1. Introduction

Cresta Bank ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online banking services, mobile application, and website.

2. Information We Collect

Personal Information

We may collect personal information that you provide directly to us, including:

• Name, email address, phone number, and mailing address
• Date of birth and Social Security Number (for account verification)
• Government-issued identification documents
• Financial information including bank account numbers and transaction history
• Employment and income information

Automatically Collected Information

When you access our services, we automatically collect:

• Device information (type, operating system, unique identifiers)
• IP address and location data
• Browser type and settings
• Usage data including pages visited, features used, and time spent
• Transaction data and account activity

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our banking services
• Process transactions and send related information
• Verify your identity and prevent fraud
• Send administrative notices and security alerts
• Respond to your comments, questions, and customer service requests
• Comply with legal obligations and regulatory requirements
• Analyze usage patterns to improve user experience

4. Information Sharing

We do not sell your personal information. We may share information with:

• Service providers who assist in operating our services
• Financial institutions for transaction processing
• Regulatory authorities as required by law
• Law enforcement when legally required or to protect rights and safety
• Business partners with your consent

5. Data Security

We implement industry-standard security measures including:

• 256-bit SSL encryption for data transmission
• Two-factor authentication (2FA)
• Regular security audits and penetration testing
• Employee access controls and training
• Secure data centers with physical security measures

6. Your Rights

You have the right to:

• Access your personal information
• Request correction of inaccurate data
• Request deletion of your data (subject to legal requirements)
• Opt-out of marketing communications
• Request data portability

7. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can control cookies through your browser settings, though disabling them may affect functionality.

8. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our services. Your continued use after changes constitutes acceptance of the updated policy.