We also handle and use personal information collected from consumers, whether via the Website or other means, in accordance with our Privacy Notice. If you are a California resident, please see Appendix A: Privacy Information for California Residents for supplemental California-specific privacy information.
Information you provide to us. We may collect personal information about you when you provide it to us while using or interacting with the Website such as your name, Social Security number, email address, telephone number, mailing address, business name, login information, location, financial information, account information, messages you submit via the Website’s form, and other information that may personally identify you.
Information we collect automatically. As you use our Website, we may use technologies that collect certain information about you automatically. We may collect, among other things, your IP address, location, device type, date and time of visit, operating system, browser type and version, your activities on the Website, and information about how you use the Website. If you are visiting the Website via a mobile device, we may also collect your mobile device’s unique device ID and information about how you use the Website.
Information we receive from third parties. From time to time, we receive information about individuals from our third-party service providers, affiliates, and partners. For example, we receive information on our email campaigns from our third-party service providers, including whether you have read an email sent by us or on our behalf, forwarded an email, and when and how many times you have opened an email. We may also receive information from third party analytics on the Website that allow us to improve our Website and services.
We use this information to administer the Website, assess our advertising programs, improve our Website and marketing efforts, and as generally permitted under applicable law. We also use information we gather to track activity within our Websites and to gather demographic information. We sometimes use the information that we collect to improve the design and content of our Websites and to enable us to personalize your Internet experience. We also may use this information to analyze how our Website is used, as well as to offer you products, programs, or services that may be of particular interest to you. We may also use information we collect automatically that is otherwise de-identified, aggregated, or anonymous for any purpose.
Byline Bank advertises online and offline. To understand how our online advertising performs, we (or our service providers) may collect certain information regarding your usage of the Website, using cookies, IP addresses, and other technologies such as anonymous identifiers.
Our Website has implemented the following Google Analytics for Display Advertisers Feature: Google Analytics Demographics and Interest Reporting. This feature is used to help us understand how our advertising performs and to improve our marketing efforts and the Website. Our Website may use Google Remarketing with Google Analytics. We use Google Remarketing or similar tools to advertise to you online. As our third-party vendor, Google may show you ads on sites across the Internet using cookies and/or device identifiers to serve ads based on your past visits to our website. We reserve the right to test, turn-on, or turn-off any of the Google Advertising features from time to time without explicating announcement or disclosure.
The Website does not respond to Do Not Track signals.
We may share your information with third parties that assist us in providing our services, for advertising and marketing purposes, and potentially other reasons. In addition, we may transfer any information in our databases to a third party as part of a transfer of business assets, or release information to comply with requests from law enforcement and government agencies, to enforce the terms of our services, and to protect our customers and others. We may also share your information with third parties if we believe disclosure is necessary to enforce or protect our rights, property, or safety, or that of our users or third parties. We may share aggregate, de-identified information with others, including affiliated companies and non-affiliated companies for any legal purpose.
Cookies. If you do not wish us to place cookies, you may set your browser to refuse some cookies, or to alert you when cookies are being sent. If you do so, please note that some parts of the Website may then be inaccessible or may not function properly. Information on deleting or controlling cookies can be found at www.aboutcookies.org.
Opt-Out. You may opt out of receiving future marketing communications from us any time we request your personal information. You can opt out by using the unsubscribe process listed below. We will use commercially reasonable efforts to process such request in a timely manner.
Protecting the privacy of our children is essential to Byline Bank. Our Website is not designed to market to children under the age of thirteen (13) or obtain information or data from them.
Byline protects your information, including Social Security number. Our policies and procedures protect the confidentiality of your information, prohibit the unlawful disclosure of your information, and limit access to your information to employees and others with legitimate business purposes. These protections apply to all personal information, including Social Security numbers, collected or retained in any way by Byline in connection with customers and their accounts, employees or any other relationships. Individuals applying for or obtaining a product or service from us to be used primarily for personal, family or household purposes may obtain more information about our security measures by reviewing our Privacy Notice.
Although we have implemented generally accepted industry standards to protect your information, no online transmission of data or method of electronic storage is 100% secure. While we strive to secure your information, we cannot guarantee its absolute security.
You may Opt-Out of receiving future marketing communications from us by contacting us.
This Appendix applies solely to individuals who reside in the State of California (“consumers” or “you”). This Appendix complies with the California Consumer Privacy Act of 2018 (“CCPA”) and any terms defined in the CCPA have the same meaning when used in this Appendix. This Appendix does not apply to personal information outside the scope of the CCPA, including:
The below chart lists the categories of personal information that we may collect and have collected in the past 12 months and how we use such information.
|Categories of Personal Information||Categories of Sources from which the Personal Information is Collected||How We Use the Personal Information (Business Purposes)||Categories of Services Providers and Third Parties with whom Personal Information is Shared|
|Identifiers. This may include a real name, alias, address, email address, phone number, online identifier, IP address, account username and password, job title, or other similar identifiers.||You or your agents; our other customers; our third party service providers; ad networks; data analytics providers; our affiliates; and social media networks.||To provide you with information, products, or services; to advertise or market to you; and for our own legal obligations and business needs.||Entities that we are required to share with pursuant to law or for legal proceedings; service providers; our affiliates; data analytics providers; prospective purchasers of our business; outside auditors and lawyers; and social media networks.|
|Internet and network information. This may include information on your interaction with a website, application, or advertisement, such as browsing history and how you use your account.||You or your agents; our third party service providers; ad networks; data analytics providers; our affiliates; and social media networks.||To provide you with information, products, or services; to advertise or market to you; to improve our services and products; for our own legal obligations and business needs; and to secure our website.||Entities that we are required to share with pursuant to law or for legal proceedings; service providers; our affiliates; data analytics providers; and social media networks.|
|Device information. This may include the operating system of your device, device identifier, the type of device you are using, or your geolocation information.||You; our third party service providers; data analytics providers; our affiliates; and social media networks.||To provide you with information, products, or services; to advertise or market to you; to improve our services and products; to secure our websites; and for our own business needs.||Entities that we are required to share with pursuant to law or for legal proceedings; service providers; data analytics providers; and social media networks.|
|Other information you submit to us. This may include requests or communications you submit to us.||You or your agent.||To provide you with information, products, or services; to advertise or market to you; and for our own legal obligations and business needs.||Entities that we are required to share with pursuant to law or for legal proceedings; service providers; our affiliates; prospective purchasers of our business; and outside auditors and lawyers.|
|Inferences we draw about you. This may include information about your preferences, characteristics, predispositions, behavior, or other trends that help us identify which products you may be interested in.||You or your agents; our third party service providers; data analytics providers; our affiliates; and social media networks.||To provide you with information, products, or services; to advertise or market to you; and for our own business needs.||Entities that we are required to share with pursuant to law or for legal proceedings; service providers; and our affiliates.|
|Applicant or employment information. This may include your name, address, resume, work history, education, cover letter, drug screening information, and background check information.||You or through our third party service provider.||To evaluate you for employment; to begin the employment process; and for our own legal and business needs.||Entities that we are required to share with pursuant to law or for legal proceedings; our affiliates; and service providers.|
If you would like to opt-out of providing us with personal information through cookies, pixels, and other similar technologies, you may set your browser to refuse some cookies or to alert you when cookies are being sent. Information on deleting or controlling cookies can be found at www.aboutcookies.org.
The CCPA provides California residents with specific rights regarding their personal information, described below. Below are your CCPA rights and how to exercise those rights.
a. Access to Specific Information and Data Portability Rights (“Right to Know”)
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. You could request:
Keep in mind that CCPA does not apply to information you have provided to us or that we have collected from you that is subject to exemptions above, including Non-Public Personal Information subject to GLBA or information subject to the California Financial Information Privacy Act. We will deny any Right to Know concerning such personal information.
b. Deletion Request Rights (“Right to Deletion”)
You have the right to request that we delete some or all of the personal information that we have collected from you and retained, subject to a number of exceptions. We are not required to delete personal information that is: (a) necessary to complete a transaction with you or for warranty or product recalls; (b) used for security purposes, to prevent fraud, to fix errors, or to comply with law; (c) reasonable for us to use for internal purposes given our relationship with you; or (d) compatible with the context in which you provided the information. The list of exceptions above is not exhaustive and we may also deny a deletion request as otherwise permitted by law.
The same limitations described above with respect to the Right to Know, apply to the Right to Deletion.
c. Exercising Your Rights
To exercise your rights described above, please submit a verifiable consumer request to us by either:
Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. If you are making a request on behalf of another person, you must provide written legal documentation that you are authorized to act on behalf of that individual.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
We may not be able to fulfill your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. To verify your identity, we may request up to up to three pieces of personal information about you, and we reserve the right to take additional steps as necessary to verify your identity if we have reason to believe a request is fraudulent.
d. Response Timing and Format
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.
Any disclosures we provide will only cover the 12-month period preceding the date we receive your verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
You have the right to not be discriminated against for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.
Effective date: February 2022