Thank you for visiting ENB’s website. We respect the privacy of our customers as well as visitors to our site. Ephrata National Bank will not collect personal information about you when visiting our website unless you volunteer information when expressing interest in a product or service. This information may be used internally to handle your request but will not be disseminated or sold to other organizations. Our employees are trained and expected to protect the confidentiality and privacy of customer information regardless of how that information is obtained. We will gather and store certain information about your visit automatically. This information may include date and time of site access, what pages were visited, servers, and links used. We will use the information gathered to assist us in making our site more user-friendly and accessible to visitors. Our website may have links to other organizations or federal agencies. Once you link to another site, you are subject to the privacy policy of the new site. We reserve the right to change this policy at any time by posting a new privacy policy.

Warranties & Disclaimers

Permitted Use

Any person is hereby authorized to view the information available from this website for informational purposes only. No part of the information on this site can be redistributed, copied or reproduced without prior written consent of Ephrata National Bank, and the copyright owner of the specific information at issue.

Disclaimer of Warranties

The information contained or accessed is provided “as is” without warranty of any kind, either expressed or implied, including, but not limited to, the implied warranties of merchantability, fitness for a particular purpose, non-infringement, or error-free or uninterrupted service. This publication could include technical inaccuracies or typographical errors. Changes may be periodically made to the information herein.

Privacy Disclosure

Rev. June 2022**

FACTS	WHAT DOES EPHRATA NATIONAL BANK DO WITH YOUR PERSONAL INFORMATION?
Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share and protect your personal information. Please read this notice carefully to understand what we do.
What?	The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security number Payment history and transaction or loss history Credit history and account transactions When you are no longer our customer, we continue to share your information as described in this notice.
How?	All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons EPHRATA NATIONAL BANK chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information	Does EPHRATA NATIONAL BANK share?	Can you limit this sharing?
For our everyday business purposes - such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus	Yes	No
For our marketing purposes - to offer our products and services to you	Yes	No
For joint marketing with other financial companies	Yes	No
For our affiliates' everyday business purposes - information about your transactions and experiences	Yes	No
For our affiliates' everyday business purposes - information about your creditworthiness	Yes	Yes
For our affiliates to market to you	Yes	Yes
For nonaffiliates to market to you	No	We don't share

To limit our sharing

Call Toll-free 877.773.6605 Visit us online: https://www.epnb.com/privacy-policy/ Visit a Financial Center near you. Please note: If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our customer, we continue to share your information as described in this notice. However, you can contact us at any time to limit our sharing.

Questions?

Call 877.773.6605 or go to www.epnb.com/contact-enb

Who We Are
Who is providing this notice?	Ephrata National Bank means the following institutions: ENB Insurance LLC and Ephrata National Bank
What We Do
How does EPHRATA NATIONAL BANK protect my personal information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. We also maintain other physical, electronic and procedural safeguards to protect this information and we limit access to information to those employees for whom access is appropriate.
How does EPHRATA NATIONAL BANK collect my personal information?	We collect your personal information, for example, when you Open an account Provide account information Apply for a loan Apply for insurance We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Why can't I limit all sharing?	Federal law gives you the right to limit only sharing for affiliates' everyday business purposes - information about your creditworthiness affiliates from using your information to market to you sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law.
What happens when I limit sharing for an account I hold jointly with someone else?	Your choices will apply to everyone on your account — unless you tell us otherwise.
Definitions
Affiliates	Companies related by common ownership or control. They can be financial and non-financial companies. Our affiliates include: EPHRATA NATIONAL BANK’s affiliates include its non-bank subsidiaries, including ENB Insurance, LLC.
Nonaffiliates	Companies not related by common ownership or control. They can be financial and non-financial companies. EPHRATA NATIONAL BANK does not share with nonaffiliates so they can market to you.
Joint Marketing	A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Our joint marketing partner(s) include securities broker-dealers, credit card companies, insurance companies, and financial services companies.
Other Important Information
Special Notice For California Residents ** (November 2020) We will not share personal information with nonaffiliates either for them to market to you or for joint marketing - without your authorization. We will also limit our sharing of personal information about you with our affiliates to comply with all California privacy laws that apply to us.CALIFORNIA CONSUMER PRIVACY ACT DISCLOSURE Pursuant to the California Consumer Privacy Act (CCPA), California residents are provided with specific rights regarding the personal information that is collected about them. As a California resident, you have the right to request the personal information we collect about you, the right to request the personal information we sell or disclose for a business purpose about you, the right to opt-out of the sale of your personal information, the right to request we delete the personal information we collected about you, and the right to be free of discrimination for exercising these rights. Personal Information We Collect. We collect the following personal information: • Identifiers, such as name, alias and government issued identifier such as Social Security Number, Driver’s License Number, and Passport Number; • Personal Information, such as contact information (e.g. address, telephone number, email address); • Personal financial information, such as payroll stubs, personal financial statement, tax returns, records of personal property, real estate owned and business interests. • Characteristics of protected classifications such as marital status and sex; • Commercial information such as transaction information and purchase history; • Biometric information, such as fingerprints and voiceprints; • Internet or Network activity information, such as browsing history and interactions with our Bank website; • Geolocation data, such as device location and Internet Protocol (IP) address; • Audio and visual recordings, such as recorded call information and Branch Office/ATM video camera recordings; • Professional or employment-related information, such as work history, professional designations and prior employer; • Education information, such as student records; and • Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences and characteristics. We obtain this personal information from the following sources: • Information you provide to us when applying for a loan or opening a deposit account, or any related services; • Information from service providers such as third-party identification services, consumer data resellers and other third parties • Information received from credit reporting agencies; • Information from search engines, including social media, mobile app activity and website • Information from Corporate Customers about individuals associated with those Corporate Customers, such as their employees and owners; • Information from Customer directed third parties, such as CPAs and attorneys. • Job Application with us, and; • Government entitiesPersonal Information We Sell. We do not sell personal information. Personal Information We Disclose for Business or Commercial Purpose. We disclose the following personal information for a business or commercial purpose: • Identifiers, such as name, alias and government issued identifier such as Social Security Number, Driver’s License Number, and Passport Number; • Personal Information, such as contact information (e.g. address, telephone number, email address); • Personal financial information, such as payroll stubs, personal financial statement, tax returns, records of personal property, real estate owned and business interests. • Characteristics of protected classifications such as marital status and sex; • Commercial information such as transaction information and purchase history; • Biometric information, such as fingerprints and voiceprints; • Internet or Network activity information, such as browsing history and interactions with our Bank website; • Geolocation data, such as device location and Internet Protocol (IP) address; • Audio and visual recordings, such as recorded call information and Branch Office/ATM video camera recordings; • Professional or employment-related information, such as work history, professional designations and prior employer; • Education information, such as student records; and • Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences and characteristics. We disclose personal information only with those vendors providing the servicing of your products and services, and we require them not to sell, share, or use your information for any other purpose. The categories of users with whom we share this information include: • Vendors and Service Providers who provide services, such as data analysis, payment processing, information technology and related infrastructure, customer service, email delivery, auditing, credit card issuance, marketing and marketing research. • Third Parties who provide services such as investment products, credit cards, payment, banking and communication infrastructure, storage, legal expertise, auditors. • To approve or decline loan or deposit account applications; • To consider your job application for hiring; • To provide institution risk analysis and risk mitigation from consultants and auditing firms. • To detect security incidents. • Government Agencies, as required by laws and regulations. Personal Information We Collected Within the Past 12 Months We must disclose the personal information we have collected, sold, or disclosed for a business or commercial purpose within the past 12 months. Personal Information We Collected. We collected the following personal information: • Identifiers, such as name, alias and government issued identifier such as Social Security Number, Driver’s License Number, and Passport Number; • Personal Information, such as contact information (e.g. address, telephone number, email address); • Personal financial information, such as payroll stubs, personal financial statement, tax returns, records of personal property, real estate owned and business interests. • Characteristics of protected classifications such as marital status and sex; • Commercial information such as transaction information and purchase history; • Biometric information, such as fingerprints and voiceprints; • Internet or Network activity information, such as browsing history and interactions with our Bank website; • Geolocation data, such as device location and Internet Protocol (IP) address; • Audio and visual recordings, such as recorded call information and Branch Office/ATM video camera recordings; • Professional or employment-related information, such as work history, professional designations and prior employer; • Education information, such as student records; and • Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences and characteristics. Personal Information We Sold. We did not sell personal information in the past 12 months. Personal Information We Disclosed for Business or Commercial Purpose. We disclosed the following personal information for a business or commercial purpose: • Identifiers, such as name, alias and government issued identifier such as Social Security Number, Driver’s License Number, and Passport Number; • Personal Information, such as contact information (e.g. address, telephone number, email address); • Personal financial information, such as payroll stubs, personal financial statement, tax returns, records of personal property, real estate owned and business interests. • Characteristics of protected classifications such as marital status and sex; • Commercial information such as transaction information and purchase history; • Biometric information, such as fingerprints and voiceprints; • Internet or Network activity information, such as browsing history and interactions with our Bank website; • Geolocation data, such as device location and Internet Protocol (IP) address; • Audio and visual recordings, such as recorded call information and Branch Office/ATM video camera recordings; • Professional or employment-related information, such as work history, professional designations and prior employer; • Education information, such as student records; and • Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences and characteristics. We did not share your personal information except as is permitted by law. We disclosed personal information only with those vendors providing the servicing of the products and services you selected, and we require them not to sell, share, or use your information for any other purpose. The categories of users with whom we have shared this information include: • Vendors and Service Providers who provide services, such as data analysis, payment processing, information technology and related infrastructure, customer service, email delivery, auditing, credit card issuance, marketing and marketing research. • Third Parties who provide services such as investment products, credit cards, payment, banking and communication infrastructure, storage, legal expertise, auditors. • To approve or decline loan or deposit account applications; • To consider your job application for hiring; • To provide institution risk analysis and risk mitigation from consultants and auditing firms. • To detect security incidents. • Government Agencies, as required by laws and regulations. Your Rights Regarding Your Personal Information Collection of Personal Information. You have the right to request the following information about the personal information that we have collected about you: The categories of personal information we collected about you. The categories of sources for the personal information we collected about you. The purpose for collecting your personal information. Disclosure of Personal Information. You have the right to request the following information about the personal information that we have disclosed for a business purpose about you: The categories of personal information we collected about you. (above) The categories of third parties with whom we disclosed your personal information. The categories of personal information we disclosed about you and the purpose for disclosure, if applicable. Deletion of Personal Information. You have the right to request us to delete any personal information that we have collected about you. Subject to certain exceptions, we will delete the personal information that we have collected about you from our records, and we will direct any service provider to whom this information has been disclosed to delete your personal information from their records as applicable. Non-Discrimination. We will not discriminate against you for exercising any of these rights and we will not do any of the following if you exercise any of your rights listed above unless permitted by the CCPA: Deny you goods or services; Charge you different prices or rates for goods or services, including through the use of discounts or other benefits or imposed penalties; Provide you a different level or quality of goods or services; or Suggest that you may receive a different price or rate for goods or services of a different level or quality. How to Submit a Request Regarding Your Personal Information To exercise your rights set forth above, you can submit a verifiable request to us by any of the following methods: Calling us at: (877) 773-6605 Emailing us at: ComplianceDepartment@epnb.com Visiting us online: epnb.com/contact-enb/ Your request to us must be a verifiable request, meaning we must be able to verify your identity and that the personal information that we collected relates to you. We will respond with 45 days once we receive your request. If we need more time, we will inform you of the reason for the delay during this time period and may extend the time to respond up to an additional 45 days. We will provide a written response free of charge to you, and we will deliver the response to your account or, if you choose, by mail or electronically. Special Notice for State Residents For Vermont Customers. We will not share personal information with nonaffiliates either for them to market to you or for joint marketing without your authorization, and we will not share personal information with affiliates about your creditworthiness without your authorization. For Alaska, Illinois, Maryland and North Dakota Customers. We will not share personal information with nonaffiliates either for them to market to you or for joint marketing - without your authorization. For Massachusetts, Mississippi and New Jersey Customers. We will not share personal information from deposit or share relationship with nonaffiliates either for them to market to you or for joint marketing - without your authorization.