PRIVACY NOTICE FOR INDIVIDUALS

Protecting your privacy is important to Hillsboro State Bank and our employees. We want you to understand what information we collect and how we use it. In order to provide our customers with a broad range of financial products and services as effectively and conveniently as possible, we use technology to manage and maintain customer information. The following policy serves as a standard for all Hillsboro State Bank employees for collection, use, retention, and security of nonpublic personal information.

What Information We Collect

We may collect "nonpublic personal information" about you from the following sources:

• Information we receive from you on applications or other loan and account forms.
• Information about your transactions with us or others.
• Information we receive from third parties such as credit bureaus.

"Nonpublic personal information" is nonpublic information about you that we obtain in connection with providing a financial product or service to you. For example, nonpublic personal information includes information regarding your account balance, payment history and overdraft history.

What Information We Disclose

We are permitted under law to disclose nonpublic personal information about you to other third parties in certain circumstances. For example, we may disclose nonpublic personal information about you to third parties to assist us in servicing your loan or account with us, to government entities in response to subpoenas, and to credit bureaus. We do not disclose any nonpublic personal information about you to anyone, except as permitted by law.

If you decide to close your account(s) or become an inactive customer, we will continue to adhere to the privacy policies and practices described in this notice.

Our Security Procedures

One of the ways we protect your information is by limiting access to information about you to those associates with a reason to know your information in order to provide products or services to you. In addition, we train our associates about the importance of maintaining the confidentiality of customer information. We take appropriate disciplinary action to enforce our associate's privacy responsibilities. We maintain physical, electronic and procedural safeguards that comply with federal standards to guard your nonpublic personal information.