Wells Fargo U.S. Consumer Privacy Notice

Legal Rights & Agreement Rules · Context

Wells Fargo issues U.S. Consumer Privacy Notice under revision date 04/25

The document identifies itself as the Wells Fargo U.S. Consumer Privacy Notice with revision date Rev. 04/25. It serves as Wells Fargo's consumer privacy disclosure.

Supporting quotations

Wells Fargo U.S. Consumer Privacy Notice

Rev. 04/25

Qualifications & exceptions

• The notice bears the revision label 'Rev. 04/25' without stating a separate effective date or expiration date.

Not stated here

• The header does not list which specific consumer accounts or products are covered, which are detailed in later sections.

Legal Rights & Agreement Rules · Context

Federal law requires disclosure of personal information practices and provides limited rights to restrict sharing

Wells Fargo explains that financial companies determine how personal information is shared, and federal law mandates informing consumers about collection, sharing, and protection practices while granting rights to limit certain types of sharing.

Supporting quotations

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information.

Qualifications & exceptions

• Federal law permits consumers to limit some but not all information sharing.

Not stated here

• The notice does not state state-specific limits in this opening summary; state-level variations appear later.

Data Access & Collection · Company practice

Personal information collected and shared varies by product and includes identifiers and financial history

The categories of personal information Wells Fargo collects and shares depend on the customer's specific product or service, potentially including Social Security number, employment information, account balances, transaction history, credit history, and investment experience.

Supporting quotations

The types of personal information we collect, and share depend on the product or service you have with us. This information can include: • Social Security number and employmentinformation • Account balances and transaction history • Credit history and investment experience

Qualifications & exceptions

• Specific information collected and shared depends on the particular product or service held.

Not stated here

• The list of categories is illustrative ('can include') rather than exhaustive.

Sharing & Disclosure · Company practice

Wells Fargo shares customer information for everyday business operations under specified reasons

Financial companies require sharing customer personal information to operate day-to-day business, and Wells Fargo enumerates its specific sharing purposes and corresponding consumer opt-out choices.

Supporting quotations

All financial companies need to sharecustomers’personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Wells Fargo chooses to share; and whether you can limit this sharing.

Qualifications & exceptions

• Sharing is conducted according to the specific reasons and opt-out rules enumerated in the sharing schedule.

Sharing & Disclosure · Company practice

Wells Fargo shares personal information for everyday business purposes without consumer right to limit

Wells Fargo shares customer personal information for routine business operations including processing transactions, maintaining accounts, responding to court orders and legal investigations, and reporting to credit bureaus. Customers cannot limit this sharing.

Supporting quotations

| For our everyday business purposes — such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus | Yes | No |

Qualifications & exceptions

• Customers cannot limit sharing conducted for everyday business purposes.

Sharing & Disclosure · Company practice

Wells Fargo shares personal information with service providers for marketing purposes without opt-out

Wells Fargo shares personal information with third-party service providers to market its products and services. Customers cannot limit the sharing itself under this category, though separate direct marketing contact preferences apply.

Supporting quotations

| For our marketing purposes — with service providers we use to offer our products and services to you (please see below to limit the ways in which we contact you) | Yes | No |

Qualifications & exceptions

• Customers cannot opt out of this information sharing with service providers, but may separately limit marketing contact methods.

Sharing & Disclosure · Company commitment

Wells Fargo does not share personal information for joint marketing with other financial companies

Wells Fargo commits that it does not share customer personal information with external financial companies for joint marketing arrangements.

Supporting quotations

| For joint marketing with other financial companies | No | We don’t share |

Sharing & Disclosure · Company practice

Wells Fargo shares transaction and experience data with affiliates for everyday business without right to limit

Wells Fargo shares information about customer transactions and experiences with its corporate affiliates for their routine business operations. Customers cannot limit this transaction-and-experience sharing.

Supporting quotations

| For our affiliates’ everyday business purposes — information about your transactions and experiences | Yes | No |

Qualifications & exceptions

• Sharing of transaction and experience data with affiliates cannot be limited by the consumer.

Cross-references

• qualified by (model-proposed): State privacy protections apply, automatically restricting affiliate and nonaffiliate sharing for Vermont residents — Vermont state law automatically limits affiliate sharing without affirmative authorization, qualifying the general rule that consumers cannot opt out of affiliate everyday business sharing.

Sharing & Disclosure · User right or choice

Consumers may opt out of Wells Fargo sharing creditworthiness information with affiliates for everyday business

Wells Fargo shares customer creditworthiness information with its affiliates for everyday business purposes, and customers have the right to limit this sharing.

Supporting quotations

| For our affiliates’ everyday business purposes — information about your creditworthiness | Yes | Yes |

Qualifications & exceptions

• Right to limit applies specifically to creditworthiness information shared with affiliates, distinct from transaction/experience data.

Cross-references

• defined by (model-proposed): Affiliates are defined as companies related by common ownership or control, including named Wells Fargo entities — The definition of affiliates establishes the corporate scope covered by the creditworthiness sharing opt-out.

Sharing & Disclosure · User right or choice

Consumers may opt out of Wells Fargo affiliates using personal information to market products and services

Wells Fargo shares customer personal information with its affiliates for their own marketing purposes, and customers have the right to limit this marketing sharing.

Supporting quotations

| For our affiliates to market to you | Yes | Yes |

Qualifications & exceptions

• Consumers can opt out of affiliates using shared information to direct marketing.

Sharing & Disclosure · Company commitment

Wells Fargo does not share customer personal information with nonaffiliates to market to consumers

Wells Fargo commits that it does not share customer personal information with third-party nonaffiliated companies for their marketing purposes.

Supporting quotations

| For nonaffiliates to market to you | No | We don’t share |

Sharing & Disclosure · Procedure

Consumers can limit sharing by phone or online profile, with a 30-day delay for new customers

Customers may exercise available sharing opt-outs by calling 1-888-528-8460 or updating privacy preferences in online/mobile banking. For new customers, sharing may commence 30 days after notice delivery. Continued sharing persists for former customers as described in the notice, but opt-outs may be submitted at any time.

Supporting quotations

• Call 1-888-528-8460—our menu will prompt you through your choices. • Online and mobile banking customers – sign on and from the My Profile or Profile menu, select Change Privacy Preferences or Privacy Preferences. Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our customer, we can continue to share your information as described in this notice. However, you can contact us at any time to limit our sharing.

Qualifications & exceptions

• New customer sharing can begin 30 days after the notice is sent.
• Information of former customers continues to be shared according to the notice, subject to any submitted opt-out preferences.

Sharing & Disclosure · Procedure

Direct marketing opt-outs last 3 to 5 years but exclude statement mailings, online/ATM, and team contacts

Consumers can limit direct marketing by phone or online banking. A Do Not Call request lasts 5 years (or longer while an active consumer customer); Do Not Mail lasts 3 years. Marketing continues in account statements, online/ATM visits, survey requests, account servicing, and outreach from assigned client relationship managers.

Supporting quotations

• To limit our direct marketing to you by mail or telephone, call 1-888-528-8460—our menu will prompt you through your choices. • Online andmobile banking customers – sign on and from the My Profile or Profile menu, select Change Privacy Preferences or Privacy Preferences. Please note: A Do Not Call election is effective for five years, or while you are an active consumer customer, if longer than five years. The Do Not Mail election is effective for three years. You may continue to receive marketing information in regular account mailings and statements, when you visit us online or at an ATM. You may also be contacted to service your account or participate in surveys. If you have an assigned client manager or team, they may continue to contact you to assist you in managing your portfolio or account relationship.

Qualifications & exceptions

• Do Not Call election lasts 5 years, or while an active consumer customer if longer.
• Do Not Mail election lasts 3 years.
• Does not stop marketing in account statements, online banking visits, ATMs, surveys, or assigned relationship manager contacts.

Legal Rights & Agreement Rules · Procedure

Privacy inquiries may be directed to Wells Fargo customer service by phone or web

Customers can direct questions about privacy practices to Wells Fargo by calling 1-800-TO-WELLS (1-800-869-3557) or visiting wellsfargo.com/privacy-security.

Supporting quotations

Call 1-800-TO-WELLS (1-800-869-3557) or go to wellsfargo.com/privacy-security

Legal Rights & Agreement Rules · Context

Notice is provided by Wells Fargo U.S. branded entities and listed businesses, excluding those with separate notices

This privacy notice covers Wells Fargo U.S. companies using the 'Wells Fargo' brand name and other entities listed in the legal entities section, except for any entities or businesses that provide their own separate privacy notices.

Supporting quotations

Wells Fargo U.S. companies that use Wells Fargo in their names and other companies listed in the Wells Fargo U.S. legal entities and businesses section below, except for entities and businesses that provide their own notice.

Qualifications & exceptions

• Excludes entities and businesses that publish or provide their own separate privacy notices.

Not stated here

• Specific excluded entities are detailed in the subsequent legal entities section.

Security & Safeguards · Company commitment

Wells Fargo implements computer safeguards, secured files, and physical building security complying with federal law

To protect personal information from unauthorized access and use, Wells Fargo maintains federal-law-compliant security measures including computer safeguards, secured files, and physical building protections.

Supporting quotations

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards, secured files, and buildings. For more information visit wellsfargo.com/privacy-security.

Qualifications & exceptions

• Security measures comply with federal law requirements.

Data Access & Collection · Company practice

Personal information is collected from direct customer transactions, account activities, credit bureaus, and affiliates

Wells Fargo collects personal data directly when consumers open accounts, deposit or withdraw funds, apply for loans, use credit/debit cards, or seek investment advice. It also collects data from third parties including credit bureaus, affiliates, and other companies.

Supporting quotations

We collect your personal information, for example, when you: • Open an account or make deposits or withdrawals from your accounts • Apply for a loan or use your credit or debit card • Seek advice about your investments Wealso collect your personal information from others, such as credit bureaus, affiliates, or other companies.

Qualifications & exceptions

• Examples of collection points are non-exhaustive illustrations of customer interactions.

Legal Rights & Agreement Rules · User right or choice

Federal law restricts opt-out rights to affiliate creditworthiness, affiliate marketing, and nonaffiliate marketing

Under federal law, consumers can limit only affiliate creditworthiness sharing, affiliate marketing use, and nonaffiliate marketing sharing. State laws and company policies may provide additional rights to limit sharing beyond federal minimums.

Supporting quotations

Federal law gives you the right to limit only: • Sharing foraffiliates’everyday business purposes —information about your creditworthiness • Affiliates from using your information to market to you • Sharing for nonaffiliates to market toyou State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law.

Qualifications & exceptions

• Federal opt-out rights are strictly limited to the three enumerated categories.
• State laws or specific companies may confer additional privacy rights.

Not stated here

• Specific state-law rights are set forth in the subsequent state disclosures section.

Account & Service Control · User right or choice

Joint account privacy choices apply individually unless specified, but any holder can opt out on behalf of all

When limiting sharing on joint accounts, privacy choices apply individually by default unless requested otherwise. However, any joint account holder has the authority to express privacy preferences on behalf of other joint holders.

Supporting quotations

Your choices will apply individually unless you tell us otherwise. Any account holder may express a privacy preference on behalf of the other joint account holders.

Qualifications & exceptions

• Choices apply individually by default unless the customer specifies joint coverage.
• Any single joint account holder may opt out on behalf of all account holders.

Legal Rights & Agreement Rules · Context

Affiliates are defined as companies related by common ownership or control, including named Wells Fargo entities

Wells Fargo defines affiliates as companies related by common ownership or control, whether financial or non-financial, specifically including entities such as Wells Fargo Bank, N.A., and Wells Fargo Clearing Services, LLC.

Supporting quotations

Companies related by common ownership or control. They can be financial and non-financial companies. • Our affiliates include financial companies with Wells Fargo in their name such as Wells Fargo Bank, N.A., and Wells Fargo Clearing Services, LLC.

Cross-references

• defines (model-proposed): Consumers may opt out of Wells Fargo sharing creditworthiness information with affiliates for everyday business — The definition of affiliates establishes the corporate scope covered by the creditworthiness sharing opt-out.

Sharing & Disclosure · Company commitment

Nonaffiliates are defined as unrelated companies, and Wells Fargo does not share for nonaffiliate marketing

Wells Fargo defines nonaffiliates as financial and non-financial companies not related by common ownership or control, and confirms it does not share customer personal information with nonaffiliates for their marketing.

Supporting quotations

Companies not related by common ownership or control. They can be financial and non-financial companies. • Wells Fargo does not share with nonaffiliates so they can market to you.

Sharing & Disclosure · Company commitment

Joint marketing is defined as formal agreements between nonaffiliates, and Wells Fargo does not jointly market

Joint marketing is defined as formal agreements between nonaffiliated financial companies to market products or services together, and Wells Fargo specifies that it does not engage in joint marketing.

Supporting quotations

A formal agreement between nonaffiliated financial companies that together market financial products or services toyou. • Wells Fargo does not jointly market.

Charges & Financial Obligations · Company practice

Wells Fargo reports account information, late payments, missed payments, and defaults to credit bureaus

Wells Fargo informs customers that it may report account information to credit bureaus and consumer reporting agencies, where late payments, missed payments, or other account defaults may appear on the customer's credit or consumer reports.

Supporting quotations

We may report information about your account(s) to credit bureaus and/ or consumer reporting agencies. Late payments, missed payments, or other defaults on your account(s) may be reflected in your credit report and/or consumer report.

Qualifications & exceptions

• Reporting may reflect late payments, missed payments, or other account defaults.

Legal Rights & Agreement Rules · Procedure

Do Not Call requests take effect within 10 business days and last 5 years under TCPA policy

This notice serves as Wells Fargo's Do Not Call Policy under the Telephone Consumer Protection Act. Do Not Call requests are honored within 10 business days and remain in effect for at least 5 years. Marketing calls, texts, or artificial/prerecorded messages may still be placed to numbers on the list if appropriate consent was provided. Non-account holders can register by calling 1-800-869-3557.

Supporting quotations

This Privacy Notice constitutes Wells Fargo’s Do Not Call Policy under the Telephone Consumer Protection Act for all consumers. Wells Fargo maintains an internal Do Not Call preference list. Do Not Call requests will be honored within 10 business days and will be effective for at least five years from the date of request. Marketing calls/texts or artificial or prerecorded voice message calls may be made to residential or cellular phone numbers that appear on the Wells Fargo Do Not Call list with the appropriate consent. If you do not have an account with Wells Fargo & Company, call 1-800-869-3557 (1-800-TO-WELLS) to be placed on the Wells Fargo & Company’s Do Not Call list.

Qualifications & exceptions

• Requests are honored within 10 business days.
• Requests are effective for at least five years from the date of request.
• Marketing calls or texts may still be made to registered numbers if appropriate consent was provided.

Legal Rights & Agreement Rules · Procedure

Nevada residents receive state-specific telemarketing disclosures and Attorney General contact details

Pursuant to Nevada state law, residents may be placed on Wells Fargo's internal Do Not Call list and obtain telemarketing information via phone, email, or mail. The notice provides contact details for the Bureau of Consumer Protection in the Office of the Nevada Attorney General.

Supporting quotations

Nevada residents: We are providing you this notice pursuant to state law. You may be placed on our internal Do Not Call List by following the directions in the To limit direct marketing section. For more information regarding our telemarketing practices, contact us at1-800-869-3557; PrivacyCenter@wellsfargo.com, or Wells Fargo, P.O. Box 5110, Sioux Falls, SD 57117-5110. If you would like more information regarding this Nevada law, contact: Bureau of Consumer Protection, Office of the Nevada Attorney General, 100 N. Carson Street, Carson City, NV 89701; 702-486-3132; AgInfo@ag.nv.gov.

Qualifications & exceptions

• Applies specifically to Nevada residents under Nevada state law.

Sharing & Disclosure · Company commitment

State privacy protections apply, automatically restricting affiliate and nonaffiliate sharing for Vermont residents

Wells Fargo complies with state privacy laws that grant additional protections beyond federal standards. For customers with a Vermont mailing address, Wells Fargo automatically limits sharing with affiliates and nonaffiliates unless the customer explicitly authorizes it.

Supporting quotations

We follow state law where state law provides you with additional privacy protections. For example, we automatically treat customers with a Vermont mailing address as having limited our sharing with affiliates and nonaffiliates, unless you give us authorization.

Qualifications & exceptions

• Applies where state law affords additional privacy protections beyond federal law.
• Customers with a Vermont mailing address are automatically treated as having opted out unless affirmative authorization is given.

Not stated here

• Other state laws giving additional protections are referenced generally but not individually enumerated.

Cross-references

• qualifies (model-proposed): Wells Fargo shares transaction and experience data with affiliates for everyday business without right to limit — Vermont state law automatically limits affiliate sharing without affirmative authorization, qualifying the general rule that consumers cannot opt out of affiliate everyday business sharing.

Data Access & Collection · Company commitment

Business-to-business personal data protections cross-reference California Consumer Privacy Notice at Collection

Wells Fargo commits to protecting personal information collected in business-to-business contexts, including from individuals acting as business representatives, and refers readers to the California Consumer Privacy Notice at Collection for detailed categories and uses.

Supporting quotations

Business-to-business: Wells Fargo is committed to protecting personal information that may be collected online and offline in a business-to-business context, including the personal information of individuals in their capacities as representatives of business entities. For the categories of personal data that Wells Fargo may collect and how we use it, see the Wells Fargo California Consumer Privacy Notice at Collection at https://www.wellsfargo.com/privacy-security/notice-of-data-collection/.

Qualifications & exceptions

• Applies to personal information collected in a business-to-business context from individuals representing business entities.

Not stated here

• Specific data categories and uses for B2B representatives are located in an external linked policy at https://www.wellsfargo.com/privacy-security/notice-of-data-collection/.

Legal Rights & Agreement Rules · Context

Covered entities include Wells Fargo U.S. banks and branded companies, excluding businesses with separate notices

The notice covers Wells Fargo U.S. banks including Wells Fargo Bank, N.A., and corporate entities with 'Wells Fargo' in their names, explicitly excepting banks and businesses that maintain their own separate privacy notices.

Supporting quotations

Wells Fargo U.S. banks including Wells Fargo Bank, N.A., and companies with “Wells Fargo” in their names., except banks and businesses having their own privacy notices, including those listed below.

Qualifications & exceptions

• Excludes banks and businesses that issue their own privacy notices.

Cross-references

• has exception (model-proposed): Retail Services, Clearing Services, Advisors Network, insurance entities, and separate notice accounts are excluded — Wells Fargo Retail Services, Clearing Services, Advisors, and insurance entities are excluded from covered entity scope and maintain separate privacy notices.

Legal Rights & Agreement Rules · Restriction or exception

Retail Services, Clearing Services, Advisors Network, insurance entities, and separate notice accounts are excluded

Wells Fargo specifically excludes from this notice several business units and entities that have their own separate privacy notices: Wells Fargo Retail Services (division of Wells Fargo Bank, N.A.), Wells Fargo Clearing Services, LLC (including d/b/a Wells Fargo Advisors), Wells Fargo Advisors Financial Network, LLC, insurance companies/agencies with their own notices, and any businesses providing separate notices governing specific accounts or relationships.

Supporting quotations

Wells Fargo Retail Services, a division of Wells Fargo Bank, N.A.

Wells Fargo Clearing Services, LLC; or Wells Fargo Clearing Services, LLC, doing business as Wells Fargo Advisors

Wells Fargo Advisors Financial Network, LLC

Any insurance company, insurance agency or other company that has its own privacy notice or policy.

Businesses that have provided a separate privacy notice governing specified accounts or relationships

Qualifications & exceptions

• These entities and business divisions maintain independent privacy notices governing their accounts and relationships.

Cross-references

• exception to (model-proposed): Covered entities include Wells Fargo U.S. banks and branded companies, excluding businesses with separate notices — Wells Fargo Retail Services, Clearing Services, Advisors, and insurance entities are excluded from covered entity scope and maintain separate privacy notices.