It shall be the policy of The Bank of Currituck to protect the privacy of our customer's information. We will strive to achieve this goal through the implementation of strong internal controls, ongoing training of all employees, and a strict adherence standard to ensure your privacy. We want you to understand what information we collect and how we use it.

WHAT INFORMATION WE COLLECT

We may collect "nonpublic personal information" about you from the following sources:

• Information we receive from you on applications or other forms;
• Information about your transactions with us or others; and
• Information we receive from a consumer reporting agency.

WHAT INFORMATION WE DISCLOSE

We are permitted under law to disclose nonpublic personal information about you to other third parties in certain circumstances. For example, we may disclose nonpublic personal information about you to third parties to assist us in servicing your loan or account with us, to government entities in response to subpoenas and to credit bureaus. We may disclose all of the information we collect, as described above, to companies that perform marketing services on our behalf. We do not disclose any nonpublic personal information about you to anyone, except as permitted by law. If you decide to close your account(s) or become an inactive customer, we will continue to adhere to the privacy policy and practices described herein.

OUR SECURITY PROCEDURES

We also take steps to safeguard customer information. We restrict access to your personal and account information to those employees who need to know that information to provide products or services to you. We maintain physical, electronic, and procedural safeguards that comply with federal standards to guard your nonpublic personal information.