Community Bank respects the privacy of our customers and is committed to treating information confidentially. One of our fundamental responsibilities is never to compromise the most important asset, your trust.

Definitions:

• Nonpublic personal information means information about you that we collect in connection with providing a financial product or service to you. Nonpublic personal information does not include information that is available form public sources, such as telephone directories or government records. Hereafter, we will use the term "Information" to mean nonpublic personal information as defined in this section.
• An affiliate is a company we own or control, a company that owns or controls us, or a company that is owned or controlled by the same company that owns or controls us. Ownership does not mean complete ownership, but means owning enough to have control.
• A non-affiliated third party is a person we do not employ or a company that is not an affiliate of ours. This is also known as non-affiliated third party, or simply, an "other party".

Collection and Use:

Collection, retention and use of information about you will occur only when we reasonably believe it is necessary to administer our business or provide products, services and other opportunities to you. We collect information about you from the following sources:

• Information you have given us on applications or other forms;
• Information about your transactions with us;
• Information about your transactions with other parties;
• Information from a consumer reporting agency.

Information Usage:

We will:

• protect and administer your records, accounts and funds;
• comply with certain laws and regulations;
• identify and mitigate potential risks or losses to Community Bank;
• understand your financial needs so that we can provide you with quality products and superior services;
• communicate with our customers effectively.

Information Protection:

We do not reveal information about your accounts or personally identifiable data unless:

• you request or authorize it;
• the transaction is initiated by you;
• the information is provided to a reputable credit bureau or similar information reporting agency;
• the disclosure otherwise is lawfully permitted or required.

We do not share our current or previous customers' nonpublic information with affiliates or nonaffiliated third parties except in situations listed above.

Community Bank has established procedures to ensure the accuracy of customers' financial information and to verify current and complete data in accordance with reasonable commercial standards. It is our policy to investigate any requests and to correct any inaccurate or incomplete information in a timely manner.

Employee Access & Training:

Employees' access to personally identifiable customer information is limited to those with a business reason. All are educated on the importance of maintaining confidentiality through our privacy policy. Employees who violate the privacy policy will be subject to disciplinary measures.

Keeping You Informed:

As required by the Gramm Leach Bliley Act, we will provide a privacy statement to all customers at the beginning of their banking relationship with us. Customers who have questions about the privacy of their information should call our Compliance Officer at (505) 946-3500.