PRIVACY
POLICY

RIGHT TO KNOW OR ACCESS PERSONAL INFORMATION COLLECTED

We have collected the following categories of personal information in the preceding 12 months for business or commercial purposes:

• Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol Address, account name, Social Security number, driver’s license number, passport number or other similar identifiers.
• Personal information, as defined in the California customer records law, such as name, contact information, insurance policy numbers, education, employment, employment history, bank account numbers, credit card numbers, debit card numbers, other financial information and medical or health information.
• Characteristics of protected classifications under California or federal law, such as race, gender or ethnicity.
• Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Biometric information, such as fingerprints.
• Internet or other electronic network activity information including, but not limited to, browsing history and information regarding a Consumer’s interaction with an internet website, application or advertisement.
• Geolocation data, such as device location.
• Audio, electronic, visual or similar information, such as call or video recordings.
• Education Information subject to the federal Family Educational Rights and Privacy Act, such as student records.
• Inferences drawn from any of the information identified above to create a profile about, for example, a Consumer’s preferences or characteristics.
• Sensitive Personal Information including personal information that reveals your:
  • Social security, driver’s license, state identification card or passport number
  • Account log-in, financial account, debit card or credit card number in combination with any required security or access code, password or credentials allowing access to an account
  • Precise geolocation
  • Your racial or ethnic origin, religious or philosophical beliefs or union membership
  • The contents of your mail, email and text messages unless we are not the intended recipient
  • Your biometric information

We will collect information from you when you contact us directly or provide information to us to provide you with our products and services. In addition, we collect information from and about you through the following:

• Service providers
• Credit report agencies
• Marketing companies
• Public records
• Consumer data resellers

We have collected the above categories of personal information in the preceding 12 months for the following business or commercial purposes:

• Account Services: We use personal information to offer you our account services, including (1) establishing, maintaining, supporting and servicing an account you may have opened with us and for which you provided the information or that you may have applied for or established with us; (2) providing services, products or information you may have requested from us; and/or (3) performing services such as providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services or providing similar services on our own behalf or on the service provider’s behalf.
• Employee Services: We use personal information to perform background checks necessary to comply with legal requirements, to perform reference checks, to verify eligibility to work in the United States, for contact purposes, to assess your qualification for employment, to conduct performance evaluations, for payrolls and budgeting purposes, for implementation of employee benefits, for internal organizational purposes to establish proper accommodations for sick time, PTO, leaves of absences or emergency situations, and to conduct health screenings as allowed by OSHA and the CDC to protect the safety of our employee during pandemic situations.
• Security and Fraud Detection: We use personal information for our security and fraud detection services, including detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity and prosecuting those responsible for that activity.
• Debugging: We use personal information to engage in debugging to identify and repair errors that impair existing intended functionality.
• Improvement of Products and Services: We use personal information to verify, maintain and improve our products and services.
• Internal Research: We use personal information for our internal research related to technological development and demonstration.
• Advertising and Marketing Services: We use personal information to provide advertising or marketing services on our own behalf.
• Audits: We use personal information to audit current interactions with you and related transactions (e.g., counting and verifying ad impressions, auditing compliance).
• Merger/Acquisition/Bankruptcy, etc.: We may use your personal information as part of a merger, acquisition, bankruptcy or other transaction if a third party assumes control of us.
• Commercial/Economic Interests: We use personal information to advance our commercial or economic interest; including selling loans to subsequent investors.
• Regulatory Compliance and Legal Obligations: We use personal information to comply with regulatory and legal obligations.

In addition, we only collect or use sensitive personal information for the following business or commercial purposes:

• To perform the services or provide the goods reasonably expected by an average Consumer who requests those goods or services.
• To prevent, detect and investigate security incidents that compromise the availability, authenticity, integrity and/or confidentiality of personal information.
• To resist malicious, deceptive, fraudulent or illegal actions directed at the business and to prosecute those responsible for those actions.
• To ensure the physical safety of natural persons.
• For short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a Consumer’s current interaction with the business.
• To verify or maintain the quality or safety of a product, service or device that is owned or controlled by the business, and to improve, upgrade or enhance the service or device that is owned or controlled by the business.
• To collect or process sensitive personal information where such collection or processing is not for the purpose of inferring characteristics about a consumer.

Banc of California will not collect or use sensitive personal information beyond the purposes identified above.

Consumers have the right to request that Banc of California disclose the following information covering the 12 months preceding the request (“Request to Know” or “Request to Access”):

• The categories of personal information Banc of California collected about the Consumer and the categories of sources from which Banc of California collected such personal information.
• The specific pieces of personal information Banc of California collected about the Consumer.
• The business or commercial purpose for collecting, selling (if applicable) or sharing for certain types of advertising (if applicable) personal information about the Consumer.
• The categories of personal information about the Consumer that Banc of California sold and the categories of third parties to whom Banc of California sold such personal information (if applicable).
• The categories of personal information about the Consumer that Banc of California shared for certain types of advertising, and the categories of third parties with whom Banc of California shared such personal information (if applicable).
• The categories of personal information about the Consumer that Banc of California otherwise disclosed, and the categories of third parties to whom Banc of California disclosed such personal information.

We will respond to Consumers’ requests consistent with applicable law.

Consumers may submit Requests to Know/Access online here or by calling toll free at 1-888-801-0220.

Upon receiving a Request to Know or Request to Access, Banc of California will verify the identity of the Consumer making the request to a reasonable, or reasonably high, degree of certainty based on the sensitivity and nature of the information requested. This process generally involves comparing information provided by the Consumer against information that Banc of California deems reliable in its records. This process may also require the Consumer to execute a declaration under penalty of perjury that the requestor is the Consumer whose personal information is being requested. In the event that Banc of California is unable to confirm the identity of the Consumer, we will deny the Request to Know or Request to Access to protect the personal information of the Consumer.

RIGHT TO OPT-OUT OF SALE OR SHARING OF PERSONAL INFORMATION

You also have the Right to Opt-Out of the sale or sharing (for targeted advertising) your Personal Information. However, Banc of California does not sell any Consumer personal information. Banc of California does not sell the personal information of minors under 16 years of age.

In addition, Banc of California does not share any Consumer personal information for cross-contextual behavioral advertising. Banc of California also does not share the personal information of minors under 16 years of age for cross-contextual behavioral advertising.

To learn more about our commitment to protecting your personal information, click here see our Information Security Page.