PRIVACY POLICY

WHY?

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share and protect your personal information. Please read this notice carefully to understand what we do.

WHAT?

The types of personal information we collect and share depend on the product or service you have with us. This information can include:

• Social Security number and income

• Account balances and transaction history

• Credit history and employment information

When you are no longer our customer, we continue to share your information as described in this notice.

HOW?

All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons Vast Bank, N.A. chooses to share;

and whether you can limit this sharing.

REASONS WE CAN SHARE

YOUR PERSONAL INFORMATION

DOES VAST BANK, N.A. SHARE?

CAN YOU LIMIT THIS SHARING?

For our everyday business purposes-

such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus

Yes

No

For our marketing purposes-

to offer our products and services to you

Yes

No

For joint marketing with other financial companies

No

We don't share

For our affiliates' everyday business purposes­

information about your transactions and experiences

No

We don't share

For our affiliates' everyday business purposes­

information about your creditworthiness

No

We don't share

For nonaffiliates to market to you

No

We don't share

WHAT WE DO

How does Vast Bank, N.A. protect my personal information?

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

How does Vast Bank, N.A. collect my personal information?

We collect your personal information, for example, when you

• Open an account or deposit money

• Apply for a loan or give us your income information

• Give us r contact information

We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.

Why can't I limit all sharing?

Federal law gives you the right to limit only

• sharing for affiliates' everyday business purposes - information about your creditworthiness

• affiliates from using your information to market to you

• sharing for nonaffiliates to market to you

State laws and individual companies may give you additional rights to limit sharing. [See below for more on your rights under state law.]

DEFINITIONS

Affiliates

Companies related by common ownership or control. They can be financial and nonfinancial companies.

• Vast Bank, N.A. has no affiliates.

Non-affiliates

Companies not related by common ownership or control. They can be financial and nonfinancial companies.

• Vast Bank, N.A. does not share with nonaffiliates so they can market to you.

Joint marketing

A formal agreement between non-affiliated financial companies that together market financial products or services to you.

• Vast Bank, N.A. doesn't jointly market.