Introduction
California Consumer Privacy Act Privacy Notice (pdf)
Effective January 1, 2023
California Bank of Commerce (“CBC”, “we” or “us”) is committed to protecting the privacy of Personal Information of individuals. This Privacy Notice supplements the information contained in the CBC Privacy Policy and applies to residents of the State of California (“consumers” or “you”). We adopt this policy and notice to comply with the California Consumer Privacy Act of 2018 (CCPA) as modified by the California Privacy Rights Act of 2020 (CPRA). Any terms defined in the CCPA have the same meaning when we use them in this notice.
Personal Information under the CCPA is information that identifies, relates to, or could reasonably be linked directly or indirectly with a California resident. The specific Personal Information that CBC collects, uses, and discloses covered by the CCPA will vary based on your relationship or interaction with us.
Personal Information does not include:
- Publicly available information from government
- De-identified or aggregated consumer
- Information excluded from the CCPA’s scope, like:
- Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
- Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.
Your Rights Under the CCPA
The CCPA provides you with specific rights regarding your personal information.
Right to know
You may be entitled to request that we disclose to you Personal Information we have collected about you, the categories of sources from which we collected the information, the purposes of collecting the information, the categories of third parties with whom we have shared the information, and the categories of Personal Information that we have shared with third parties for a business purpose. You may make a request to know up to twice a year.
Right to delete
You may request that we delete personal information collected from you and to tell service providers to do the same. However, there are many exceptions that allow us to keep your Personal Information. Before deleting information, we must be able to verify your identity. We will not delete Personal Information about you when the information is required to fulfill a legal obligation, is necessary to exercise or defend legal claims, or where we are required or permitted to retain the information by law.
Right to opt-out of sale or sharing
We currently do not sell or share Personal Information to third parties within the meaning of the CCPA, and therefore do not offer this option. We may disclose Personal Information about you to our affiliates and service providers as permitted by law. Please see Our “Collection and Disclosure of Personal Information” section of this Policy for more information.
Right to correct
You may request that we correct your Personal Information that you believe is incorrect. Subject to other exceptions, we may not change the Personal Information if we believe that the information is more likely to be accurate than inaccurate. To make a correction request please see the “How to Make Requests” section below.
Right to Limit, Sensitive Personal Information
The CCPA grants you the right to limit use or disclosure of your Sensitive Personal Information (e.g. social security number, precise geolocation or ethnicity) to that which is necessary to perform the services reasonably expected by you in your request for those services and to perform activities permitted by the CCPA. We do not use or disclose Sensitive Personal Information for any purposes other than necessary to provide relevant services or as permitted by the CCPA, so no right to limit applies.
Right to Non-Discrimination for Exercising Rights
We will not discriminate against you if you choose to exercise your CCPA rights. Please see the “How to Make Requests” section below for details on how to exercise these rights.
Collection and Disclosure of Personal Information
We do not share or disclose your information except as allowed by law. We share (disclose) information only with those vendors or third parties providing servicing of your products and services and require that they not sell, share, or use your information for any other purpose.
Notice at Collection Personal Information California Bank of Commerce Collects |
||
Categories of Information |
How We Use Personal Information |
|
Identifiers: A real name, alias, postal address, email address, unique personal identifier, online identifier, Internet Protocol address, account name, social security, driver’s license or passport number, or other similar identifiers. |
|
|
Personal Information: Personal information categories listed in California Customer Records statute (Cal. Civ. Code § 1798.80(e)): In addition to the identifiers above name, signature, state identification card number, physical characteristics or description, insurance policy number, education, employment or employment history, bank account number, credit card number, debit card number, or any other financial information or medical information or health insurance information. |
|
|
Protected Classes Characteristics: Characteristics of protected classifications under California or federal law, such as race, national origin or gender. |
|
|
Commercial Information: Commercial information, including records of personal property, products and services purchased and purchasing habits. |
|
|
Internet or Online Information: Internet or other similar network activity, such as: Information regarding a consumer’s interaction with a CBC website or application, browsing history or search history. |
|
|
Geolocation Data: Geolocation data, such as device or personal location. |
|
|
Sensory Data: Audio, electronic, visual, thermal, olfactory, or similar information. |
|
|
Professional or Employment-Related Information: Employment related records such as work history and prior employer. |
|
|
Inferences: Inferences drawn from other personal information such as profiles reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes. |
|
|
Sensitive Personal Information: Personal information that reveals social security, driver’s license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation, health information, racial or ethnic origin, or union membership; contents of a consumer’s mail, email, and text messages unless the CBC is the intended recipient of the communication. |
|
|
“Selling” and “Sharing” of Personal Information Under the CCPA
CBC does not sell or share your Personal Information as those terms are defined by the CCPA.
- In the previous 12 months CBC has not sold information about consumers.
- In the previous 12 months CBC has disclosed personal information to service providers for a business purpose to assist in providing products and services to you, to comply with legal or regulatory requirements and employment related purposes.
Retention of Personal Information
We retain your Personal Information, including your Sensitive Personal Information, for the period necessary to fulfill the purposes outlined in this notice unless a longer retention period is required or permitted by law. In many situations we must retain all, or a portion, of your Personal Information to comply with our legal obligations, resolve disputes, enforce our agreements, to protect against deceptive or illegal activity, or for another one of our business purposes.
Response Timing
When exercising your rights, we try to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.
Once a request to access, delete, or correct has been submitted, we will attempt to verify that you are the consumer that the request applies to. We do so by taking the identifying information you provide and using a combination of the information we have on file. If we are unable to verify your request with the materials you provided, we may reach out to you for additional information.
Changes to this California Consumer Privacy Act Policy
California Bank of Commerce may make periodic changes to CBC’s CCPA Policy. When these changes occur, CBC will post the new policy on our website and change the “Last Updated” date. When appropriate, CBC may notify you through other means.
How to Make Requests – Contact Information
If you have any questions or comments about this notice, our Privacy Policy, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Email: | privacy@bankcbc.com |
Telephone: | 833.869.0492 |
US Mail: | California Bank of Commerce |
Attn: CCPA Requests | |
2999 Oak Road, Suite 210 | |
Walnut Creek, CA 94597 |