FACTS	WHAT DOES RVA FINANCIAL FEDERAL CREDIT UNION DOWITH YOUR PERSONAL INFORMATION?

Why?	Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how wecollect, share, and protect your personal information. Please read this notice carefully to understand what we do.

What?	The types of personal information we collect and share depend on the product or service you have with us. This information can include: Social Security number and account balances credit history and credit scores payment history and transaction history

How?	All financial companies need to share members’ personal information to run their everydaybusiness. In the section below, we list the reasons financial companies can share their members’ personal information; the reasons RVA Financial Federal Credit Union chooses to share; andwhether you can limit this sharing.

Reasons we can share your personal information	Does RVA Financial Federal Credit Union share?	Can you limit this sharing?
For our everyday business purposes – such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or to report to credit bureaus	Yes	No
For our marketing purposes – to offer our products and services to you	Yes	No
For joint marketing with other financial companies	Yes	Yes
For our affiliates’ everyday business purposes – information about your transactions and experiences	No	We don’t share
For our affiliates’ everyday business purposes – information about your creditworthiness	No	We don’t share
For nonaffiliates to market to you	No	We don’t share

To limit our sharing

Call 804-359-8754 – our menu will prompt you through your choice(s), Visit us online: www.rvafinancial.com or Mail the form below Please note: If you are a new member, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our member, we continue to share your information as described in this notice. However, you can contact us at any time to limit our sharing

Questions?	Call 804-359-8754 or go to www.rvafinancial.com

—————————– Detach and mail form below. Retain Disclosure above for your records. ——————————–

Mail-in Form
	Mark any/all you want to limit: ☐ Do not share my personal information with other financial institutions to jointly market to me.
	Name		Mail to: RVA Financial Federal Credit Union 1700 Robin Hood Road Richmond, VA 23220
	Address
	Address 2
	City, State Zip
	Account #

What we do
How does RVA Financial Federal Credit Union protect my personal information?	To protect your personal information from unauthorized access and use, we usesecurity measures that comply with federal law. These measures include computersafeguards and secured files and buildings.
How does RVA Financial Federal Credit Union protect my personal information?	We collect your personal information, for example, when you open an account or give us your income information provide employment information or apply for financing pay us by check We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.
Why can’t I limit all sharing?	Federal law gives you the right to limit only sharing for affiliates’ everyday business purposes – information about your creditworthiness affiliates from using your information to market to you sharing for nonaffiliates to market to you State law and individual companies may give you additional rights to limit sharing
What happens when I limit sharing for an account I hold jointly with someone else?	Your choices will apply to everyone on your account.

Definitions
Affiliates	Companies related by common ownership or control. They can be financial and non-financial companies. RVA Financial Federal Credit Union has no affiliates
Nonaffiliates	Companies not related by common ownership or control. They can be financial andnonfinancial companies. RVA Financial Federal Credit Union does not share with our non-affiliates so they can market to you
Joint Marketing	A formal agreement between nonaffiliated financial companies that together market financial products or services to you. Our joint marketing partners include advertising/marketing agencies, loan recapture programs and insurance companies.

Effective Date: June 2023

BIOMETRIC INFORMATION PRIVACY POLICY AND CONSENT

Scope and Overview

This policy outlines how RVA Financial, its vendors, and/or the licensor of the RVA Financial’s consumer verification software processes biometric data collected from you for identity verification and fraud prevention purposes.

Biometric Data Defined

As used in this policy, biometric data includes “biometric identifiers” and “biometric information”. “Biometric identifier” means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. As the term is used in this policy, the selfie photograph you upload to the software for use in the biometric algorithm is considered a “biometric identifier.” “Biometric information” means any information, regardless of how it is captured, converted, stored, or shared, based on an individual’s biometric identifier used to identify an individual.

Disclosure and Authorization Policy

To the extent that RVA Financial, its vendors, and/or the licensor of the RVA Financial’s consumer verification software collect, capture, or otherwise obtain biometric data relating to a consumer, RVA Financial must first:

Inform each consumer that RVA Financial, its vendors, and/or the licensor of the RVA Financial’s consumer verification software are collecting, capturing, or otherwise obtaining the employee’s biometric data, and that the RVA Financial is providing such biometric data to its vendors and the licensor of the RVA Financial’s consumer verification software;

Inform the consumer of the specific purpose and length of time for which the consumer’s biometric data is being collected, stored, and used; and

Receive consent by the consumer authorizing RVA Financial, its vendors, and/or RVA Financial’s consumer verification software to collect, store, and use the consumer’s biometric data for the specific purposes disclosed by the RVA Financial, and for RVA Financial to provide such biometric data to its vendors and the licensor of the RVA Financial’s consumer verification software.

RVA Financial, its vendors, and/or the licensor of the RVA Financial’s consumer verification software will not sell, lease, trade, or otherwise profit from employees’ biometric data; provided, however, that the RVA Financial’s vendors and the licensor of the RVA Financial’s consumer verification software may be paid for products or services used by RVA Financial that utilize such biometric data.

This policy is intended to comply with all federal, state, and local laws.

 

Purpose for the Collection of Biometric Data

RVA Financial, its vendors, and/or the licensor of RVA Financial’s consumer verification software collect, store, and use biometric data solely for identity verification and fraud prevention purposes.

 

Disclosure

RVA Financial will not disclose or disseminate any biometric data to anyone other than its vendors and the licensor of the RVA Financial’s consumer verification software providing products and services using biometric data without/unless:

First obtaining consumer consent to such disclosure or dissemination;

The disclosed data completes a financial transaction requested or authorized by the consumer;

Disclosure is required by law or ordinance; or

Disclosure is required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction.

 

Security

RVA Financial shall use a commercially reasonable standard of care to store, transmit and protect from disclosure any biometric data collected. Such storage, transmission, and protection from disclosure shall be performed in a manner that is the same as or more protective than the manner in which RVA Financial stores, transmits and protects from disclosure other confidential and sensitive information, including personal information that can be used to uniquely identify an individual or an individual’s account or property, such as genetic markers, genetic testing information, account numbers, PINs, driver’s license numbers and social security numbers.

Retention

RVA Financial shall retain consumer biometric data only until, and shall request that its vendors and the licensor of RVA Financial’s consumer verification software permanently destroy such data when, the first of the following occurs:

The initial purpose for collecting or obtaining such biometric data has been satisfied, such as verification of consumer identity;

Request of consumer to destroy the biometric data; or

Within 30 days of consumer’s provisioning of biometric data.

 

Contact Information

If you have any questions about our use, storage, or security of your biometric data you can contact us at: service@rvafinancial.com.

 

BIOMETRIC INFORMATION CONSUMER CONSENT

As outlined in the “Biometric Information Privacy Policy”, I understand and consent to the collection, use, retention, storage, and/or disclosure or re-disclosure of data or images from biometric verification technology by RVA Financial, its vendors, and/or the licensor of the RVA Financial’s consumer verification software. I acknowledge that I have been given a copy of the Policy, or that the Policy has been made accessible to me, and I have had an opportunity to review it and request any additional information concerning the RVA Financial’s procedures and safeguards for collecting, maintaining, using, disclosing, sharing, storing, and/or destroying this data.