Our Privacy Pledge.
As a member of Credit Union One, you do not have
to worry about the security and confidentiality of you personal
information. Just like you, we want all of your personal information
kept that way--personal and private. This notice describes the privacy
policy and practices followed by Credit Union One.
1.
Member Information We Collect.
The Credit Union collects only relevant information
about members in order to establish and maintain your account
and services as the law allows or requires us to collect. We may
collect personal information about you, which is nonpublic. The
nonpublic personal information we collect varies depending on
the accounts and services you request and use. We collect information
about you from the following sources:
-
Application
Information. We
retain personal information we receive from you on any application
you provide for a deposit account, EFT service, credit cards,
consumer and real estate loans. Application information includes:
your name, address, Social Security number and credit history.
-
Your Transactions.
Any time you make a transaction on one of your accounts, including
ATM or card transactions, loan advances, transaction through
home banking, over the phone or at a branch, we retain the transaction
information. This includes your account number, the date, amount,
and location of the transaction.
-
Credit Reports.
When we evaluate your application for an account or service,
we may request a credit report about you from a consumer reporting
agency. We retain the personal and credit history information
about you, and we may use it to evaluate future account service
requests.
-
Online.
We obtain information online when you visit our website, www.cu-one.com.
This includes retaining information you provide us on any online
application, home banking transaction, or information you send
to us by email.
2. Our Confidentiality and Security Safeguards.
We
maintain strict policies and security controls to assure that
your nonpublic personal information in our computer systems and
files is protected.
-
Employee Access.
Credit
Union employees do have access to your information in order
to provide service to you. However, our employees’ access is
restricted to their need to know such information, or as necessary
to conduct a transaction or respond to your inquiries. All employees
are trained to respect member privacy. No one except our employees
has access to the Credit Union computer system and records storage.
-
Security Safeguards.
The
Credit Union has established security controls and procedures
to safeguard the information you provide us and the information
we collect about you. The application information we accept
online and our home banking service rely on industry standard
Secure Sockets Layer (SSL) encryption to service your transaction
information and communication. Generally, our emails are not
secure. However, if we ask you to e-mail us information other
than your name, address, email address and phone number, it
will be obtained using a secure (SSL encryption) email form.
3. Our Sharing of Member Information.
In order to
provide financial services to you, we share certain information
about you with our third-party service providers. However, we
limit any information sharing to the extent necessary to service
your account. If we share your information, it is with the goal
of bringing you quality services, more choices, and greater convenience.
Information we may have about former members is generally only
shared or disclosed if required to enforce or administer an account
or as required by law.
-
Sharing Information
with Third-Party Service Providers. In
order for us to conduct our operations, including servicing
your account or processing your transactions, we need to share
information with our service providers, including the following:
data processing companies, check, ATM and other payment processing
companies, payment networks, loan service providers, insurance
companies, collection agencies, credit reporting agencies, and
service providers with whom we have joint marketing agreements.
These service providers act on our behalf and have agreed in
writing to keep the information we provide to them confidential.
We share the following categories of information with third-party
service providers, depending on the specific services provided:
.
Member information (name, address, account number);
.
Account information (type of accounts, account
balances, transaction history); and
.
Transaction information (dates, amounts, locations
and type of transactions).
The Credit Union does not sell member information,
including account numbers, with nonaffiliated third-party marketers
offering their products and services. While we may offer financial
products and services of our third parties, we control the member
information used to make such offers.
c. Sharing Information as Legally Required or Permitted.
We
may share any nonpublic personal information of yours in response
to a lawful request issued by a court, government agency, or regulatory
authority or as permitted by law in order to administer or enforce
your account. We may also share our experience information about
you with credit bureaus. Our reporting to credit bureaus is governed
by the Fair Credit Reporting Act, which affords you the right
to make sure that your credit bureau reports are accurate.
Web Access Security
What kind of security is being
used for Web Access Home Banking?
Credit
Union One uses the latest technology to protect your account information
from exposure to unauthorized persons. Below are some of the components
of this security system:
- An
account number and PIN are required to access the system.
- 128-bit
encryption scrambles your transmissions when crossing the Internet.
- After
entering a PIN incorrectly three times, access to an account
is blocked.
VeriSign, the recognized leader in Internet security, allows you
to
see the security features
of the Web Access home banking program before you use it.
You
are responsible for protecting the secrecy of your PIN in accordance
with the terms contained in your Membership Account Agreement.
We recommend you not store secured pages in your cache or leave
your computer unattended while you are logged into Web Access.
What is encryption?
Encryption
takes meaningful text and numbers and scrambles them into numerical
nonsense before transmitting them across the Internet. Your account
information becomes "all mixed up and nonsense" when
encryption is in place. For example, "pay $40 from checking
to loan #1" could become something like "752144835628174317312".
The
encryption process occurs for information going both directions
- from your computer to the credit union and vice versa. Encryption
uses complex algorithmic formulas to create a key that is used
to translate the nonsense back to "pay $40 from checking
to loan #1". There are billions of potential keys, and a
different key is used for each Web Access session. Your computer
and Credit Union One’s computer establish this key when you make
your Web Access connection.
Because
there are billions of potential keys, it would take a thief several
lifetimes to come up with the exact key a specific transmission
uses. Netscape estimates the basic level of encryption (40-bit
or international) would take a 64-MIPS computer a year of dedicated
processor time to break. Domestic, or 128-bit, encryption is exponentially
more difficult to break. Web Access supports only 128-bit encryption
to give you Internet services with your security in mind.
Why does Web Access set cookies?
Why
does Web Access set cookies? In order to better serve you and
protect your account information, we use "cookies,"
nuggets of data that are stored on your hard drive as a file.
We use cookies to verify who you are while using Web Access home
banking. Cookies make it easier, quicker, and more secure for
you to log into and use Web Access.
Cookies
do not compromise privacy. Their data is usually stored on your
computer's hard drive as a file or folder called "cookies,"
and you can delete this file anytime if you choose. The cookies
in Web Access are only valid for the current session and shortly
become invalid. Finally, cookies created by one site will only
work with that specific site. Site A, for example, cannot read
cookies generated by Site B and then use that information for
purposes for which it was not intended. Credit Union One’s express
policy is to use cookies only for your account security while
using Web Access.
4.
Third Party Links. Credit Union
One's web site contains hyperlinks to third party links which
takes you away from our control and our servers. Any information
included on these sites is not controlled by Credit Union One
and we are not responsible for the content or any damage that
may take place.
5.
One Investments.
Credit Union One's web site contains information
and data pertaining to the US stock markets. This data and
information is provided for informational purposes only, and is
not intended for trading purposes. Credit Union One nor
any of our data or content providers shall be liable for any errors
or delays in the content, or informational purposes only, and
is not intended for trading purposes.
6.
Phishing
Phishing – Are You at Risk?
What is “Phishing”? It is a form of fraud, specifically
using email to trick members of financial institutions into revealing
their credit card information, online banking passwords, and other
confidential information. These emails look legitimate by using
official looking logos, and ask for verification of your personal
information.
Here are some ways to spot a potential phishing email:
· Asks you to provide personal information such as your
bank account number, an account password, credit card number,
PIN number, mother's maiden name, or Social Security number.
· Fails to address you by your name.
· Fails to confirm the company does business with you,
such as referencing a partial account number.
· Warns that your account will be shut down unless you
reconfirm your financial information.
· Warns that you have been the victim of fraud.
· Has spelling or grammatical errors.
Do Not access links contained in suspicious e-mail to reach any
Web page. Instead call the company using a phone number you know
is reliable (not one in that email), or type in the Website address
you know is correct.
Credit Union One and VISA will never ask you to provide any kind
of confidential or financial details via an email request. We
have also been modifying our online account access and e-statements
to make them less vulnerable to these types of schemes. For more
information about phishing including how to defend yourself against
phishing email, and to report scams, please visit www.bbb.org/phishing
and www.callforaction.org.