Privacy and Security Policy

We recognize the importance of protecting the privacy of personally-identifying information that may be submitted to us when you visit our website.

The information we receive depends on what you do when you visit our site. This is how we handle the information we learn about you from your visit to our website.

If you visit our site to read or download information on our web pages such as press releases and checking and savings account information:

• We collect and store only the following information about you: name of the domain from which you access the Internet (for example, aol.com, if you are connecting from an America Online account, or a similar domain corresponding to your Internet Service Provider "ISP"); date and time you access our website; pages you may have visited on our site; and Internet address of the website from where you came to visit our website.
  
  
• We use the information we collect to measure the number of visitors to the different pages and sections of our site, and to help us make our site more useful to visitors.

If you visit our website to use interactive banking tools such as financial calculators and self-tests:

• You may be asked for personal information in order to complete the requested analysis or evaluation. This information is NOT retained.
  
  

• You may be asked for personally-identifying information in order to process your e-mail, form or application. This information may be retained by us and our business partners for processing and to facilitate decisions. Information you submit to us is treated no differently than any information you might provide in a written format such as a brochure application, reorder slip to order checks, or a letter.

We will NEVER ask you for personal financial information via any e-mail that we send. If you receive an e-mail supposedly sent by Atwater State Bank requesting such personal financial information - DO NOT RESPOND TO THE REQUEST. Please contact the bank immediately via telephone and retain the e-mail, we may request that you forward it to us for further investigation.

We protect and safeguard the privacy of users of our on-line services, just as we do throughout the rest of our business. We will use personal information to identify you, to communicate with you, and to help us answer your questions.

We will NOT sell personally-identifying information to a third party for the purpose of solicitation or provide personal information to a third party for its own use.

Sometimes we send our customers information about our products and services. If you do not wish to receive this information, or if you believe that your personal information is incorrect please contact us. We will investigate the situation and, if appropriate, update our records.

If you have any questions that are not answered in this section please contact us.

Our website brings together a combination of industry-approved security technologies to protect data for the bank and for you, our customer. It features a VeriSign-issued Digital ID for the bank's Internet Service Provider hosting our website, Secure Sockets Layer (SSL) protocol for data encryption, and a router and firewall to regulate the inflow and outflow of server traffic.

Secure Data Transfer

Once a server session is established on an https secure page, the user and the server are in a secured environment. Because the server has been certified as a 128-bit secure server by VeriSign, data traveling between the user and the server is encrypted with Secure Sockets Layer (SSL) protocol. With SSL, data that travels between the bank and customer is encrypted and can only be decrypted with the public and private key pair. In short, the bank's server issues a public key to the end user's browser and creates a temporary private key. These two keys are the only combination possible for that session. When the session is complete, the keys expire and the whole process starts over when a new end user makes a server session.

Router and Firewall

Secure forms must filter through a router and firewall before they are permitted to reach the server. A router, a piece of hardware, works in conjunction with the firewall, a piece of software, to block and direct traffic coming to the server. The configuration begins by disallowing ALL traffic and then opens holes only when necessary to process acceptable data requests, such as retrieving web pages or sending customer requests to the bank.

Using the above technologies, your secure e-mail and check reorder transactions are secure.

At the Atwater State Bank, the basis of each customer relationship, many of which span generations, is trust. You have chosen to do business with Atwater State Bank, and we are obligated to honor that relationship with great care, beginning with the information you have chosen to share with us. We believe that your privacy should not be compromised. At the same time, we want to offer you the array of financial products and services you need to accomplish your financial goals. We believe we can do both through the privacy policy outlined below.

Notice of Your Financial Privacy Rights

The words "we", "our" and "us" refer to the Atwater State Bank.

The words "you" and "your" refer to the following types of customers:

• All of our consumer customers that have a continuing relationship with us, such as: deposit account, loan account or safe deposit box.
  
  
• Individual retirement account where we act as a custodian.
  
  
• All former customers.
  
  

Nonpublic personal information refers to information about you that we collect in connection with providing a financial product or service to you. Nonpublic personal information does not include information that is available from public sources such as telephone directories or government records.

An affiliate is a company we own or control, a company that owns or controls us, or a company that is owned or controlled by the same company that owns or controls us. Ownership does not mean complete ownership, but means owning enough to have control.

A nonaffiliated third party is a company that is not an affiliate of ours.

Information We Collect About You

We collect nonpublic personal information about you from the following sources: * Information we receive from you on applications or other forms * Information about your transactions with us, our affiliates, or others * Information we receive from a consumer-reporting agency

No Disclosures Outside of Exceptions

We do not disclose any nonpublic personal information about you to anyone, except as authorized by law, or as explained below. We may disclose names and addresses to third parties of companies that perform marketing services on our behalf or to other financial institutions with whom we have joint marketing agreements.

Confidentiality and Security

We restrict access to nonpublic personal information about you to those employees who need to know that information to provide products or services to you.

We maintain physical, electronic and procedural safeguards that comply with federal standards to guard your nonpublic personal information.

Providing Privacy Information to Customers and Responding to Inquiries

At the Atwater State Bank, we value our customer relationships. We want you to understand how we use the information you provide and our commitment to ensuring your personal privacy. If you have any questions about how Atwater State Bank protects your confidential information, please call us.