Privacy Policy

1. Information We Collect

We collect several categories of personal information to provide and improve our services:

• Identity information: Legal name, date of birth, Social Security Number (or Tax ID), government-issued ID number.
• Contact information: Mailing address, email address, phone number.
• Financial information: Account balances, transaction history, credit scores, loan details, payment records.
• Device and usage data: IP address, browser type, operating system, pages visited, session duration, and clickstream data when you use our online banking platform.
• Communication records: Records of calls, emails, or chat conversations with our member services team.

We collect this information when you apply for membership, open accounts, conduct transactions, contact us, or use our digital platforms.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Opening and managing your accounts and processing transactions.
• Verifying your identity and preventing fraud and unauthorized access.
• Complying with federal and state laws, including Bank Secrecy Act (BSA), Anti-Money Laundering (AML) obligations, and NCUA regulations.
• Sending account alerts, statements, and service-related communications.
• Improving our digital products and tailoring your online banking experience.
• Offering products and services we believe may benefit you, where permitted by law.

We do not sell your personal information to third parties for their own marketing purposes.

3. Sharing & Disclosure

We may share your information in the following circumstances:

• Service providers: Third-party vendors who process data on our behalf (payment processors, cloud hosting, analytics) under strict confidentiality obligations.
• Legal obligations: When required by law, court order, or regulatory authority — including disclosures to the NCUA, FinCEN, or law enforcement.
• Fraud prevention: With credit bureaus, fraud prevention networks, or law enforcement to detect and investigate suspicious activity.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.
• With your consent: When you have explicitly authorized us to share your information.

We do not sell, rent, or license your personal data to marketers or data brokers.

4. Your Rights & Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of information where retention is no longer required by law or contract.
• Opt-out of marketing: Unsubscribe from promotional communications at any time by following the unsubscribe link in any email or contacting us directly.
• CCPA rights (California residents): The right to know, delete, and opt-out of sale of personal information, as defined by the California Consumer Privacy Act.

To exercise any of these rights, contact Member Services at privacy@hofmanncu.example or call 1-800-HOFMANN. We will respond within 30 days.

5. Cookies & Online Tracking

Our online banking platform uses cookies and similar technologies to:

• Maintain your session and authentication state while logged in.
• Remember your preferences (e.g., account filter selections).
• Analyze aggregate traffic and platform performance.
• Detect and prevent fraudulent or automated activity.

Session cookies are automatically deleted when you close your browser. Persistent cookies expire on a schedule defined at time of placement. You may disable cookies through your browser settings; however, doing so may limit the functionality of our online banking platform.

We do not use third-party advertising cookies or cross-site tracking networks.

6. Data Security

We implement administrative, technical, and physical safeguards designed to protect your personal information:

• 256-bit TLS encryption for all data transmitted between your browser and our servers.
• Encryption of sensitive data fields (including account numbers and SSNs) in storage.
• Role-based access controls limiting employee access to information on a need-to-know basis.
• Continuous network monitoring and intrusion detection systems.
• Regular third-party security audits and penetration tests.

While we employ industry-standard protections, no transmission over the internet or electronic storage method is completely secure. We encourage you to use a strong, unique password and log out after every online banking session.

7. Data Retention

We retain personal information for as long as necessary to:

• Maintain your account and provide contracted services.
• Comply with federal and state record-keeping requirements (e.g., BSA requires most transaction records to be kept for five years).
• Resolve disputes, enforce agreements, and support legal proceedings.

When information is no longer required, we securely delete or anonymize it in accordance with our data retention schedule. Account closure does not immediately trigger deletion, as legal retention obligations typically continue for at least seven years after the account is closed.

8. Children's Privacy

Our online banking platform is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@hofmanncu.example and we will take prompt steps to delete that information.

Custodial accounts for minors are managed by authorized adults, who are responsible for ensuring appropriate use of the platform.

9. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Post the updated policy on this page with a new "Last Updated" date.
• Send a notice to the email address on file for your account at least 30 days before major changes take effect.
• Display a prominent banner in Online Banking for a period following the update.

Continued use of our services after the effective date of any changes constitutes your acceptance of the revised policy.

10. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or the handling of your personal information, please reach out:

• Email: privacy@hofmanncu.example
• Phone: 1-800-HOFMANN (1-800-463-6266), Monday–Friday 8 am–8 pm ET
• Mail: Hofmann Credit Union — Privacy Officer, 100 Financial Plaza, Suite 400, New York, NY 10001

For general inquiries or account assistance, visit our Contact page or stop by any branch location.