EVOLVE BANK & TRUST PRIVACY POLICY

Data Access & Collection · Company practice

Collection varies by feature and some requested information is optional

Evolve says it may collect categories of information about users from a variety of sources when they use or access the Services. Some features may require information; a user may decline to provide it, but doing so may prevent use of those features.

Supporting quotations

When you use or access the Services, we may collect certain categories of information about you from a variety of sources.

You may decide not to provide this information, but doing so may prevent you from using or accessing these features.

Qualifications & exceptions

• 'May collect' and 'may require' do not state that every category is collected from every user.
• The stated consequence of declining is limited to the features that require the information.

Not stated here

• Which information each feature requires is not listed.

Data Access & Collection · Company practice

Basic contact details collected for the account, requested services, communications and queries

Evolve collects basic contact information such as name, email address, company name and role, mailing address and phone number. It states the purposes as creating and maintaining the account, providing requested products or services, communicating with the user (including about products that may be of interest), and responding to queries.

Supporting quotations

Basic contact information, such as your name, email address, company name and role, mailing address, and phone number.

We collect this information to create and maintain your account, provide you with products or services you have requested, communicate with you (including to tell you about products that may be of interest to you), and respond to your queries.

Qualifications & exceptions

• The examples are introduced by 'such as' and are not exhaustive.
• The communication purpose expressly includes products that may be of interest to the user.

Data Access & Collection · Company practice

Website and app visit information is collected, including webform and tracking data

Evolve collects information relating to a visit to its Site or use of its mobile application, including information submitted through features and webforms and information collected via cookies and tracking technologies. The policy says those technologies are described further below.

Supporting quotations

Information relating to your visit to our Site or use of our mobile application, including information that you submit when interacting with the Site’s and mobile application’s features and webforms and information collected via cookies and tracking technologies (“Tracking Technologies”), as described further below.

Qualifications & exceptions

• 'Site' is used here without a separate definition; the policy earlier names www.getevolved.com.
• The item cross-refers to later tracking details rather than describing them here.

Data Access & Collection · Company practice

Other information users choose to provide, including SSN, license, employment and date of birth

Evolve collects any other information a user chooses to provide, including information provided to use the Services. Its examples include Social Security number, driver's license, work experience, education, business information including TIN, gender and date of birth, as well as information included in communications or used to use the Services.

Supporting quotations

Any other information you choose to provide, such as information provided to us to provide the Services, including your social security number, driver’s license, work experience, education, business information including TIN, gender, date of birth, and any other information that you choose to include in communications with us or to use the Services.

Qualifications & exceptions

• The collection is framed as information the user chooses to provide.
• The examples are not stated as a complete list.

Not stated here

• Which items are mandatory for particular services is not stated.

Data Access & Collection · Company practice

Usage Data collected through tracking technologies for tailoring, offers, analytics and understanding use

Evolve collects information about a user's interaction with the Services ('Usage Data') through Tracking Technologies. It says it uses this data to tailor features, provide offers or promotions, run analytics, and better understand user interactions. The listed Usage Data includes device information, online activity data, and other interaction information such as session recordings, clickstream data and ad impressions.

Supporting quotations

We collect certain information about your interaction with the Services (“Usage Data”) through Tracking Technologies, which we use to tailor features to you, provide you with offers or promotions, run analytics, and better understand user interactions with the Services

Device information, such as unique device identifier, IP address, device type, browser type, operating system, and precise location (if you choose to provide it).

Online activity data, such as date and time stamps and log data.

Other information, regarding your interaction with the Services, such as session recordings, clickstream data, and ad impressions.

Qualifications & exceptions

• Device information includes precise location only if the user chooses to provide it.
• The Usage Data items are introduced by 'such as'.

Data Access & Collection · User right or choice

Precise location is collected only if the user chooses to provide it

Within the device information category, precise location is identified as collected 'if you choose to provide it.' The policy does not describe the permission or setting used for that choice in this item.

Supporting quotations

precise location (if you choose to provide it)

Device information, such as unique device identifier, IP address, device type, browser type, operating system, and precise location (if you choose to provide it).

Qualifications & exceptions

• The choice language is attached to precise location; the other device details are not similarly conditioned in this item.

Not stated here

• Whether the choice is presented through an operating-system permission, an app setting or another mechanism is not stated.

Data Access & Collection · Company practice

Outside sources include credit bureaus, partners, career sites, marketing databases and public records

Evolve may obtain information about a user from outside sources to verify identity and eligibility, provide products and services (including promotions, offers and rewards), personalize the experience, and communicate. The listed sources are third parties such as credit bureaus, other financial institutions, banks and payment networks; partners with whom the user may interact directly and for whom Evolve provides products or services; career websites such as LinkedIn, Monster or Indeed; consumer marketing databases or other data companies; and other public sources and government agencies.

Supporting quotations

We may also obtain information about you from outside sources, which we use to verify your identity and eligibility for the Services, provide you with products and services (including certain promotions, offers and rewards), personalize your experience and otherwise communicate with you

Third parties, who help us supplement the information you have provided (e.g., credit bureaus, other financial institutions and banks and payment networks).

Partners, with whom you may interact directly, and for whom Company provides products or services.

Career websites, such as LinkedIn, Monster, or Indeed.

Consumer marketing databases or other data companies who provide us with information.

Other sources, such as from publicly available sources and government agencies

Qualifications & exceptions

• The source list is introduced by 'including' and is not exhaustive.
• The stated purposes are identity and eligibility verification, providing products and services, personalization and communication.

Not stated here

• Which source supplies which category of information is not stated.

Data Access & Collection · Company practice

Usage Data is collected through Google Analytics, Hotjar and DoubleClick; Hotjar keeps a pseudonymized profile

Evolve says it collects Usage Data through Tracking Technologies including Google Analytics, Hotjar and DoubleClick. For Hotjar, it explains that the tool is used to understand user experience (such as time on pages, links chosen and likes or dislikes) so Evolve can build and maintain the Services with feedback; Hotjar uses cookies and other technologies and stores the information on Evolve's behalf in a pseudonymized user profile.

Supporting quotations

As described above, we collect Usage Data through Tracking Technologies, including Google Analytics, Hotjar, and DoubleClick.

For example, we use Hotjar to better understand our users’ experience

Hotjar uses cookies and other technologies to collect this information and stores this information on our behalf in a pseudonymized user profile.

Qualifications & exceptions

• The tool list is introduced by 'including' and is not stated as exhaustive.
• The Hotjar detail is given as an example ('For example').
• Hotjar stores the information on Evolve's behalf in a pseudonymized profile.

Not stated here

• The policy does not describe retention periods for the Hotjar profile or the other tools.

Data Access & Collection · User right or choice

Users may be able to block or delete cookies, with possible service effects; a Google Analytics opt-out is offered

Most browsers accept cookies automatically, but the policy says users may be able to control how their devices permit Tracking Technologies. A user may block or delete Evolve's cookies from the browser, but doing so may cause some Services to work incorrectly. The policy also links to a Google Analytics opt-out.

Supporting quotations

Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of Tracking Technologies.

If you choose, you may block or delete our cookies from your browser; however, blocking or deleting cookies may cause some of the Services to work incorrectly.

To opt out of tracking by Google Analytics, click here.

Qualifications & exceptions

• Control depends on the browser or device ('may be able to').
• Blocking or deleting cookies may cause some Services to work incorrectly.
• The opt-out link is specific to Google Analytics.

Not stated here

• No central opt-out for all tracking is described.

Data Access & Collection · Company practice

Mobile app collects phone contacts and images when the user shares the app

Evolve says that, in addition, it collects phone contacts and images in the mobile app when the user shares the app. The item does not state the purpose or further use of those contacts and images.

Supporting quotations

In addition, we collect phone contacts and images in the mobile app when you share the app.

Qualifications & exceptions

• The collection is limited to the mobile app and to when the user shares the app.

Not stated here

• The purpose, sharing and retention of phone contacts and images are not stated in this item.

Data Access & Collection · Company practice

Children under 13 are not permitted; Evolve disclaims knowing collection and will try to delete

Children under 13 are not permitted to use the Services, and Evolve says it does not seek or knowingly collect personal information about children under 13. If it becomes aware that it has unknowingly collected such information, it will make commercially reasonable efforts to delete it from its database. A parent or guardian may contact Evolve to request deletion.

Supporting quotations

Children under the age of 13 are not permitted to use the Services, and we do not seek or knowingly collect any personal information about children under 13 years of age.

If we become aware that we have unknowingly collected information about a child under 13 years of age, we will make commercially reasonable efforts to delete such information from our database.

If you are the parent or guardian of a child under 13 years of age who has provided us with their personal information, you may contact us using the below information to request that it be deleted.

Qualifications & exceptions

• The deletion commitment is limited to 'commercially reasonable efforts'.
• The collection statement is limited to knowing collection.
• The parent or guardian request uses the contact information stated later in the policy.

Not stated here

• The policy does not state a separate children's contact channel.

Data Access & Collection · Company practice

California table reports categories collected and disclosed for a business purpose in the preceding 12 months

Under the heading 'Processing of Personal Information,' the policy states that in the preceding 12 months it collected, and where indicated in the table disclosed for a business purpose, the listed categories of personal information and sensitive personal information. Sensitive categories are denoted by an asterisk. The table's columns are 'Category' and 'Categories of Recipients.'

Supporting quotations

Processing of Personal Information

In the preceding 12 months, we collected and (where indicated below) disclosed for a business purpose the following categories of personal information and sensitive personal information (denoted by *) about residents:

Category

Categories of Recipients

Qualifications & exceptions

• The table's time frame is the preceding 12 months.
• Disclosure is stated as 'where indicated below'; each row's recipient column supplies the indication.
• An asterisk denotes sensitive personal information.

Not stated here

• The policy does not give a specific as-of date for the 12-month period beyond the March 29, 2023 revision date.