PRIVACY
POLICY

What Does Banc of California Do With Your Personal Information?

WHY?

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share and protect your personal information. Please read this notice carefully to understand what we do.

WHAT?

The types of personal information we collect and share depend on the product or service you have with us. This information can include:

  • Name, address and phone number
  • Account balances and payment history
  • Social Security number and income

HOW?

All financial companies need to share customers’ personal information to run their everyday business. In this section, we list the reasons financial companies can share their customers’ personal information, the reasons Banc of California chooses to share and whether you can limit this sharing.

Reasons financial companies can share their customers’ personal information Does Banc of California share? Can you limit this sharing?
For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations or report to credit bureaus Yes No
For our marketing purposes – to offer our products and services to you Yes No
For joint marketing with other financial companies Yes No
For our affiliates’ everyday business purposes
information about your transactions and experiences
Yes No
For our affiliates’ everyday business purposes
information about your credit worthiness
No We don’t share
For our affiliates to market to you No We don’t share
For our nonaffiliates to market to you No We don’t share

QUESTIONS?

Call us at 1-888-801-0220 or go to www.bancofcal.com/privacy-policy

WHO WE ARE

Who is providing this notice?

Banc of California

WHAT WE DO

How does Banc of California protect my personal information?

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

How does Banc of California collect my personal information?

We collect your personal information, for example when you:

  • Open an account or deposit money
  • Pay your bill or apply for a loan
  • Make deposits or withdrawals from your account

We also collect your personal information from others, such as credit bureaus, affiliates or other companies.

Why can’t I limit all sharing?

Federal law gives you the right to limit only:

  • Sharing for affiliates’ everyday business purposes – information about your creditworthiness
  • Affiliates from using your information to market to you
  • Sharing for nonaffiliates to market to you

DEFINITIONS

Affiliates

Companies related by common ownership or control. They can be financial and nonfinancial companies. Our affiliates are Banc of California, Inc., Deepstack Technologies, Inc. and BofCal Asset Management, Inc.

Non Affiliates

Companies not related by common ownership or control. They can be financial service providers or nonfinancial companies or subsequent investors.

Joint Marketing

A formal agreement between nonaffiliated financial companies that together market financial products or services to you.

OTHER IMPORTANT INFORMATION

California Residents

California law requires financial institutions to obtain your consent prior to sharing information about you with nonaffiliated third parties, except as permitted by California law.

Nevada Residents

We are providing you this notice pursuant to Nevada law. If you prefer not to receive marketing calls from us, you may be placed on our internal Do Not Call List by calling 1-888-801-0220, or by writing to us at 3 MacArthur Place, Santa Ana California 92707.

Vermont Residents

Vermont law requires financial institutions to obtain your consent prior to sharing information about you with nonaffiliated third parties, except as permitted by Vermont law.

COVERAGE

The rights and protections contained in the California Consumer Privacy Act (CCPA) apply to “Consumers,” which means a natural person residing in California or California residents who are outside California for transitory purposes. The Act contains several exemptions from coverage such as information we may receive from you and about you in connection with a financial product or service.

NOTICE AT COLLECTION

The California Consumer Privacy Act requires that Banc of California inform Consumers, at or before the time of collection of a Consumer’s personal information, of the categories of personal information collected and the purpose for which the categories of personal information will be used.

CATEGORIES OF PERSONAL INFORMATION PURPOSE(S) FOR WHICH IT WILL BE COLLECTED AND USED
Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol Address, account name, Social Security number, driver’s license number, passport number or other similar identifiers.
  • Offering financial products or services
  • Selling loans to subsequent investors
  • Marketing efforts
  • Verifying consumer identities
  • Regulatory compliance
Personal information, as defined in the California customer records law, such as name, contact information, insurance policy numbers, education, employment, employment history, bank account numbers, credit card numbers, debit card numbers, other financial information and medical or health information.
  • Offering financial products or services
  • Selling loans to subsequent investors
  • Marketing efforts
  • Verifying consumer identities
  • Regulatory compliance
Characteristics of protected classifications under California or federal law, such as race, gender or ethnicity.
  • Regulatory compliance
Commercial information, including records of personal property, products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies.
  • Offering financial products or services
  • Selling loans to subsequent investors
  • Marketing efforts
  • Verifying consumer identities
  • Regulatory compliance
Biometric information, such as fingerprints.
  • Detecting/preventing security incidents
Internet or other electronic network activity information including, but not limited to, browsing history and information regarding a Consumer’s interaction with an internet website, application or advertisement.
  • Marketing efforts
  • Detecting/preventing security incidents
Geolocation data, such as device location.
  • Regulatory compliance
  • Marketing efforts
  • Detecting/preventing security incidents
Audio, electronic, visual or similar information, such as call or video recordings.
  • Detecting/preventing security incidents
  • Regulatory compliance
Education Information subject to the federal Family Educational Rights and Privacy Act, such as student records.
  • Background screening for employees
  • Offering financial products or services
  • Marketing efforts
Inferences drawn from any of the information identified above to create a profile about, for example, a Consumer’s preferences or characteristics.
  • Offering financial products or services
  • Selling loans to subsequent investors
  • Marketing efforts
  • Verifying consumer identities
  • Regulatory compliance
  • Detecting/preventing security incidents
Sensitive Personal Information including personal information that reveals your:

  • Social security, driver’s license, state identification card or passport number
  • Account log-in, financial account, debit card or credit card number in combination with any required security or access code, password or credentials allowing access to an account
  • Precise geolocation
  • Your racial or ethnic origin, religious or philosophical beliefs or union membership
  • The contents of your mail, email and text messages unless we are not the intended recipient
  • Your biometric information
  • Offering financial products or services
  • Selling loans to subsequent investors
  • Verifying consumer identities
  • Regulatory compliance
  • Detecting/preventing security incidents

We store your personal information for as long as we believe is reasonably necessary or appropriate to fulfill our business or commercial purposes or to comply with applicable law, audit requirements, regulatory requests or orders from competent courts. We review our retention policies periodically to ensure that we are not maintaining your information for longer than necessary.

We do not and will not sell or share (for cross-contextual behavioral advertising) your personal information, including your sensitive personal information, to any third party, nor have we done so in the preceding 12 months. Similarly, we do not and will not collect, sell or share (for cross-contextual behavioral advertising) the personal information, including sensitive personal information, of minors under 16 years of age.

For more information regarding our privacy practices, please call us at 1-888-801-0220 or visit www.bancofcal.com/privacy-policy.

RIGHT TO KNOW OR ACCESS PERSONAL INFORMATION COLLECTED

We have collected the following categories of personal information in the preceding 12 months for business or commercial purposes:

  • Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol Address, account name, Social Security number, driver’s license number, passport number or other similar identifiers.
  • Personal information, as defined in the California customer records law, such as name, contact information, insurance policy numbers, education, employment, employment history, bank account numbers, credit card numbers, debit card numbers, other financial information and medical or health information.
  • Characteristics of protected classifications under California or federal law, such as race, gender or ethnicity.
  • Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
  • Biometric information, such as fingerprints.
  • Internet or other electronic network activity information including, but not limited to, browsing history and information regarding a Consumer’s interaction with an internet website, application or advertisement.
  • Geolocation data, such as device location.
  • Audio, electronic, visual or similar information, such as call or video recordings.
  • Education Information subject to the federal Family Educational Rights and Privacy Act, such as student records.
  • Inferences drawn from any of the information identified above to create a profile about, for example, a Consumer’s preferences or characteristics.
  • Sensitive Personal Information including personal information that reveals your:
    • Social security, driver’s license, state identification card or passport number
    • Account log-in, financial account, debit card or credit card number in combination with any required security or access code, password or credentials allowing access to an account
    • Precise geolocation
    • Your racial or ethnic origin, religious or philosophical beliefs or union membership
    • The contents of your mail, email and text messages unless we are not the intended recipient
    • Your biometric information

We will collect information from you when you contact us directly or provide information to us to provide you with our products and services. In addition, we collect information from and about you through the following:

  • Service providers
  • Credit report agencies
  • Marketing companies
  • Public records
  • Consumer data resellers

We have collected the above categories of personal information in the preceding 12 months for the following business or commercial purposes:

  • Account Services: We use personal information to offer you our account services, including (1) establishing, maintaining, supporting and servicing an account you may have opened with us and for which you provided the information or that you may have applied for or established with us; (2) providing services, products or information you may have requested from us; and/or (3) performing services such as providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services or providing similar services on our own behalf or on the service provider’s behalf.
  • Employee Services: We use personal information to perform background checks necessary to comply with legal requirements, to perform reference checks, to verify eligibility to work in the United States, for contact purposes, to assess your qualification for employment, to conduct performance evaluations, for payrolls and budgeting purposes, for implementation of employee benefits, for internal organizational purposes to establish proper accommodations for sick time, PTO, leaves of absences or emergency situations, and to conduct health screenings as allowed by OSHA and the CDC to protect the safety of our employee during pandemic situations.
  • Security and Fraud Detection: We use personal information for our security and fraud detection services, including detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity and prosecuting those responsible for that activity.
  • Debugging: We use personal information to engage in debugging to identify and repair errors that impair existing intended functionality.
  • Improvement of Products and Services: We use personal information to verify, maintain and improve our products and services.
  • Internal Research: We use personal information for our internal research related to technological development and demonstration.
  • Advertising and Marketing Services: We use personal information to provide advertising or marketing services on our own behalf.
  • Audits: We use personal information to audit current interactions with you and related transactions (e.g., counting and verifying ad impressions, auditing compliance).
  • Merger/Acquisition/Bankruptcy, etc.: We may use your personal information as part of a merger, acquisition, bankruptcy or other transaction if a third party assumes control of us.
  • Commercial/Economic Interests: We use personal information to advance our commercial or economic interest; including selling loans to subsequent investors.
  • Regulatory Compliance and Legal Obligations: We use personal information to comply with regulatory and legal obligations.

In addition, we only collect or use sensitive personal information for the following business or commercial purposes:

  • To perform the services or provide the goods reasonably expected by an average Consumer who requests those goods or services.
  • To prevent, detect and investigate security incidents that compromise the availability, authenticity, integrity and/or confidentiality of personal information.
  • To resist malicious, deceptive, fraudulent or illegal actions directed at the business and to prosecute those responsible for those actions.
  • To ensure the physical safety of natural persons.
  • For short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a Consumer’s current interaction with the business.
  • To verify or maintain the quality or safety of a product, service or device that is owned or controlled by the business, and to improve, upgrade or enhance the service or device that is owned or controlled by the business.
  • To collect or process sensitive personal information where such collection or processing is not for the purpose of inferring characteristics about a consumer.

Banc of California will not collect or use sensitive personal information beyond the purposes identified above.

Consumers have the right to request that Banc of California disclose the following information covering the 12 months preceding the request (“Request to Know” or “Request to Access”):

  • The categories of personal information Banc of California collected about the Consumer and the categories of sources from which Banc of California collected such personal information.
  • The specific pieces of personal information Banc of California collected about the Consumer.
  • The business or commercial purpose for collecting, selling (if applicable) or sharing for certain types of advertising (if applicable) personal information about the Consumer.
  • The categories of personal information about the Consumer that Banc of California sold and the categories of third parties to whom Banc of California sold such personal information (if applicable).
  • The categories of personal information about the Consumer that Banc of California shared for certain types of advertising, and the categories of third parties with whom Banc of California shared such personal information (if applicable).
  • The categories of personal information about the Consumer that Banc of California otherwise disclosed, and the categories of third parties to whom Banc of California disclosed such personal information.

We will respond to Consumers’ requests consistent with applicable law.

Consumers may submit Requests to Know/Access online here or by calling toll free at 1-888-801-0220.

Upon receiving a Request to Know or Request to Access, Banc of California will verify the identity of the Consumer making the request to a reasonable, or reasonably high, degree of certainty based on the sensitivity and nature of the information requested. This process generally involves comparing information provided by the Consumer against information that Banc of California deems reliable in its records. This process may also require the Consumer to execute a declaration under penalty of perjury that the requestor is the Consumer whose personal information is being requested. In the event that Banc of California is unable to confirm the identity of the Consumer, we will deny the Request to Know or Request to Access to protect the personal information of the Consumer.

CATEGORIES OF PERSONAL INFORMATION DISCLOSED TO THIRD PARTIES FOR A BUSINESS OR COMMERCIAL PURPOSE IN THE PRECEDING 12 MONTHS

Banc of California has disclosed the following categories of personal information to the following categories of third parties for a business or commercial purpose in the preceding 12 months:

CATEGORIES OF PERSONAL INFORMATION DISCLOSED IN THE PRECEDING 12 MONTHS CATEGORIES OF THIRD PARTIES RECEIVING SUCH INFORMATION FOR A BUSINESS OR COMMERCIAL PURPOSE
Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol Address, account name, Social Security number, driver’s license number, passport number or other similar identifiers.
  • Our affiliated entities
  • Trusted third-party service providers
  • Credit bureaus
  • Law enforcement authorities
Personal information, as defined in the California customer records law, such as name, contact information, insurance policy numbers, education, employment, employment history, bank account numbers, credit card numbers, debit card numbers, other financial information and medical or health information.
  • Our affiliated entities
  • Trusted third-party service providers
  • Credit bureaus
  • Law enforcement authorities
Characteristics of protected classifications under California or federal law, such as race, gender or ethnicity.
  • Our affiliated entities
  • Trusted third-party service providers
  • Credit bureaus
  • Law enforcement authorities
Commercial information, including records of personal property, products or services purchased, obtained or considered or other purchasing or consuming histories or tendencies.
  • Trusted third-party service providers
  • Credit report agencies
  • Public records
Biometric information, such as fingerprints.
  • Trusted third-party service providers
Internet or other electronic network activity information including, but not limited to, browsing history and information regarding a Consumer’s interaction with an internet website, application or advertisement.
  • Our affiliated entities
  • Trusted third-party service providers
  • Credit bureaus
  • Law enforcement authorities
Geolocation data, such as device location.
  • Our affiliated entities
  • Trusted third-party service providers
  • Law enforcement authorities
Audio, electronic, visual or similar information, such as call or video recordings.
  • Our affiliated entities
  • Trusted third-party service providers
  • Credit bureaus
  • Law enforcement authorities
Education Information subject to the federal Family Educational Rights and Privacy Act, such as student records.
  • Trusted third-party service providers
  • Law enforcement authorities
Inferences drawn from any of the information identified above to create a profile about, for example, a Consumer’s preferences or characteristics.
  • Our affiliated entities
  • Trusted third-party service providers
  • Credit bureaus
  • Law enforcement authorities
Sensitive Personal Information including personal information that reveals your:

  • Social security, driver’s license, state identification card or passport number
  • Account log-in, financial account, debit card or credit card number in combination with any required security or access code, password or credentials allowing access to an account
  • Precise geolocation
  • Your racial or ethnic origin, religious or philosophical beliefs or union membership
  • The contents of your mail, email and text messages unless we are not the intended recipient
  • Your biometric information
  • Our affiliated entities
  • Trusted third-party service providers
  • Credit bureaus
  • Law enforcement authorities

We may disclose your Personal Information for one or more of the following business or commercial purposes:

  • To fulfill or meet the reasons for which the Personal Information was provided
  • To fulfill our contract with you and our contracts with suppliers
  • To fulfill our regulatory obligations
  • To provide you with information, products or services that you request from us
  • To perform services such as maintaining or servicing accounts, providing investor services (including processing of subscription documents for investments), processing or fulfilling orders and transactions, verifying customer information (including regulatory background checks) for anti-money laundering purposes, providing financing, providing advertising or marketing services or where we have a legitimate interest in processing the information
  • Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity
  • Debugging to identify and repair errors that impair existing intended functionality
  • Short–term, transient use, including, but not limited to, nonpersonalized advertising shown as part of a consumer’s current interaction with the business, provided that the consumer’s personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business
  • Undertaking internal research for technological development and demonstration
  • Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for or controlled by the business
  • To advance our commercial or economic interest not otherwise identified above

RIGHT TO OPT-OUT OF SALE OR SHARING OF PERSONAL INFORMATION

You also have the Right to Opt-Out of the sale or sharing (for targeted advertising) your Personal Information. However, Banc of California does not sell any Consumer personal information. Banc of California does not sell the personal information of minors under 16 years of age.

In addition, Banc of California does not share any Consumer personal information for cross-contextual behavioral advertising. Banc of California also does not share the personal information of minors under 16 years of age for cross-contextual behavioral advertising.

To learn more about our commitment to protecting your personal information, click here see our Information Security Page.

RIGHT TO REQUEST DELETION OF PERSONAL INFORMATION

Consumers have the right to request that Banc of California delete personal information that Banc of California has collected from them (“Request to Delete”). As recognized in the California Consumer Privacy Act, there are obligations and requirements imposed on banks which prevent Banc of California from deleting certain personal information. We will respond to Consumers’ requests consistent with applicable law.

Consumers may submit Requests to Delete online here or by calling toll free at 1-888-801-0220.

Upon receiving a Request to Delete, Banc of California shall verify the identity of the Consumer making the request to a reasonable, or reasonably high, degree of certainty based on the sensitivity and nature of the information requested. This process generally involves comparing information provided by the Consumer against information which Banc of California deems reliable in its records. This process may also require the Consumer to execute a declaration under penalty of perjury that the requestor is the Consumer whose personal information is being requested.

RIGHT TO REQUEST CORRECTION OF INACCURATE PERSONAL INFORMATION

Consumers have the right to request that Banc of California correct inaccurate personal information (“Request to Correct”). We will respond to Consumers’ requests consistent with applicable law.

Consumers may submit Requests to Correct online here or by calling toll free at 1-888-801-0220.

Upon receiving a Request to Correct, Banc of California shall verify the identity of the Consumer making the request to a reasonable, or reasonably high, degree of certainty based on the sensitivity and nature of the information requested. This process generally involves comparing information provided by the Consumer against information which Banc of California deems reliable in its records. This process may also require the Consumer to execute a declaration under penalty of perjury that the requestor is the Consumer whose personal information is being requested.

RIGHT TO NON-DISCRIMINATION OR NON-RETALIATION FOR EXERCISE OF A CONSUMER’S PRIVACY RIGHTS

Consumers have the right to be free from unlawful discrimination or retaliation for exercising their rights under the California Consumer Privacy Act.

AUTHORIZED AGENT

When a Request to Know, a Request to Access, a Request to Delete, or a Request to Correct is submitted by an authorized agent, Banc of California will require the Consumer to (1) provide the authorized agent written permission to do so; and (2) will require the Consumer to verify their own identity directly with Banc of California in the event that Banc of California is unable to verify the identity of the Consumer or does not receive proof from the authorized agent that the Consumer authorized the agent to act on the Consumer’s behalf, it will deny the request. The requirement to obtain and provide written permission from the consumer does not apply to requests made by an opt-out preference signal.

LAST UPDATED

This privacy policy was last updated on November 30, 2023.

CONTACT FOR MORE INFORMATION

Consumers with questions or concerns about Banc of California’s Privacy Policies and practices should contact at 1-888-801-0220.