Online Privacy and Security
Effective September 2014
We pledge to use and share any information that we collect from or about our customers in accordance with the U.S. Bank Consumer Privacy Pledge, which provides choices regarding our sharing and use of information. For additional information on this Policy or our privacy practices generally, please feel free to contact us directly with your questions.
1. Types of Information We Collect
We collect two basic types of information through the Services – personal information and anonymous information. We also collect location information in connection with certain of our mobile applications.
"Personal information" refers to information that identifies (whether directly or indirectly) a particular individual, such as information you provide on our forms, surveys, applications or similar online fields. Examples may include your name, postal address, email address, telephone number, Social Security number, date of birth or account information.
"Anonymous information" means information that does not directly or indirectly identify, and cannot reasonably be used to identify, a particular individual. Examples may include information about your Internet browser, information collected through tracking technologies (see "How We Collect Your Information" for additional information regarding our use of tracking technologies), demographic information that you provide to us (e.g., your household income) and aggregated or de-identified data.
"Location information" means information that may be collected by certain mobile applications that identifies your physical location.
We also collect location information in connection with certain of our mobile applications.
2. How We Collect Your Information
We collect personal information from you or about you when you provide this information to us directly. For example, we may obtain personal information when you request information, products or services from us, register on the Website or an Application, respond to surveys, contact customer support or otherwise interact with us. We may also receive information about you from other online and offline sources, such as public databases, social media platforms and other third parties.
In addition, we may collect information about your activity on the Services automatically using tracking technologies, such as cookies, Flash cookies and pixel tags. Definitions for the tracking technologies we use, as well as information regarding how to disable them, are available in the Online Tracking and Advertising section of the Policy.
If you submit any personal information relating to other people to us or to our service providers in connection with the Services, you represent that you have the authority to do so and to permit us to use the information in accordance with this Policy.
3. How We Use Information That We Collect
We may use information that we collect in order to, among other things:
- Provide you with, or evaluate your eligibility for, products and services that you request from us
- Communicate with you about your accounts or transactions with us
- Send you important information regarding the Services, changes to this Policy and/or other similar administrative information
- Allow you to participate in surveys, sweepstakes, contests and similar promotions, and to administer such promotions (note that these promotions may contain additional disclosures regarding our collection and/or use of your information)
- Consistent with local law, required disclosures, and choices and controls that may be available to you:
- Send you offers and promotions for our products and services, or products and services that may be of interest to you;
- Personalize content and experiences on the Services;
- Verify your identity and/or location (or the identity or location of your authorized representative) for security, fraud prevention and other risk control purposes; and
- Provide you with advertising based on your activity on the Services and on third-party websites and applications. For additional information regarding our use of your information for personalization and tracking, please refer to the Online Tracking and Advertising section of the Policy.
- Optimize or improve our products and services
- Detect, investigate and prevent activities that may violate our policies or be illegal
- Comply with our legal and regulatory obligations
- Enforce our terms and conditions and otherwise protect our rights and operations
4. How We Share Information That We Collect
We will not share your personal information outside the U.S. Bancorp family of financial service providers, except under limited circumstances. Please refer to the U.S. Bank Consumer Privacy Pledge for additional information regarding how we may share personal information, as well as the choices you may be able to exercise in connection with such sharing.
5. Online Tracking and Advertising
We and certain trusted service providers operating on our behalf collect information about your activity on the Services using tracking technologies, including:
You can choose to have your device refuse to accept any cookies, and the majority of devices and browsers offer additional privacy settings for cookies. You do this through your browser settings. Each device and each browser is a little different, so look at your device Settings or your browser Help menu to learn the correct way to modify your cookies. If you turn cookies off, you will not have access to many features that make your user experience more efficient and some of the Services will not function properly. Please note that you will need to manage your cookie settings for each device and browser that you use.
- Flash cookies.
We may use local shared objects, sometimes known as Flash cookies, to store your preferences and to assist with online authentication by allowing us to recognize you and your device when you return to the Website or an Application. This permits us to display content based upon what you view on our websites and applications to personalize your use of the Services. Our advertisers and third-party service providers also may use Flash cookies to collect and store information. Flash cookies are different from browser cookies because of the amount and type of data, as well as how data is stored.
Cookie management tools provided by your device or browser will not remove Flash cookies. To learn how to manage privacy and storage settings for Flash cookies, please click here. If you disable Flash cookies, you will not have access to many features that make your user experience more efficient and some of the Services are unlikely to function properly.
Location tracking on mobile devices. Certain applications on mobile devices may transmit information to us about your location when you request information from them. An example includes your physical location when you search for a nearby ATM using your mobile device. We may use that information to improve the products and services we provide to you as well as improving our services generally in your area.
Information collected through tracking technologies is used for many purposes including, for example, to:
- Provide useful features to simplify your experience when you return to the Services
- Deliver relevant content based on your preferences, usage patterns and location
- Monitor and evaluate the use and operation of the Services
- Analyze traffic on the Services and on websites or mobile applications of third parties
We may associate this tracking data with your registration information, in which case we will treat it as personal information.
Occasionally, you may encounter banner advertisements for our products and services on third-party websites and mobile applications. We use third-party advertising service providers to distribute our advertisements on websites and mobile applications where we have paid to advertise. These advertisements may use tracking technologies to capture information such as IP address, browser type and usage information in order to track the effectiveness of our advertising efforts. Such tracking technologies do not capture personal information about you, and our advertising service providers are prohibited from using any information collected except to track advertising effectiveness.
In addition, we use advertising service providers such as Google, Yahoo and MSN to place advertisements for our accounts and services on websites not affiliated with us, and to help us determine which of our advertisements are most likely to be of interest to you using non-personal behavioral information. Advertisements placed by these service providers may use tracking technologies that allow monitoring of your responsiveness to such advertisements. We restrict access and collection of information by advertising service providers for purposes other than assisting us with our advertising efforts.
U.S. Bank participates in the industry Self-Regulatory Program for Online Behavioral Advertising managed by the Digital Advertising Alliance (DAA) (www.aboutads.info/choices). As part of this service, U.S. Bank online advertisements are sometimes delivered with icons that help consumers understand how data about them is being used. Clicking on the icon provides options for consumers who want more control and the ability to opt out of such behavioral (targeted) advertising. Our service providers may use data collected on our website to customize advertisements to you on other sites as you browse the web. You can click on the DAA icon in our targeted advertisements to opt out if you do not want your browsing behavior used for online behavioral advertising purposes. If you prefer not to have non-personal information used for online behavioral advertising purposes, you may also opt-out here. Please note that even if you opt-out, you may still receive online advertising from U.S. Bank. Opting-out from a specific advertising provider means that the ads you do receive will not be based on your preferences or behavior. You may still see targeted pages based on your habits as you navigate www.usbank.com.
In order for behavioral advertising opt-outs to work on your device, your browser must be set to accept cookies. If you delete cookies, buy a new device, access the Services from a different device, log-in under a different screen name or change web browsers, you will need to opt-out again. If your browser has scripting disabled, you do not need to opt-out, as online behavioral advertising technology does not work when scripting is disabled. Please check your browser's security settings to validate whether scripting is active or disabled.
6. Other Information Collected Automatically
Browser or Device Information: Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version, and the name and version of the Services (such as the Application) you are using. We use this information to ensure that the Services function properly.
Application Information: When you download and use an Application, we and our service providers may track and collect usage data, such as the date and time the Application on your device accesses our servers and what information and files have been downloaded to the Application based on your device number.
IP Address: Your IP address is a number that is automatically assigned to your computer by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications and other services. We use IP addresses for purposes such as calculating usage levels, helping diagnose server problems and administering the Services.
7. Linked Websites
In addition, U.S. Bank is not responsible for the information collection, use and disclosure practices (including the data security practices) of other organizations, such as Facebook, Apple, Google, Microsoft, RIM or any other app developer or provider, social media platform provider, operating system provider, wireless service provider or device manufacturer.
8. Data Security and Online Risk-Free Guarantee
Your privacy is very important to U.S. Bank and we are committed to protecting your personal information from unauthorized access or use. We seek to use reasonable organizational, physical, technical and administrative measures to protect personal information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contact Us” section below.
In addition, U.S. Bank protects customers from liability for unauthorized online transactions with our Online Risk-Free Guarantee. The Online Risk-Free Guarantee applies to unauthorized transfers to or from your consumer accounts (those used for personal, family or household reasons) that are initiated via usbank.com, by using our mobile app, or by using our online bill pay service. It pledges that U.S. Bank will cover 100% of any losses from unauthorized online transactions, so long as they are reported to us promptly. Report to us, within 60 days of the first statement date when the unauthorized transactions appeared, and you will be covered.
You have the responsibility to help us protect your accounts by never revealing your user name or password to other individuals. These protections are subject to certain restrictions, and may not apply to commercial and small business accounts.
9. Preventing Identity Theft
In order to help us protect your personal information, it is important that you always keep your account information safe. Never share your personal ID, password or PIN with anyone, under any circumstances.
Note that U.S. Bank will never initiate a request via email for your sensitive information (e.g., Social Security number, personal ID, password, PIN or account number). If you receive an email asking for your sensitive information, you should be suspicious of the request and promptly contact us to report the suspicious activity.
Please be aware, however, that in certain telephone and in-person transactions we may ask for your full Social Security number, account number or other information to verify your identity before conducting the transactions you have requested. For example, we may ask for such information to verify your identity when you place a call to us, when you visit a U.S. Bank branch office or when we call you about a new product or service we believe that you will find valuable. We will never request that you disclose your personal ID, password or PIN under any circumstances, including such telephone or in-person transactions.
Additional information regarding identity theft and the steps you can take to help protect yourself from fraud can be found on the Federal Trade Commission website.
10. Children’s Privacy
We do not use the Services to knowingly solicit personal information from or market to children under the age of thirteen (13) without parental consent. We request that such individuals do not provide personal information through the Services. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should promptly contact us and we will delete such information from our files. For additional information regarding the Children's Online Privacy Protection Act (COPPA), please visit the Federal Trade Commission website.
11. External Aggregation Services
Some third-party companies offer aggregation services that allow you to consolidate your financial account information from a variety of sources, such that you can view all your account information at a single online location. For example, an aggregation service might collect and consolidate your checking and savings account balances at your bank, the value of your stocks and bonds in your brokerage account and your frequent flier mileage information from an airline. In order to do so, the aggregator may request access to personal information - including identification information, account information, personal IDs and passwords - from you for each individual website. You must provide your permission and access to your personal information to allow these services to collect this data.
Please use caution when providing personal information to aggregation services. You should always ensure that the aggregator has appropriate policies and practices in place to protect the privacy and security of any personal information to which the company is gaining access. U.S. Bank is not responsible for the use or disclosure of any personal information accessed by a company or an individual to whom you provide the personal ID and password required to access your accounts through the Services.
If you do elect to provide your personal ID, password or other information about your accounts with us to an aggregation service, you will be unable to contest the validity of any U.S. Bank transaction initiated by the aggregator, whether or not you were aware of the specific transaction. Should you decide to revoke the authority you have given to an aggregation service, you may only do so by contacting us, in which case we may need to block your account until we issue new access codes.
12. Social Media Platforms
13. Updating Your Information
It is very important that you keep the information associated with your account accurate and up-to-date. If you believe that your account information is incomplete, inaccurate or otherwise not current, please contact us and provide us with the appropriate information. Alternatively, you may call or write to us at the telephone numbers or appropriate address for changes listed on your account statements, records, online or other account materials.
If you would like to review, correct, update, suppress or delete personal information that you have previously provided to us, you may contact us.
In your request, please make clear what personal information you would like to have changed, whether you would like to have it suppressed from our database or otherwise let us know what limitations you would like to put on our use of the personal information you have provided to us. For your protection, we may only implement requests with respect to the personal information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.
Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion. There may also be residual information that will remain within our databases and other records, which will not be removed.
14. Retention Period
We will retain your personal information for the period necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.
15. Cross-Border Transfer
The Services are controlled and operated by us from the United States, and are not intended to subject us to the laws or jurisdiction of any state, country or territory other than that of the United States. We may store and process your personal information in any country where we have facilities or in which we engage service providers, and, by using the Services, you consent to the transfer of information to countries outside of your country of residence, including the United States, which may have different data protection rules than those of your country.
From time to time, we may make changes to this Policy in order to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We encourage you to review the Policy periodically to ensure that you understand how we collect, use and share information through the Services. If we do make changes to the Policy, we will also update the "Effective Date" posted at the top of the Policy.
Any changes to the Policy will become effective when the revised Policy is posted on the Website, relevant Application or other U.S. Bank online interface, as applicable. By continuing to use the Services following such changes, you are agreeing to accept the terms of the revised Policy.
17. Contact Us
If you have any questions or comments about this Policy or our privacy practices generally, we encourage you to contact our customer service department by completing our online email form or by calling 800-USBANKS (872-2657). Alternatively, you may use any of the local telephone numbers for your area that are listed in the "Contact Us" section of the Customer Service portion of the Website.
In the event you notice suspicious activity on your account or believe your personal ID, password or PIN has been compromised, please contact us immediately. Suspicious emails may be forwarded to firstname.lastname@example.org or you can call our Fraud Liaison Center at 877-595-6256.