This notice explains what the Exchange Bank Portal collects, how long it retains data, what third-party services are involved, and how visitors can exercise their rights. This portal is an independent reference site — it does not process financial transactions or collect account credentials.
This notice applies to the website located at exchangeportal.gr.com (the "Portal"). The Portal is an independent educational reference that publishes information about Exchange Bank products, sign-in flows, the National Exchange Bank naming context, fee schedules, and routing references. The Portal does not operate any banking service, does not process deposits or payments, and does not authenticate members on behalf of any institution.
This notice does not cover the member portal operated by the chartered institution itself, any National Exchange Bank website, or any other third-party service you may navigate to from links on this Portal. When you leave this Portal by following an outbound link, the privacy practices of the destination site apply instead of this notice.
The Portal is operated by the editorial team reachable through the contact details in the Contact section below. By visiting any page on this Portal you acknowledge that you have read this notice.
The Portal collects the smallest set of data needed to understand which reference pages are useful and whether the site is loading correctly. No personally identifying financial data is ever solicited or stored.
Analytics data collected on each page visit includes: the URL of the page visited, the URL of the referring page (if any), the approximate geographic region derived from the IP address (country and U.S. state — not city or postal code), the type and version of the browser used, the operating system, the screen-resolution category, and the time of the visit rounded to the nearest hour. This data is aggregated before storage — individual visit records are not retained beyond the processing window described in the retention section below.
The Portal does not collect names, email addresses, mailing addresses, telephone numbers, Social Security numbers, account numbers, passwords, payment card data, or any other category of sensitive personal information. There are no forms on this Portal that accept user-submitted data of any kind except the contact channel described in the Contact section.
The Portal uses a small number of cookies to support analytics and to remember display preferences. No advertising cookies are set. No cookies that track you across third-party websites are set by the Portal itself.
Analytics cookies are first-party cookies set by the analytics service the Portal uses. These cookies assign a randomly generated identifier to the browser session so that page-view sequences can be grouped together for aggregate reporting. The identifier is not linked to any personal identity. Analytics cookies expire after 13 months of inactivity.
Performance cookies may be set by the content-delivery network (CDN) layer that serves Portal assets, primarily to route subsequent requests to the same edge node. These cookies do not contain personal data and expire within 24 hours.
You can prevent cookies from being set by configuring your browser to reject all cookies or to prompt before accepting each one. Disabling cookies will not prevent you from reading any content on this Portal; all reference text, tables, and navigation remain accessible without cookies.
| Data category | What is collected | Retention period | Third-party processor |
|---|---|---|---|
| Page analytics | Page URL, referrer, browser type, OS, screen category, visit timestamp (hour only), region (country + state) | 26 months in aggregate form; raw session data deleted after 7 days | Google Analytics (anonymised mode, no ad features) |
| CDN performance logs | Truncated IP (first two octets only), HTTP status code, asset path, edge-node ID | 30 days, then automatically purged | Cloudflare or equivalent edge provider |
| Contact inquiries | Email address and message text provided voluntarily by the visitor | 12 months from last correspondence, then deleted | None — handled by editorial desk directly |
| Financial or account data | None collected | N/A | N/A |
Visitors who believe personal data about them has been collected by this Portal — for example, through a contact inquiry — have the right to request access to that data, request correction of inaccurate information, request deletion, and request restriction of processing. Because this Portal does not collect identifying information through analytics (only aggregate, non-identified data), most access and deletion requests will result in confirmation that no identifying record exists.
For contact-inquiry data, you may request a copy of any email you sent to the editorial desk, or request deletion of that correspondence, at any time. Requests are fulfilled within 30 calendar days. If a deletion request conflicts with a legal hold or a legitimate interest in retaining the record (for example, a record of a complaint that remains unresolved), the Portal will notify you of the reason before the 30-day window closes.
California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information has been collected and the right to opt out of the sale of personal information. This Portal does not sell personal information. California residents may submit rights requests through the contact channel below. For guidance on consumer financial-data rights, the CFPB complaint portal provides a federal channel for financial-data concerns.
This notice may be updated when the Portal's data practices change — for example, if a new analytics service is added or if data-retention periods are adjusted. Material changes will be reflected by updating the effective date in the footer of this page. Continued use of the Portal after a notice update constitutes acknowledgment of the revised terms.
The current version of this notice was last reviewed in April 2026. Routine quarterly reviews are conducted by the editorial desk to confirm the notice accurately reflects current practices.
Questions, access requests, deletion requests, or corrections related to this privacy notice should be sent to the Portal editorial desk. Reference hours are 9 am to 5 pm Pacific Time, Monday through Friday, excluding federal holidays.
Portal editorial desk
Phone: 707-555-0182
Reference hours: 9 am–5 pm PT
This Portal has no affiliation with Exchange Bank the institution and cannot forward inquiries to Exchange Bank's own privacy or compliance teams. For privacy matters relating to your Exchange Bank member account, contact Exchange Bank directly through the member-service line listed on the back of your debit card or inside the Exchange Bank login portal after sign-in.
Four questions that come up most often about how this Portal handles visitor data and how it relates to Exchange Bank's own privacy practices.
No. This Portal is a reference site — it does not host any sign-in form, account-opening form, or financial-transaction interface. No credentials, account numbers, or personal financial data are entered here. Any Exchange Bank login action takes place on the member portal operated by the institution itself, governed by that institution's own privacy disclosures.
The Portal collects aggregate, non-identifying analytics: page URL, referrer URL, approximate geographic region (country and state), browser type, operating system, and visit timestamp rounded to the nearest hour. No names, email addresses, full IP addresses, or financial information are retained in analytics storage. Google Analytics is used in anonymised mode with advertising features disabled.
Send a deletion request to the Portal editorial desk using the contact details in the Contact section above. Because only aggregate, non-identifying analytics data is retained, most deletion requests result in confirmation that no personally identifying record exists. Contact-inquiry records — emails sent to the editorial desk — can be deleted on request within 30 calendar days.
No. This Portal is an independent educational reference and has no data-sharing agreement with the chartered institution or with any National Exchange Bank institution. Aggregate analytics data is retained solely for internal editorial purposes — it is not sold, licensed, or shared with any banking institution, advertiser, or data broker.
This Portal is an independent reference site. Exchange Bank's own privacy disclosures are accessible inside the Exchange Bank member portal after sign-in, or by calling the member-service line on the back of your debit card.
Return to Exchange Bank portal home