Cross River Bank Privacy Policy

Sharing & Disclosure · Company practice

Sharing with marketing, support and joint-marketing providers

The bank may disclose the information it collects to companies that perform marketing services for it, provide technology or management support, or are other financial institutions with which it has joint marketing arrangements. Third-party service providers that receive the information, such as loan stress testers and companies that originate or service loans, must use it only to provide services to the bank or as otherwise permitted by law.

Supporting quotations

Cross River Bank may disclose the information we collect, as described above, to companies that perform marketing services on our behalf or provide technology or management support to us or to other financial institutions with whom we have joint marketing arrangements. The third-party service providers who receive this information, such as loan stress testers and companies that originate or service loans, are required to use the information we share with them only to provide services to us, or as otherwise permitted by law.

Qualifications & exceptions

• Recipients are limited to using the shared information to provide services to the bank, or as otherwise permitted by law.

Sharing & Disclosure · Company practice

Sharing with corporate affiliates and prospective acquirers

The bank may share information with corporate affiliates such as its parent company, sister companies, subsidiaries, joint ventures or other companies under common control. If another company acquires, or plans to acquire, the bank, its business or its assets, the bank will also share information with that company, including at the negotiation stage.

Supporting quotations

We may share information with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If another company acquires, or plans to acquire, our company, business, or our assets, we will also share information with that company, including at the negotiation stage.

Qualifications & exceptions

• Sharing with a prospective acquirer begins at the negotiation stage, before any acquisition is completed.

Sharing & Disclosure · Company practice

Analytics and advertising partners, with browser-scoped opt-out

The bank uses third-party service providers such as Google Analytics to analyze its website and shares information about visitors’ website use with social media, advertising and analytics partners. It directs visitors who want to opt out of online tracking technologies such as cookies to its Cookies Settings, and states that any opt out applies only to the specific browser or device from which the visitor opts out.

Supporting quotations

We also utilize third party service providers to conduct analytics on our website, such as Google Analytics. Learn more about Google Analytics’ data practices by clicking here. We also share information about our visitors’ use of our website with our trusted social media, advertising, and analytics partners. To opt-out of online tracking technologies (e.g., cookies) refer to our

Cookies Settings

. Please note that any opt out will apply only to the specific browser or device from which is opted out.

Qualifications & exceptions

• Any opt out applies only to the specific browser or device from which it is made.
• The opt-out route named for online tracking is the site’s Cookies Settings.

Not stated here

• The Cookies Settings control and the Google Analytics help page are outside this source; their text and operation are not supplied here.

Sharing & Disclosure · Company practice

Disclosure to third parties with consent or direction

The bank may disclose information to other third parties when it has consent or is directed to do so.

Supporting quotations

We may disclose information to other third parties when we have consent or are directed to do so.

Sharing & Disclosure · Company practice

Sharing with service providers for website and marketing support

The bank may share information with other service providers, which may help it administer the website, conduct surveys, assist in marketing and provide technical support.

Supporting quotations

We may share information with other service providers. Among other things service providers may help us to administer our website, conduct surveys, assist in marketing, and provide technical support.

Sharing & Disclosure · Company commitment

Phone numbers and text-message marketing data not shared for promotion

The bank states that it will not share a phone number, or other information collected for its text message marketing program, with third parties or affiliates for marketing or other promotional purposes.

Supporting quotations

Note that we will not share your phone number or other information collected for our text message marketing program with third parties or affiliates for marketing or other promotional purposes.

Qualifications & exceptions

• The commitment covers a phone number and other information collected for the text-message marketing program; it does not address other information or other purposes.

Sharing & Disclosure · Company practice

Identifiers disclosed for business purposes and shared for advertising

In the past 12 months the bank may have collected identifiers such as a real name, postal address, IP address, email address, phone number or similar identifiers. It disclosed this category for a business purpose to affiliates or subsidiaries, business partners, data analytics providers, joint marketers, other service providers, financial institutions, professional services organizations and social networks, and shared it for cross-context behavioral advertising with advertising networks.

Supporting quotations

We may have collected the following categories of personal information of California residents in the past 12 months:

Identifiers such as a real name, postal address, Internet Protocol address, email address, phone number or other similar identifiers.

Disclosed for a business purpose: affiliates or subsidiaries, business partners, data analytics providers, joint marketers, other service providers, financial institutions, professional services organizations, social networks.

Sharing for cross context behavioral advertising: Advertising networks

Qualifications & exceptions

• The statement covers the past 12 months and uses “may have collected.”
• The recipient lists are stated per category, not for every category collectively.

Sharing & Disclosure · Company practice

Section 1798.80 categories disclosed for business purposes

In the past 12 months the bank may have collected the categories of personal information described in subdivision (e) of California Civil Code Section 1798.80. It disclosed this category for a business purpose to affiliates or subsidiaries, business partners, other service providers, financial institutions and professional services organizations.

Supporting quotations

Categories of personal information described in subdivision (e) of California Civil Code Section 1798.80.

Disclosed for a business purpose: affiliates or subsidiaries, business partners, other service providers, financial institutions, professional services organizations.

Qualifications & exceptions

• The source gives no cross-context behavioral advertising sharing line for this category; that omission is local to this row and does not establish that the category is never shared.

Not stated here

• The source does not identify which specific data elements fall within the cited Section 1798.80 categories.

Sharing & Disclosure · Company practice

Commercial information disclosed and shared for advertising

In the past 12 months the bank may have collected commercial information such as transaction information and payment history. It disclosed this category for a business purpose to affiliates or subsidiaries, business partners, data analytics providers, joint marketers, other service providers, professional services organizations and social networks, and shared it for cross-context behavioral advertising with advertising networks.

Supporting quotations

Commercial information.

Disclosed for a business purpose: affiliates or subsidiaries, business partners, data analytics providers, joint marketers, other service providers, professional services organizations, social networks.

Sharing for cross context behavioral advertising: Advertising networks

Qualifications & exceptions

• The recipient list for commercial information omits financial institutions, which appear on other rows.

Sharing & Disclosure · Company practice

Internet activity information disclosed and shared for advertising

In the past 12 months the bank may have collected internet or other electronic network activity information. It disclosed this category for a business purpose to affiliates or subsidiaries, business partners, data analytics providers, joint marketers, other service providers, financial institutions, professional services organizations and social networks, and shared it for cross-context behavioral advertising with advertising networks.

Supporting quotations

Internet or other electronic network activity information.

Disclosed for a business purpose: affiliates or subsidiaries, business partners, data analytics providers, joint marketers, other service providers, financial institutions, professional services organizations, social networks.

Sharing for cross context behavioral advertising: Advertising networks.

Sharing & Disclosure · Company practice

Inferences disclosed and shared for advertising

In the past 12 months the bank may have collected inferences drawn from the other listed information. It disclosed this category for a business purpose to affiliates or subsidiaries, business partners, other service providers, financial institutions and professional services organizations, and shared it for cross-context behavioral advertising with advertising networks.

Supporting quotations

Inferences drawn from any of the information identified above.

Disclosed for a business purpose: affiliates or subsidiaries, business partners, other service providers, financial institutions, professional services organizations.

Sharing for cross context behavioral advertising: Advertising networks.

Qualifications & exceptions

• The business-purpose recipient list for inferences omits data analytics providers, joint marketers and social networks, which appear on other rows.

Sharing & Disclosure · Company practice

No sale in past 12 months, but cross-context behavioral advertising continues

The bank states it has not sold California residents’ personal information in the past 12 months, but does engage in cross-context behavioral advertising using online tracking technologies. It directs residents to the opt-out described in the Information Sharing and California Privacy Rights sections. It may have disclosed any of the listed categories with the individual’s consent or under a written contract with a service provider for a business purpose in the past 12 months.

Supporting quotations

This information is collected and used for the purposes disclosed in this Privacy Policy. Cross River Bank has not sold personal information of California residents in the past 12 months. Cross-River does, however, engage in cross context behavioral advertising using online tracking technologies. You can opt-out of cross-context behavioral advertising as described in the Information Sharing and and California Privacy Rights sections above. Cross River Bank may have disclosed any of the above categories of personal information pursuant to an individual’s consent or under a written contract with a service provider for a business purpose in the past 12 months.

Qualifications & exceptions

• The no-sale statement is limited to the past 12 months.
• Cross-context behavioral advertising is stated as a current practice, so “no sale” does not mean no advertising-related sharing.
• Disclosures with consent or under a written service-provider contract are stated as possible in the same 12-month period.

Sharing & Disclosure · Company commitment

Sensitive information not sold or shared for behavioral advertising

The bank states that it does not “sell” or “share” sensitive personal information for purposes of cross-context behavioral advertising. The quoted terms are the policy’s own, and the section does not define them further here.

Supporting quotations

We do not “sell” or“ share” sensitive personal information for purposes of cross-context behavioral advertising.

Qualifications & exceptions

• The commitment is stated with the quoted terms “sell” and “share,” without a definition in this section.
• It is limited to sensitive personal information and to cross-context behavioral advertising.

Sharing & Disclosure · Company practice

Spanish version restates sharing with marketing and service providers

The Spanish text says the bank may disclose collected information to companies that provide marketing services on its behalf or administrative or technological support, or to other financial entities with which it has joint marketing agreements. Third-party service providers receiving the information, such as credit-risk migration analysts and companies that originate or facilitate loans, must use it only to provide services to the bank or as the laws permit.

Supporting quotations

Cross River Bank podría divulgar la información que recogemos, según lo antedicho, a empresas que prestan servicios de marketing en nuestro nombre, o nos prestan soporte administrativo o tecnológico, o a otras entidades financieras con las que tenemos acuerdos de marketing conjuntos. Los terceros proveedores de servicios que reciben esta información, tales como los analistas de migración de riesgo crediticio y empresas que originan o facilitan créditos, deberán utilizar la información que les proporcionamos únicamente para prestarnos servicios a nosotros, o según les permitan las leyes.

Qualifications & exceptions

• The Spanish example for service providers reads “analistas de migración de riesgo crediticio” where the English text says “loan stress testers”; the use restriction is the same.
• Recipients may use the information only to provide services to the bank or as permitted by law.

Sharing & Disclosure · Company practice

Spanish version restates affiliate and acquisition sharing

The Spanish text says the bank may share information with affiliated companies such as a parent, group companies, subsidiaries, joint ventures or other companies under common control, and will also share information with a company that acquires or plans to acquire the bank, its business or assets, including during the negotiation phase.

Supporting quotations

Podremos compartir información con nuestras empresas afiliadas (por ejemplo, matriz, empresas del grupo, filiales, joint ventures, u otras compañías bajo control común). Si otra empresa adquiere, o planea adquirir, nuestra compañía, negocio o activos, también compartiremos información con tal empresa, incluso durante la fase de negociación.

Qualifications & exceptions

• The negotiation-phase sharing appears in the Spanish text as in the English.

Sharing & Disclosure · Company practice

Spanish version restates analytics, advertising partners and cookie settings

The Spanish text says the bank uses third-party providers such as Google Analytics to analyze the website and shares information about visitors’ use of the site with social media, advertising and analytics partners. For refusing online tracking technologies such as cookies it refers readers to the “Configuración de Cookies” section.

Supporting quotations

También utilizamos terceros proveedores de servicios para realizar análisis de nuestro sitio web, como Google Analytics. Puede obtener más información sobre las prácticas de Google Analytics con respecto a los datos, haciendo clic aquí. También compartimos la información sobre la utilización por parte de nuestros visitantes de nuestro sitio web con nuestros socios de confianza de redes sociales, publicidad y analistas. Para rechazar el uso de tecnologías de seguimiento en línea (por ejemplo, cookies), consulte nuestra sección

Configuración de Cookies

Qualifications & exceptions

• The opt-out route named is the site’s cookie settings, as in the English text.
• The browser-or-device limit on an opt-out is stated in the following Spanish paragraph, outside this packet’s primary blocks.

Not stated here

• The Google Analytics help page linked from this text is outside this source and is not supplied here.

Sharing & Disclosure · Company practice

Spanish version restates disclosure with permission or instructions

The Spanish text says the bank may also disclose information to other third parties when it has the corresponding permission or is given instructions to do so.

Supporting quotations

También podremos divulgar información a otros terceros, cuando dispongamos del correspondiente permiso o se nos dé instrucciones para hacerlo.

Sharing & Disclosure · Company practice

Spanish version restates sharing with other service providers

The Spanish text says the bank may share information with other service providers, which may help it administer the website, run surveys, assist with marketing and provide technical support.

Supporting quotations

Podríamos compartir información con otros proveedores de servicios. Entre otras cosas, los proveedores de servicios pueden ayudarnos a administrar nuestro sitio web, realizar encuestas, colaborar en las tareas de marketing, y proporcionarnos soporte técnico.

Sharing & Disclosure · Company commitment

Spanish version restates the text-message marketing data restriction

The Spanish text says the bank will not share the recipient’s phone number, or other information collected for its text-message marketing program, with third parties or affiliates for marketing or other promotional purposes.

Supporting quotations

Tenga en cuenta que no compartiremos su número de teléfono, u otra información recogida con respecto a nuestro programa de marketing mediante mensaje de texto, con terceros o filiales para fines de marketing u otros fines promocionales.

Qualifications & exceptions

• The commitment covers the phone number and other information collected for the text-message marketing program.

Sharing & Disclosure · Context

Spanish version limits an opt-out to the browser or device used

The Spanish text states that any exclusion (opt out) applies only to the specific browser or device from which the refusal is expressed.

Supporting quotations

. Tenga en cuenta que cualquier exclusión será de aplicación únicamente al navegador o dispositivo concreto desde el que exprese tal rechazo.

Qualifications & exceptions

• The block is a sentence fragment beginning with a period because extraction split it from the preceding cookie-settings sentence.
• The limit is stated for an opt-out expressed from a browser or device.

Sharing & Disclosure · Company practice

Spanish version lists identifiers and their recipients

In the past 12 months the bank may have collected identifiers such as a real name, postal address, IP address, email address, phone number or similar identifiers from California residents. It disclosed this category for business purposes to affiliates or subsidiaries, business partners, data analytics providers, associated companies, other service providers, financial institutions, professional services organizations and social networks, and shares it for cross-context behavioral advertising with advertising networks.

Supporting quotations

Podríamos haber recogido las siguientes categorías de información personal de residentes en California en los últimos 12 meses:

Identificadores, tales como nombre real, dirección postal, dirección de protocolo de Internet, dirección de email, número de teléfono u otros identificadores similares.

Divulgados con fines comerciales: filiales o subsidiarias, socios comerciales, proveedores de servicios de análisis de datos, empresas asociadas, otros proveedores de servicios, instituciones financieras, organizaciones de servicios profesionales, redes sociales.

Se comparten con fines de publicidad basada en el comportamiento en un contexto transversal: Redes publicitarias

Qualifications & exceptions

• The statement covers the past 12 months and uses “podríamos haber recogido” (we may have collected).

Sharing & Disclosure · Company practice

Spanish version lists the Section 1798.80 categories and recipients

For California residents the Spanish text lists the categories of personal information described in subdivision (e) of Article 1798.80 of the California Civil Code, disclosed for business purposes to affiliates or subsidiaries, business partners, other service providers, financial institutions and professional services organizations.

Supporting quotations

Categorías de información personal descritas en el subapartado (e) del Artículo 1798.80 del Código Civil de California.

Divulgadas con fines comerciales: filiales o subsidiarias, socios comerciales, otros proveedores de servicios, instituciones financieras, organizaciones de servicios profesionales.

Qualifications & exceptions

• The source gives no cross-context behavioral advertising sharing line for this category; that omission is local to this row and does not establish that the category is never shared.

Not stated here

• The source does not identify which data elements fall within the cited Article 1798.80 categories.

Sharing & Disclosure · Company practice

Spanish version lists commercial information and its recipients

The Spanish text lists commercial information collected from California residents in the past 12 months, disclosed for business purposes to affiliates or subsidiaries, business partners, data analytics providers, associated companies, other service providers, professional services organizations and social networks, and shared for cross-context behavioral advertising with advertising networks.

Supporting quotations

Información comercial.

Divulgada con fines comerciales: filiales o subsidiarias, socios comerciales, proveedores de servicios de análisis de datos, empresas asociadas, otros proveedores de servicios, organizaciones de servicios profesionales, redes sociales.

Se comparten con fines de publicidad basada en el comportamiento en un contexto transversal: Redes publicitarias

Qualifications & exceptions

• The Spanish recipient list for commercial information also omits financial institutions, as the English list does.

Sharing & Disclosure · Company practice

Spanish version lists internet activity information and its recipients

The Spanish text lists internet or other electronic network activity information, disclosed for business purposes to affiliates or subsidiaries, business partners, data analytics providers, associated companies, other service providers, financial institutions, professional services organizations and social networks, and shared for cross-context behavioral advertising with advertising networks.

Supporting quotations

Información sobre actividad en Internet u otras redes electrónicas.

Divulgada con fines comerciales: filiales o subsidiarias, socios comerciales, proveedores de servicios de análisis de datos, empresas asociadas, otros proveedores de servicios, instituciones financieras, organizaciones de servicios profesionales, redes sociales.

Se comparten con fines de publicidad basada en el comportamiento en un contexto transversal: Redes publicitarias.

Sharing & Disclosure · Company practice

Spanish version lists inferences and their recipients

The Spanish text lists inferences drawn from the other information, disclosed for business purposes to affiliates or subsidiaries, business partners, other service providers, financial institutions and professional services organizations, and shared for cross-context behavioral advertising with advertising networks.

Supporting quotations

Conclusiones sacadas de la información antedicha.

Divulgación con fines comerciales: filiales o subsidiarias, socios comerciales, otros proveedores de servicios, instituciones financieras, organizaciones de servicios profesionales.

Se comparten con fines de publicidad basada en el comportamiento en un contexto transversal: Redes publicitarias.

Qualifications & exceptions

• The business-purpose recipient list for inferences omits data analytics providers, associated companies and social networks, which appear on other rows.

Sharing & Disclosure · Company practice

Spanish version: no sale in past 12 months but advertising use continues

The Spanish text says the bank has not sold personal information of California residents in the past 12 months but has used cross-context behavioral advertising through online tracking technologies. It says residents may reject that advertising as provided in the earlier “Comunicación de la Información” section, and that the bank may have disclosed any of the listed categories in the past 12 months with the individual’s consent or under a written contract with a service provider for business purposes.

Supporting quotations

Esta información se recoge y utiliza para los fines divulgados en esta Política de Privacidad. Cross River Bank no ha vendido información personal de residentes en California en los últimos 12 meses. Cross-River sí ha utilizado, sin embargo, publicidad basada en el comportamiento en un contexto transversal, a través de tecnologías de seguimiento en línea. Podrá rechazar la publicidad basada en el comportamiento en un contexto transversal, según lo dispuesto en el apartado Comunicación de la Información, anterior. Cross River Bank podría haber divulgado, en los últimos 12 meses, cualquiera de las anteriores categorías de información personal, con el consentimiento de una persona física, o conforme a un contrato escrito con un proveedor de servicios para fines comerciales.

Qualifications & exceptions

• The Spanish opt-out cross-reference names only the “Comunicación de la Información” (Information Sharing) section; the English text names the Information Sharing and California Privacy Rights sections.
• The no-sale statement covers the past 12 months while advertising use is stated as continuing.