Last updated and effective date 2022.08

ONLINE PRIVACY POLICY

Welcome to The University of Kentucky Federal Credit Union (“UKFCU”, “we” or “us”) Online Banking Service, which, except for short maintenance periods, permits users to access their Internet-Enabled Accounts 24 hours a day, 7-days a week to obtain account information and perform account transactions.

We do not officially support a specific operating system or a particular browser. To access, view, retain copies of electronic disclosures, and receive communications electronically related to our products and services, you must have access to:

o Google Chrome,

o Mozilla FireFox,

o Safari (Mac Only), or

o Microsoft Edge;

For Mobile Devices, you must have access to:

DEFINITIONS OF CERTAIN TERMS USED IN THIS AGREEMENT.

A. Secure Access Code means a randomly-generated number we use to identify an authorized user of some of our Online Banking Services.

B. Account means a deposit, loan, or other accounts eligible for access through the Services.

C. Business Account means an account that is not established primarily for personal, family, or household purposes.

D. Business Day means any calendar day other than Saturday, Sunday, or Federal holiday observed by UKFCU.

E. Company Representative means an individual authorized by a business to act on behalf of the business in connection with an Online Banking Service or anyone UKFCU reasonably believes, by our security procedures, is so authorized.

F. Internet-Enable means to permit your qualifying account(s) to be used to obtain information and perform transactions Online over the Internet by use of a personal computer, tablet, mobile phone, or other means we authorize.

G. Online means through the Internet by use of a personal computer or other screen-based electronic devices.

H. Online Banking means the Services provided under this policy to your Internet-Enabled accounts.

I. You or your means an individual or business we permit to use Online Banking Services subject to the terms and conditions of this Agreement.

ONLINE BANKING SECURITY. One of the most important security features protecting your Online Banking Account(s) is the unique combination of your user ID, password, and PIN(s). Passwords are the first line of defense against hackers and cybercriminals. Protect your account(s) by creating a unique password, one that you don’t use for any other website that is complex and difficult to guess. Complex passwords contain numbers, symbols, and a mixture of capital and lowercase letters. Avoid using the names of family members or other publicly available information. Memorize your password or keep it in a safe place. If you are an online or mobile banking user, you may change your password at any time from within Online Banking. For your protection, we recommend that you change your password regularly.

You agree to use the Services carefully, to protect and keep your account number(s), password(s), PIN(s), and any other security or access information confidential and secure and not to share it with others, to check your account statement and transactions regularly, to report any errors to us promptly by calling us at (859) 264-4200 or (800) 234-8528. UKFCU does not maintain a record of your password. If you lose or forget your password, you may use the “Forgot Password” link on the website or contact us immediately so that a temporary password will be generated for you. You agree to keep antivirus and anti-malware programs on your computer and/or access device. You agree to keep any programs used to access the Services up-to-date. Failure to do so constitutes a breach of this Agreement and could result in additional liability.

If you suspect that your user ID and password have been lost, stolen, obtained by an unauthorized person, or used without your permission, call us as soon as possible at (859) 264-4200 or (800) 234-8528. You could lose all the money in your account(s) plus the maximum overdraft line of credit or the balance in any other account connected to your account for overdraft protection. If your account is a Consumer Account, you have additional rights under the Electronic Funds Transfer Act. You received a statement of these rights when you opened your account.

Our employees will never contact you by phone or email to request your user ID or password, but if you need assistance with an Online Banking transaction or you have a question about your account, please call us at (859) 264-4200 or (800) 234-8528 to speak with a Member Service Representative. Call us immediately at (859) 264-4200 or (800) 234-8528 if someone calls or emails you to request access information for your account.

We will not be liable for any losses you may sustain if you allow someone else to use your user ID and password to access Online Banking. Once you give this information to someone else, that person will have the authority to perform transactions or obtain information about your accounts. You understand and agree that access to the information and all transactions initiated by the use of your user ID and password will be considered authorized unless we have been notified to cancel your Online Banking service. If your user ID and password are for a Business Account, we will not be liable for your negligence in protecting that information.

In addition to protecting your user ID(s) and password(s), you should protect all your personal information, for example, your social security number, driver’s license number, or Tax Identification Number. When combined with an account number, this information may be used to gain access to your accounts. You should also protect and secure all information stored on your computer or any other device you use to access Online Banking.

We recommend that you maintain and regularly install updates to operating systems and software systems as well as to anti-virus and malware protection on any device you use for Online Banking. You should regularly scan your computer and mobile devices for viruses and malware, and you should have a firewall and intrusion detection/prevention software or services on devices you use to connect to Online Banking.

When you access Online Banking, we will pass a “cookie” to your browser to identify you during the Online Banking session. We do not (and cannot) use cookies to obtain new information about you. A cookie is security data that is passed to a browser by a web server and is then returned by the browser in subsequent transactions to identify the user and encryption information. When you log onto Online Banking, the cookie enables us to process multiple transactions during the session without requiring you to enter your user ID and password for each transaction. Please watch our Online Banking website for news of additional security measures.

You may be able to use Online and Mobile Banking through a compatible mobile device, Internet, and/or network access and may require software updates. You agree that you are solely responsible for these requirements, including any applicable changes, updates, and fees as well as the terms of your agreement with your mobile device and telecommunications provider. UKFCU MAKES NO WARRANTIES OR REPRESENTATIONS OF ANY KIND, EXPRESS, STATUTORY, OR IMPLIED AS TO: (i) THE AVAILABILITY OF TELECOMMUNICATION SERVICES FROM YOUR PROVIDER AND ACCESS TO THE SERVICES AT ANY TIME OR FROM ANY LOCATION; (ii) ANY LOSS, DAMAGE, OR OTHER SECURITY INTRUSION OF THE TELECOMMUNICATION SERVICES; AND (iii) ANY DISCLOSURE OF INFORMATION TO THIRD PARTIES OR FAILURE TO TRANSMIT ANY DATA, COMMUNICATIONS OR SETTINGS CONNECTED WITH THE SERVICES.

DISCLOSURE OF ACCOUNT INFORMATION TO THIRD PARTIES. UKFCU works with one or more online financial service providers under contract to allow you to access account information held by third parties. UKFCU makes no effort to review such account information for any purpose, including but not limited to accuracy, legality, or non-infringement. UKFCU is not responsible for the products and services offered by or through third-party sites.

UKFCU cannot always foresee or anticipate technical or other difficulties, which may fail to obtain data or loss of data, personalization settings, or other service interruptions. UKFCU cannot assume responsibility for the timeliness, accuracy, deletion, non-delivery, or failure to store any user data, communications, or personalization settings. For example, when displayed through the service, third-party account information relating is only as fresh as the time shown, which reflects when the information is obtained from such third-party sites. Such information may be more up-to-date when obtained directly from the relevant sites. Accurate records enable UKFCU to provide the account aggregation service to you. You must provide true, accurate, current, and complete information about your accounts maintained with third parties or on other websites. Access and use of this Service may be interrupted on occasion for no fault of UKFCU, including but not limited to, the malfunction of equipment, periodic updating, maintenance or repair of the Service, or other actions that UKFCU, in its sole discretion, may elect to take. By submitting information, data, passwords, usernames, PINs, other login information, materials, and other content to UKFCU through the Services, you are licensing that content to UKFCU solely for providing the account aggregation service. UKFCU may use and store the content, but only to provide the Service to you. By submitting this content to UKFCU, you represent that you are entitled to submit it to UKFCU for use for this purpose, without any obligation by UKFCU to pay any fees or other limitations.

By using the Services, you expressly authorize UKFCU to access your account information maintained by identified third parties, on your behalf as your agent. When you use the “Add Accounts” feature of the Services, you will be directly connected to the website of the third party you have identified. UKFCU will submit information including usernames and passwords that you provide to log you into the site. You hereby authorize and permit UKFCU to use and store the information submitted by you to the Service (such as account passwords and user names) to accomplish the foregoing and to configure the Service so that it is compatible with the third-party sites for which you submit your information. For purposes of this Agreement and solely to provide the account information to you as part of the Service, you grant UKFCU a limited power of attorney, and appoint UKFCU as your attorney-in-fact and agent, to access third-party sites, retrieve and use your information with the full power and authority to do and perform each thing necessary in connection with such activities, as you could do in person. YOU ACKNOWLEDGE AND AGREE THAT WHEN UKFCU IS ACCESSING AND RETRIEVING ACCOUNT INFORMATION FROM THIRD-PARTY SITES, UKFCU IS ACTING AS YOUR AGENT, AND NOT AS THE AGENT OF OR ON BEHALF OF THE THIRD PARTY. You understand and agree that the account aggregation service is not sponsored or endorsed by any third parties accessible through the Service. To provide many of our Online Banking Services, we must disclose information about your accounts and transactions to third parties who provide services to us or you. We may also disclose your account information to third parties to complete your transactions, in connection with our investigation of any claim you may make, to comply with government agency or court orders, when we have your written permission, and in other circumstances that are disclosed in our Privacy Policy.

Permissions

Function

Example

CAMERA

Allows access to the device’s camera

Mobile Remote Deposit

LOCATION

Allows access to location

Maps

ACCESS TO EXTERNAL STORAGE

Allows access to files/media on the device

Secure Message Attachments

CONTACTS

Allows access to contacts on the device

Person to Person Payments Recipient List

AUDIO

Allows access to the device’s microphone

Chat

PHONE STATE

Allows access to the information about the user’s device for device information

Malware/Anti-phishing for Easy Solutions integration.

IMAGES

Allows access to stored images on the device

Receipt Capture, Mobile Remote Deposit

OUR SECURITY PROCEDURES. You acknowledge that you have reviewed our current online security procedures as reflected in this policy, and you acknowledge that these procedures are commercially reasonable in the context of your business operations. You further acknowledge that we may update these security procedures from time to time and make them available to you. You agree to keep any security information we provide to you, including but not limited to, User IDs, Passwords, and security procedures, confidential.

Data Retention and Deletion Policy. The disposal of records will be conducted in a secure manner and by procedures to ensure there are safeguards against retrieval. To ensure deleted records are unrecoverable, UKFCU will follow these guidelines: