California Consumer Privacy

Legal Entities

This policy applies to the following affiliated legal entities: Mission Bank, Mission Bancorp, Mission 1031 Exchange, LLC, and Mission Community Development, LLC..

Applicability

This California Consumer Privacy Act Privacy Policy (“Policy”) describes how Mission Bank and its affiliated entities (“Mission Bank,” “we,” “us,” or “our”) collect, use, disclose, and protect Personal Information of California residents in accordance with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”).

Introduction

This policy applies solely to Personal Information subject to the CCPA. It does not apply to Personal Information collected, processed, sold, or disclosed pursuant to the Gramm‑Leach‑Bliley Act (“GLBA”)”) or its implementing regulations, including information collected from individuals who obtain financial products or services from Mission Bank for personal, family, or household purposes. Such information is governed by our Privacy Policy.

Personal Information and Sensitive Personal InformationIn the preceding 12 months, we have collected the following categories of Personal Information and Sensitive Personal Information relating to consumers covered by this Policy:

• Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers
• Any personal information described in subdivision (e) of Section 1798.80
• Characteristics of protected classifications under California or federal law
• Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
• Biometric information
• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement
• Geolocation data
• Audio, electronic, visual, thermal, olfactory, or similar information
• Professional or employment-related information
• Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99)
• Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes; and
• The following categories of Sensitive Personal Information:

• A consumer’s social security, driver’s license, state identification card, or passport number
• A consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account
• A consumer’s precise geolocation
• A consumer’s racial or ethnic origin, citizenship or immigration status, religious or philosophical beliefs, or union membership
• The contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication
• The processing of biometric information for the purpose of uniquely identifying a consumer

Sources of Personal Information

The categories of sources from which we collect Personal Information include:

• Directly from a California resident or the individual’s representatives
• Service Providers, Consumer Data Resellers and other third parties
• Public Record Sources (Federal, State or Local Government Sources)
• Information from our Affiliates
• Website/Mobile App Activity/Social Media
• Information from Client Directed Third Parties or Institutions representing a Client/Prospect
• Information from Corporate Clients about individuals associated with the Clients (e.g., an employee or board member)

Business or Commercial Purpose

We collect Personal Information, including Sensitive Personal Information, for business or commercial purposes, for the following purposes:

 

• To perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services
• To prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted personal information
• For short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer's current interaction with the business, provided that the personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer's experience outside the current interaction with the business
• To perform services on behalf of the business for maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business
• To collect or process sensitive personal information where the collection or processing is not for the purpose of inferring characteristics about a consumer

Personal Information Sold or Shared

In the preceding 12 months, we have not “sold” or “shared” Personal Information or Sensitive Personal Information subject to the CCPA, nor have we “sold” or “shared” Personal Information or Sensitive Personal Information of minors under the age of 16.

 

• “Sold” means the disclosure of Personal Information or Sensitive Personal Information to a third party for monetary or other valuable consideration
• “Shared” means the disclosure of Personal Information or Sensitive Personal Information to a third party for cross-context behavioral advertising

Personal Information Disclosed for a Business Purpose

In the preceding 12 months, we have disclosed, for business purposes to third parties, the following categories of Personal Information:

• Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers
• Any personal information described in subdivision (e) of Section 1798.80
• Characteristics of protected classifications under California or federal law
• Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
• Biometric information
• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application, or advertisement
• Geolocation data
• Audio, electronic, visual, thermal, olfactory, or similar information
• Professional or employment-related information
• Education information, defined as information that is not publicly available personally identifiable information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. Sec. 1232g; 34 C.F.R. Part 99)
• Inferences drawn from any of the information identified in this subdivision to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

Third Parties to Whom Personal Information was Disclosed

In the preceding 12 months, the categories of third parties to whom we disclosed for a business purpose are:

• Service Providers and Contractors who provide services such as website hosting, data analysis, payment processing, order fulfillment, information technology and related infrastructure, customer service, email delivery, auditing, marketing, marketing research activities, credit financing, event management, and real estate management
• Other Service Providers and Contractors who provide services such as payment, banking and communication infrastructure, storage, legal expertise, tax expertise, real estate expertise, appraisal expertise, notaries and auditors, who promote the bank and its financial services and products to customers and other prospective buyers
• Other Service Providers and Contractors who enable customers to conduct transactions online and via mobile devices (at the direction of the customer)
• Other persons or entities to whom we transfer Personal Information as an asset that is part of a merger, acquisition or other transaction such as loan sold/participations in which such other person or entity assumes control of all or part of the business
• Government Agencies as required by laws and regulations
• Other persons or entities with which you may use or direct us to intentionally interact or to which you may use or direct us to intentionally disclose your Personal Information

Business or Commercial Purpose for Disclosing Personal Information

The specific business or commercial purposes for disclosing personal information are:

• To perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services

• To prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted Personal Information

• For short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer's current interaction with the business, provided that the personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer's experience outside the current interaction with the business
• To perform services on behalf of the business for maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business
• To collect or process sensitive personal information where the collection or processing is not for the purpose of inferring characteristics about a consumer

Sensitive Personal Information

We do not use sensitive personal information for purposes other than those specified in Section 7027(m). Consumer’s Rights Under the CCPA

If you are a consumer covered by the CCPA, subject to some exclusions, you have the right to:  

1. Know what personal information we have collected about you, including the following:
1. the categories of Personal Information about you that we collected
2. the categories of sources from which the Personal Information was collected
3. the business or commercial purpose for collecting, selling, or sharing Personal Information about you
4. the categories of third parties to whom we disclosed Personal Information about you
5. the specific pieces of Personal Information we collected about you
2. Request we delete Personal Information we collected from you, unless the CCPA recognizes an exception.
3. Request we correct inaccurate Personal Information that we maintain about you.
4. If we sell or share Personal Information, you have the right to opt out of the sale or sharing of Personal Information. We do not sell or share your Personal Information.
5. If we use or disclose Sensitive Personal Information for reasons other than those set forth in Section 7027(m), you have the right to limit the use or disclosure of Sensitive Personal Information. We do not use or disclose Sensitive Personal Information for reasons other than those set forth in Section 7027(m).
6. Be free from unlawful discrimination for exercising your rights under the CCPA.

How to Exercise Your Rights

If you are a California resident, you may submit a request by:

1. Calling us at 1-888-965-7783;
2. Visiting any of our Business Banking Center locations;
3. By mail: Mission Bank, Attn: Compliance Department, PO Box 317, Bakersfield, CA 93302; or

1. Online: www.missionbank.bank by clicking on the Manage Cookies Preferences

In some instances, we may not be able to honor your request. For example, we will not honor your request if we cannot verify your identity or if we cannot verify that you have the authority to make a request on behalf of another individual. Additionally, we will not honor your request where an exception applies, such as where the disclosure of Personal Information would adversely affect the rights and freedoms of another California resident or where the Personal Information that we maintain about you is not subject to the CCPA's access or deletion rights.

We will advise you in our response if we are not able to honor your request. We will not provide Social Security numbers, driver's license numbers or government-issued identification numbers, financial account numbers, unique biometric data, health care or medical identification numbers, account passwords or security questions and answers, or any specific pieces of information if the disclosure presents the possibility of unauthorized access that could result in identity theft or fraud or unreasonable risk to data or systems and network security.

We will work to process all verified requests within 45 days pursuant to the CCPA. If we need an extension for up to an additional 45 days in order to process your request, we will provide you with an explanation for the delay.

Request Verification

We will acknowledge receipt of your request and advise you how long we expect it will take to respond if we are able to verify your identity. Requests for specific pieces of Personal Information will require additional information to verify your identity.

How We Process Opt-Out Preferences

We do not process “cross-contextual behavioral advertising” and do not “share” this data with any third parties, as such terms are defined by the CCPA.

Authorized Agents

For individuals submitting a request on behalf of another person, we may require proof of authorization and verification of identity directly from the person for whom the request is made.

For a company or organization submitting a request on behalf of another person, we may require proof of authorization from the individual such as Power of Attorney and verification of identity directly from the person for whom the request is made.

Questions or Concerns

You may contact us with questions or concerns about this Policy and our practices by writing us at:

Compliance Department
PO Box 317
Bakersfield, CA 93302

How Long We Retain Personal Information

The length of time that we intend to retain each category of Personal Information will depend on a number of criteria, including (i) the length of time we are required to retain Personal Information in order to comply with applicable legal and regulatory requirements, (ii) the length of time we may need to retain Personal Information in order to accomplish the business or commercial purpose(s) for which such Personal Information is collected, used or disclosed (as indicated in this Policy), and (iii) whether you choose to exercise your right, subject to certain exceptions, to request deletion of your Personal Information.

Changes to This California Consumer Privacy Act Policy

We may change or update this Policy from time to time. When we do, we will post the revised Policy on this page with a new “Last Updated” date.