NexTier Bank Privacy Policy

Q: What information does NexTier Bank collect under GLBA?

Under the Gramm-Leach-Bliley Act (GLBA), NexTier Bank collects nonpublic personal information to open and service accounts including name, address, Social Security number, date of birth, employment information, account balances, transaction history, payment history, and credit information. Information comes from applications and forms, transactions with NexTier Bank and its affiliates, and consumer reporting agencies. GLBA requires financial institutions to provide a privacy notice describing information practices and to maintain administrative, technical, and physical safeguards protecting customer information.

Q: How can I opt out of NexTier Bank information sharing?

Under GLBA and the Fair Credit Reporting Act (FCRA), customers have the right to opt out of certain information sharing between NexTier Bank and nonaffiliated third parties, and opt out of sharing certain creditworthiness information with NexTier affiliates for marketing purposes. Submit opt-out requests in writing to NexTier Bank, ATTN: Privacy Opt-Out, or through the opt-out form inside online banking. Opt-outs apply prospectively and do not affect information already shared. Opt-out requests are processed within 30 days of receipt.

Q: What rights do California residents have under CCPA?

The California Consumer Privacy Act (CCPA) provides California residents with specific rights regarding personal information. CCPA rights include the right to know what personal information is collected, the right to request deletion of personal information, the right to opt out of the sale of personal information (NexTier Bank does not sell customer personal information), and the right to non-discriminatory treatment for exercising CCPA rights. Many GLBA-covered activities are exempt from CCPA, but certain categories of information still fall within CCPA scope. California residents can submit CCPA requests through the contact information at the end of this privacy policy.

NexTier Bank is committed to protecting the privacy and security of customer information. This Privacy Policy describes how NexTier Bank collects, uses, shares, and protects nonpublic personal information under the Gramm-Leach-Bliley Act (GLBA), the Fair Credit Reporting Act (FCRA), the California Consumer Privacy Act (CCPA), and other applicable federal and state privacy laws. This policy applies to all NexTier Bank deposit accounts, loans, digital banking services including online banking and the NexTier mobile app, and website interactions at nextierbamk.co.com.

Last updated: April 2026. NexTier Bank reviews and updates this Privacy Policy at least annually and notifies customers of material changes through online banking notices, statement inserts, and direct mail as required by law. Questions about this Privacy Policy can be directed to NexTier Bank customer service at +1-800-562-6262 or by writing to NexTier Bank, ATTN: Privacy Officer.

Security Practices Contact Privacy Officer

NexTier Bank privacy policy and GLBA privacy notice coverage for customer data collection, sharing, and opt-out rights

AI Summary — NexTier Bank Privacy Policy

GLBA-compliant privacy notice covering collection, use, sharing, and safeguarding of nonpublic personal information
Information sources: applications, transactions, consumer reporting agencies, and affiliates
Sharing permitted with affiliates, service providers, and as legally required; opt-out rights for certain categories
NexTier Bank does not sell customer personal information to third parties for marketing
FCRA-required disclosures on sharing creditworthiness information with affiliates; opt-out available
CCPA rights extended to California residents including access, deletion, and non-discrimination
Cookies and web beacons used for site functionality, security, and analytics; can be managed in browser settings

Information from You

We collect information directly from you when you complete applications for accounts or loans, submit forms through online banking or the mobile app, contact customer service, or interact with the website. This includes your name, address, Social Security number, date of birth, phone number, email address, employment information, income and assets, and identity verification answers. For digital banking, we also collect username, password (stored as a one-way cryptographic hash), security question answers, and multi-factor authentication contact methods.

Information from Transactions

We collect information from transactions you conduct with NexTier Bank and its affiliates — account balances, deposit and withdrawal history, bill pay payments, transfers, wire transfers, loan payment history, debit card purchases, and check images. We also collect information from consumer reporting agencies (credit bureaus, ChexSystems, LexisNexis) to verify identity, evaluate credit applications, and comply with anti-money-laundering requirements under the Bank Secrecy Act.

Information from Website and App Use

When you visit our website or use the NexTier mobile app, we automatically collect device information including IP address, browser type, operating system, device identifiers, pages viewed, links clicked, and session timestamps. We use cookies, web beacons, and similar tracking technologies to support login sessions, remember preferences, protect against fraud, analyze site performance, and deliver relevant content. You can manage cookie preferences through your browser settings or mobile device settings.

Information from Affiliates and Service Providers

We may receive additional information about you from NexTier Bank affiliates (other financial services companies under common ownership or control) and service providers (vendors that perform services on behalf of NexTier Bank, such as payment processors, core banking platforms, fraud monitoring services, and cloud infrastructure providers). Service providers are contractually obligated to protect customer information and use it only for permitted purposes. Safeguards meet OCC supervisory standards.

Account Servicing

Process transactions, post deposits and withdrawals, maintain accurate balances, generate statements, pay bills, send wires, and otherwise service your accounts as described in your deposit account disclosure and loan documents.

Legal and Regulatory

Comply with federal and state laws including the Bank Secrecy Act, USA PATRIOT Act, Office of Foreign Assets Control sanctions, Internal Revenue Service tax reporting, Currency Transaction Report and Suspicious Activity Report filings.

Fraud Prevention and Security

Monitor transactions for fraud patterns, authenticate login attempts, investigate suspicious activity, prevent identity theft, and protect NexTier Bank and customers from financial crimes. Supports FFIEC-aligned layered security.

Affiliates

Share information with NexTier Bank affiliates for joint marketing of financial products, customer service coordination, and operational efficiency. Certain creditworthiness information sharing requires FCRA opt-out rights.

Service Providers

Share information with vendors providing services on NexTier Bank's behalf — payment processing, core banking technology, fraud analytics, marketing analytics, and IT infrastructure. Providers contractually limited to permitted uses.

Legally Required Disclosures

Respond to subpoenas, court orders, regulatory examinations by the OCC, FDIC, CFPB, and other lawful government requests.

NexTier Bank does not sell customer personal information to third parties for their marketing purposes.

GLBA Opt-Out Rights

Under the Gramm-Leach-Bliley Act, you have the right to opt out of certain information sharing between NexTier Bank and nonaffiliated third parties not acting as service providers to the bank. The annual GLBA privacy notice details specific categories where opt-out is available. Submit opt-out requests in writing or through online banking. Opt-outs apply prospectively and do not affect information already shared before the request. Processing completes within 30 days.

FCRA Affiliate Sharing Opt-Out

Under the Fair Credit Reporting Act, you have the right to opt out of NexTier Bank sharing certain creditworthiness information with affiliates for use in marketing solicitations. This includes sharing of consumer report data for pre-approved offers. Opt-out elections remain in effect until revoked. Submit FCRA opt-out requests in writing to NexTier Bank, ATTN: Privacy Opt-Out, or electronically through the opt-out form in online banking.

California Consumer Privacy Act (CCPA)

California residents have additional rights under CCPA: the right to know what personal information is collected and for what purposes, the right to request deletion of personal information (subject to legal exemptions), the right to opt out of the sale of personal information (NexTier Bank does not sell customer personal information), and the right to non-discriminatory treatment for exercising these rights. Many financial products fall under GLBA exemptions to CCPA, but certain interactions remain in CCPA scope. California residents submit requests through the contact information at the end of this policy.

Account Information Access and Correction

You can access your account information at any time through online banking, the NexTier mobile app, or at any branch. Requests to correct inaccurate account information can be submitted through secure messaging or by calling +1-800-562-6262. Corrections to consumer report information (ChexSystems, credit bureaus) should be submitted directly to the reporting agency under FCRA dispute procedures. NexTier Bank assists in investigating and correcting information we furnished to agencies.

Cookies and Tracking Technologies

NexTier Bank uses cookies and similar technologies (web beacons, pixels, local storage) for four primary purposes. Session cookies keep you logged in during online banking sessions. Security cookies detect fraud, protect against session hijacking, and identify trusted devices for MFA exemption. Preference cookies remember language settings, dark mode, and accessibility choices. Analytics cookies measure site performance and usage patterns — no personally-identifying data is shared with analytics providers. You can manage cookie preferences through your browser's settings; however, disabling required cookies will prevent online banking login.

Data Security Safeguards

NexTier Bank maintains administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of customer information. Administrative safeguards include employee training, role-based access controls, vendor due diligence, and incident response procedures. Technical safeguards include 256-bit TLS encryption, firewalls, intrusion detection, multi-factor authentication, and encrypted data at rest. Physical safeguards protect server infrastructure, branch facilities, and paper records. Safeguards are designed to meet GLBA Safeguards Rule and OCC supervisory guidance. Learn more at NexTier Bank Security. FDIC details at FDIC.gov.

Children's Privacy (COPPA)

NexTier Bank services are not directed to children under age 13. We do not knowingly collect personal information from children under 13 through the website or mobile app. Minor custodial accounts for children under 18 require a parent or guardian co-signer at a branch, with the parent or guardian assuming responsibility for all account activity and information practices. If we learn we have collected information from a child under 13 without parental consent, we will delete it promptly. Parents can contact NexTier Bank to request deletion.

Data Retention

NexTier Bank retains customer information as required by federal and state law — generally seven years after account closure for transaction records, five years for most correspondence, and longer periods for tax documents, legal disputes, and records subject to ongoing regulatory examination. Retained information remains protected under the same safeguards as active accounts. Information retained beyond the minimum legal requirement is reviewed periodically for deletion. Consumer protections: CFPB.

Privacy Policy Changes and Contact Information

NexTier Bank reviews and updates this Privacy Policy at least annually. Material changes are communicated to customers through online banking notices, statement inserts, and direct mail at least 30 days before the change takes effect, as required by law. Continued use of NexTier Bank products and services after a privacy policy update constitutes acceptance of the updated policy. To contact NexTier Bank regarding this Privacy Policy:

Phone and Online

Call NexTier Bank customer service at +1-800-562-6262 Monday-Friday 8 AM-6 PM ET, Saturday 8:30 AM-1 PM ET. Submit privacy requests through secure messaging inside online banking or the in-app chat inside the NexTier mobile app.

Mail

Write to: NexTier Bank, ATTN: Privacy Officer. Include your full name, account number (if applicable), mailing address, and a description of your request. Opt-out requests process within 30 days of receipt. Formal complaints route through the complaint procedure described in the deposit account disclosure.

What information does NexTier Bank collect under GLBA?

Name, address, SSN, DOB, employment, account balances, transaction history, payment history, and credit information. Sources: applications, transactions with NexTier and its affiliates, and consumer reporting agencies. GLBA requires a privacy notice and safeguards.

How can I opt out of NexTier Bank information sharing?

Submit written opt-out requests to NexTier Bank, ATTN: Privacy Opt-Out, or use the opt-out form inside online banking. GLBA and FCRA cover different sharing categories. Opt-outs apply prospectively, processed within 30 days.

What rights do California residents have under CCPA?

Right to know what personal information is collected, request deletion, opt out of sale (NexTier does not sell customer personal info), and non-discrimination. Many GLBA activities are CCPA-exempt. Submit requests through the contact information in this policy.