Cullman Savings Bank's Privacy Policy

We are required by federal law to provide this information to our accountholders. There has been no significant change in the way we do business or share information. We respect your financial privacy and we comply with laws and regulations designed to secure that privacy. Your relationship with us is important, and we want you to understand our policies and practices about handling information. We will keep confidential any information about you, but we may share information about you with our agents and/or nonaffiliated companies as described below in order to provide better service. "Information" means nonpublic, personal financial information.

We may routinely collect and/or retain information that includes your: (1) name, address, telephone number, social security number, annual income, current and past employer's; (2) answers to questions on deposit and loan applications; and (3) deposit and loan balances, overdraft history and payment history with us. We collect information from consumer reporting agencies regarding credit and checking account histories. In order to better serve you, we may also retain information about the types of products and services you purchase from us to learn more about your financial needs and interests. We may share this information with others to the extent permitted by law and in accordance with our information sharing policies and practices listed below.

Information that we have about you is available to our employees and agents on a "need to know" basis so they can do their jobs. We prohibit our employees and agents from giving information about you to anyone in a manner that would violate any applicable law or our privacy policy. We do not provide information about you to anyone without first verifying who they are and whether they may have legal access to the information. We train our employees to protect information we have about you. We maintain physical, electronic, and procedural safeguards that comply with federal regulations to guard your nonpublic personal information. We also have a disaster preparedness program to secure this information in case of natural disasters, hazards or threats.

We will not disclose your account number to a nonaffiliated third party in order for them to sell you products or services. We may give your account number to consumer reporting agencies because we are allowed and/or required to do so by law.

We may share information about you with certain nonaffiliated companies that are our agents. We do this to provide convenient access to products or services, or because these companies help us perform necessary business functions or services. This sharing is permitted by law. Such agents are required to keep confidential any information about you that we give them.

If you visit our website to use interactive tools, such as our financial calculators, the personal information you supply to complete the analysis is not retained. If you identify yourself by sending e-mail or completing forms, the personal information you supply is retained and/or processed similarly to personal information provided in a written format.

We protect and safeguard the privacy of our website visitors just as we do throughout the rest of our business. Personally-identifying information will not be sold to any third-party for its own solicitation purposes.

Any questions regarding this policy should be directed to John Riley at 256-734-1740 or email us.

Our website brings together a combination of industry-approved security technologies to protect data for the bank and for you, our customer. It features a VeriSign-issued Digital ID for the bank's Internet Service Provider hosting our website, Secure Sockets Layer (SSL) protocol for data encryption, and a router and firewall to regulate the inflow and outflow of server traffic.

Secure Data Transfer

Once a server session is established on an https secure page, the user and the server are in a secured environment. Because the server has been certified as a 128-bit secure server by VeriSign, data traveling between the user and the server is encrypted with Secure Sockets Layer (SSL) protocol. With SSL, data that travels between the bank and customer is encrypted and can only be decrypted with the public and private key pair. In short, the bank's server issues a public key to the end user's browser and creates a temporary private key. These two keys are the only combination possible for that session. When the session is complete, the keys expire and the whole process starts over when a new end user makes a server session.

Router and Firewall

Secure forms must filter through a router and firewall before they are permitted to reach the server. A router, a piece of hardware, works in conjunction with the firewall, a piece of software, to block and direct traffic coming to the server. The configuration begins by disallowing ALL traffic and then opens holes only when necessary to process acceptable data requests, such as retrieving web pages or sending customer requests to the bank.