Privacy & Security

Rev. 01-01-15

Notice of Our Privacy Policy

FACTS	WHAT DOES TEXAS GULF BANK N.A. DO WITH YOUR PERSONAL INFORMATION?
Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some, but not all, sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.
What?	The types of personal information we collect and share depend on the product or service you have with us. This information can include: • Social Security number and Income • Payment history and Account balances • Credit history and Credit Scores When you are no longer our customer, we continue to share your information as described in this notice.
How?	All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons TEXAS GULF BANK N.A. chooses to share; and whether you can limit this sharing.

Details on the Sharing of Personal Information

Reasons we can share your peronal information	Does TEXAS GULF BANK N.A. share?	Can you limit this sharing?
For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus.	Yes	No
For our marketing purposes – To offer our products and services to you	Yes	No
For joint marketing with other financial companies	Yes	No
For our affiliates’ everyday business purposes – Information about your transactions and experiences	No	We don't share
For our affiliates’ everyday business purposes – Information about your creditworthiness	No	We don't share
For nonaffiliates to market to you	No	We don't share

Questions? Call 800-467-7216 or go to www.texasgulfbank.com

Who we are

Who is providing this notice?

Main Office-
TEXAS GULF BANK N.A.
1626 S. Voss Rd.
Houston, TX 77057

What we do

How does TEXAS GULF BANK N.A. protect my personal information?	To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.
How does TEXAS GULF BANK N.A. collect my personal information?	We collect your personal information, for example, when you • Open an account or Deposit Money • Pay your bills or Apply for a loan • Show your driver’s license We also collect your personal information from others such as credit bureaus, affiliates, or other companies.
Why can’t I limit all sharing?	Federal law gives you the right to limit only • Sharing for affiliates’ everyday business purposes – information about your creditworthiness • Affiliates from using your information to market to you • Sharing for nonaffiliates to market to you State laws and individual companies may give you additional rights to limit sharing.

Definitions

Affiliates	Companies related by common ownership or control. They can be financial and nonfinancial companies. • Texas Gulf Bank N.A. does not share with our affiliates.
Nonaffiliates	Companies not related by common ownership or control. They can be financial and nonfinancial companies. • Texas Gulf Bank N.A. does not share with nonaffiliates so they can market to you.
Joint Marketing	A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Our joint marketing partners include: • TIB, The Independent Bankers Bank, a credit card company.

Internet Banking Security

The security of Texas Gulf Bank Online Banking (TGB Online and TGB Mobile) is addressed at three levels. First, security measures are in place to help prevent unauthorized users from attempting to login to the online banking section of the bank’s Web site (Individual Security). The second area is the security of the customer information as it is sent from the customer’s PC to the Web server (Browser Security). Finally, security measures are in place to help prevent intrusion into the environment in which the Internet Banking server and customer information database reside (Provider Security).

Individual Security

Texas Gulf Bank utilizes complex Password Requirements including numeric, alpha (both upper and lower case), and special characters of at least 8 but no more than 24 characters. You must change your password annually and cannot re-use your previous four passwords.
Online banking behavior of users is monitored. The need to verify your identity is triggered when you do things like log into online banking from an unusual location or complete a transaction that is either outside the norm or exceeds a certain dollar amount. Multi-Factor Authentication in the form of Security Questions and Phone Verification is used to safeguard your login information and account access from potential hackers.
To provide an extra level of anti-phishing security, you will be prompted to pick a Watermark (picture) from a library of images during your initial login. After selecting the image and upon subsequent logins, the Watermark will then be displayed in the lower-left corner of all online banking pages. This is to ensure the user is not on an incorrect URL or website.
Email, Login, and Text Alerts can be set to monitor specific transactions outside your regular banking activity such as Wires or Electronic transfers. You can also set alerts to notify you if balances fall below a specified amount or to let you know when a specific check clears your account. (Note: Depending on your mobile carrier, you may be charged web access rates, standard text messaging rates and/or data transfer fees. Check with your wireless service provider for details on your specific plan.)
Touch ID®, Face ID®, & Android Fingerprint* are features on the TGB Mobile App that allow eligible devices to use biometric authentication to login in lieu of the username and password.
Secure Tokens through Symantec™ VIP (Validation and IP Protection Service)** provide a one-time-use password entry into online banking accounts. While typically used for Treasury Service users, it is also available to consumers upon request. Each user (or Treasury Service user) is issued a secure token, which is registered to the user via Online Banking ID. Secure Token authentication is only required at login (following entry of the ID and Password).
For Companies using our Treasury Services Online Banking Services, we strongly recommend the use of the Dual Control Security feature when utilizing higher risk online transactions such as Bill Pay, Wire Transfer, & ACH Origination. Dual Control allows one user to input/upload the necessary transactional information and requires a separate user to approve the transaction.

*Apple, Touch ID, Face ID, Apple Pay and App Store are registered trademarks of Apple Inc. All rights reserved
*Android Fingerprint is part of the Android Open Source Project overseen by Google. ©2020 Google, LLC is a subsidiary of Alphabet, Inc. All rights reserved. Google and the Google logo are registered trademarks of Google LLC.

**Copyright © 2020 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries. Broadcom, the Pulse logo, Connecting Everything, and Symantec are among the trademarks of Broadcom. SED-VIP-PB100 March 16, 2020

Browser Security

• Both Texas Gulf Bank’s website (www.texasgulfbank.com), as well as the online banking portal, are backed by a Secure Sockets Layer (SSL) Security Certificate. This is the standard protocol for keeping an internet connection secure, safeguarding sensitive data or information that is transferred on our website. This ensures all data transferred on our website is encrypted, preventing hackers from reading it. HTTPS appears at the beginning of a website URL when it is secured by an SSL certificate.

• We also use Enterprise Security Monitoring, a behind-the-scenes, fully automated online monitoring fraud prevention service. It leverages state-of-the-art correlation and behavioral analytics to track various online banking activities and flag items that need immediate attention.

Provider Security

Requests for online banking information are passed from the Web server to the Internet Banking server. The computer system does not connect directly to the Internet. It is isolated from the Internet network via routers, filters, and a “firewall.” A “firewall” is a device that controls the access that computers on the Internet have to the bank’s computer. Use of the “firewall” allows only valid traffic to reach the Web server. Further protection is provided by yet another set of “firewalls” that sit between the Web server and the Application server.

Online Banking Cookies

A cookie is a way for a secured server to establish a logon or session ID each time a customer authenticates connectivity to online banking. A cookie is placed with the user’s browser each time they sign on. The cookie allows the bank to maintain continuity in a series of requests and responses. This additional precaution prevents a customer’s session from being “taken over” if the SSL or encryption fails; either of which is extremely unlikely.

Website Cookies & Privacy

Texas Gulf Bank is committed to protecting your privacy. This Cookie Policy sets forth our current privacy practices with regards to the information we collect when you or your computer interacts with our website (texasgulfbank.com). It explains which types of personally-identifiable and non-personally-identifiable information we collect on the website and what we do with that information. This policy is specific to the general use of this website only and does not address the collection and use of nonpublic personal information about individuals who obtain financial products or services from Texas Gulf Bank (“consumer financial information”). Our policy regarding the privacy of consumer financial information is available in our Texas Gulf Bank Privacy Policy (accessible on our website under the “Privacy & Security” tab and also available in paper copy upon request by calling our Customer Service Department at 800-467-7216.)

Information We Collect Via the Website & How We Use It

We collect certain information from and about our users in three ways: (1) directly from our web server logs, (2) from the user, and (3) with cookies.

a. Web Server Logs

When you visit our website, we may track non-personally identifiable information to administer the website and analyze its usage. Examples of information we may track include:

• The browser or type of device you’re using

• The pages you view on the website

• The items you click within the website

• The state or country from which you access the website

• The city from which you access the website

• The date and time of your visit

• Your gender

• Your age

b. User

We collect information you provide through our website (texasgulfbank.com) when:

• You sign up for our newsletter from the website. We collect your email address to enable us to send you the newsletter.

• You fill out a Contact Form via the website, requesting information or asking a question. We collect your name and email address; this allows us to respond to you directly.

c. Use of Cookies

We may use cookies to personalize or enhance your user experience. A cookie is a small text file that is placed on your hard disk by a web page server. Cookies don’t run programs. Cookies are uniquely assigned to you and can be read only by a web server in the domain that issued the cookie to you. We use the third-party Google® cookie to inform, optimize, and serve content based on your visit to our website (through Google Analytics® and Google Ads®). These third-party sources provide us an informational summary that is statistical in nature and cannot be tracked to an individual. We use this information to gauge the impact of website changes and improve our website. In addition, we use that information for targeted messaging as you browse the Internet. However, we do not facilitate the merging of your personally identifiable information with the non-personally identifiable information we collect. Google®’s ability to use and share information collected by Google Analytics® about your visits to this site is restricted by the Google Analytics® and Google Ads® Terms of Use and the Google® Privacy Policy. You can prevent Google Analytics® and Google Ads® from recognizing you on return visits to this site by disabling third-party cookies on your browser.

If you don’t want websites to remember that you’ve visited, you can delete the cookies from your Internet browser. (Your browser’s help files will have step-by-step guidance on how to do this.) Once the information (cookie) is gone, the website has no way of remembering your visit. Deleting cookies, or not accepting them in the first place, can be useful if you’re concerned about the kind of information a website is requesting or collecting. However, this can also prevent you from getting the benefits that come with using cookies.

Cookies help personalize your experience when you use websites. They do this by recording that you have visited the website that gave you the cookie, as well as data about what you did while you were there. When you visit again, the site can use the cookie to “remember” you have been there before and some of what you did.

Full functionality of Texas Gulf Bank’s website is still available to you whether or not you accept cookies.

Google®, Google Analytics® and Google Ads® are registered trademarks of Google, LLC, a subsidiary of Alphabet, Inc. All rights are reserved.

Children’s Online Privacy

Although COPPA (Children’s Online Privacy Protection Act) only applies to children under the age of 13– we do not knowingly collect, maintain or use personal information from our website about children under the age of 18. Children under 18 are prohibited by this Online Privacy Policy from providing Personal Information through our Site without parental consent. If anyone has reason to believe that someone under the age of 18 has provided Personal Information to us, they are advised via website notice to contact us, and we will take appropriate action.