Privacy and Disclosures

Last Updated: January, 2026

PROVIDENT CREDIT UNION WEBSITE AND MOBILE APP PRIVACY POLICY

Thank you for visiting the Provident Credit Union website located at www.providentcu.org (the "Site"). The Site is an Internet property of Provident Credit Union ("Provident," "we," "our" or "us"). This Provident Credit Union® Website and Mobile App Privacy Policy ("Privacy Policy") covers our treatment of personal information and other information that we collect when you: (a) access or use the Site; (b) access and/or download the Provident mobile application (the "App"), as made available to users of the iPhone®, iPad®, iPod Touch®, Google Play®, Android® and other mobile devices (collectively, "Mobile Devices") by and through the iTunes Store®, Google Play® store and other applicable venues ("Download Venues"); (c) access and/or download any of the text, brochures, rate sheets, audio, video, photographs, graphics, artwork and/or other content featured on the Site and/or App (collectively, "Content"), including information concerning Provident's various financial and lending services including, without limitation, mortgage loans, auto loans, personal loans, checking accounts, money market accounts, term share certificate accounts, retirement accounts, insurance and investment services, pre-paid debit cards (reloadable and non-reloadable) and credit cards (collectively, "Provident Financial Products"); (d) utilize the searchable directory of Provident locations made available on the Site and in the App ("Location Directory"); (e) access links to Provident's social media pages/accounts featured on third-party social media websites, such as Facebook®, LinkedIn®, Twitter® and Yelp® (collectively, "Social Media Pages"); (f) register for a member account and/or apply for a Loan or other Provident Financial Product(s) on the Site and/or by and through the App; (g) utilize the various online banking services made available on the Site and by and through the App ("Account Management Services"); and/or (h) utilize the contact forms and/or other functionality as a means to request to be contacted by Provident and/or any third-party credit union service providers ("Third-party Service Providers") (collectively, "Contact Services," and together with the Site, App, Content, Location Directory, Social Media Pages and Account Management Services, the "Site/App Offerings").

Capitalized terms not defined herein shall have the meanings set forth in the Provident Credit Union Website Terms and Conditions and Mobile App End-User License Agreement ("Terms and Conditions"). IF YOU DO NOT CONSENT TO TERMS OF THIS PRIVACY POLICY IN THEIR ENTIRETY, YOU MAY NOT ACCESS OR OTHERWISE USE THE SITE OFFERINGS.

If you have obtained a Provident Financial Product, we will use and share any information that we collect from or about you in accordance with this Privacy Policy, our Privacy Notice, and if applicable, our Caifornia Privacy Policy, which offers you certain choices with respect to the use and sharing of your personal information. In addition, our security policies, as set forth on the Security & Fraud pages of the Site and App, shall apply to our collection and use of personal information by and through the Site and App.

Android® and Google Play® are registered trademarks of Google, Inc. ("Google"). Facebook® is a registered trademark of Facebook, Inc. ("Facebook"). iPhone®, iPad®, iPod Touch® and the iTunes Store® are registered trademarks of Apple, Inc. ("Apple"). LinkedIn® is a registered trademark of LinkedIn Corporation ("LinkedIn"). Twitter® is a registered trademark of Twitter, Inc. ("Twitter"). Yelp® is a registered trademark of Yelp, Inc. ("Yelp"). Please be advised that Provident is not in any way affiliated with Apple, Facebook, Google, LinkedIn, Twitter or Yelp, nor are the Site/App Offerings or Provident Financial Products endorsed, administered or sponsored by any of the foregoing entities.

DEFINITIONS:

"Affiliates" shall mean companies related to Provident by common ownership or control. Affiliates include financial and non-financial companies. Currently, our Affiliates include Provident Plus Insurance Agency.

"Joint Marketing" shall mean a formal agreement between Provident and a Non-affiliated (defined below) financial company whereby Provident and such Non-affiliated financial company market financial products or services to you. Our current Joint Marketing partners include both financial and non-financial companies.

"Non-affiliates" shall mean companies that are not related to Provident by common ownership or control. Non-affiliates include financial and non-financial companies.

YOUR CALIFORNIA PRIVACY RIGHTS

In accordance with California State law, we will not share information that we collect about California State residents with Non-affiliates except as permitted by law, such as with the consent of the applicable customer, to service the customer's account(s) or to fulfill rewards or other benefits. We will also limit the sharing of information about California State resident customers with our Affiliates to the extent required by applicable California State law.

In addition, California’s “Shine the Light” law (Civil Code Section 1798.83, et seq.) permits users of our Site that are California residents, and have an established business relationship with us, to opt-out of the disclosure of personal information to third parties for their direct marketing purposes.  to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to contactcenter@providentcu.org; call us at: (800) 632-4600; or send us mail to: 303 Twin Dolphin Drive, Redwood City, CA 94065 and include “Shine the Light Opt-Out” in the subject line.

Further, if you are a resident of the State of California and would like to opt-out from the disclosure of your personal information to any third-party for marketing purposes, please e-mail us at: contactcenter@providentcu.org; send mail to: 303 Twin Dolphin Drive, Redwood City, CA 94065; or call us at: (800) 632-4600. Please be advised that where California State residents opt-out from permitting their personal information to be shared, such individuals may still receive selected offers directly from us, in accordance with applicable law.

VERMONT AND NORTH DAKOTA PRIVACY RIGHTS

In accordance with Vermont State law, we will not share information that we collect about Vermont State residents with Non-affiliates except as permitted by law, such as with the consent of the customer, to service the customer's account(s) or with other financial institutions with which we have Joint Marketing agreements. We will not share creditworthiness information about Vermont State residents with our Affiliates except with the authorization or consent of the applicable Vermont State residents.

For purposes of compliance with North Dakota Century Code §§ 6.08.1-01 to 6-08.1-08 and the Vermont Consumer Protection Act, 8 V.S.A. 10202, if you are a resident of the State of North Dakota or Vermont and would like to opt-out from the disclosure of your personal information to any third-party for marketing purposes, please visit www.providentcu.org/privacy. Please be advised that where North Dakota or Vermont State residents opt-out from permitting their personal information to be shared, such individuals may still receive selected offers directly from us, in accordance with the law.

NEVADA PRIVACY RIGHTS

For purposes of complying with Nevada State law, if you prefer not to receive telemarketing calls or text messages from us, you may be placed on our internal Do Not Call List by calling us at: (800) 632-4600, or by writing us to: Provident Credit Union, 303 Twin Dolphin Drive, Redwood City, CA 94065. Nevada State law also requires that we provide you with the following contact information: Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington St., Suite 3900, Las Vegas, NV 89101; Telephone Number: (702) 486-3132; E-mail: BCPINFO@ag.state.nv.us.

PERSONAL INFORMATION COLLECTED

For the purposes of this Privacy Policy, "personal information" shall mean individually identifiable information from or about an individual. We collect personal information when you access certain parts of the Site/App Offerings and complete an information request form and/or otherwise provide such information to us. The information that you supply on the form(s) may include, without limitation: (a) your name; (b) your mailing address; (c) your e-mail address; (d) your telephone number (home, work and/or mobile, as applicable); (e) your date of birth; (f) your mother's maiden name; (g) the status of your citizenship; (h) your occupancy status at your current residence (rent, own, etc.) and how long you have resided there; (i) your current profession/job title; (j) your employment status; (k) the duration of your current employment; (l) your employer's name; (m) your gross income; (n) your Social Security Number; (o) your chosen identification method (driver's license or state ID), the applicable ID card number, the date that the ID card was issued, the ID card's expiration date and the state that issued the ID card; (p) your account number(s), where applicable; (q) your account number and/or your payment card information, where applicable; and/or (r) any other information requested on the Form. For purposes of this Privacy Policy, items (n) through (q) in the preceding sentence shall be referred to as "Sensitive Information."

USE OF PERSONAL INFORMATION

Subject to applicable state and federal law restrictions, by submitting your personal information by and through the Site/App Offerings, you agree that, within thirty (30) days of the date that you are provided a copy of the Privacy Notice, and even if you are no longer a customer of Provident, unless you opt-out (see the last sentence of this paragraph), we may share, or otherwise provide that personal information (other than Sensitive Information) to: (a) Affiliates; (b) Non-affiliates; (c) and other third-parties for marketing purposes, including the marketing of Provident products and/or services, the marketing of products and/or services of Affiliates and Non-affiliates and in connection with Joint Marketing campaigns undertaken by Provident and other financial services providers. Some of the entities that we may share your personal information with as set forth in the preceding sentence may include, but are not limited to: (i) providers of direct marketing services and applications, including lookup and reference, data enhancement, suppression and validation; (ii) e-mail marketers; (iii) telemarketers and SMS text message marketers (where permitted by applicable law); and (iv) direct marketers. Please note that if you wish to prevent the sharing of your personal information with Non-affiliated third-parties for marketing purposes and/or you wish stop receiving future communications from us and/or third-parties, please call us at (800) 632-4600, or see the "Opt-Out/Unsubscribe" section below.

Where you submit personal information, we use the personal information that you make available to personalize your experience with the Site and/or App, to facilitate the delivery of the applicable Site/App Offerings to you, including to respond to any inquiries made by you, and to meet our everyday business needs which may include processing your Provident Financial Product and/or account transactions, maintaining your Provident Financial Product account(s) and/or reporting to credit bureaus.

You also agree that we may contact you at any time with updates and/or any other information that we may deem appropriate for you to receive in connection with your continued use of the Site/App Offerings, and to keep you informed of our other products and services.

In connection with the foregoing, we may employ other companies and individuals to perform certain functions on our behalf. Examples include companies that perform support services for us such as data processors, technical systems consultants and programmers, check printers, companies that send direct and electronic mail, remove duplicate information from end-user lists, analyze data and provide marketing analysis. The agents performing these limited functions on our behalf shall have access to our end-users' personal information as needed to perform these functions for us, but we do not permit them to use end-user personal information for other purposes.

We will also use your personal information for customer service, to provide you with information that you may request, to customize your experience with the Site/App Offerings and/or to contact you when necessary in connection with your use of the Site/App Offerings. We may also use your personal information for internal business purposes, such as analyzing and managing our service offerings including, without limitation, the Site/App Offerings. We may also combine the information we have gathered about you with information from other sources.

We reserve the right to release current or past personal information, including Sensitive Information: (a) in the event that we believe that the Site/App Offerings are being or have been used in violation of the Terms and Conditions or to commit unlawful acts; (b) if the information is subpoenaed; provided, however, that, where permitted by applicable law, we shall provide you with e-mail notice, and opportunity to challenge the subpoena, prior to disclosure of any personal information pursuant to a subpoena; or (c) if we are sold, merge with a third-party, are acquired or are the subject of bankruptcy proceedings; provided, however, that if Provident is involved in a bankruptcy proceeding, merger, acquisition or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on the Site and App of any change in ownership or uses of your personal information, as well as any choices that you may have regarding opting-out of the sharing of your personal information.

You hereby consent to the disclosure of any record or communication to any third-party when we, in our sole discretion, determine the disclosure to be appropriate including, without limitation, sharing your e-mail address with third-parties for suppression purposes in compliance with applicable law. End-users should also be aware that courts of equity, such as U.S. Bankruptcy Courts, might have the authority under certain circumstances to permit personal information to be shared or transferred to third parties without permission.

MONITORING AND RECORDING TELEPHONE CALLS AND CONSENT TO RECEIVE COMMUNICATIONS

Informational Consent


By submitting your personal information by and through the Site/App Offerings, you consent that we (or anyone acting on our behalf) may to contact you about your Provident Financial Product(s) and/or Account Management Services using voice, voicemail, SMS/MMS messages, or text messages via an automated telephone dialing system and/or with pre-recorded voice, artificial voice, and/or AI generative voice. Your consent is limited to your Provident Financial Product(s) and/or Account Management Services.  You authorize us to contact you regarding your Provident Financial Product(s) and/or Account Management Services using any telephone numbers or email addresses that you have provided to us by virtue of an existing business relationship, that you provide related to the foregoing, or that you may subsequently provide to us.  Your consent is regardless of whether the number we use to contact you is assigned to a landline, a paging service, a cellular wireless service, a specialized mobile radio service, other radio common carrier service or any other service for which you may be charged for the call.   You may change or remove any of the telephone numbers at any time using any reasonable means to notify us.  

Telemarketing

By submitting your personal information by and through the Site/App Offerings, you also agree that such act constitutes an inquiry and/or application for purposes of telemarketing. As such, notwithstanding that your telephone number may be listed on the Federal Trade Commission's Do-Not-Call List, and/or on applicable state do-not-call lists, we retain the right to contact you via telemarketing in accordance with state and federal law.

Where you provide prior express written consent, you consent to receive, from Provident, telephone calls, including artificial voice calls, pre-recorded messages and/or calls (including text alerts via SMS text messages) delivered via automated technology, to the telephone number(s) that you provided for marketing purposes. Please note that you are not required to provide prior express written consent in order to obtain access to the Site/App Offerings.

Monitoring and Recording

To provide you with the best possible service in our ongoing business relationship for your Provident Financial Product(s) and/or Account Management Services we may need to contact you from time to time by telephone, text message, or email.  Subject to federal and state law, we monitor and/or record phone calls and communication for security reasons, to maintain a record, for quality control, and to ensure that you receive courteous and efficient service. By using the Site/App Offerings, you consent to any such recording.

Email Opt Out

Promotional emails include a link to opt-out at the bottom and you may use that option as a means of opting-out of promotional emails.  Electronic delivery consent related to account information, and subsequent changes to that consent, can be made by logging into your online account or contacting one of our Provident Credit Union branches. 

Change in Telephone Number

Please be advised that by consenting to this Privacy Policy, you agree to immediately inform us if and when any telephone number that you have previously provided to us changes. Without limiting the foregoing, if you: (a) have your telephone number reassigned to another person or entity; (b) give up your telephone number so that it is no longer used by you; (c) port your telephone number to a landline or vice versa; or (d) otherwise stop using that telephone number for any reason (collectively "Phone Number Change"), you agree that you shall promptly notify us of the Phone Number Change by calling (800) 634-4600, by visiting a Provident Community branch, or by using one of the methods set forth in the "Contact Us" section below. 

NON-PERSONAL INFORMATION COLLECTION AND USE

Computer IP Addresses/Browser Type

We may collect certain non-personally identifiable information about you and your desktop device when you visit the Site. This non-personally identifiable information includes, without limitation, the type of browser that you use (e.g., Safari, Chrome, Internet Explorer), your IP address, the type of operating system that you use (e.g., Windows or iOS),  and the domain name of your Internet service provider (e.g., Verizon, AT&T), and the type of device being used. We use the non-personally identifiable information that we collect to improve the design and content of the Site/App Offerings and to enable us to personalize your Internet experience. We also may use this information in the aggregate to analyze usage of the Site/App Offerings.

Cookies and Other Tracking Technologies

Provident records and retains online transactions that users perform through the Site and/or App, such as those performed within online banking, online loan applications and/or account opening. This is necessary in order to conduct business and satisfy record-keeping requirements. Information about what pages have been viewed, for how long and the paths people take through the Site and/or App is also collected in order to evaluate how the Site Offerings are being used, so that Provident can make improvements. Mostly this "tracking" information is anonymous and viewed in aggregate, but there are also areas of the Site and/or App where users are personally identified via a secure sign on, and we retain the information for a limited time in order to help protect Provident and its members from actual or potential fraud, and to be able to assist members who need help. 

Some of this information collection in the preceding paragraph is accomplished via "Cookies.” Cookies are small bits of data that a web page can use to assign an anonymous, unique identifier to the applicable end-user's computer and/or mobile device, as applicable. 

Provident and our vendors, use Cookies that our server sends to your browser when you visit our Site and/or App to assist your use of certain aspects of the Site and/or App. Provident uses Cookies on the Site and App for measuring the effectiveness of Site/App pages and communication, maintaining an ongoing session state when navigating between Site/App pages, as well as for improving the user experience and remembering user preferences. For instance, end-users can opt to have the Site/App remember their online banking User IDs for easier sign on during subsequent visits. This is accomplished via a cookie stored on the end-user's computer and/or mobile device, as applicable, which, in later visits, is read by the Site/App in order to pre-populate the User ID field.

Our vendors include but are not limited to advertising partners, analytics services, and fraud prevention vendors. We and our vendors may also collect and store your personal information via Cookies (which are stored on your computer in a file), web beacons and remarketing pixel tags (collectively “Tracking Technologies”). By using the Site and/or App, you consent to the use of Cookies and Tracking Technologies described in this policy.

Opting Out of Cookies and Tracking Technologies. The Help portion of the toolbar on most browsers will tell you how to prevent your browser from accepting new Cookies, how to have the browser notify you when you receive a new Cookie, or how to disable Cookies altogether. Please keep in mind that, without Cookies, you may not have access to certain features on our Site and/or App, including access to your account and certain personalized content. Removing all Cookies from your computer could also affect your subsequent visits to the Site and/or App, by requiring that, for example, you enter your login name when you return. Please note that not all tracking will stop even if you delete cookies.

Managing “Do Not Track” Signals. Some browsers have a Do Not Track (“DNT”) feature that lets you tell websites that you do not want to have your online activities tracked. When you choose to turn on the DNT setting in your browser, your browser sends a special signal to websites, analytics companies, ad networks, plug in providers, and other web services you encounter while browsing to stop tracking your activity via Cookies or other tracking technologies. While we continue to evaluate this evolving technology, our Site does not currently respond to browser-based DNT signals. For information regarding DNT and how to enable this setting, if available, on your devices please see https://allaboutdnt.com.

Mobile Device Information

We may collect certain non-personally identifiable information about you and your mobile device when you access the Site and/or App. This non-personally identifiable information includes, without limitation, the following information pertaining to your mobile device and your use of Site and/or App: (a) mobile device platform type; (b) mobile device identifier; (c) SDK version; (d) API key (identifier for the App); (e) App version; (f) iOS Identifier; (g) Media Access Control (MAC) address; (h) International Mobile Equipment Identity (IMEI); (i) the model type, manufacture and iOS version of the mobile device; (j) your Site and/or App session start/stop time and date; and (k) the actions taken while utilizing the Site and/or App. We use the non-personally identifiable information identified in this paragraph to improve the design and content of the Site/App Offerings and to enable us to personalize your experience. We also may use this information in the aggregate to analyze Site/App Offerings usage, alter existing Site/App Offerings and/or develop new or different Site/App Offerings.

Mobile Device Location Tracking. You can manage how your mobile device shares location data or prevent geolocation tracking by adjusting the controls and disabling location services on your mobile device or within our mobile application.

Marketing and Interest-Based Advertising. Some content or applications, including advertisements, on the Site and/or App may be served by our vendors, including advertisers, ad networks and servers, content providers, and application providers, in which event (i) these vendors may use Cookies alone or collect information about your online activities over time and across different sites and (ii) these service providers may use this information to provide you with interest-based (behavioral) advertising or other targeted content on our behalf.  Many of our marketing vendors are members of the Network Advertising Initiative (NAI), or the Digital Advertising Alliance (DAA), and have agreed to honor consumers' opt-out preferences submitted through those organizations' websites. To learn more about your choices regarding this type of data collection or to opt-out of interest-based advertising by members of the NAI or the DAA, please visit http://optout.networkadvertising.org or https://www.aboutads.info.  To opt out of sharing for cross-contextual behavioral advertising you may also use the Global Privacy Control (GPC) for your browser.  Our Site and/or App respond to GPC signals in a frictionless manner.  To learn more about how to enable GPC in participating browsers, visit www.globalprivacycontrol.org/.

Aggregate Data

Provident reserves the right to transfer and/or sell aggregate or group data about end-users of the Site/App Offerings for lawful purposes. Aggregate or group data is data that describes the demographics, usage and other characteristics of Site/App Offerings users as a group, without disclosing personally identifiable information.

SOCIAL MEDIA WEBSITES

If you engage in any interaction with Provident, other end-users or any third-party on any Social Media Pages, you should be aware that: (a) the personal information that you submit by and through such Social Media Pages can be read, collected and/or used by other users of these websites/services (depending on your privacy settings associated with your accounts with the applicable Social Media Websites), and could be used to send you unsolicited messages or otherwise to contact you without your consent or desire; and (b) where Provident responds to any interaction on such Social Media Pages, your account name/handle may be viewable by any and all members/users of Provident's social media accounts.

We are not responsible for the personal information that you choose to submit on any Social Media Websites. The Social Media Websites operate independently from Provident, and we are not responsible for such Social Media Websites' interfaces or privacy or security practices. We encourage you to review the privacy policies and settings of the Social Media Websites with which you interact to help you understand those Social Media Websites' privacy practices. If you have questions about the security and privacy settings of any Social Media Websites that you use, please refer to their applicable privacy notices or policies.

THIRD-PARTY WEBSITES

This Site and/or App may contain links to third-party owned and/or operated websites including, without limitation, the Social Media Websites. Provident is not responsible for the privacy practices or the content of such websites. In some cases, you may be able to make a purchase through one of these third-party websites. In these instances, you may be required to provide certain information, such as a credit card number, to register or complete a transaction at such website. These third-party websites have separate privacy and data collection practices and Provident has no responsibility or liability relating to them.

SECURITY

For more information about our security measures, please visit the Security & Fraud pages of the Site and App.

While we take every reasonable precaution available to protect your data, no storage facility, technology, software, security protocols or data transmission over the Internet or via wireless networks can be guaranteed to be 100% secure. Computer hackers that circumvent our security measures may gain access to certain portions of your personal information, and technological bugs, errors and glitches may cause inadvertent disclosures of your personal information; provided, however, that any attempt to breach the security of the network, our servers, databases or other hardware or software may constitute a crime punishable by law. For the reasons mentioned above, we cannot warrant that your personal information will be absolutely secure. Any transmission of data at or through the Site, App, other Site/App Offerings or otherwise via the Internet or wireless networks, is done at your own risk.

In compliance with applicable federal and state laws, we shall notify you and any applicable regulatory agencies in the event that we learn of an information security breach with respect to your personal information. You will be notified via e-mail in the event of such a breach. Please be advised that notice may be delayed in order to address the needs of law enforcement, determine the scope of network damage, and to engage in remedial measures.

MINORS

Visitors under thirteen (13) years of age are not permitted to use and/or submit their personal information at the Site and/or through the App. Provident does not knowingly solicit or collect information from visitors under thirteen (13) years of age. Provident encourages parents and guardians to spend time online with their children and to participate and monitor the interactive activities of their children.

OPT-OUT/UNSUBSCRIBE

To opt-out of sharing your information with Non-affiliated third-parties for marketing purposes, please call us at: (800) 632-4600. To opt-out of receiving e-mail and other forms of communication from us, you can call us at: (800) 632-4600 or follow the instructions included in the privacy notice mailing or other communication. If you wish to opt out of receiving e-mail and other forms of communication from a third-party, whether an Affiliate, Non-affiliate or Joint Marketing partner, please consult that third-party's opt out policies or contact that third-party directly. To opt out of sharing for cross-contextual behavioral advertising you may also use the Global Privacy Control (GPC) for your browser.  Our Site and/or App respond to GPC signals in a frictionless manner.  To learn more about how to enable GPC in participating browsers, visit www.globalprivacycontrol.org/.

Notwithstanding the foregoing, we may continue to contact you for the purpose of communicating information relating to your request for Site/App Offerings, as well as to respond to any inquiry or request made by you. To opt-out of receiving Site/App Offerings-related and/or inquiry response-related messages from Provident, you must cease requesting and/or utilizing the Site/App Offerings and/or cease submitting inquiries to Provident, as applicable.

TRANSFER OF PERSONAL INFORMATION INTERNATIONALLY

If you are visiting the Site and/or App from a country other than the country in which our servers are located, your communications with us may result in the transfer of information across international boundaries. By visiting the Site and/or App, and/or otherwise communicating electronically with us, you consent to such transfers. Even if your jurisdiction does not have the same privacy laws as the jurisdiction where our servers are located, we will treat your information as subject to the protections described in this Privacy Policy.

CHANGES TO THIS PRIVACY POLICY

Provident reserves the right to change or update this Privacy Policy at any time by posting a notice on the Site and through the App that we are changing our Privacy Policy. If the manner in which we use personal information changes, Provident will notify end-users by: (a) sending the modified policy to our end-users via email; and/or (b) by any other reasonable means acceptable under applicable state and federal law. You will have a choice as to whether or not we use your information in this different manner and we will only use your information in this different manner where you opt-in to such use.

CONTACT US

If you have any questions about this Privacy Policy or our privacy practices in general, please feel free to contact us using the most convenient method set forth on the Contact page of the Site.