The Right Bank Makes a Difference

Privacy Policy

Rev. February 2026

FACTS WHAT DOES Heritage Bank DO WITH YOUR PERSONAL INFORMATION?
Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
What?	The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security Number and Credit history Account balances and Account transactions Payment history and Credit card or other debt When you are no longer our customer, we continue to share your information as described in this notice.
How?	All financial companies need to share customers' personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers' personal information; the reasons Heritage Bank chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information	Does Heritage Bank share?	Can you limit this sharing?
For our everyday business purposes — such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus	Yes	No
For our marketing purposes — to offer our products and services to you	No	We don't share
For joint marketing with other financial companies	No	We don't share
For our affiliates' everyday business purposes — information about your transactions and experiences	No	We don't share
For our affiliates' everyday business purposes — information about your creditworthiness	No	We don't share
For our affiliates to market to you	No	We don't share
For nonaffiliates to market to you	No	We don't share
Questions? Call 319-373-5400 or go to customerhelp@heritagemarion.bank

WHO WE ARE

Who is providing this notice?

Heritage Bank

WHAT WE DO

How does Heritage Bank protect my personal information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. We also maintain other physical, electronic and procedural safeguards to protect this information and we limit access to information to those employees for whom access is appropriate.
How does Heritage Bank collect my personal information?	We collect your personal information, for example, when you: Open an account Give us your contact information Apply for a loan Pay us by check Make deposits or withdrawals from your account We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Why can't I limit all sharing?	Federal law gives you the right to limit only: sharing for affiliates' everyday business purposes — information about your creditworthiness affiliates from using your information to market to you sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing.

DEFINITIONS

Affiliates	Companies related by common ownership or control. They can be financial and nonfinancial companies. Heritage Bank does not share with our affiliates.
Nonaffiliates	Companies not related by common ownership or control. They can be financial companies and nonfinancial companies. Heritage Bank does not share with nonaffiliates so they can market to you.
Joint marketing	A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Heritage Bank does not jointly market.

OTHER IMPORTANT INFORMATION

The following additional terms apply to your use of Heritage Bank's mobile application and digital services (the “App” or “Services”).

LOCATION SERVICES

Location Information. If you have enabled location services on your phone and agree to the collection of your location when prompted by the Services, we will collect location data when you use the Services even when the app is closed or not in use; for example, to provide our fraud detection services. If you do not want us to collect this information, you may decline the collection of your location when prompted or adjust the location services settings on your device.

LINKS TO OTHER SITES

The App may contain links to third party websites. When you click on a link to any other website or location, you will leave the App and go to another site and another entity may collect personal and/or anonymous information from you. The App’s provision of a link to any other website or location is for your convenience and does not signify our endorsement of such other website or location or its contents. We have no control over, do not review, and cannot be responsible for, these outside websites or their content. Please be aware that the terms of this Privacy Policy do not apply to these outside websites. We encourage you to read the privacy policy of every website you visit.

YOUR CHOICES REGARDING YOUR INFORMATION

You have several choices regarding use of information on the Services.

(a) How We Respond to Do Not Track Signals. Some web browsers transmit “do not track” signals to the websites and other online services with which your web browser communicates. There is currently no standard that governs what, if anything, websites should do when they receive these signals. We currently do not take action in response to these signals. If and when a standard is established, we may revise its policy on responding to these signals.

(b) Access, Update, or Correct Your Information. You can access, update, or correct your information by changing preferences in your account. For additional requests, please contact us.

(c) Opting Out of Email or SMS Communications. If you have signed up to receive our email marketing communications, you can unsubscribe any time by clicking the “unsubscribe” link included at the bottom of the email or other electronic communication. Alternatively, you can opt out of receiving marketing communications by contacting us at the contact information under “Contact Us” below. If you provide your phone number through the Services, we may send you notifications by SMS, such as providing a fraud alert. You may opt out of SMS communications by unlinking your mobile phone number through the Services.

(d) Opting Out of Location Tracking. If you initially consented to the collection of geo-location information through the Services, you can subsequently stop the collection of this information at any time by changing the preferences on your mobile device. Please note, however, that if you withdraw consent to our collection of location information, you may no longer be able to use some features of the App.

CONTACT US

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Call: 319-373-5400
Email: customerhelp@heritagemarion.bank

Download mobile banking app for iphone and android Mobile App Store Google Play