Privacy Notes

What does National Bank of Middlebury do with your personal information?

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some, but not all, sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.

The types of personal information we collect and share depend on the product or service you have with us. This information can include:

• Social Security number, income and address
• Account balances, payment history, and account usage
• Credit history and credit scores

When you are no longer our customer, we continue to share your information as described in this notice.

All financial companies need to share customers’ personal information to run their everyday business. In the following section, we list the reasons financial companies can share their customers' personal information; the reasons National Bank of Middlebury chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information:

For our everyday business purposes—such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus.

Do we share? Yes  Can you limit this sharing? No

For our marketing purposes—to offer our products and services to you.

Do we share? Yes  Can you limit this sharing? No

For joint marketing with other financial companies.

Do we share? No  Can you limit this sharing? No

For our affiliates' everyday business purposes—­information about your transactions and experiences.

Do we share? No  Can you limit this sharing? Yes

For our affiliates' everyday business purposes—information about your creditworthiness.

Do we share? No  Can you limit this sharing? Yes

For our affiliates to market to you.

Do we share? No  Can you limit this sharing? Yes

For non-affiliates to market to you.

Do we share? No  Can you limit this sharing? Yes

How does National Bank of Middlebury protect my personal information?

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

How does National Bank of Middlebury collect my personal information?

We collect your personal information, for example, when you

• Open an account or deposit money
• Pay your bills or apply for a loan
• Use your credit or debit card

We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.

Why can't I limit all sharing?

Federal law gives you the right to limit only

• Sharing for affiliates' everyday business purposes—information about your creditworthiness
• Affiliates from using your information to market to you
• Sharing for non-affiliates to market to you

State laws and individual companies may give you additional rights to limit sharing.

Guidelines for the responsible use and protection of our customers' information

Whereas National Bank of Middlebury recognizes its customers' expectations of financial privacy; and whereas preserving our customers' trust is one of the core values of our bank and the broader banking community; we therefore resolve to abide by the following guidelines for the responsible use and protection of our customers' information:

We will:

• Always value the trust of our customers and the importance of keeping their personal financial information confidential.
• Provide our customers with our policy on using their personal financial information responsibly and protecting it.
• Hold our employees to the highest standard of conduct in ensuring the confidentiality of customer information.
• Hold any personal medical information about our customers sacred and will NOT use it for marketing purposes or in making credit decisions.
• Use information responsibly in order to provide our customers with significant benefits, including fraud prevention, improved products and services and to comply with laws.
• Establish procedures to maintain accurate information and respond in a timely manner to our customers' request to change or correct information.
• Use a combination of safeguards to protect our customers against the criminal use of their information and to prevent unauthorized access to it.
• Require the companies we do business with to abide by our privacy policy to maintain confidentiality of our customers' information.
• Not provide account numbers to companies outside our family of companies for marketing purposes.

Official Privacy Notice

National Bank of Middlebury is committed to protecting the privacy of all personal information with which we are entrusted. We want you to understand what information we collect and how it is used. When we use the words "you" and "your," we mean the following types of customers:

All of our consumer customers who have a continuing relationship with us, such as:

• Deposit Account
• Loan Account
• Safe Deposit Box
• Retail Installment Contract we hold in service
• Self-directed Individual Retirement Account where we act as custodian or trustee

We will tell you the sources for non-public, personal information we collect on our customers. We will tell what measures we take to secure that information.

We first define some terms:

• We, Our, and Us means National Bank of Middlebury.
• Non-public, personal information means information about you that we collect in connection with providing a financial product or service to you. Non-public, personal information does not include information that is available from public sources, such as telephone directories or government records.
• An affiliate is a company we own or control, or a company that owns or controls us. Ownership does not mean complete ownership, but means owning enough to have control.
• A non-affiliated, third party is a company that is not an affiliate of ours.

The information that we collect:

We collect non-public, personal information about you from the following sources:

• Information we receive from you on applications or other forms you may complete. The information you provide could include such items as your name, address, social security number, income, and assets.
• Information about your transactions with us and our affiliates, such as your account balance, payment history, and account usage.
• Information from a consumer reporting agency, such as your payment history.

Information we disclose:

We may share information about you with our affiliates in order to help us complete financial transactions or to service your account or to make you aware of other, available financial services and products that may be of benefit to you.

The non-public, personal information we collect and may share with our affiliates may include identifying information about you such as your name, address, and telephone number, and information about your transactions and experiences with us, such as your account balance, payment history, and deposit account activity.

We do not disclose to our affiliates or others non-public information about you that we have obtained from other sources, except as permitted by law.

We will also provide non-public, personal information to our affiliates and other parties if you request us to do so or you give us permission.

The confidentiality, security, and integrity of your non-public, personal information:

We restrict access to non-public, personal information about you to those employees who need to know this information to provide products or services to you.

We maintain physical, electronic, and procedural safeguards that comply with federal regulations to guard your non-public, personal information.

Non-public, personal information and non-affiliated, third parties:

Since we value our customer relationship with you, we will not disclose your non-public, personal information to non-affiliated, third parties, except as permitted by law.

Non-public, personal information and former customers:

We do not disclose non-public, personal information about former customers, except as permitted by law.

Website Privacy Policy

In addition to our official privacy policy, you may want to know that this is how we will handle information that you provide to us through our website.

1. If you visit our site to read information, such as product and service descriptions, or branch and ATM locations:

   We may collect and store the following information about you:

   • The name of the domain from which you access the Internet
   • The Internet provider address
   • Web browser used
   • Date and time you access our site
   • Use any information collected to measure number of visitors to our site. This allows us to better understand how many visitors use our site and which pages and features are most popular.

   Other websites' privacy and security policies may be different from ours. Please read them when you visit their websites.

2. If you identify yourself by sending an email:
   • We will use your personal identifying information only to the extent that it is required to fulfill your request.
   • Personally identifying information is not disseminated or sold to other organizations.
3. If you choose to use National Bank of Middlebury's Online Banking product to do routine inquiries or transfers to your accounts:

   We may collect and store the following information about you:

   • Your program access ID
   • Category of service you requested
   • Number of times you requested a particular category
   • Date and time you access our site

Other websites' privacy and security policies may be different. Please read them when you visit their website.

We will not obtain personally identifying information about you when you visit our site, unless you choose to provide such information to us. National Bank of Middlebury is committed to protecting your privacy. If you have any questions about privacy, please email us at info@nationalbankmiddlebury.com.