California Consumer Privacy Act

Keeping your information secure is important to us

Here's how your information is used

This disclosure applies only to residents of California.

Last Revised June 2, 2023

Keeping financial and personal information secure is one of our most important responsibilities. Purdue Federal Credit Union is committed to protecting the information of members and consumers who use our products and services. This California Privacy Disclosure (“Disclosure”) outlines how Purdue Federal Credit Union collects, uses, and discloses the personal information of California consumers covered by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “CCPA”). The words “we”, “us”, “our” and “Company” refers to Purdue Federal Credit Union and the words “you” and “your” refer to you as a user of the Platform (defined below). Additionally, “consumer” shall mean California consumers as defined in the CCPA.

This Disclosure describes the types of information we collect from you, as a California consumer, or that you may provide when you visit our website available at: https://www.purduefed.com/ (the “Website”), our Purdue Federal Digital Banking mobile application (the “App”), as well as any websites and blogs directly owned by the Company (collectively, with the Website and the App, our “Platform”).

This Disclosure does not apply to personal information collected by us offline or personal information that we collect, process, sell, or disclose about our members who reside in California who apply for or obtain financial products or services that is subject to certain other laws and implementing regulations, including but not limited to the Federal Gramm-Leach-Bliley Act (Public Law 106-102), and the California Financial Information Privacy Act (Division 1.4 (commencing with Section 4050) of the Financial Code). For more information please refer to our Privacy Notice.

PRIVACY POLICY; PRIVACY NOTICE

This Disclosure is incorporated by reference and should be read in conjunction with the Company’s (1) Privacy Policy and (2) Privacy Notice.

PERSONAL INFORMATION WE COLLECT

To ensure that we provide you with the best possible experience, we will store, use, and share personal information about you in accordance with this Disclosure. Personal information is information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular user, household or device (“Personal Information”). In the past 12 months, the Platform has collected the following categories of Personal Information from users of the Platform. Additionally, the “Disclosed” column below details what categories of Personal Information have been disclosed in the past 12 months and to which category of third parties.

Category	Examples	Collected	Disclosed
Identifiers	A real name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name.	YES	NO
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information.	YES	NO
Protected classification characteristics	Age (40 years or older), race, color, ancestry, national origin, citizenship, marital status, sex (including gender), veteran or military status.	YES	NO
Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES	NO
Sensitive Personal Information	Precise geolocation, Social Security number, driver’s license, state identification card, passport number, account log-in, financial account, and debit card, credit card number with security, or access code or password.	YES	NO
Biometric information	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO	N/A
Internet or other similar network activity	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.	YES	YES – Service Providers
Geolocation data	IP address; device location; physical location or movements.	YES	YES – A Service Provider collects, de-identifies, and aggregates this data. Purdue Federal Credit Union cannot identify individuals with this data.
Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information.	NO	N/A
Professional or employment-related information	Current or past job history in relation to a resume.	YES	NO
Non-public education information	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	YES	NO
Inferences drawn from other Personal Information	Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO	N/A

We obtain the categories of Personal Information listed above from the following categories of sources:

Directly from you. For example, when you:
- register yourself with the Platform;
- participate in available sweepstakes;
- participate in, submit a request for, or register for a seminar or webinar;
- subscribe to one of our e-newsletters;
- schedule an appointment, such as a counseling appointment;
- submit a job application;
- submit an online application;
- provide feedback or information regarding sponsorships and programs; or
- otherwise communicate with us, such as communicating via a live chat or requesting more information.
Indirectly from you. For example, through information we collect from you in the course of providing our services to you.
Directly and indirectly from activity on our Platform. For example, from Platform usage details that are collected automatically. For more information on automatic information collection, please review the “Automated Information Collection” in the Privacy Policy.

USE OF PERSONAL INFORMATION

We do not sell or lease your Personal Information to any third party. We may disclose your Personal Information to a third party for a business purpose. For information about what categories of Personal Information are disclosed by the Company and to which third parties, please see the “PERSONAL INFORMATION WE COLLECT” section above and the “How We Disclose Your Information” section of our Privacy Policy.

Duration. The length of time Company intends to retain each category of Personal Information, including sensitive personal information, if any, is for as long as reasonably necessary to carry out Company’s intended business purpose for such information.

YOUR RIGHTS AS A CALIFORNIA CONSUMER

Shine the Light law

Pursuant to California Civil Code Section 1798.83, we will not disclose or share your Personal Information with third parties for the purposes of third-party marketing to you without your prior consent.

Do Not Track Signals

Other than as disclosed in this Disclosure, the Platform does not track users over time and across third-party websites to provide targeted advertising. Therefore, the Platform does not operate any differently when it receives Do Not Track (“DNT”) signals from your internet web browser.

Do Not Sell or Share My Personal Information

While we do not sell your personal information, we may share your personal information, including an IP address, for targeted advertising purposes. For more information please refer to our Privacy Notice. You can opt-out of targeted advertising by going to the following form: Do Not Sell or Share My Personal Information.

Consumer Rights

If you are a California consumer, as defined by the CCPA, you may be afforded additional rights with respect to your Personal Information. Any Personal Information we collect is collected for the commercial purpose of effectively providing our services to you, as well as enabling you to learn more about, and benefit from, our services. You may exercise each of your rights as identified below, subject to our verification of your identity.

Access. You have the right to request that we disclose certain information to you about our collection, use and disclosure of your Personal Information over the past twelve (12) months, and no more than twice in any 12-month period. Any disclosures we provide will only cover the 12-month period preceding the receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable.
Correction. You can correct what personal data our Platform database currently contains by accessing your account directly, or by contacting us to request that we correct or rectify any personal data that you have provided to us.
Limit Use and Disclosure of Sensitive Personal Information. If we collect any sensitive personal information, you have the right to request that we limit the use of the sensitive personal information to that use which is necessary to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services.
Portability. Upon request and when possible, we can provide you with copies of your Personal Information. When such a request cannot be honored, we will advise you accordingly. You can then choose to exercise any other rights under this Disclosure.
Deletion. You have the right to request that we delete any of your Personal Information in the Platform database, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies. Where applicable, we will ensure such changes are shared with trusted third parties.
Opt-out of Processing. You have the right to request that we do not sell your Personal Information, use your Personal Information for Targeted Advertising, or use your Personal Information for profiling. Where applicable, we will ensure such changes are shared with trusted third parties.
Non-Discrimination. If a California consumer exercises his or her rights under the CCPA, we shall not discriminate against that consumer by denying our goods or services, charging different prices or rates to similarly situated consumers, providing a different level or quality of our goods or services, or taking any other adverse action.
Exercising your rights. If you are California consumer who chooses to exercise the rights listed above, you can:
- Submit a request via email at [email protected]; or
- Call us at 800.627.3328 to submit your request.

Only you, or someone legally authorized to act on your behalf, may make a request related to your Personal Information. If an authorized agent makes a request on your behalf, we may require proof that you gave the agent permission to submit the request.

Responding to Your Request

Upon receiving your request, we will confirm receipt of your request by sending you an email confirming receipt. To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to the Personal Information. In some instances, such as a request to delete personal information, we may first separately confirm that you would like for us to in fact delete your Personal Information before acting on your request.

We will respond to your request within forty-five (45) days. If we require more time, we will inform you of the reason and extension period in writing.

In some cases our ability to uphold these rights for you may depend upon our obligations to process Personal Information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.

CHANGES TO THIS DISCLOSURE

This Disclosure may be amended from time to time and we shall post the revised Disclosure on our Website. Changes will be effective upon posting.

CONTACT US

We value your opinions and welcome your feedback. To contact us about this Disclosure or your Personal Information, please contact us by email at [email protected].

CCPA Request Form

If you are a California resident, you have certain rights under the California Consumer Privacy Act ("CCPA"). Please use this form to submit a request under the CCPA relating to our products and services.

Please check one of the following

I am submitting this request on my own behalf I am authorized to submit this request on behalf of the person identified below

Please check one of the following is a required field

My name and a brief description of my relationship with the person identified below is

Required only if you are requesting on behalf of someone else.

Which of the following describe the request (check all that apply)

Requesting to know the personal information that has been collected Request to delete personal information that has been collected Request to correct inaccurate personal information that has been collected

Which of the following describe the request (check all that apply) is a required field

Requestor's First Name

Requestor's First Name is a required field

Requestor's Last Name

Requestor's Last Name is a required field

Requestor's Email

Requestor's Email is a required field

Requestor's Street Address

Requestor's Street Address is a required field

Requestor's City

Requestor's City is a required field

Requestor's State

Requestor's State is a required field

Requestor's ZIP Code

Requestor's ZIP Code is a required field

Authorized Representative's First Name

Required only if you are requesting on behalf of someone else.

Authorized Representative's Last Name

Required only if you are requesting on behalf of someone else.

Authorized Representative's Email

Required only if you are requesting on behalf of someone else.

Authorized Representative's Street Address

Required only if you are requesting on behalf of someone else.

Authorized Representative's City

Required only if you are requesting on behalf of someone else.

Authorized Representative's State

Required only if you are requesting on behalf of someone else.

Authorized Representative's ZIP Code

Required only if you are requesting on behalf of someone else.

Proper authentication is critical to ensuring the protection of personal information. We will contact you with requests for additional information in order to verify your identity and the identity of any Authorized Representative (if applicable). For Authorized Representatives, additional documentation, such as a Power of Attorney form and/or a signed authorization will be required. We will respond to your request consistent with applicable laws.

Purdue Federal Credit Union serves members worldwide and operates branches throughout Greater Lafayette, Crown Point and La Porte, Indiana.

Helpful Resources