Digital Privacy and Cookies Policy

Data Access & Collection · Company practice

Scope of digital privacy policy across sites and third-party pages

This policy applies to user interactions with Wells Fargo & Company or its subsidiaries across owned and controlled online or mobile sites and applications, as well as interactions via Wells Fargo advertisements, pages, or accounts on third-party sites, unless supplanted by a specific posted policy. Under this policy, Wells Fargo may collect, retain, use, and disclose personal and other information.

Supporting quotations

This Wells Fargo Digital Privacy and Cookies Policy ("Policy") applies to your interaction with Wells Fargo & Company or any of its subsidiaries (collectively, "Wells Fargo," "we," "us," "our"): (1) at any online or mobile site or application that we own and control ("Site"), unless a different online and/or mobile or other privacy policy is posted relating to a particular site, application, product, or service, or is made available to you and by its terms supplants this Policy; or (2) via a Wells Fargo advertisement, page, or account on a third party site. We may collect, retain, use, and disclose personal and other information about you in accordance with this Policy.

Qualifications & exceptions

• Applies unless a different policy is posted for a particular site, application, product, or service that supplants this policy.

Cross-references

• has exception (model-proposed): Third-party platform privacy policies govern external site presences — Third-party platform privacy policies and terms govern data practices on external sites and social platforms as an exception to general digital policy scope.

Legal Rights & Agreement Rules · Context

California Consumer Privacy Act notice and resident privacy rights

Wells Fargo provides additional privacy policies and notices including the California Consumer Privacy Act Notice (CCPA Notice), which details how Wells Fargo collects, uses, and discloses personal information regarding California residents and explains how California residents can exercise their statutory CCPA rights.

Supporting quotations

Certain additional Wells Fargo privacy-related policies and notices that may apply are posted on the Privacy, Cookies, Security, and Legal page, or provided to you at the point of collection, or at the time of obtaining a product or service, such as the Wells Fargo California Consumer Privacy Act Notice ("CCPA Notice"). The CCPA Notice explains how we collect, use, and disclose personal information about California residents and how California residents can exercise rights under the CCPA.

Qualifications & exceptions

• Applies to personal information about California residents.

Not stated here

• The full text of the referenced California Consumer Privacy Act Notice is outside this agreement and not supplied in this source.

Legal Rights & Agreement Rules · Context

Consumer, international, and fiduciary account privacy notices

Additional Wells Fargo policies and notices include the U.S. Consumer Privacy Notice (applying to U.S. customers and consumers), international privacy policies (applying outside the U.S.), and product-specific notices such as special rules of confidentiality for trust or fiduciary accounts where Wells Fargo acts as trustee or service provider (including employer-sponsored retirement accounts).

Supporting quotations

The additional policies and notices also include the Wells Fargo U.S. Consumer Privacy Notice (PDF) (which applies to U.S. customers and consumers as described in that notice) and various international privacy policies (which apply to information collected by us outside of the U.S. as described in those policies). You may also receive an additional privacy notice in connection with your use of a particular product or relationship with a specific business. For example, Trust or fiduciary accounts for which Wells Fargo is the trustee or service provider, including employer-sponsored retirement accounts, are protected under special rules of confidentiality, which are addressed in the applicable privacy notices.

Qualifications & exceptions

• Applies to U.S. consumers, international data collection outside the U.S., or specific fiduciary account relationships.

Not stated here

• The full text of the referenced U.S. Consumer Privacy Notice and international policies is outside this agreement and not supplied in this source.

Legal Rights & Agreement Rules · Restriction or exception

Third-party platform privacy policies govern external site presences

When users interact with Wells Fargo on third-party sites (such as social media pages or handles), the third party's privacy policy and terms of use govern that third party's collection, use, and disclosure of data rather than this policy, unless specifically stated otherwise.

Supporting quotations

Please note that where we have another type of presence on a site owned by a third party, such as a page or handle on a social media site, that third party’s privacy policy and terms of use will apply to the third party’s collection, use, and disclosure of data (rather than this Policy), unless specifically stated otherwise.

Qualifications & exceptions

• Applies to third-party presences such as social media pages or handles.
• Applies unless specifically stated otherwise.

Not stated here

• The terms and privacy policies of third-party platforms are outside this agreement and not supplied in this source.

Cross-references

• exception to (model-proposed): Scope of digital privacy policy across sites and third-party pages — Third-party platform privacy policies and terms govern data practices on external sites and social platforms as an exception to general digital policy scope.

Legal Rights & Agreement Rules · Permission or license

User consent to policy and data practices by using sites or ads

To the extent permitted by applicable law, using a Wells Fargo Site or interacting with a Wells Fargo advertisement, page, or account on a third-party site constitutes user consent to this policy, including consent to Wells Fargo's use and disclosure of information about the user as described in this policy.

Supporting quotations

To the extent permitted by applicable law, by using a Site or interacting with a Wells Fargo advertisement or page or account on a third-party site, you consent to this Policy, including your consent to our use and disclosure of information about you in the manner described in this Policy.

Qualifications & exceptions

• Conditioned to the extent permitted by applicable law.

Cross-references

• qualified by (model-proposed): Policy update mechanism, effective date, and acceptance through continued use — Continued site usage constitutes acceptance of updated policy terms upon posting, qualifying the initial consent by use.

Data Access & Collection · Company practice

Collection of user inputs, activity, geolocation, and keystroke biometrics

Wells Fargo collects information provided through online interactions, including contact details (name, address, email), activity and transaction data, pages visited on the Site, geolocation information, and biometric data such as keystroke and mouse movement patterns.

Supporting quotations

Information that we may collect about you through online interaction includes information that you input, such as your name, address, email address, and other contact information; data resulting from your activity, such as transaction information and the pages you visit on Site; geolocation information; and biometric information, such as keystroke and mouse movement patterns.

Qualifications & exceptions

• Collected through online interaction including sites and mobile applications.

Cross-references

• has exception (model-proposed): Child privacy restrictions under 13 and minor data collection aged 13 to 17 — General online data collection excludes children under 13, and knowingly collects data from minors aged 13-17 only on designated directed sites under the Minor Privacy Notice.

Data Access & Collection · Company practice

Collection of device telemetry, browser information, and IP addresses

Wells Fargo collects technical information associated with user devices, including device type, browser type, device IP address, operating system details, and additional information gathered through cookies, tags, and related technologies.

Supporting quotations

We may also collect additional information, such as the type of device and browser you are using, the IP address of your device, information about your device’s operating system, and additional information associated with your device. We may also collect information through cookies, tags, and other technologies, as described further below.

Data Access & Collection · Company practice

Use of cookies and similar technologies to collect site interaction data

When users visit the Site, Wells Fargo or its service providers deploy cookies or similar technologies to collect information about site interactions, enabling preference retention, personalization, performance and security enhancements, and interest-based advertising.

Supporting quotations

When you visit our Site, we, or our service providers, may use cookies or other similar technologies to collect information about how you interact with our Site.

Use & Processing · Company practice

Use of cookie data for multi-channel marketing, ad targeting, and security

Wells Fargo and its service providers utilize cookies to personalize experiences on Wells Fargo and external sites, target advertising, and deliver offers across online ads, email, postal mail, and telephone subject to recorded privacy preferences. Cookies also maintain online session continuity, collect site analytics, monitor promotions, and support anti-fraud and security operations.

Supporting quotations

We and our service providers use cookies and information collected through their use to make your experience with Wells Fargo and certain other sites richer and more personalized based on the products, services, or other interactions you have with us and other sites.

Information collected through use of cookies may be used to make offers to you via online ads, email, U.S. mail, or telephone, subject to the privacy preferences you have on file with Wells Fargo. (Privacy preferences for employer-sponsored retirement accounts default to no marketing, solicitation, or sharing for marketing purposes without specific consent.)

Qualifications & exceptions

• Offers are subject to privacy preferences on file with Wells Fargo.
• Privacy preferences for employer-sponsored retirement accounts default to no marketing, solicitation, or sharing for marketing purposes without specific consent.

Sharing & Disclosure · Company commitment

Service provider browsing data collection restricted to Wells Fargo services

Third parties permitted to collect browsing behavior on the Site are typically restricted to service providers who are contractually bound to use collected information solely to provide services and marketing on behalf of Wells Fargo, and not for any other entity.

Supporting quotations

Other parties that may collect information about your web browsing behavior when you use our Site are typically limited to service providers who may only use any information collected to provide services and marketing for us and not to provide services or advertising for any other party.

Qualifications & exceptions

• Applies to service providers collecting browsing data on Wells Fargo's Site.

Data Access & Collection · Company practice

Third-party access to browsing data via embedded features and social links

Where Wells Fargo provides links or embeds third-party features on the Site (such as social media sharing tools or embedded maps), those features often employ third-party cookies, allowing external platforms to access user web browsing information on pages where the features are embedded.

Supporting quotations

At other times, information from a third party may be embedded on our Site, such as a map. These features often function through the use of third-party cookies utilized by the third-party site, such as a social media platform. As a result, if you use any of these features, these third parties may be able to access information about your web browsing on the pages of our Site where links to these features are in place.

Qualifications & exceptions

• Operates when users access pages with embedded third-party features or links like social media platforms or maps.

Retention & Deletion · Company practice

Session and persistent cookie lifespans and device retention

Wells Fargo utilizes session cookies that expire automatically at the close of a browser session to maintain current visit actions, and persistent cookies that remain stored across sessions until a pre-set expiration period set by Wells Fargo or service providers to enhance experiences and deliver ads.

Supporting quotations

There are two types of cookies, session and persistent.

Session cookies expire at the end of a web browsing session when you close your browser. They help the site remember your actions during the current website visit.

Persistent cookies remain stored on your device between browsing sessions until a pre-set expiration period determined by us or our service providers. These types of cookies allow us to improve website experiences and place advertisements.

Use & Processing · Company practice

Strictly necessary, functional, and analytical cookie categories and blocking impacts

Wells Fargo categorizes cookies into strictly necessary cookies required for core site functions (secure login, applications, language settings; blocking causes broken functionality); functional cookies enhancing personalization and media (video playback, PDF downloads; blocking impairs features); and performance/analytical cookies monitoring visitor metrics and traffic sources.

Supporting quotations

There are four categories of cookies we may use on our Site:

Strictly necessary: These cookies are necessary for our site to function or to enable functionality requested by you. They’re needed to do things like securely signing on to our site, applying for a product or service, or honoring a language preference. You can set your browser to block all cookies, but some parts of our site won't work without them.

Functional: These cookies enable an enhanced or personalized experience. They may be set by us or third-party providers whose services we have available on our site. This may include things like playing videos on our site or downloading PDF forms or seeing content personalized to you. If these cookies are blocked, then some of these services may not function.

Performance and analytical: These cookies allow us to monitor the performance of our website, such as how many people are visiting our site and how they got there, so we can measure and improve your experience on our site. If these are blocked, we have less information available to us to continue to improve our site.

Qualifications & exceptions

• Blocking all cookies causes parts of the site not to work.
• Blocking functional cookies may prevent certain services like video playback or PDF downloads from functioning.

Use & Processing · Company practice

Marketing and advertising cookies for targeted content and advertising

Wells Fargo and advertising partners deploy marketing and advertising cookies to understand site usage and deliver tailored online content and advertisements. If users block or turn off these cookies, ads still appear but are not tailored based on browsing behavior.

Supporting quotations

Marketing and advertising: These cookies may be set by us or through our advertising partners. This information is used to understand your use of our site so we may show you more relevant online content and advertising. If you block or turn them off, you may still see online advertisements, but they won’t be tailored to you based on your browsing behavior.

Qualifications & exceptions

• If blocked or turned off, advertisements still appear but will not be tailored based on browsing behavior.

Cross-references

• narrowed by (model-proposed): Domain and browser-specific cookie preference management tool — The cookie preference management tool allows users to reject marketing and advertising cookie categories, narrowing active tracking on that browser and domain.

Data Access & Collection · User right or choice

Domain and browser-specific cookie preference management tool

Users can manage certain cookie categories via the Manage Preferences tool (accessible through the Do Not Sell or Share My Personal Information link in the footer, website banner, or cookie icon on applicable domains). Preferences apply strictly to the specific domain and browser used, and must be re-exercised if cookies are cleared, a different browser is used, or other Wells Fargo domains are visited.

Supporting quotations

Managing cookies is domain and browser specific. You can manage our use of certain types of cookies on the applicable domain using the “Manage Preferences” tool, which is accessible via the Do Not Sell or Share My Personal Information link in the footer, or the website banner or cookie icon, where available, for that specific domain. The toggle indicator positioned to the right accepts the category of cookies selected; whereas the toggle indicator positioned to the left rejects the category of cookies selected. You may also use an industry accepted opt-out preference signal such as the Global Privacy Control (see more details below). Your preference applies to this domain and the browser you are currently using. It does not apply to different browsers or other Wells Fargo managed domains. If you visit this domain using a different browser or delete your browser cookies, you will need to exercise your preference again. If you visit other Wells Fargo managed domains, such as wellsfargojobs.com, click on the Do Not Sell or Share My Personal Information link in the footer for that domain or the website banner or cookie icon, where available, for specified websites to manage your preference.

Qualifications & exceptions

• Preferences apply only to the specific domain and browser in use.
• Clearing cookies or using a different browser requires setting preferences again.
• Visiting other Wells Fargo domains (e.g., wellsfargojobs.com) requires setting preferences on those domains separately.

Cross-references

• narrows (model-proposed): Marketing and advertising cookies for targeted content and advertising — The cookie preference management tool allows users to reject marketing and advertising cookie categories, narrowing active tracking on that browser and domain.

Sharing & Disclosure · Company commitment

Global Privacy Control signal honored for targeted advertising opt-out

Wells Fargo recognizes Global Privacy Control (GPC) signals transmitted by compatible browsers or extensions, treating GPC as an automated do not sell or share my personal information request to opt out of sharing information for targeted advertising on nonaffiliated sites, applications, or services.

Supporting quotations

Global Privacy Control (GPC) is a service that lets you opt out of sharing information for targeted advertising on nonaffiliated websites, applications, or services. You can enable this service through specific browsers or browser extensions (see which browsers are GPC-enabled at the Global Privacy Control website). Once you activate the GPC setting, your browser will automatically send participating websites (like ours) a “do not sell or share my personal information” signal.

Qualifications & exceptions

• Requires activation of GPC through compatible browsers or extensions.

Cross-references

• contrast (model-proposed): No separate response to browser Do Not Track signals — Wells Fargo honors Global Privacy Control signals as an opt-out of sharing for targeted advertising, but does not respond to browser Do Not Track configurations.

Legal Rights & Agreement Rules · Restriction or exception

No separate response to browser Do Not Track signals

Wells Fargo does not separately respond to or take action regarding browser-based Do Not Track header configurations, citing currently evolving industry standards.

Supporting quotations

Industry standards are currently evolving, and we may not separately respond to or take any action with respect to a "do not track" configuration set in your internet browser.

Qualifications & exceptions

• Based on evolving industry standards.

Cross-references

• contrast (model-proposed): Global Privacy Control signal honored for targeted advertising opt-out — Wells Fargo honors Global Privacy Control signals as an opt-out of sharing for targeted advertising, but does not respond to browser Do Not Track configurations.

Use & Processing · User right or choice

Industry consumer opt-out programs and mobile ad tracking controls

Users can opt out of interest-based ads delivered on third-party sites via the Network Advertising Initiative (NAI) or Digital Advertising Alliance (DAA) consumer opt-out mechanisms. On mobile devices, users can disable personalized ads in iOS or opt out of ad personalization on Android.

Supporting quotations

If you receive an ad delivered on a third-party site in part based on information collected through the use of cookies, you may opt out of receiving such ads by visiting the Network Advertising Initiative's Consumer Opt-Out link or the Digital Advertising Alliance's Consumer Opt-Out link and learn how to opt-out of receiving interest-based advertising from companies that participate in those programs. This opt-out works via cookies set on a particular browser, so if you delete cookies from your browser, or use a different browser or device, you will need to opt out again.

For mobile devices, you can turn off personal ads on iOS devices or opt out of ads personalization on Android devices.

Qualifications & exceptions

• NAI and DAA opt-outs operate via browser cookies and must be reset if cookies are deleted or devices change.
• Mobile ad personalization opt-outs require device-level configuration.

Use & Processing · Permission or license

Pixel tags, SDKs, and user interaction visual replay monitoring

Wells Fargo and service providers utilize pixel tags, web beacons, SDKs, and clear GIFs for communication measurement and advertising targeting. By using the Site, users consent (unless prohibited by law) to interaction monitoring and visual replay tools using cookies and log files for fraud prevention, customer service, product improvement, and other legally permitted purposes.

Supporting quotations

We may also use additional technologies such as pixel tags, web beacons, SDKs, and clear GIFs, and may permit our third-party service providers to use these technologies. We use these technologies for purposes such as measuring the effectiveness of our advertisements or other communications, determining viewing and response rates, and determining which offers to present to you on our own or on third party sites. By using the Site, you consent to the use of analytics and monitoring tools to collect user interaction with our products, unless prohibited by law. These interactions are collected using cookies and technical log files. We use the data for purposes that include interaction monitoring and visual replay for fraud, customer service, product improvement, and other purposes allowed by law.

Qualifications & exceptions

• Consent applies by using the Site, unless prohibited by law.

Use & Processing · Company practice

Operational, compliance, security, marketing, and analytical data uses

Wells Fargo uses collected information for purposes allowed by law, including account servicing, customer communication, Site and product improvement, legal compliance, risk control, information security, anti-fraud efforts, marketing personalization, and tracking website usage metrics (page hits, visited pages, session length) to evaluate site usefulness.

Supporting quotations

In addition to the uses described above, we use information for purposes as allowed by law such as: servicing; communicating with you; improving our Site, products, or services; legal compliance; risk control; information security; anti-fraud purposes; marketing or personalizing the presentation of our products and services to you; or tracking email access or website usage, such as number of hits, pages visited, and the length of user sessions in order to evaluate the usefulness of our sites.

Qualifications & exceptions

• Used for purposes allowed by applicable law.

Sharing & Disclosure · Company practice

Information disclosure to service providers and for legal process

Wells Fargo discloses information to service providers (such as data processors and marketing/product improvement partners) and to additional third parties when required or permitted by law, including in response to legal process. Additional details on affiliate and third-party sharing are set forth in referenced policies such as the U.S. Consumer Privacy Notice.

Supporting quotations

We may disclose information to service providers with whom we work, such as data processors and companies that help us market products and services or improve the services we provide to you. When permitted or required by law, we may disclose information to additional third parties for purposes including response to legal process. As applicable, please see the additional privacy policies referenced above, such as the Wells Fargo U.S. Consumer Privacy Notice (PDF), for more information on how we may share information with affiliates and third parties.

Qualifications & exceptions

• Disclosures to third parties occur when permitted or required by law, such as responding to legal process.

Not stated here

• The full text of the referenced U.S. Consumer Privacy Notice is outside this agreement and not supplied in this source.

Data Access & Collection · Restriction or exception

Child privacy restrictions under 13 and minor data collection aged 13 to 17

Wells Fargo Sites are not directed to children under 13 and Wells Fargo does not knowingly collect personal information from children under 13 unless specified. For designated sites directed to minors aged 13 through 17, Wells Fargo may knowingly collect personal information, governed by the referenced Minor Privacy Notice.

Supporting quotations

Unless otherwise specified, our Sites are not directed to children under the age of 13, and we do not knowingly collect personal information from such children.

There may be sites directed to minors between the ages of 13-17 years old. We may knowingly collect personal information from such minors. For more information about data collection and how we use and disclose minor personal information, please see the Minor Privacy Notice.”

Qualifications & exceptions

• Sites are not directed to children under 13 unless specified.
• Applies to minors aged 13-17 on designated directed sites.

Not stated here

• The full text of the referenced Minor Privacy Notice is outside this agreement and not supplied in this source.

Cross-references

• exception to (model-proposed): Collection of user inputs, activity, geolocation, and keystroke biometrics — General online data collection excludes children under 13, and knowingly collects data from minors aged 13-17 only on designated directed sites under the Minor Privacy Notice.

Legal Rights & Agreement Rules · Procedure

Policy update mechanism, effective date, and acceptance through continued use

When Wells Fargo updates this policy, it publishes the revisions and updates the date of most recent update posted at the top of the policy. All policy updates take effect immediately upon posting on the Site. To the extent permitted by applicable law, continued use of the Site after revisions are posted constitutes user acceptance of the modified policy.

Supporting quotations

If we make updates to this Policy, we will update the Policy with the changes and revise the "date of most recent update" posted at the top of this Policy. Any updates to the Policy become effective when we post the updates on the Site. To the extent permitted by applicable law, your use of the Site following the update to the Policy means that you accept the updated Policy.

Qualifications & exceptions

• Policy updates become effective upon posting on the Site.
• Acceptance via continued site use is conditioned to the extent permitted by applicable law.

Cross-references

• qualifies (model-proposed): User consent to policy and data practices by using sites or ads — Continued site usage constitutes acceptance of updated policy terms upon posting, qualifying the initial consent by use.