Privacy Policy

How we collect, use, share, and protect your personal and financial information.

Effective Date: January 1, 2026
Last Revised: January 1, 2026

FACTS: WHAT DOES COMMUNITY REGIONAL BANK DO WITH YOUR PERSONAL INFORMATION?

Federal law requires us to tell you how we collect, share, and protect your personal information. Federal law also gives you the right to limit some, but not all, sharing. This privacy notice is provided to you pursuant to the Gramm-Leach-Bliley Act (GLBA) and its implementing regulations, including Regulation P (12 CFR Part 1016). Please read this notice carefully to understand what we do with the information we collect.

1. Why We Collect Personal Information

Financial companies choose how they share your personal information. Under federal law, that means personally identifiable financial information about you. All financial companies need to share customers' personal information to run their everyday business. In the sections below, we list the reasons financial companies can share their customers' personal information, the reasons Community Regional Bank chooses to share, and whether you can limit this sharing.

2. Information We Collect

We collect your personal information when you:

  • Open an account or apply for a loan
  • Make deposits, withdrawals, or transfers
  • Pay your bills or apply for financing
  • Use your debit card for purchases
  • Provide account information to us through any channel (in person, online, by phone, or by mail)

The types of personal information we collect and share depend on the product or service you have with us. This information can include:

  • Social Security number and government-issued identification
  • Account balances, transaction history, and payment history
  • Credit history, credit scores, and income information
  • Employment information and assets
  • Contact information including address, phone number, and email

3. How We Share Your Information

For Our Everyday Business Purposes

We share your information as necessary to process your transactions, maintain your account(s), respond to court orders and legal investigations, and report to credit bureaus. You cannot limit this sharing.

For Our Marketing Purposes

We may use your information to offer our products and services to you. This includes information about new account types, loan products, and digital banking features. You cannot limit this sharing.

For Joint Marketing

We may share your information with other financial companies with which we have formal agreements to jointly market financial products to you, such as insurance or investment products. You can limit this sharing.

For Our Affiliates' Everyday Business Purposes

Community Regional Bank does not have any affiliates. This does not apply.

For Nonaffiliates to Market to You

Community Regional Bank does not share your personal information with nonaffiliated third parties for their marketing purposes. This does not apply.

4. Your Right to Limit Sharing

You have the right to limit our sharing of your personal information for joint marketing purposes. To limit sharing, or if you have questions about your privacy choices, you can:

  • Call us at (417) 555-0300
  • Visit any of our five branch locations
  • Write to us at: Community Regional Bank, Attn: Privacy Officer, 450 Main Street, Springfield, MO 65806

Please note: if you are a new customer, we can begin sharing your information 30 days from the date we provide this notice. When you are no longer our customer, we continue to share your information as described in this notice. However, you can contact us at any time to limit sharing.

5. How We Protect Your Information

To protect your personal information from unauthorized access and use, we employ security measures that comply with federal law and banking industry best practices. These measures include:

  • Computer safeguards including firewalls, encryption, and intrusion detection systems
  • Secure physical facilities with restricted access to areas where customer information is stored
  • Employee access controls, including background checks and security training for all employees who handle customer information
  • Multi-factor authentication for online and mobile banking access
  • Continuous monitoring of systems for unauthorized access attempts
  • Regular third-party security assessments and penetration testing
  • An incident response plan to quickly address any data security events

6. Online and Mobile Banking Privacy

When you use our online banking platform or mobile banking application, we may collect additional information including:

  • Device identifiers (device type, operating system, browser type)
  • IP address and approximate geographic location
  • Login timestamps and session activity
  • Mobile device permissions used (camera for mobile deposit, location for branch finder)

This information is collected to protect your accounts from unauthorized access, to improve our digital banking services, and to comply with regulatory requirements. We do not sell this information to third parties.

7. Cookies and Website Tracking

Our website (crbanking.com) uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and analyze site traffic. You may configure your browser to decline cookies, although doing so may limit the functionality of certain features on our website. We do not use cookies to collect personally identifiable financial information such as account numbers or balances.

8. Children's Privacy

Our banking services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13 through our website. Student checking accounts for minors aged 16 and older require a parent or guardian as a joint account holder.

9. Data Retention

We retain your personal and financial information for as long as your account is active and as required by applicable federal and state banking regulations. Under the Bank Secrecy Act and other regulatory requirements, certain records must be retained for a minimum of five years after the account is closed. When information is no longer required, we dispose of it securely using approved methods including shredding of paper records and secure deletion of electronic records.

10. Changes to This Policy

We may revise this privacy policy from time to time. If we make material changes, we will provide you with a revised notice as required by federal law. The effective date at the top of this document indicates when the policy was last updated. We encourage you to review this notice periodically.

11. Other Important Information

State Laws: Depending on where you live, you may have additional privacy rights under your state's laws. For example, residents of certain states may have the right to request information about the categories of personal information we share with third parties. Contact us for more details about your state-specific rights.

Reporting Suspicious Activity: If you believe your account has been compromised or you suspect unauthorized activity, contact us immediately at (417) 555-0300 during business hours or (800) 555-0199 for our 24-hour lost/stolen card hotline.

12. Contact Information

If you have questions about this Privacy Policy, your privacy rights, or our data protection practices, please contact us:

Community Regional Bank
Attn: Privacy Officer
450 Main Street
Springfield, MO 65806
Phone: (417) 555-0300
Email: [email protected]

Community Regional Bank is a Missouri state-chartered commercial bank. Member FDIC. Equal Housing Lender. NMLS #482651. This privacy notice is provided in accordance with the Gramm-Leach-Bliley Act (15 U.S.C. §§ 6801–6809) and Regulation P (12 CFR Part 1016).