We may disclose non-public personal information about you to our affiliates within our corporate family. We limit this type of information sharing among affiliates to information about your transactions and experiences with us permitted by the Fair Credit Reporting Act.

We may disclose non-public personal information about you to non-affiliated parties as permitted by law. For example, we may provide information to respond to lawful subpoenas or communicate with credit bureaus. We may also provide information to a company, such as a check printer, in order to complete a transaction that you initiated or provide information to a company at your request.

We may disclose non-public personal information about you to non-affiliated companies that perform marketing services on our behalf or to other financial institutions with whom we have joint marketing agreements. Our agreements with these companies are subject to confidentiality provisions and restrictions on using the information for any other purpose.

The privacy policies described in this notice apply to individuals who apply for financial product(s) or service(s) for personal, family or household purposes or have done so in the past, from any of the businesses listed in this notice. Our policies and procedures regarding the personal information of our former customers are the same as those regarding our existing customer.

We use sophisticated technology and security measures to protect your customer information. We maintain physical, electronic and procedural safeguards that comply with federal regulations to guard non-public personal information.

We restrict access to non-public personal information about our customers to only those employees who have a business reason to access such information. Internal access to customer information occurs only to the extent appropriate to enable us to complete your transactions, offer you additional financial services, and to resolve any customer service issues that may arise. Each Summit Bank and affiliate employee is personally responsible for maintaining the confidentiality of customer information and data. Any employee who violates the Bank's confidentiality guidelines will be subject to disciplinary action.

When we share information with non-affiliated companies in order to offer our products and services, we require these companies to maintain standards for safeguarding your information.

This Privacy Notice replaces all previous statement of our consumer privacy policy, and may be amended at any time. We will keep you informed of changes as required by law. A copy of this notice will be provided whenever you open a deposit or loan account with us or obtain a banking service as a customer. You will also receive a copy of this notice at least annually, as long as you maintain a relationship with us.

This Privacy Notice is available upon request at any of our Banking Offices or on our website (www.summitbanking.com). If you have any question about this notice or opting out, you may contact your local branch or call our Oakland Administrative office at (510) 839-8800 during normal business hours (Monday-Friday, 9:00 AM - 5:00 PM). You may also write to us at Summit Bank, 2969 Broadway, Oakland, CA 94611, or email our Bank's Privacy Officer at mziemann@summitbanking.com .

Thank you for this opportunity to serve you. Your relationship and trust is very important to us.

We collect various types of non-public personal information, as described above, to assist us in processing your transactions, to administer your accounts and to provide products and services that may help you meet your financial needs. This information is provided by you, as well as other sources, and may include:

• Information, such as your name, address, social security number, assets and income, that we receive from you on applications or other forms.
• Information, such as balances, payment history, parties to transactions, account usage, and transactions with us, our affiliates, or others.
• Information, such as your credit worthiness, credit history, and real estate appraisals, received from consumer reporting agencies.

It is our policy to collect information that we need for specific business purposes only.

We do not disclose any non-public personal information about our existing or former customers to anyone, except as permitted by law. For example, the information we collect is used for purposes such as:

• To identify you to protect against fraud and to guard against unauthorized access to your accounts.
• To enable us to complete your transactions quickly and efficiently, and to provide you with quality customer service.
• To assist us in ensuring that our information about you and your accounts is current an accurate

Upon your authorization to provide such information to another party.

At Summit Bank and our family of companies, we are committed to providing you with superior service. To allow Summit Bank and our family of companies to better serve your financial needs and to provide you with the superior service that you expect it is necessary for us to obtain information about you. We understand that you may have concerns about the protection of the information you provide us as our customers. We would like to convey that we take your concerns and information security extremely seriously and believe the confidentiality and protection of your personal information is one of our fundamental responsibilities. This notice explains how we will accomplish this obligation while continuing to provide you with a wide variety of quality products and services that may help to meet your financial goals.

This Privacy Notice contains important information about our policies and practices for collecting, disclosing and safeguarding your "non-public personal information".

For purposes of this notice, the term "non-public personal information" means personal information about you which is not available to the general public, such as your driver's license number, social security number, income, age, marital status, assets and debts, in some instances your address and telephone number, e-mail address, internet service provider, or web browser.