Rights for California Residents

Keeping your personal information secure is one of our most important priorities. Consistent with our obligations under applicable laws and regulations, we maintain physical, technological, electronic, procedural, and organizational safeguards and security measures that are designed to protect personal data against accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, or access, whether it is processed by us or elsewhere.

Introduction

Under the CCPA, ‘Personal Information’ is information that identifies, relates to, or could reasonably be linked directly or indirectly with a particular California resident. The CCPA, however, does not apply to certain information, such as information subject to the Gramm-Leach Bliley Act (“GLBA”). 

The specific personal information that we collect, use, and disclose relating to a California resident covered by the CCPA will vary based on our relationship or interaction with that individual. For example, this Disclosure does not apply with respect to information that we collect about California residents who apply for or obtain our financial products and services for personal, family, or household purposes. For more information about how we collect, disclose, and secure information relating to these customers, please refer to our Pegasus Privacy Notice. The following describes the information we collect about you, how it may be shared, and your rights connected with that information.

Applicability

If you are a California resident you may have certain rights under the California Consumer Privacy Act (Cal. Civ. Code §1798.100 et seq.) regarding your personal information.  This California Consumer Privacy Act Disclosure explains how the Pegasus Bank (“Pegasus”, “we”, or “us”) collect, use and disclose personal information relating to California residents (“you” or “your”) covered by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”).  This notice is provided pursuant to the CCPA.

PERSONAL INFORMATION COLLECTED

The majority of information Pegasus Bank has collected on consumers has been in the context of providing financial products and services, and is therefore not subject to the CCPA.  In the past 12 months, we have potentially collected the following categories of personal information, as defined in the CCPA, relating to California residents. The categories of personal information that we collect, use, and disclose about a California resident will depend on our specific relationship or interaction with that individual.  Examples include but are not limited to: 

• Personal identifiers: name, address, Social Security number, driver’s license number, telephone number, email address and IP address
• Characteristics of protected classifications (under California or Federal law):  age/date of birth, gender, marital status, nationality, and military/veteran status
• Financial details:  account or debit/credit card number, transaction details, and purchase history
• Biometric information: fingerprints; and
• Audio, electronic, visual and similar information: phone call recordings

CATEGORIES AND SOURCES OF PERSONAL INFORMATION

In the past 12 months, we have potentially collected personal information relating to California residents from the following sources:

• Directly from you when you provide it to us (e.g. banking applications, customer service requests, website forms);
• Public data available on Government or public sources;
• Third parties authorized to share your information with us (e.g. credit reference agencies, payment processors, law enforcement);
• Service providers utilized by Pegasus Bank (e.g. software providers, fraud prevention services)

USE OF PERSONAL INFORMATION

Information collected by Pegasus Bank is typically utilized to provide financial products or services, and is therefore not subject to the CCPA.  We may use personal information relating to California residents for one or more of the following business purposes, including but not limited to:

• Verifying your identity;
• Providing and maintaining Pegasus products and services;
• Detecting and preventing fraud; protection against security risks;
• Maintaining our facilities, systems, and infrastructure;
• Audit and Risk Management purposes;
• Complying with laws and regulations (refer to Privacy Policy for additional detail);
• As otherwise disclosed to you at or before the point of collecting your personal information;

We may also use personal information relating to California residents for one or more of the specific “business purposes” listed in the CCPA, such as:

• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity
• Debugging to identify and repair errors that impair existing intended functionality
• Internal research for technological development and demonstration

DISCLOSURE OF PERSONAL INFORMATION TO THIRD PARTIES

Pegasus Bank does not offer an opt-out from the sale of personal information protected under the CCPA because we do not engage in the such practices.  Any sharing of your information is limited to our business use as described above; we do not share personal information for the sole purpose of receiving compensation for your information.  In the past 12 months, we have not “sold” any personal information subject to CCPA. 

 RIGHTS UNDER THE CCPA

If you are a California resident, you may be entitled to certain rights under the CCPA:

1. Right to know what personal information is being collected about you. 
   • The categories of personal information described above that we have collected;
   • The sources from which such personal information was collected;
   • The purpose for collecting such personal information;
   • The categories of personal information about you that we have disclosed to third parties;
   • The specific pieces of personal information we have collected about you;  
2. The right to request deletion of your personal information, unless there are circumstances or legal reasons which would require that Pegasus Bank retain your information. 
3. The right to have someone you authorize make a request on your behalf.  In this instance, Pegasus will require proof of authorization and proper identification before proceeding.
4. The right not to receive discriminatory treatment for the exercise of privacy rights conferred by the CCPA.
5. The right to ask to correct any inaccuracies in your personal information.
6. The right to limit the use and disclosure of sensitive personal information collected about you.

HOW TO MAKE REQUESTS

If you are a California resident and would like to exercise the rights described above, please submit your request by contacting us at 1-844-732-5527 Monday through Friday, 8:30 a.m. to 5:00 p.m. CDT, by writing us at: Pegasus Bank P.O. Box 7908 Dallas, TX 75209-7908, or send your request via email to [email protected] with “CCPA Request” in the subject line.  Once we receive your request, we may verify your identity through your account records or by requesting additional information necessary to confirm your identity.  If you would like to use an agent to exercise your CCPA rights, or if you are an agent seeking to exercise CCPA rights on behalf of another person, please contact us using one of the above referenced methods.  

We may change or update this CCPA Disclosure in the future.  The most current copy will be available on our website; refer to the effective date displayed at the top of the Disclosure.

CONTACT US

If you have questions about this CCPA Disclosure or our Privacy Policy, please contact us at 1-844-732-5527 or email [email protected].