When we use the words “you” and “your,” we mean the following types of customers:

All of our consumer customers who have a continuing relationship with us, such as:

• Deposit Account
• Loan Account

We, our, and us means BBU BANK.

Nonpublic personal information means information about you that we collect in connection with providing a financial product or service to you. Nonpublic personal information does not include telephone directories or government records.

An affiliate is a company we own or control, a company that owns or controls us, and a company that is owned or controlled by the same company that owns or controls us. Ownership does not mean complete ownership, but means owning enough to have control.

A nonaffiliated third party is a company that is not an affiliate of ours.

We collect nonpublic personal information about you from the following sources:

• Information we receive from you on applications or other forms.
• Information about your transactions with us.
• Information about your transactions with other parties.
• Information from a consumer reporting agency.
• Information may also be obtained from “cookies.”

A “cookie” is a small file placed on your hard drive by our Web page server that is retrieved when you log onto our site again. The cookie is used to help us serve you better by recognizing you as a customer and to automate your on-line experience. For example, we may use cookies to store your preferences or to store account information so that you do not have to input it every time you visit our site. Cookies cannot be used to reveal anything that you have not already explicitly revealed. They cannot read your hard drive, get your e-mail address or steal personal information about you. If you do not wish to receive cookies, you can set your browser to alert you of a cookie being offered, or to reject all cookies.

We do NOT disclose any information about you to anyone, except as permitted by law. Examples of this might include disclosures necessary to service your account, to prevent unauthorized transactions, or to comply with legal process.

At BBU BANK we have procedures in place to ensure that customer account information is complete, accurate, and processed in a timely manner. However, should you ever believe that our records contain inaccurate or incomplete information about you, please notify us. We will investigate your concerns and correct any inaccuracies.

We may report information about your account to credit bureaus and other Consumer Reporting Agencies. Late payments, missed payments, or other defaults on your account may be reflected in your credit report. Under the Fair Credit Reporting Act, you have the right to notify us if you believe we have reported inaccurate information about your account to any Consumer Reporting Agency. Such notices should be sent in writing and include your complete name, current address, social security number, telephone number, account number, type of account, specific item of dispute, and the reason why you believe the information reported is in error. Send your notice to BBU BANK Operations Department, 150 Alhambra Circle, Suite 100, Coral Gables, Florida 33134.

At BBU BANK we restrict access to nonpublic personal information about you to those employees who need to know that information to provide products or services to you. These employees have been trained to maintain the confidentiality of all nonpublic personal information. To ensure that the confidentiality policy is understood, it is contained in the Personal Policy Manual and staff is required to attend periodic trainings. All employees' failure to comply with the privacy policy is subject to disciplinary action.

We maintain physical, electronic, and procedural safeguards that meet or exceed applicable law to guard your nonpublic personal information. Customer nonpublic personal information is protected from unauthorized online access through use of a password chosen by the customer. Thus, a person external to the Bank would have to know both your ID account number(s) and your unique password to gain online access to your nonpublic personal information. Customer personal information is protected from being altered while in transmission to the Bank by encryption technology known as Secure Sockets Layer {SSL).

We do not knowingly solicit data from children, and we do not knowingly market to children. We recognize that protecting children’s identities and privacy online is important and that the responsibility to do so rest with both the online industry and with parents.

We reserve the right to modify or amend this Privacy Policy at any time. If material changes are made, you will be provided with the new Privacy Policy. The practices and policies contained in this Privacy Policy replace all previous notices or statements with respect to the same subject. This Privacy Policy will not apply to relationships with other financial service providers, such as banks, insurance companies, securities broker-dealers, that are not part of BBU BANK. Their privacy policies will govern how they collect, use, and disclose nonpublic personal information.