Northgate Bank Privacy Notice

Rev. NB-PRIV-2026-02 · Effective 1 July 2026

Northgate Bank, N.A. ("Northgate", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you entrust to us. This Privacy Notice explains what information we collect about you, how we use and share it, and the choices you have. It applies to consumers who obtain or inquire about financial products and services from Northgate for personal, family, or household purposes. This revision updates our data retention period, clarifies our use of service providers, and describes how we use automated decision-making.

1. Scope of This Notice

This Notice applies to the personal information Northgate collects through its branches, contact centers, websites, mobile applications, ATMs, and other channels through which you interact with us. It covers applicants, customers, former customers, and, where applicable, the beneficial owners and authorized signers on an account. Separate notices may apply to our commercial banking, wealth management, and mortgage servicing relationships, and those notices will control where they conflict with this one.

2. Information We Collect

We collect personal information about you from several sources, including information you provide, information generated by your use of our products, and information obtained from third parties such as credit bureaus and identity-verification services. The categories we collect include:

• Identifiers, such as name, address, telephone number, email address, date of birth, and government identification numbers;
• Financial information, such as account balances, transaction history, payment card details, and income;
• Application information, such as employment details and information used to assess eligibility;
• Device and usage information, such as IP address, device identifiers, and how you navigate our digital channels;
• Interaction records, such as call recordings, chat transcripts, and correspondence with our representatives.

We do not knowingly collect more information than is reasonably necessary to provide our products and services and to meet our legal obligations.

3. How We Use Your Information

Northgate uses your personal information to operate, maintain, and improve our products and services. Specifically, we use it to open and service accounts, process transactions, verify your identity, evaluate applications for credit, detect and prevent fraud and financial crime, comply with legal and regulatory requirements, and communicate with you about your accounts and relevant offers. Where required by law, we rely on your consent, and you may withdraw that consent at any time by contacting us.

4. How We Share Your Information

Federal law gives consumers the right to limit some but not all sharing of personal information. The table below summarizes the reasons Northgate can share your personal information, whether we share for that reason, and whether you can limit the sharing.

Reasons we can share your personal information	Does Northgate share?	Can you limit this sharing?
For everyday business purposes — to process transactions, maintain accounts, respond to court orders, or report to credit bureaus	Yes	No
For our marketing purposes — to offer our products and services to you	Yes	No
With service providers that perform services on our behalf under written contract	Yes	No
For joint marketing with other financial companies	Yes	No
For our affiliates' everyday business purposes — information about your transactions and experiences	Yes	No
For our affiliates' everyday business purposes — information about your creditworthiness	Yes	Yes
For nonaffiliates to market to you	No	We don't share

To limit sharing where permitted, you may call us at the number on the back of your card or update your preferences in online banking. Your choice will remain in effect until you change it.

5. Our Security Practices

We maintain administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, use, or disclosure. These include encryption of sensitive data, access controls, continuous monitoring of our systems, employee training, and independent security assessments. While we work hard to protect your information, no system can be guaranteed to be completely secure, and you also play an important role by safeguarding your credentials and notifying us promptly of any suspected unauthorized activity.

6. Data Retention

We retain your personal information for as long as you maintain a relationship with us and thereafter for the period necessary to comply with our legal, regulatory, tax, accounting, and recordkeeping obligations, to resolve disputes, and to enforce our agreements. Retention periods vary by product and record type; for most consumer account records, we retain information for at least seven years following the closure of an account, and longer where a specific legal or regulatory requirement applies.

7. Your Privacy Choices and Rights

Depending on your state of residence, you may have rights to access, correct, or delete certain personal information, to obtain a copy of it, and to opt out of certain uses. Northgate honors these rights consistent with applicable financial-privacy laws, which in some cases exempt information governed by the Gramm-Leach-Bliley Act. You will not be discriminated against for exercising your privacy rights. To submit a request, contact us using the details in Section 12; we will verify your identity before acting on your request.

8. Automated Decision-Making

We use automated tools and models to help us make certain decisions efficiently, including to detect potentially fraudulent transactions, to score applications for credit or account opening, and to personalize the offers you see. These automated processes may use the categories of information described in Section 2. Where an automated decision produces a legal or similarly significant effect, such as declining a credit application, you may request a review by a Northgate representative and provide additional information for us to consider. We periodically test these models for accuracy and for unlawful bias.

9. Online Tracking and Cookies

Our websites and mobile applications use cookies and similar technologies to keep you signed in, remember your preferences, measure the performance of our digital channels, and support fraud prevention. You can manage non-essential cookies through the preference controls on our website or through your browser settings. Some cookies are strictly necessary for our services to function and cannot be disabled. We respond to recognized browser opt-out preference signals where required by law.

10. Children's Privacy

Our products and services are intended for adults. We do not knowingly collect personal information from children under 13 except in connection with an account opened and controlled by a parent or guardian, such as a custodial or youth savings account. If we learn that we have collected information from a child in a manner not permitted by law, we will delete it.

11. Changes to This Notice

We may revise this Privacy Notice from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you as required by law, such as by posting the updated Notice on our website with a new effective date or by providing an annual notice. Your continued use of our products after an update takes effect constitutes acknowledgment of the revised Notice.

12. How to Contact Us

If you have questions about this Privacy Notice or wish to exercise your privacy choices, you can call Northgate Bank Customer Care at the number printed on your statement, send a secure message through online banking, or write to us at Northgate Bank Privacy Office, P.O. Box 4100, Northgate. We will respond to your inquiry within the timeframe required by applicable law.