At Genesee Regional Bank (GRB) we understand the importance of treating customer information in a private and confidential manner — we pride ourselves on taking extra precautions to do so. We've developed the following statement as a culmination of our years of customer experience and have adopted this policy as a testament to our unwavering efforts to safeguard your personal financial information.

GRB will attempt to ensure that customer information is accurate, current, and complete. As a customer of GRB, you have the ability to communicate with the bank if you believe any of the customer information in our records is inaccurate and needs to be changed.

GRB collects customer information for the purpose of conducting its business and to offer products and services it believes may be of interest to its customers. We collect nonpublic personal information about you from the following sources:

• Information we receive from you on applications or other forms
• Information about your transactions with us, our affiliates, or others; and
• Information we receive from third parties such as a consumer reporting agency

GRB restricts access to nonpublic personal information about our customers to those employees who need to know that information to provide products and services to our customers. Physical, electronic, and procedural safeguards are maintained that comply with federal standards to guard your nonpublic personal information.

GRB does not disclose nonpublic personal information about our customers or former customers to anyone, except as permitted by law. The circumstances permitted by law include:

• When we have received prior consent from the consumer
• When necessary to complete a transaction a consumer has initiated, such as a credit or debit card purchase
• To protect GRB from fraud, or in the event of litigation
• With a reputable credit bureau or similar consumer reporting agency
• As authorized or required by law or in response to the judicial process

If GRB contracts with a nonaffiliated third party to perform specific services for GRB which may require us to provide them with access to nonpublic personal information, as permitted by law, GRB requires that the nonaffiliated third party protect the confidentiality of such information & may only use the information for the purpose for which it was originally intended.

If you have any questions concerning our Privacy Policy or wish to exclude your name from product mailings, please call or email Russ Munroe, Compliance/Information Technology Manager, at (585) 419-8147 or ramunroe@grbbank.com.