CROSS RIVER BANK PRIVACY NOTICE

Sharing & Disclosure · Context

The table separates sharing reasons, actual sharing and customer limits

Under the 'How?' row, the notice says all financial companies need to share customers' personal information to run their everyday business. It explains that the table lists the reasons financial companies can share, the reasons Cross River Bank chooses to share, and whether the customer can limit each kind of sharing.

Supporting quotations

How?

All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Cross River Bank chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information

Does Cross River Bank share?

Can you limit this sharing?

Qualifications & exceptions

• Column headings are 'Reasons we can share your personal information', 'Does Cross River Bank share?' and 'Can you limit this sharing?'

Sharing & Disclosure · Company practice

Everyday business sharing: Cross River Bank shares and customers cannot limit it

For everyday business purposes, the table answers 'Yes' to whether Cross River Bank shares and 'No' to whether the customer can limit the sharing. The row gives examples: processing transactions, maintaining accounts, responding to court orders and legal investigations, and reporting to credit bureaus.

Supporting quotations

Reasons we can share your personal information

Does Cross River Bank share?

Can you limit this sharing?

For our everyday business purposes- such as to process your transactions, maintain your accounts, respond to court orders and legal investigations, or report to credit bureaus

Yes

No

Qualifications & exceptions

• The row's examples follow 'such as' and are not exhaustive.
• The 'No' answer means this notice gives no limit for this sharing; other legal limits are not addressed here.

Sharing & Disclosure · Company practice

Cross River Bank shares for its own marketing and customers cannot limit it

The table answers 'Yes' to sharing personal information for Cross River Bank's marketing purposes, described as offering its products and services, and 'No' to whether the customer can limit that sharing.

Supporting quotations

Reasons we can share your personal information

Does Cross River Bank share?

Can you limit this sharing?

For our marketing purposes- to offer our products and services to you

Yes

No

Qualifications & exceptions

• The stated marketing purpose is limited to offering Cross River Bank's products and services to the customer.

Sharing & Disclosure · Company practice

Joint marketing sharing is marked not limitable in the general table

The table answers 'Yes' to sharing personal information for joint marketing with other financial companies and 'No' to whether the customer can limit that sharing.

Supporting quotations

Reasons we can share your personal information

Does Cross River Bank share?

Can you limit this sharing?

For joint marketing with other financial companies

Yes

No

Qualifications & exceptions

• The general table answer is followed by state-specific provisions for California and Vermont customers, recorded in separate cards.

Not stated here

• The table does not identify the joint marketing partners; the definitions mention loan finance companies.

Cross-references

• defined by (model-proposed): Joint marketing requires a formal agreement between nonaffiliated financial companies — The definition identifies joint marketing as a formal agreement between nonaffiliated financial companies that market together; the table row addresses sharing for that joint marketing.
• has exception (model-proposed): California customers: no joint marketing sharing without authorization — For California customers, the notice withholds joint marketing sharing without authorization, while the general table row answers Yes to that sharing and No to any customer limit. The California provision qualifies that general answer for California customers.

Sharing & Disclosure · Company commitment

No affiliate sharing of transaction and experience information

For affiliates' everyday business purposes involving information about a customer's transactions and experiences, the table answers 'No' to whether Cross River Bank shares and 'We don’t share' to whether the customer can limit the sharing.

Supporting quotations

Reasons we can share your personal information

Does Cross River Bank share?

Can you limit this sharing?

For our affiliates' everyday business purposes- information about your transactions and experiences

No

We don’t share

Qualifications & exceptions

• The row is limited to affiliates' everyday business purposes and transaction/experience information.

Sharing & Disclosure · Company commitment

No affiliate sharing of creditworthiness information

For affiliates' everyday business purposes involving information about a customer's creditworthiness, the table answers 'No' to whether Cross River Bank shares and 'We don’t share' to whether the customer can limit the sharing.

Supporting quotations

Reasons we can share your personal information

Does Cross River Bank share?

Can you limit this sharing?

For our affiliates’ everyday business purposes- information about your creditworthiness

No

We don’t share

Qualifications & exceptions

• The row is limited to affiliates' everyday business purposes and creditworthiness information.

Cross-references

• referred to by (model-proposed): Federal law limits the customer's right to limit sharing to three categories — The creditworthiness row uses the same category the notice lists among the three sharing types federal law lets customers limit, but the row says Cross River Bank does not share it.
• qualified by (model-proposed): Vermont customers: no creditworthiness disclosure to affiliates — The Vermont paragraph adds a state-specific restriction on disclosing creditworthiness information to affiliates, alongside the general row that already says Cross River Bank does not share that information.

Sharing & Disclosure · Company commitment

No sharing for nonaffiliates to market to the customer

The table answers 'No' to sharing personal information so nonaffiliates can market to the customer and 'We don’t share' to whether the customer can limit that sharing.

Supporting quotations

Reasons we can share your personal information

Does Cross River Bank share?

Can you limit this sharing?

For nonaffiliates to market to you

No

We don’t share

Nonaffiliates we share with can include loan finance companies.

Qualifications & exceptions

• The row covers nonaffiliate marketing only; the definitions say nonaffiliates Cross River Bank shares with can include loan finance companies.

Cross-references

• referred to by (model-proposed): Federal law limits the customer's right to limit sharing to three categories — The nonaffiliate-marketing row matches the third category the notice says federal law lets customers limit; the row says Cross River Bank does not share it.
• qualified by (model-proposed): Nonaffiliates are unrelated companies; sharing can include loan finance companies — The definition explains that nonaffiliates are unrelated companies and that sharing with them can include loan finance companies; the table row is limited to nonaffiliate marketing.
• qualified by (model-proposed): Vermont customers: limits on marketing disclosures to nonaffiliated third parties — The Vermont paragraph adds state-specific conditions to disclosures to nonaffiliated third parties for marketing, alongside the general row that says Cross River Bank does not share for nonaffiliate marketing.

Sharing & Disclosure · Company commitment

Cross River Bank says it does not share with affiliates

Under the affiliates definition, the notice states that Cross River Bank does not share with its affiliates. This statement is broader than the table rows, which address only transaction/experience and creditworthiness information.

Details not recorded for this card

Supporting quotations

Cross River Bank does not share with our affiliates.

Qualifications & exceptions

• The statement appears in the definitions section and does not list exceptions.

Not stated here

• The notice does not explain whether the statement covers all information or only the categories in this notice.

Cross-references

• defined by (model-proposed): Affiliates are companies under common ownership or control — The definitions section supplies what affiliates means for the statement that Cross River Bank does not share with its affiliates.

Sharing & Disclosure · Company practice

Nonaffiliates are unrelated companies; sharing can include loan finance companies

The notice defines nonaffiliates as companies not related by common ownership or control, financial or nonfinancial. It also says the nonaffiliates Cross River Bank shares with can include loan finance companies.

Supporting quotations

Nonaffiliates

Companies not related by common ownership or control. They can be financial and nonfinancial companies.

Nonaffiliates we share with can include loan finance companies.

Qualifications & exceptions

• The definition does not state the purpose of sharing with loan finance companies.

Not stated here

• The purpose and scope of sharing with nonaffiliate loan finance companies are not specified in the definition.

Cross-references

• qualifies (model-proposed): No sharing for nonaffiliates to market to the customer — The definition explains that nonaffiliates are unrelated companies and that sharing with them can include loan finance companies; the table row is limited to nonaffiliate marketing.

Sharing & Disclosure · Context

Joint marketing requires a formal agreement between nonaffiliated financial companies

The notice defines joint marketing as a formal agreement between nonaffiliated financial companies that together market financial products or services to the customer, and says its joint marketing partners include loan finance companies.

Supporting quotations

Joint marketing

A formal agreement between nonaffiliated financial companies that together market financial products or services to you.

Our joint marketing partner(s) include loan finance companies.

Cross-references

• defines (model-proposed): Joint marketing sharing is marked not limitable in the general table — The definition identifies joint marketing as a formal agreement between nonaffiliated financial companies that market together; the table row addresses sharing for that joint marketing.

Sharing & Disclosure · Company commitment

California customers: no joint marketing sharing without authorization

For California customers, the notice says Cross River Bank will not share personal information for joint marketing without the customer's authorization. This qualifies the general joint marketing row, which answers 'Yes' to sharing and 'No' to whether the customer can limit it.

Supporting quotations

For California Customers. We will not share personal information for joint marketing-without your authorization.

Qualifications & exceptions

• This provision applies to California customers and to joint marketing sharing.

Cross-references

• exception to (model-proposed): Joint marketing sharing is marked not limitable in the general table — For California customers, the notice withholds joint marketing sharing without authorization, while the general table row answers Yes to that sharing and No to any customer limit. The California provision qualifies that general answer for California customers.

Sharing & Disclosure · Company commitment

Vermont customers: no creditworthiness disclosure to affiliates

For Vermont customers, the notice says Cross River Bank will not disclose information about the customer's creditworthiness to its affiliates. This state-specific statement sits alongside the general affiliate row, which already answers 'No' to sharing creditworthiness information.

Supporting quotations

For Vermont Customers. We will not disclose information about your creditworthiness to our affiliates

Qualifications & exceptions

• Applies to Vermont customers and to creditworthiness information.
• The notice does not list exceptions for this affiliate restriction.

Not stated here

• The notice does not define creditworthiness information further.

Cross-references

• qualifies (model-proposed): No affiliate sharing of creditworthiness information — The Vermont paragraph adds a state-specific restriction on disclosing creditworthiness information to affiliates, alongside the general row that already says Cross River Bank does not share that information.

Sharing & Disclosure · Company commitment

Vermont customers: limits on marketing disclosures to nonaffiliated third parties

For Vermont customers, the notice says Cross River Bank will not disclose personal information, financial information, credit reports or health information to nonaffiliated third parties to market to the customer, except as permitted by Vermont law or unless the customer authorizes the disclosures.

Supporting quotations

will not disclose your personal information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make those disclosures.

Qualifications & exceptions

• The prohibition is subject to disclosures permitted by Vermont law and to the customer's authorization.
• It covers marketing by nonaffiliated third parties and four named data types.

Not stated here

• The notice does not identify which disclosures Vermont law permits or how authorization is given.

Cross-references

• qualifies (model-proposed): No sharing for nonaffiliates to market to the customer — The Vermont paragraph adds state-specific conditions to disclosures to nonaffiliated third parties for marketing, alongside the general row that says Cross River Bank does not share for nonaffiliate marketing.