Privacy and Security

Privacy Statement Rev. 5/1/16

FACTS	WHAT DOES Cecil Bank DO WITH YOUR PERSONAL INFORMATION?
Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
What?	The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security number and Payment History Income and Credit History Account Balances and Credit Scores When you are no longer our customer, we continue to share your information as described in this notice
How?	All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons we choose to share; and whether you can limit this sharing

Reasons we can share your personal information			Does Cecil Bank share?	Can you limit this sharing?
For our everyday business purposes— such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus			Yes	No
For our marketing purposes— to offer our products and services to you			Yes	No
For joint marketing with other financial companies			No	We Do Not Share
For our affiliates’ everyday business purposes— information about your transactions and experiences			No	We Do Not Share
For our affiliates’ everyday business purposes— information about your creditworthiness			No	We Do Not Share
For affiliates to market to you			No	We Do Not Share
For non–affiliates to market to you			No	We Do Not Share

Who we are
Who is providing this notice?	Cecil Bank
What we do
How does Cecil Bank protect my personal information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. Our Employees are bound by our financial privacy policy and information security program to treat customer information confidentially.
How does Cecil Bank collect my personal information?	We collect your personal information, for example, when you open an account or deposit money pay your bills or apply for a loan use your credit or debit card We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Why can’t I limit all sharing?	Federal law gives you the right to limit only sharing for affiliates’ everyday business purposes – information about your creditworthiness affiliates from using your information to market to you sharing for non-affiliates to market to you State laws and individual companies may give you additional rights to limit sharing.
Definitions
Affiliates	Companies related by common ownership or control. They can be financial and non-financial companies. Cecil Bank does not share information with affiliates
Nonaffiliates	Companies not related by common ownership or control. They can be financial and non-financial companies. Cecil Bank does not share information with non-affiliates so they can market to you
Joint marketing	A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Cecil Bank does not jointly market
Other Important Information
You can help protect your privacy by using caution when disclosing your account numbers, social security numbers, etc. to other persons. If someone calls you, explains the call is on behalf of the bank and asks for your account number or any other identifying or account-related information, you should beware. Cecil Bank does not ask bank customers for personal information via email or phone. Anyone who receives an email or phone call that claims to be from Cecil Bank and asks for account information should consider it to be a fraudulent attempt to obtain their personal account data and should not follow the instructions in the email or over the phone.