Privacy Frequently Asked Questions

Consumer privacy laws provide requirements for how businesses collect, process, disclose, share or sell personal information and provide certain rights to eligible residents. These laws include the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Utah Consumer Privacy Act (UCPA), Texas Data Privacy and Security Act (TDPSA), Oregon Consumer Privacy Act (OCPA), Montana Consumer Data Privacy Act (MCDPA), and other state privacy laws.

Consumer privacy laws provide specific rights for eligible residents regarding their personal information. These rights typically include: 

• Right to notice: The right to be informed about collection, disclosure and sale of your personal information. 
• Right to access: The right to request the specific pieces of personal information we have collected about you. 
• Right to data portability: The right to obtain copies of your personal information in a readily usable format. 
• Right to delete: The right to request that we delete the personal information we collected. 
• Right to correct: The right to request that we correct inaccurate personal information. 
• Right to limit use of sensitive personal information: The right to limit sensitive personal information to uses necessary to provide goods and services. 
• Right to equal service and price: The right not to be discriminated against for exercising any of these rights. 
• Right to opt out of sale or sharing: The right to request that we not sell or share personal information with a third party. Note: Milestone Bank does not sell your personal information, and we do not share your personal information for cross-contextual behavioral advertising. 

Please review our Privacy Policy for additional details.

You may be covered by state consumer privacy laws if you are a resident of a state with such laws (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others) and are not excluded based on your relationship with us. 

Current and former consumer customers with financial products such as loans, leases and deposit accounts may have information covered by our U.S. Consumer Privacy Notice as required by the Gramm-Leach-Bliley Act (GLBA). Information collected under GLBA may be exempt from certain state privacy law requirements.

Go to our Milestone Bank Privacy Policy at www.milestonebank.com/privacy. Under "How to Exercise Your Rights," select the Privacy Request Form link (www.milestonebank.com/privacy-request) to send in a request online or call us at (877) 262-7922 toll free Monday through Friday from 8 a.m. to 5 p.m. Eastern.

Yes, you are not required to be a customer to make a request.

We respond to all requests. Our responses are tailored based on your relationship with us and whether you are covered by applicable state privacy laws. If you are a customer, you can access, update or change your personal information, report fraudulent activity or inquire about other services through your online account, by calling us at (877) 262-7922.

You will need to provide your name, address and email if you want us to respond to you by email. We may ask for additional information to verify your identity.

At the time of online submission, we will provide you a reference number as confirmation that your request was received. For all submissions, we will respond to your request within 10 business days and complete your request within 45 days. If your request requires more time to complete, we will contact you with an explanation and next steps.

Yes, you can submit a request on behalf of another person if you are an authorized agent or guardian or have a Power of Attorney. We will reach out to you and to the person for whom you are making a request with additional instructions within 10 days.

Your reference number will be included with your privacy request response. You can email customerservice@milestonebank.com or write to us at Milestone Customer Service — 50 W. Big Beaver Rd, Ste 245, Troy, MI 48084.

We will retain your name, address, email (if provided) and our response as evidence that we received your request and acted on it.

Based on the information you provide in your request we will attempt to identify you in our systems and/or by using a third-party identification process. If we are unable to identify you based on the information you provided, we will respond back accordingly.

In some instances, we may need additional information from you to complete our authentication process. In those cases, we will provide you with the steps to complete the authentication process.

You will receive your privacy request response either electronically or by U.S. mail, whichever method of delivery you chose when you submitted your request. 

There may be instances when the information we send requires using a secure email message from us. Secure email requires you to create a user ID and password. The login information is only stored for 60 days after the receipt of the last email and only to allow access to your secure email messages where you can attach documents and send information.

If you are covered by applicable state privacy laws, you can expect to receive the categories of personal information we have collected, sources of the information and how that information was disclosed. For additional pieces of personal information, respond to the initial response. 

Note: Our response will not include information that would present a security risk. For example, we will not provide Social Security numbers or account numbers. We also will not disclose any information that would adversely affect the privacy rights of others. 

If you are not covered by state privacy laws, we will respond and direct you to other applicable Privacy Notices.

You can send a follow-up request via email to customerservice@milestonebank.com or write to us at Milestone Customer Service — 50 W. Big Beaver Rd, Ste 245, Troy, MI 48084. 

In the follow-up request, you should include the reasons why you believe the response was incomplete or ask your follow up question(s). You can also review these FAQs for information regarding how we respond to requests.

Our response to your request should tell you why your request was denied. 

Examples of why we denied your request include but are not limited to: 

• You are not covered by applicable state privacy laws 
• We may not be able to verify your identity 
• The personal information requested is not subject to the access or deletion rights under applicable law

You can submit another request and ask that your information be deleted.

We may not have been able to verify your identity if the information you provided for verification did not match what we have on file, or we were unable to identify you based on a third-party identification process.

Keeping Personal Information secure is one of our most important priorities. Consistent with our obligations under applicable laws and regulations, we maintain physical, technical, electronic, procedural and organizational safeguards and security measures that are designed to protect personal data against accidental, unlawful or unauthorized destruction, loss, alteration, disclosure or access, whether it is processed by us or elsewhere. Please note that information you send to us electronically may not be secure when it’s transmitted to us. We recommend that you only use secure channels to communicate sensitive or confidential information (such as your Social Security number) to us.

Your privacy is important to us and we take our responsibility to protect the privacy and confidentiality of your information, including Personal Information, very seriously. Our online privacy policies explain how we collect/receive, disclose, use and protect information when you go to or use our online services. Other privacy policies could apply depending on how you interact with us, the financial products or services you have with us, or the jurisdiction in which we are doing business with you. To learn more about our privacy practices, please go to www.milestonebank.com/state-privacy-policy.html.