"We", "our", and "us", when used in this notice, mean State Bank of Aurora. This is our privacy notice for our customers. When we use the words "you" and "your" we mean the following types of customers:

Our consumer customers who have a continuing relationship with us, such as:

• deposit account
• loan account
• credit card account
• safe deposit box
• self-directed Individual Retirement Account

We will tell you the sources for nonpublic personal information we collect about you. We will tell you what measures we take to secure that information.

We must first define some terms.

Nonpublic personal information means information about you that we collect in connection with providing a financial product or service to you. Nonpublic personal information does not include information that is available from public sources, such as telephone directories or government records. Hereafter, we will use the term "information" to mean nonpublic personal information as defined in this section.

An affiliate is a company we own or control, a company that owns or controls us, or a company that is owned or controlled by the same company that owns or controls us. Ownership does not mean complete ownership, but means owning enough to have control.

A nonaffiliated third party is a person or company that is not an affiliate of ours. This is also known as a "third party', or simply, an "other party".

We collect nonpublic personal information about you from the following sources:

• Information you give us on applications or other forms
• Information about your transactions with us
• Information about your transactions with other parties
• Information from a consumer-reporting agency
• Information we receive through our Customer Identification Program

We do NOT disclose any information about you to anyone, except as authorized by law. Examples of this might include disclosures necessary to service your account or prevent unauthorized transactions.

We restrict access to information about you to those employees who need to know that information to provide products or services to you. We maintain physical electronic and procedural safeguards to protect this information.

Since we value our customer relationship with you, we will not disclose your nonpublic personal information to nonaffiliated third parties, except as permitted by law.

We do not disclose information about former customers, except as permitted by law.