Effective Date: January 26, 2023
This Policy describes how Cathay Bank handles personal information that is collected online through our website (the “Site”), our mobile application (the “App”) and other online resources, and offline through interactions with you to provide Cathay Bank services (collectively, the “Services”).
For more information on how Cathay Bank handles U.S. consumer customer non-public information, our U.S. Privacy Notice for Consumers is available here.
This Policy does not apply to third-party websites to which Cathay Bank may link. If you are a customer of a financial product or service offered by one of our service providers, that service provider should also have delivered to you a Customer Privacy Notice (Customer Privacy Notice), and which is also available here, that explains how they collect, use and disclose information about you and offers you certain choices with respect to the use and sharing of your personal information.
We collect information from a variety of sources. The following are categories of sources from which information is collected:
From time to time, we may use or augment the personal information we have about you with information obtained from other sources, such as public databases, fraud detection services and other third parties. We may also combine information we get from a third-party with information we already have, and we may combine information that we have collected offline with information we collect online.
If you choose to submit any personal information relating to other people, you represent that you have the authority to do so and permit us to use the information in accordance with this Policy.
The specific pieces of personal information that Cathay Bank collects, uses, and discloses depends on the Services you have or use with us. We collect the following categories of personal information:
In addition to the above categories, you may choose to provide us with additional pieces of information when you fill in a form, update or add information to your Cathay Bank Account, use Cathay Bank Services or interact with us in other ways. Cathay Bank may also collect information that could be considered as sensitive personal information, as defined under the CCPA, and/or non-personal information; however, Cathay Bank does not use such information for any purpose that would fall under the scope of the CCPA. For more information about how Cathay Bank uses non-personal information, please refer to our U.S. Privacy Notice for Consumers that available here.
In addition to the personal information that you choose to provide to us, we or our vendors (including analytics providers) may use a variety of tracking technologies that automatically or passively collect certain information whenever you visit or interact with our website. We have implemented Google Analytics Advertising for features such as dynamic remarketing, interest-based advertising, audience targeting, behavioral reporting, demographics and interests reporting, user segment analysis, device reporting, display advertising, and video ads reporting. Please note that Cathay Bank has enabled restricted data processing for Google, which restricts the way Google can use certain unique identifiers and other data processed to undertake certain activities. For more information on how Google Analytics uses data collected through the website or to opt out, visit: google.com/policies/privacy/partners.
Depending on your device or App permission settings, the App may have access to the following information from your mobile device:
These App permission settings allow you to access or use certain features within the App. For example, in order to locate the nearest branch to you, the App may need access to your precise location. You may change your App permission settings. By changing your App permission settings, you may affect your ability to access or use certain features on the App.
Additionally, you may be able to log into the App using your device’s log in features such as using a passcode or your fingerprint. These device log in features are facilitated through your device and not Cathay Bank and we have no control over such features, which you can change by accessing your device settings and preferences.
We may use personal information collected from any of the sources listed in “Item 4. How We Collect Information” section of this Policy for our internal business purposes, such as data analysis, audits, developing new products, enhancing our websites and apps, improving our Services, identifying usage trends and determining the effectiveness of our promotional campaigns.
We do not collect and or use sensitive personal information for any purpose that may fall under the scope of the CCPA. Notwithstanding the foregoing, we do not use your sensitive personal information to infer characteristics about you.
We may aggregate and/or de-identify data about customers and site visitors and use it for any purpose, including product and service development and improvement activities.
We may disclose certain categories of personal information listed above with the following categories of recipients for the purposes outlined in this Policy:
Cathay Bank may also disclose aggregate or de-identified data that is not personally identifiable to third parties for any purpose.
If you have a retail banking account with Cathay Bank, in the twelve months preceding the Effective Date above, Cathay Bank has not sold your personal information.
If you have a commercial banking account with Cathay Bank, we may disclose your personal information with co-branded commercial card partners to facilitate a commercial relationship with the partner and Cathay Bank, to the extent that you intentionally direct us to do so. Commercial cards are those products issued to a business solely for the purpose of a business or commercial purpose.
You may exercise your right to opt out of the sale/share of your personal information to a co-branded commercial card partner by clicking here to complete the Personal Information Request and Opt-Out Form. Please note that the co-branded commercial card partner may already have some personal information about you as a result of your relationship with the partner and your choice to opt out of the sale/share of personal information will govern only Cathay Bank’s sharing of your personal information with the partner if such a transmittal is not based on your intentional direction to disclose your personal information and if such a partner is not a “service provider” under the CCPA.
You may have certain rights and choices regarding our processing of your personal information. Depending on your jurisdiction, applicable law may entitle you to additional consumer rights, including the right:
Please note that a large portion of the personal information collected and processed by Cathay Bank will be out of scope for certain individual rights as it falls under exemptions for information collected under applicable federal laws. For example, non-public personal information that is collected from an individual who obtains from us financial products or services to be used primarily for personal, family, or household purposes is not subject to aspects of various jurisdictional privacy laws. For more information on how Cathay Bank handles non-public information, our U.S. Privacy Notice for Consumers is available here.
You may exercise any of the applicable rights described in this Policy by clicking here to complete the Personal Information Request and Opt-Out Form. We will promptly respond to all applicable requests.
For questions about this Policy, please see "Item 18. Contact Us” below.
We reserve the right to verify your identity in connection with any requests regarding personal information to help ensure that we provide the information we maintain to the individuals to whom it pertains, and allow only those individuals or their authorized representatives to exercise rights with respect to that information. If you are an authorized agent making a request on behalf of a consumer, we may require and request additional information to verify that you are authorized to make that request.
We reserve the right to deny your request if we cannot verify your identity. Where we deny your request in whole or in part, we will endeavor to inform you of the denial, provide an explanation of our actions, and the reason(s) for the denial.
We will not restrict or deny you access to our Services because of choices and requests you make in connection with your personal information. You may exercise any of the applicable rights described in this section by clicking here to complete the Personal Information Request and Opt-Out Form. We will promptly respond to all applicable requests.
We will store your personal information for no longer than is necessary for the performance of our obligations or to achieve the purposes for which the information was collected, or as may be permitted under applicable law. To determine the appropriate retention period, we will consider the amount, nature, and sensitivity of the information; the potential risk of harm from unauthorized use or disclosure of the information; the purposes for which we process the information and whether we can achieve those purposes through other means; and the applicable legal requirements. Unless otherwise required by applicable law, at the end of the retention period we will remove personal information from our systems and records or take appropriate steps to properly anonymize it.
We have put in place reasonable technical and information safety safeguards that comply with federal law in order to protect your personal information from unauthorized access and use.
While it is our practice to take reasonable steps to secure each webpage that collects information, the confidentiality of information transmitted over the Internet cannot be guaranteed. We urge you to exercise caution when transmitting personal information over the Internet, especially personal information related to your financial information.
Our Services are not directed to individuals under the age of sixteen (16) and we do not and will not sell the personal information of minors under 16 years of age absent affirmative authorization. If you are under age 16, please do not submit any personal information to us. In addition, we do not and will not knowingly collect personal information from children under the age of thirteen (13). We do not knowingly permit children to communicate with us or use our Services. If you are a parent and become aware that your child has provided us with information, please contact us using one of the methods specified below in "Item 18. Contact Us" and we will work with you to address this issue.
As mentioned, when you access our website, your personal information may be collected by cookies and other similar technologies. A cookie is a bit of information that a website sends to your Web browser that helps the site remember information about you and your preferences. Pixel tags and web beacons are also used in connection with some of our pages and HTML-formatted email messages. You have the ability to exercise control over certain privacy settings by adjusting browser settings on devices (for example, Chrome, Edge, Firefox, Internet Explorer, or Safari). Note: If you do not enable cookies to visit our Sites, some parts of the Sites and services may not work.
Please be aware that limiting the ability of website technologies may limit your experience and in some cases the sites may not work.
This Policy constitutes Cathay Bank’s Do Not Call Policy under the Telephone Consumer Protection Act for all consumers. We do not solicit via telephone numbers listed on the state or federal Do Not Call lists, unless the law allows. Consumers who ask not to receive telephone solicitations from Cathay Bank will be placed on Cathay Bank’s internal Do Not Call preference list. Do Not Call requests will be honored within 30 days. No telemarketing calls will be made to residential or cellular phone numbers that appear on the Do Not Call list.
If you are a California resident, you are entitled, once a year, free of charge, to request information regarding our disclosure, if any, of certain categories of Personal Information to third parties for their direct marketing purposes in the preceding calendar year. Note: We do not share personal information with third parties for their own direct marketing purposes without your consent or providing the ability to opt-out.
If you have questions about your personal information or your rights under this Policy, please call us, email us or send a letter using the following contact information:
777 North Broadway 1-0-A
Los Angeles, CA 90012
Attention: Compliance Department
Phone number: 800-922-8429
Email: [email protected]
You may exercise any of your rights in relation to your personal information by contacting us using the details provided above or clicking here to complete the Personal Information Request and Opt-Out Form.