PRIVACY POLICY

Effective Jun 1, 2024

MOBILE APP DISCLOSURE

Contact List Collection

Your contact list is collected by us in the mobile application during the use of the Zelle feature. This information is used to prepopulate forms when adding a contact in Zelle for the purpose of sending payments to people you know and trust. You will be prompted by our application before granting this permission, and may still use the the Zelle feature without allowing access to your contact list. This information is not shared with any third party or used for any other purposes. To turn off this permission at any time, go to your app Settings on your device, and turn off the permission for Contacts by selecting "Don't allow".

Geolocation Information

This mobile application may periodically collect, transmit, and use geolocation information to enable features that prevent fraudulent use, but only if the End User expressly authorizes collection of such information. Geolocation information can be monitored on a continuous basis in the background only while the Solution is being used or not at all, depending on the End User’s selection. End Users can change their location permissions at any time in their device settings.

Mobile Device Camera

This mobile application may request access to information stored on your device, such as the camera, in order to enhance your user experience and improve our services. Before granting access to this information, you will be prompted to give the application that permission. If you do not wish to grant that permission, you may decline. However, if you decline access to your mobile camera, all of the features of certain applications, such as Zelle, may not work or be available to you. If you later change your mind, those permissions can be updated in your device's settings.

FACTS:WHAT DOES SUMMIT CREDIT UNION DO WITH YOUR PERSONAL INFORMATION?

Why?

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.

What?

The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security number and account balances account transactions and credit history mortgage rates and payments and payment history

How?

All financial companies need to share members’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their members’ personal information; the reasons Summit Credit Union chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information

Does Summit Credit Union share?

Can you limit this sharing?

For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or to report to credit bureaus

Yes

For our marketing purposes – to offer our products and services to you

Yes

For joint marketing with other financial companies

Yes

For our affiliates’ everyday business purposes – information about your transactions and experiences

We don’t share

For our affiliates’ everyday business purposes – information about your creditworthiness

We don’t share

For our affiliates to market to you

We don’t share

For nonaffiliates to market to you

We don’t share

To limit our sharing

•Call toll-free (800) 236-5560 - our menu will prompt you through your choice(s) or
•Visit us online: www.SummitCreditUnion.com
Please note:
If you are a new member, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our member, we continue to share your information as described in this notice.
However, you can contact us at any time to limit our sharing.

Questions?

Call toll-free (800) 236-5560 or go to www.SummitCreditUnion.com

WHAT WE DO

How does Summit Credit Union protect my personal information?

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

How does Summit Credit Union collect my personal information?

We collect your personal information, for example, when you
•open an account or show your government-issued ID
•apply for financing or provide account information
•give us your contact information
We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
The mobile application may require access to the contact list on your mobile device in order to facilitate certain features within the application including, but not limited to, Zelle, Mobile Lending, and Bill Pay.

Why can’t I limit all sharing?

Federal law gives you the right to limit only
•sharing for affiliates’ everyday business purposes – information about your creditworthiness
•affiliates from using your information to market to you
•sharing for nonaffiliates to market to you
State law and individual companies may give you additional rights to limit sharing.

What happens when I limit sharing for an account I hold jointly with someone else?

Your choices will apply to everyone on your account.

Definitions

Affiliates

Companies related by common ownership or control. They can be financial and nonfinancial companies.
•Summit Credit Union has no affiliates.

Nonaffiliates

Companies not related by common ownership or control. They can be financial and nonfinancial companies.
•Nonaffiliates we share with can include financial service providers assisting with underwriting and/or conducting transaction analyses.

Joint Marketing

A formal agreement between nonaffiliated financial companies that together market financial products or services to you.
•Our joint marketing partners include Insurance Companies and Investment Companies.

PRIVACY, SECURITY and ACCESSIBILITY

WHAT IS SUMMIT DOING TO KEEP MY DATA SAFE?

Keeping your data safe and secure is one of our most important jobs. Here’s how Summit works hard every day to protect your personal information:

We meet or exceed all industry-recommended safety standards.
We take a layered approach that creates multiple levels of security and balances safety and usability.
We’re committed to continuous improvement and regularly evaluate and update our security requirements.
We stay on top of new technologies and recommendations, then investigate and thoroughly test those that seem like they could help us improve our security.
For more information on how we protect your information:

PROTECTING YOUR PRIVACY

Summit Credit Union, your member-owned financial institution, is committed to providing you with competitive products and services to meet your financial needs and help you reach your goals. We are equally committed to protecting the privacy of our members. Please view our current and the .

Let us know if you have questions. Please do not hesitate to call us -- we are here to serve you!

WEB SITE SECURITY

Summit Credit Union uses 128-bit encryption for all transactions completed via our Web site, which provides the highest level of security and privacy available. We also employ a secure firewall to prevent unauthorized access to our network.

When you visit www.summitcreditunion.com, we do collect anonymous statistics to help us measure the performance of the site, such as: the day and date of the visit, the Internet service provider, which browsers visitors use, and how many hits our pages receive. Credit Union uses consumer data, including but not limited to non-personally identifiable information such as cookies, IP addresses, and mobile advertising identifiers, as applicable, to perform matching with third party cookies to provide targeted marketing. We don't collect any personal information about your usage unless you provide it to us via a loan or membership application, to reorder checks, or for other services.

If you have any questions about the security and privacy of our web site, please contact us.

DISCLAIMER OF WARRANTIES AND ACCURACY OF DATA CONTAINED IN WEB SITES LINKED TO SCU'S WEB SITE

By clicking onto any link on this Web site, the user specifically acknowledges that the credit union is not liable in any way with respect to the user's use of any information gained through this Web site, and that the risk of injury from any use of the information rests entirely with the user. The user specifically acknowledges that the credit union is not liable for defamatory, offensive or illegal conduct of other users, links or third parties and that the risk of injury from the foregoing rests entirely with the user. This disclaimer of liability also applies to any damages or injury, including but not limited to those caused by any failure of performance, error, omission, interruption, deletion, defect, delay in operation or transmission, computer virus, communication line failure, theft or destruction or unauthorized access to, alteration of, or use of record, whether for breach of contract, tortious behavior, or negligence or under any other theory or cause of action.

SOLICITATION PROHIBITED

Use of this Web site and information herein to send faxes and e-mail to Summit Credit Union and its employees for solicitation purposes is prohibited.

ACCESSIBILITY STATEMENT

Summit Credit Union is committed to providing a website that is as accessible as our branches and services. We are currently in the process to implement the recommendations of the (WCAG) as published by the (WAI) of the (W3C).

There is no single definitive test of conformance to Level AA of the WCAG but we have used a variety of methods for assessing our accessibility, not limited to but including physical tests using screenreaders and keyboard only. If you find a part of the site that you feel does not conform to Level AA of the WCAG or are having difficulty getting the information you need, please use one of the methods below to let us know so that we can rectify it.

We are dedicated in our efforts to comply with WCAG 2.1 Level AA standards by resolving current and future unforeseen issues with accessibility on existing pages as well as new pages within the Summit Credit Union website.

Summit Credit Union strives to make every page accessible to users but cannot guarantee that every page conforms to WCAG 2.1 Level AA.
Some pages have partial conformance due to the use of 3rd party vendors or is under review. As such Summit Credit Union does not claim full site-wide Conformance, instead a . Summit Credit Union cannot ensure conformance of crucial third-party plug-ins and widgets.
Summit Credit Union has used WCAG guidelines for conformance as suggested by the Department of Justice. Though some of the conformance found in WCAG conforms with 508 Compliance, we are not 508 Compliant.
Summit Credit Union chose to use WCAG for conformance because they are determined by the W3C, the consortium that makes the guidelines for the Internet, worldwide.
Summit Credit Union uses automated testing as a baseline for conformance but understands W3C's position that there is as yet no tool that can perform a completely automatic assessment on the checkpoints in the guidelines, and fully automatic testing may remain difficult or impossible.

* THIRD PARTY DISCLOSURE
These sites are owned by a third party unaffiliated with Summit Credit Union. Summit Credit Union does not endorse or guarantee the products, information or recommendations provided by the linked website and is not liable for any products, services, or content advertised on the linked website. The linked website may have a privacy policy that is different than that of Summit Credit Union and that may provide less security; please consult the linked website's privacy policy for further information.

ONLINE PRIVACY POLICY

The Effective Date of this Online Privacy Policy is June 1, 2024.

We understand that privacy is exceptionally important to our members. The purpose of this Online Privacy Policy is to plainly and transparently disclose to you how we collect, use and share information, and how we attempt to safeguard the data you provide to us whether through the Summit Credit Union (Summit website, (“Website”) or our mobile application (“Summit Mobile App”).

We are committed to securing data that we collect concerning you (“you”) and complying with applicable data protection and privacy laws.

THIS ONLINE PRIVACY POLICY IS LEGALLY BINDING. BY USING OUR WEBSITE, THE SUMMIT MOBILE APP OR BY PROVIDING ANY INFORMATION TO US, DIRECTLY OR INDIRECTLY, YOU AGREE TO BE BOUND BY ALL OF THE TERMS OF THIS ONLINE PRIVACY POLICY. WE RESERVE THE RIGHT TO CHANGE OUR ONLINE PRIVACY POLICY FROM TIME TO TIME, AND IT IS YOUR RESPONSIBILITY TO ENSURE YOU AGREE TO THE TERMS PRIOR TO USING OUR SITES OR PROVIDING INFORMATION TO US IF YOU DO NOT AGREE TO THIS ONLINE PRIVACY POLICY, DO NOT USE OUR SITE, OUR SUMMIT MOBILE APP OR PROVIDE INFORMATION TO US. .

1. PROTECTING YOUR PRIVACY GENERALLY. We take measures to monitor and update our privacy and data collection and storage policies and procedures to consistently meet or exceed industry security standards.

A. Server Location. Our servers are located in the United States. Any information collected through our Site is stored and processed in the United States, and you acknowledge this.

B. Industry-Standard Protection. We utilize industry-standard security measures to safeguard the information we collect, maintain and use. However, Summit Credit Union does not guarantee the performance or adequacy of such security measures.

C. Limitation on Access and store is generally restricted to those employees and/or contractors who require it to perform a job or other contracted function except as described in Section 3 below. collect. Access to any personal information we

D. Children's Online Information Privacy. The (“COPPA”) restricts the collection, use, or disclosure of Personal Information from and about children under the age of 13 on the Internet. Summit Credit Union is committed to protecting the online privacy of the children who visit our site and complying with COPPA.

Hence, this Website is not directed to children under the age of 13 and we request that children under the age of 13 not provide personal information through the Website. We do not knowingly collect, maintain, or use personally identifiable information from the Website about children under the age of 13 without parental consent. Visit the Website for more information about COPPA.

2. Collection of Information. We collect and process the following information about you:

A. Information you give to us. You provide information to us when you enter data into applications for products and services or otherwise disclose it to Summit Credit Union whether electronically or in person. You may interact with us in a variety of ways online, including through a mobile device. The mobile application may collect information from your mobile device’s camera if you grant such access. We may offer sites or applications that permit browsing and do not require registration. We may also offer the ability to access your Summit Credit Union accounts online. When you interact with us online, we will not obtain personal information about you unless you choose to provide such information. This may include:

i. Your name;

ii. Your address;

iii. An e-mail address;

iv. A telephone number;

v. A tax identification number;

vi. Other identifiers that enable physical or electronic contact with you;

vii. Data resulting from your activity, such as transaction information; and

viii. The camera on your mobile device;

ix. Limited location information (e.g., a zip code to help you find a nearby ATM).

x. The contact list on your mobile device in order to facilitate certain features within the application including, but not limited to, Zelle, Mobile Lending, and Bill Pay.

B. Information we collect automatically. Each time you visit our site, we may automatically collect the following information: technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, browser type and version, location information, time zone setting, browser plug-in types and versions, operating system and platform; device identification codes; and information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time), pages you looked at or searched for, and the products and services you have viewed, ordered or searched including, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call us.

This information will be used in accordance with the purposes described in this Online Privacy Policy and in any applicable privacy notice provided to you at the time at which it was collected.

C. Card Controls App. The Card Controls app periodically collects, transmits, and uses geolocation information to enable features that prevent fraudulent card use and send alerts, but only if the End User expressly authorizes collection of such information. Geolocation information can be monitored on a continuous basis in the background only while the Solution is being used or not at all, depending on the End User’s selection. End Users can change their location permissions at any time in their device settings.

3. HOW WE USE INFORMATION COLLECTED. We use the information described in Section 2 above in a number of ways, such as:

To process applications and transactions;
To send you important information regarding the Website, the Summit Mobile App and changes to terms and conditions to accessing products and services and/or Summit Credit Union policies;
To verify your identity (such as when you access or change your account information);
To respond to your requests and to communicate with you;
To send you marketing communications that we believe may be of interest to you;
For joint marketing with other financial companies;
To allow you to participate in surveys, sweepstakes, contests and similar promotions;
To prevent fraud and improve Website and Summit Mobile App security; and
For our business purposes, including developing and improving our products and services, and enhancing our Website

4. COOKIES To provide better service and a more useful Website, we use “cookies” as part of our interaction with your browsers. “Cookies” are pieces of information in small text files that are transferred directly on the device you are using. Cookies cannot be used to find out the identity of any user. Your browser can be set to warn you when a cookie has been sent, allowing you to decide whether to accept or reject it. If you configure your web browser to reject cookies, you limit the functionality we can provide and some Website features and online products and services may not operate as intended.

We use cookies on parts of the Website or Summit Mobile App where you need to register, such as online banking, or where you are able to customize the information you see. Recording a cookie at such points may facilitate a quicker and easier browsing experience and enable you to personalize the browsing experience.

5. THIRD PARTY SECURITY CHECKS. To protect you, we may use tools and services provided by third-parties to help us decide whether to accept submissions from personal computers, mobile phones, or other devices. These third-party providers may check whether user devices have been identified with fraudulent or abusive transactions in the past, such as reported instances of identity theft, account takeovers, or malware attacks. For this purpose, a cookie, flash storage token, or other code file may be placed on your device to identify it in the future when you visit our website or connect with our other online applications. If you set your browser or device to reject these cookies or tokens, you may not be able to access some features of our website or other online applications.

When you access our website or other online applications, we will transmit this third party device identification code to the third-party provider, along with data concerning certain technical attributes of your device such as the model, operating system, and browser version, as well as the IP address (all of which are used to confirm device identification). We may then receive information from these third-party providers indicating that submissions from a user’s device should not be accepted. We may also inform such third-party providers if we determine that a device has been used in connection with a fraudulent or abusive transaction with us. In addition, in certain situations, we may share with one or more of these third-party providers certain personal identifying information and information about the device you are using. If you receive a message from us indicating that a requested submission has not been processed, we will provide appropriate customer service contact information.

6. WEBSITE ANALYTICS USE. We use website analytics tools to collect information about use of this site across devices. We have implemented tools that allow us to serve you relevant advertising on third party websites if you have visited our Website, however accessed, but does not personally or directly identify you. These tools also allow us to manage our advertising and collect information about your visit to our Website.

7. SHARING OF INFORMATION. If you are a Summit Credit Union member, we may use and share any information that we collect from or about you in accordance with applicable federal and state laws and our Privacy Policy. We may share the information we collect from you and about you with third parties only as permitted by law in connection with the administration, processing or servicing of accounts. This may include, for example, sharing information with credit bureaus, in response to a subpoena or other legal process, sharing to address fraud, security or technical issues, or as part of an audit or examination.

8. LINKS TO THIRD-PARTY WEBSITES Our Website may contain links to third party websites. Although these links were established to provide you with access to useful information, Summit Credit Union does not control and is not responsible for any of these Websites or their content. We do not know or control what information third party Websites may collect that may include personal information. Summit Credit Union is providing these links to you only as a convenience, and Summit Credit Union does not endorse or make any representations about using such third party Websites or any information, software or other products or materials found there, or any results that may be obtained from using them. We encourage you to review the privacy policies of websites you choose to link to from the Summit Credit Union Website so that you can understand how those websites collect, use, and share your information. Summit Credit Union is not responsible for the security or privacy practices of the linked websites.

9. Securing Your Personal Information. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Site, you are responsible for keeping this password confidential. We recommend that you do not provide your password to any other person or entity. The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.

10. HOW TO CONTACT US. Please contact us at any time with any questions or concerns about this Online Privacy Policy, or to exercise any of your rights under this Online Privacy Policy or applicable law or to review or update your contact information we have from you, such as your email address, mailing address or telephone number.

Email us at:

Mail us, stop in or call us at: 1709 Landmark Drive

Cottage Grove, WI 53527

(800) 236-5560

11. GOVERNING LAW & JURISDICTION. This Online Privacy Policy, and Summit Credit Union’s collection and use of member information, shall be governed and interpreted in accordance with the laws of the United States and the State of Wisconsin. Venue for any cause of action hereunder shall lie exclusively in Dane County, Wisconsin.

12. Changes to This ONLINE Privacy Policy. We reserve the right to change the terms of this Online Privacy Policy. Any changes to our Online Privacy Policy will be placed here and will supersede this version of our Online Privacy Policy. By continuing to use our site, you agree to the terms of this and any updated versions of this Online Privacy Policy.