PROVIDENT BANK PRIVACY POLICY

WHAT DOES PROVIDENT BANK DO WITH YOUR PERSONAL INFORMATION FROM THE MOBILE APPLICATION?

WHY? The mobile application requests access to information stored on your device such as location, camera, contacts, or other features you are enrolled in to enrich and simplify your own user experience and improve our services, as well as provide additional security to protect your account.

It is important for you to understand that:

• Before granting access to this information, you will be prompted to give the application that permission.
• If you do not wish to grant that permission, you may decline.
• If you later change your mind, those permissions can be updated in your device's settings.

WHAT? Some examples of information your app will request access to are:

• Location
• Contacts
• Camera

HOW? To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

The application information is retained in accordance with state and federal record retention laws. Please contact us to determine specific timeframes for your personal stored information and if that information may be deleted.

QUESTIONS? Please contact Provident Bank at 800.448.7768 regarding questions about the information included in this Mobile Privacy Disclosure or questions about this application.

WHAT DOES PROVIDENT BANK DO WITH YOUR PERSONAL INFORMATION?

WHY? Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.

WHAT? The types of personal information we collect and share depend on the product or service you have with us. This information can include:

• Social Security number and Income
• Assets and Employment Information
• Transaction History and Credit History

HOW? All financial companies need to share non-public personal information to run their everyday business. In the section below, we list the reasons financial companies can share their non-public personal information; the reasons Provident Bank chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information

For our everyday business purposes - such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus

• Does Provident Bank share? Yes
• Can you limit sharing? No

For our marketing purposes

• Does Provident Bank share? Yes
• Can you limit sharing? No

For joint marketing with other financial companies

• Does Provident Bank share? Yes
• Can you limit sharing? Yes

For our affiliates' everyday business purposes - information about your transactions and experiences

• Does Provident Bank share? Yes
• Can you limit sharing? No

For our affiliates' everyday business purposes - information about your creditworthiness

• Does Provident Bank share? Yes
• Can you limit sharing? Yes

For our affiliates to market to you

• Does Provident Bank share? Yes
• Can you limit sharing? Yes

For nonaffiliates to market to you

• Does Provident Bank share? No
• Can you limit sharing? We don't share

To limit our sharing:

Call 800.448.7768 - our menu will prompt you through your choice(s)
Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our customer, we continue to share your information as described in this notice. However, you can contact us at any time to limit our sharing.

Questions?

Call 800.448.7768

Who we are

Who is providing this notice? Provident Bank and its wholly owned subsidiaries PFS Insurance Services, Inc., Beacon Trust Company, and SB One Insurance Agency, Inc.

What we do

How does Provident Bank protect my personal information? To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. Access to your personal information is limited to those employees who need to know the information to provide products and services to you.

How does Provident Bank collect my personal information? We collect your personal information, for example, when you:

• Open an account or Deposit money
• Apply for a loan or Provide account information
• Seek advice about your investments

We also collect personal information from others, such as credit bureaus, affiliates, or other companies.

Why can't I limit all sharing? Federal law gives you the right to limit only:

• sharing for affiliates' everyday business purposes - information about your creditworthiness
• affiliates from using your information to market to you
• sharing for nonaffiliates to market to you

State laws and individual companies may give you additional rights to limit sharing.

What happens when I limit sharing for an account I hold jointly with someone else? Your choices will apply to everyone on your account - unless you tell us otherwise.

Definitions

Affiliates: Companies related by common ownership or control. They can be financial and nonfinancial companies. Our affiliates include financial companies such as PFS Insurance Services, Inc., Beacon Trust Company, and SB One Insurance Agency, Inc.

Nonaffiliates: Companies not related by common ownership or control. They can be financial and nonfinancial companies. Provident Bank does not share with nonaffiliates so they can market you.

Joint marketing: A formal agreement between nonaffiliated financial companies that together market financial products or services to you.
Our joint marketing partners include: LevLane Advertising, Inc., Affinion Group, BV Card Assets, LLC, Generations Gold, Inc., Deluxe Corp., FirstData Corp

Other important information

The Controls & Alerts App periodically collects, transmits, and uses geolocation information to enable features that prevent fraudulent card use and send alerts, but only if the End User expressly authorizes collection of such information. Geolocation information can be monitored on a continuous basis in the background only while the Solution is being used or not at all, depending on the End User’s selection. End Users can change their location permissions at any time in their device settings.

This Privacy Policy Notice applies to products and services used primarily for personal, family or household purposes (non-business purposes). We reserve the right to change this Privacy Policy Notice and any of the practices described within this policy at any time. The examples provided in this Privacy Policy Notice are not intended to be all-inclusive.

The mobile application accesses and collects contacts to help you pay someone of your choice using Zelle^®. Your selected contact’s name, phone number, and email may be saved to make secure payments. You can change your contacts permissions at any time in your device settings.