer employment-related benefits for you, your spouse or domestic partner, and your dependents.
      • To provide you with information, products or services that you request from us.
      • To provide you with email alerts, event registrations or other notices concerning our products or services, or events or news, that may be of interest to you.
      • To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collections.
      • To improve our website and present its contents to you.
      • For testing, research, analysis to improve our products and services and for developing new ones.
      • To protect the rights, property or safety of us, our employees, our members or others.
      • To prevent, detect and investigate security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity.
      • To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
      • To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of our assets, in which personal information held by us is among the assets transferred.
      • Advertising our membership, products and services to you.
      • Enabling or effecting, directly or indirectly, a commercial transaction.

      IV.    SELLING PERSONAL INFORMATION

      We will not sell your personal information.

      V.    SHARING PERSONAL INFORMATION FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING

      Cross-context behavioral advertising refers to the targeting of advertising to a consumer based on the consumer’s personal information obtained from the consumer’s activity across businesses, distinctly branded websites, applications, or services, other than the business, distinctly branded website, application, or service with which the consumer intentionally interacts. 

      We will not share your personal information for cross-context behavioral advertising purposes.

      VI.    RETENTION OF PERSONAL INFORMATION

      The criteria we will use to determine the period of time that we will retain the categories personal information described above depends on our relationship with you and on the following criteria:

      • Laws and regulations. We are a regulated financial institution that is subject to laws and regulations governing our retention of personal information of our members, applicants for credit union membership, loans and other financial products and services.  We are also an employer and, thus, we are subject to labor laws governing how long we must retain information about applicants for employment and current and former employees.  Therefore, applicable laws and regulations will govern how long we retain your personal information. 
      • Contracts. We must also retain information for as long as necessary to comply with our contractual duty to you as well as our contractual obligations with our service providers, contractors and other third-parties. 
      • Assert and defend against legal actions. We may retain your personal information for such period as we may need to assert and defend against potential legal actions. 

      VII.    CONTACT INFORMATION

      If you have any questions or comments about this Notice or our Privacy Policy, please do not hesitate to contact us at: 1-888-777-4986, [email protected], or P.O. Box 5360, San Luis Obispo, CA  93403-5360.  Please visit our California Consumer Privacy Policy on our website at https://www.sesloc.org/disclosure/privacy-policy for more information about the ways in which we collect and use your personal information and your choices and rights regarding such use under California law.