Website Privacy and Security Practices

Our Privacy and Security Practices

We understand how important it is to protect the privacy of those who visit this website (the “Site”) or who obtain products or services from us online through this Site. The practices below describe:

The information we collect from those who visit our Site;
How that information may be used; and
With whom we may share that information.

Please read the following information carefully when using the Site, or when providing information to us through the Site. You understand that by using the Site you are accepting our practices as described below.

Information We Collect

Depending on how you interact with the Site and our products and services, we may collect the following categories of personal information:

Identifiers and Contact Information: Name, email address, postal address, and telephone number.
Government-Issued Identifiers: Social security number, driver’s license number, passport number, and state identification number.
Demographic Information: Age, date of birth, gender, race, ethnicity, and nationality.
Financial Information: Bank account information, income, credit history, and information about debts and other financial obligations.
Professional or Employment Information: Job title, employer, work history, and salary.
Geolocation Data: Precise and/or approximate location.

How We Collect Information

We collect personal information from a variety of sources, depending on how you interact with us and the products and services you use. We may collect personal information:

Directly from you. We collection information you provide to us when you complete forms, create or access an account, apply for or use our products and services, contact us, or otherwise communicate or interact with us.
Automatically when you use our websites and mobile applications. We may automatically collect certain information about your use of our websites and mobile applications through cookies, pixels, analytics tools, and similar technologies. This may include information about your interactions with our websites and applications and other information associated with your use of those services.
From your device. When you access our websites or mobile applications, we may collect information from or about the device you use, such as device-related information, operating system, browser type, and other technical information.
From third-party sources. We may obtain information from third-parties, including reports and other sources, for purposes such as verifying income and understanding or confirming deposit account activities. The information we obtain from third parties may include financial and employment information.
Through third-party account integrations or logins. If you choose to register for or access certain services using an account provided by a third party, such as Google, Facebook, or LinkedIn, we may receive information from that third party in accordance with your account settings and the third party’s privacy practices.
Through other interactions with us. We may collect personal information through our website forms, mobile applications, telephone interactions, and in-person interviews.

Online Banking

When you apply for or use our online banking products and services, we collect and retain information necessary to provide, administer, secure, and maintain those products and services. The information we collect may include information you provide to us, information about your accounts and transactions, and information collected automatically when you access or use our online services.

We retain information in accordance with our records-retention policies and applicable law. Additional information about our collection, use, and disclosure of information in connection with your accounts and financial products may be provided in the applicable account agreements, disclosures, and privacy notices.

Email and Online Forms

When you contact us through email or online forms, we may collect and retain the information you provide, including the content of your communication, your email address, and our response to your communication. We retain this information for the period required by our records-retention policies and applicable law. We may use this information to respond to your request, maintain an appropriate record of our communications, and provide or administer the products or services you request.

Please do not send sensitive personal or account information through ordinary email. Internet email transmissions may not be secure. Unless we specifically instruct you to do so through a secure method, you should not send information such as your Social Security number, date of birth, account number, password, security credentials, or other information that could be used to identify you or access your accounts through email.

Cookies and Similar Technologies

We use cookies and similar technologies, such as pixels, web beacons, and similar tracking technologies, to operate and secure our websites and mobile applications, remember preferences, understand how users interact with our services, analyze website performance, and, where permitted by applicable law and your choices, personalize content and marketing.

What are cookies? Cookies are small text files or similar technologies that may be stored on or accessed from your device when you visit a website. Cookies and similar technologies may allow us to recognize your browser or device, remember preferences, and collect information about your interactions with our Site.

What are web beacons? We may use web beacons (lines of code) in conjunction with cookies for tracking marketing and analytics on various pages on the Site. A web beacon is often a transparent graphic image that is placed on a web page. We use web beacons to collect information about the number of people who review pages on the Site, search engine referrals, and browsing patterns within the Site. These tracking/sharing preferences are controlled by the consent management categories. We track traffic and browsing patterns for security and performance as essential and you cannot opt out of these features.

Types of cookies:

Necessary cookies. These cookies are required for you to be able to use some important features on our Site, such as logging in. These cookies don’t collect any personal information.
Functionality cookies. These cookies provide functionality that makes using our service more convenient and makes more personalized features possible. For example, functionality cookies might remember your name and e-mail in comment forms so you don’t have to re-enter this information next time.
Analytics cookies. These cookies are used to track the use and performance of our Site and services. Please note: We use Google Analytics to help us understand how visitors use our Site and to measure website traffic and performance. Google may process information collected through Google Analytics in accordance with its applicable privacy practices: Google Privacy Policy. You can manage your choices regarding analytics technologies through our cookie preference manager. In addition, you can visit the Google Analytics opt-out page.
Targeting/advertising cookies. These cookies track your activity across websites to help deliver marketing and advertising that may be relevant to you and to measure the performance of our advertising. They are placed only if you consent to targeting/advertising cookies through our cookie consent manager.

Where required by applicable law, we obtain your consent before using non-essential cookies and similar technologies. You can manage or withdraw your consent at any time through our cookie preference manager – Website Privacy and Cookies – Mascoma Bank. You may also control cookies through your browser settings. Disabling or withdrawing consent for certain technologies may affect the availability or functionality of some features of the Site.

Our Use and Sharing of the Information We Collect

Information You Provide to Us to Request Services Through the Site – If you provide us with personally identifiable information to request products and services through the Site, we may share the information that you provide to us with third parties in support of your request for these services. For example, if you provide us with information to enroll in our online banking product, we share that information with those service providers who are necessary to offer you that product. However, we do not sell or otherwise make our online banking user list available to other third parties. Data you provide will only be used in accordance with its original stated purpose. We use the information we collect to provide and service our products, process transactions and payments, establish and manage accounts, communicate with you (including customer service and, where permitted, marketing), detect and prevent fraud and maintain security, and comply with our legal and regulatory obligations. We may share personal information as described in these practices, but we do not sell or rent your personal information.
Correspondence Received Through Email – We may use the information from the correspondence that you send to us via email to respond to your inquiry. We do not sell or otherwise share your email and other contact information with third parties.
Cookies – Our Site may use cookies to provide enhanced functionality on the Site (e.g., user ID and password prompts) and aggregate traffic data (e.g., what pages are the most popular). This allows us to: (a) provide functionality that makes using our services more convenient; (b) track usage behavior and compile aggregate data to provide content improvements; and (c) store passwords and logon IDs so that you do not have to enter this information every time.
Web Beacons – We may use web beacons so that we may better understand the traffic patterns on the Site, to creating reporting tools regarding the number of visitors to the Site, and to help us adjust the for website performance and security.
Other Instances in Which We May Share Information – We share personal information, including nonpublic personal information (“NPI”), only as permitted by law and as described in these practices, and we do not sell or rent your personal information. We may disclose personal information to the following categories of third parties: (a) service providers and vendors that perform services on our behalf, such as core processing, technology hosting, and payment network providers; (b) our affiliates, with whom we share transaction and experience information only and not for their own marketing purposes; (c) government agencies and law enforcement, in response to subpoenas, court orders, or other lawful requests, or to comply with the law, enforce an agreement we have with you, or protect the rights, property, or safety of the Bank, our employees, or others; (d) professional advisors, such as attorneys, accountants, and auditors; and (e) another party in connection with a business transaction, such as a merger, acquisition, or sale of assets. Our service providers and vendors are contractually restricted from using your information for any purpose other than providing services to us. Consistent with the Gramm-Leach-Bliley Act and Regulation P, we disclose NPI to nonaffiliated third parties only as necessary to process or administer a financial transaction that you request or authorize, within the ordinary-business exceptions permitted by those rules, as further described in our separate privacy notice.

App Date Access

On your mobile device or tablet, you have the option to enable access to the following device data or functionality:

Location Data – Mascoma Bank collects and stores location data to enable notification of location-based alerts including branch closures and community events, and to allow users to use the Locations widget to find nearby ATMs and branches.

Camera Access – Needed to complete Mobile Deposits

Biometrics – Allows the Mascoma Bank app to use biometric login (such as fingerprint or facial recognition) for authentication and login purposes only. Any biometric identifiers you use are stored on and verified by your mobile device. Mascoma Bank does not collect, receive, access, or store your biometric information.

Push Notifications – Allows the Mascoma Bank app to send push notifications to your device

App Data Deletion

Mascoma Bank Google Play Account Deletion Policy

The Google Play Store has implemented a requirement for Mascoma Bank to provide our customers with the ability to request removal of their app accounts and any associated data. As a financial institution, we are required to maintain some historical data, even after a digital banking account is deleted. This data is temporarily retained for fraud prevention and in accordance with laws and regulations governing bank data retention periods. See the full policy here.

Our Security Measures to Protect Information

Mascoma Bank works hard to ensure the safety and soundness of our customers’ information. We utilize the latest technological security methods to provide our customers with a secure environment. We require the use of secure browsers that utilize encryption techniques to access account information and perform transactions. Secure browsers employ Secure Sockets Layer or Transport Layer Security (SSL/TLS) technology to communicate with servers. This technology encrypts—or scrambles—your account information so it’s extremely difficult for anyone other than Mascoma Bank to read it.

We hold your online information to the same degree of confidentiality as other financial records. We keep any information you may provide to us through the Site completely confidential. To help protect the privacy of data and personally identifiable information you transmit through use of this Site, we maintain commercially reasonable physical, technical, and administrative safeguards. We restrict access to any personally identifiable information that you may send to us through the Site to those employees who need to know that information to respond to provide you with the services that you requested or respond to your inquiry.

Hyperlinks to Third Party Sites

These privacy practices govern your use of this Site. We are not responsible for, and have no control over, the privacy practices, data collection, security, or content of other web sites. Third parties running such sites may have different practices regarding the collection and use of your information than what is detailed here. You should be careful and review the privacy practices posted on third party web sites before using them.

Children’s Privacy

Our Site is a general audience site, and we do not intend to solicit, market to or collect, nor do we knowingly collect personal information from children under the age of 13 through this Site. Unfortunately, we cannot always determine the age of a visitor to our Site or the sender of an email.

Your State Privacy Rights

Depending on your state of residence and subject to applicable exemptions and limitations, you may have certain rights under state consumer privacy laws. These rights may include, as applicable, the right to know about or access certain personal information we collect or process about you; to correct inaccurate personal information; to request deletion of certain personal information; to obtain a copy of certain personal information in a portable format; to opt out of certain processing activities, such as the sale of personal information, targeted advertising, or certain profiling; and to exercise other rights provided by applicable law.

Because we are a financial institution subject to the Gramm-Leach-Bliley Act (“GLBA”), certain state consumer privacy laws may exempt us from some or all of their requirements, or may exempt certain information that we collect, use, or disclose in connection with our financial products and services. The scope of these exemptions varies by state. Accordingly, the rights available to you may depend on your state of residence, the type of information involved, and how we collect, use, or disclose that information.

We do not sell personal information. Our practices regarding cookies and similar technologies, including any analytics or marketing technologies, are described in our Website Privacy and Cookies Notice.

To exercise a privacy right that applies to you, or to ask questions about your rights, please contact our Customer Service Center toll free at 888-627-2662. We may require you to verify your identity before responding to your request, consistent with applicable law and our authentication procedures. We will respond to verified requests within the timeframe required by applicable law.

Where required by applicable law, you may also have the right to appeal our decision regarding a privacy rights request. Information about any additional rights or procedures applicable to residents of a particular state is provided in the applicable state-specific privacy notice or supplement.

Conditions of Use, Notices and Changes to these Online Privacy Practices

By using this Site, you agree to these privacy practices. If you do not agree to any of these terms and conditions, you should not use this Site. You agree that any dispute over privacy or the terms contained in these privacy practices will be governed by the laws of the State of New Hampshire, and that any legal action or proceeding relating to these privacy practices or your access to or use of this Site shall be instituted in a state or federal court in the State of New Hampshire. You agree to submit to the jurisdiction of and agree that venue is proper in these courts.

Revisions to these Privacy Practices

We reserve the right to amend these privacy practices at any time, for any reason, without notice to you, other than the posting of the amended practices on this Site. You should check our Site frequently to see the current privacy practices that are in effect and any changes that may have been made to it. The provisions contained herein supersede all previous notices or policies regarding our privacy practices that govern the use of this Site.

Customer Inquiries about these Privacy Practices

We value your relationship. We want you to understand how we use the information you provide and our commitment to ensuring your personal privacy. If you have questions about our practices when visiting our Site, please Contact Us or call our Customer Service Center toll free at 888-627-2662.