LAST REVISED ON: October 18, 2023. Version 1.0

• Introduction
• CurrentlIntroduction
• Currently U.S. Only.
• Data Processor and Controller
• The Information We Collect
• For EU Data Subjects
• For California Residents
• Use of Cookies and Other Technologies
• Information from Third Parties
• Information from Children
• How We Use Information
• Why and How We Share Information
• Your Rights Regarding Your Information and Accessing and Correcting Your Information
• Submitting a Request and Verifying Your Identity
• How We Keep Your Information Secure
• Links to Other Sites
• Do Not Track Signals
• Your Choices
• Opting Out of This Policy
• Changes To Our Privacy Policy
• Indemnification
• Contact Us

Greetings & welcome to Standard International Bank (“Standard”). Standard works hard to protect your personal information in an effort to keep you in control of your privacy. Therefore, we want you to understand how we may collect, store, use, and protect your personal information.

Introduction

This Privacy Policy (“Policy”) explains how Standard International Bank (“Standard”, “we”, or “us”) collects, uses, shares, and keeps secure your information, including your nonpublic personal information. This policy applies to any and all information we collect from you and about you through our Sites, or other communications flows where this Policy is cited, as well as any information we collect from sources other than you. This Privacy Policy also contains information about rights you may be entitled to with respect to this personal information.

This Privacy Policy covers the privacy practices of Standard only, and only for such services rendered through the Standard website https://idme.standardintbank.com/ (“Website”). It does not apply to the practices of third-party websites, services, or applications (collectively, “Third-Party Services”), such as Facebook, Twitter, Linkedin, or Instagram. These Third-Party Services are governed by each such third party’s privacy policy, which you should review before using such Third- Party Services. We are not responsible for the privacy policies and practices of Third-Party Services or their failure to follow their own privacy policies and practices, or applicable law.

This Policy is subject to and incorporated into our Terms of Use, including its provisions on dispute resolution and limitation of liability, to the extent permitted by law. We encourage you to read this Policy. If you have additional questions or require more information, please write us at email with the Subject Line: Privacy Policy.

BY USING OUR WEBSITE, AND ANY RELATED PRODUCTS AND SERVICES (“SERVICES”), YOU ARE AGREEING TO THIS POLICY. IF YOU DO NOT AGREE TO THESE TERMS, YOU MAY NOT ENROLL IN OR USE THE SERVICES.

This privacy policy covers https://idme.standardintbank.com/ For the personal data we collect on our own behalf, Standardis the Business and data controller. We are located at: 250 Muñoz Rivera Avenue, Suite 330, American International Plaza, San Juan, PR 00918.  Phone 787-705-3405.

As a Business or controller, we will use personal information about you only for the purposes and in the manner set forth below, which describes the steps we take to ensure the processing of personal data is in compliance with applicable data protection law, including California’s Consumer Privacy Act (“CCPA”) and the European Union’s General Data Protection Regulation (“GDPR”).

The Information We Collect

The personal information we collect about you helps us manage our relationship with you, primarily by allowing us to respond to your queries, to improve website performance and user experience, provide you our Services, and to keep you updated on any changes to our Website or Services.

When we use the term “personal information” we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked directly or indirectly, with a particular individual, consumer or household, or data otherwise described as “personal information” under governing laws. Some information may not be considered personal information, such as publicly available information from federal, state or local records or information that is aggregated or de-identified, such that it cannot reasonably be linked to an individual.

When you utilize our Services, we collect various types of personal information to establish and maintain your account. Personal information collected currently includes: name and email address [Please include all other information including IP, MAC address, phone number, etc…]. Additional information may be requested, in which case this Privacy Policy will apply and be updated accordingly. If you choose to provide us with personal information, you consent to the transfer and storage of that information on our servers to either the EU or U.S. servers corresponding to your location.

The personal information we collect, the basis of processing and the purposes of processing are detailed below. Sometimes, these activities are carried out by third parties (see “Why and How We Share Information” section below).

For EU Data Subjects

For EU data subjects, we have a lawful basis under the GDPR for each of our processing activities, as further indicated below.

From Whom Do We

From Whom Do We Collect This Data	Personal Data	Basis and Purpose of Processing
General Inquirers and those reporting issues with our website.	We will collect your name and email address.	It is in our legitimate interests to respond to queries and to provide you with information relating to our services and to maintain our website. Our interests are not overridden by the interests or fundamental rights and freedoms of the data subject.

For California Residents

The personal information about you that we collect includes information within the below categories of data. These categories also represent the categories of personal information that we have collected over the past 12 months. Note that the categories listed below are defined by California state law. Inclusion of a category in the list below indicates only that, depending on the services and products we provide you, we may collect some information within that category. It does not necessarily mean that we collect all information listed in a particular category for all of our customers. We do not and will not sell personal information about you, as defined under California state law. We also have not done so for the last 12 months.

Category	Source	Purpose of Collecting Information	Disclosed for a Business Purpose Over the Last 12 Months?	Types of Third Parties Shared With
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.	This information is collected directly from you, our customers, our service providers or through the use of cookies and similar technologies.	A subset of this data is processed in connection with a number of our operational functions, including to provide you with a refund.	Yes. Information from the Website shall be shared with ID.ME a third-party ID verification service.	Identity Verification Service.

Use of Cookies and Other Technologies

We may also use various technologies to collect and store information related to your use of our Services. We may collect and store information locally on your device using mechanisms such as browser web storage and application data caches.

Cookies are small pieces of information that our server places on a visitor’s computer hard drive to optimize the users’ experience by customizing our web page content based on browser type and/or other information, and to enable to the user or more easily communicate and interact with the website and provide us with important information on how visitors use the website. Many web browsers are automatically set to accept cookies. These small files also control how our website is displayed and operates. Cookies serve to make our website more user-friendly, effective, and secure. Company’s use both “session” cookies, which last only until you close your browser, and “persistent” cookies, which last until you or your browser deletes them. Most Internet browsers support cookies; however, users can set their browsers to decline certain types of cookies or specific cookies by configuring their browser’s privacy settings (please refer to your browser’s help function to learn more about cookie controls). Further, users can delete cookies at any time. Note that if you disable cookies entirely, our websites may not function properly, or at all in the case of strictly necessary cookies.

Why may we use cookies?

Companies use cookies to learn how you interact with our content and to improve your experience when visiting our website(s). For example, some cookies remember your preferences to make future visits to one of our websites more convenient. Additionally, cookies allow Companies to serve you specific content, such as videos on our website(s).

How are cookies used for advertising purposes?

Cookies and ad technology such as web beacons, pixels, and anonymous ad network tags help companies serve relevant ads to you more effectively. They also help companies collect aggregated audit data, research, and performance reporting for advertisers. Pixels enable companies to understand and improve the delivery of ads to you, and know when certain ads have been shown to you. Since your web browser may request advertisements and web beacons directly from ad network servers, these networks can view, edit, or set their own cookies, just as if you had requested a web page from their site. How are third party cookies used? We do not use third-party cookies. How do I reject and delete cookies? You can choose to reject or block all or specific types of cookies for our websites and/or the websites of any third-party suppliers by changing your browser settings. Please note that most browsers automatically accept cookies. Therefore, if you do not wish cookies to be used, you may need to actively delete or block the cookies. If you reject the use of cookies, you will still be able to visit our websites but some of the functions may not work correctly. You may also visit the above links, or www.allaboutcookies.org for details on how to delete or reject cookies and for further information on cookies generally. You can also manage advertising cookies via http://optout.aboutads.info/.

Information from Third Parties

When using our Services, you may have the option to provide us with information from third parties, such as Facebook, Twitter, Google, and LinkedIn. We may also acquire information about you from third parties in order to verify your identity, process your transactions, detect and prevent fraud, or other similar purposes.

Information from Children

Our Website is not intended for children under 17 years of age. No one under age 17 may provide any information to the Website, mobile applications, communications with Standard, or the Services. We do not knowingly collect Personal Data from children under 17. If you are under 17, do not use or provide any information on our Website or on or through any of its features/register on the Website, open any accounts through the Website, use any of the interactive or public comment features of our Website or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received Personal Data from a child under 17 without verification of parental consent, we will delete that information. If you believe we might have any information from a child under 17, please contact us in any manner set forth below in the “Contact Us” Section of this Privacy Policy.

When you use our Services, we may collect information from your computer or mobile device, such as the unique identification number, the model, operating system and version, your browser type and version, the presence of any device, operating system, or browser add-ons, the times you access our Services, the locations from where you access our Services (attributed based on your IP address, the page you visited before navigating to our Services, and your mobile device’s location services), and your stored contacts.

How We Use Information

We use your information to provide and improve our Services, including for the purposes of:

• Communicating with you about changes in our Services, and administrative information, and provision of refunds.

• Other reasonable uses related to providing, maintaining, and improving our Services.

Why and How We Share Information

When you sign up for our Refund Services, you are directing Standard to share information with third parties as outlined below. The information that Standard shares includes both the information that Standard collects from you directly and the information that Standard collects from third parties. We may provide your information to third parties for business and legal purposes, including for the purposes of:

• Verifying your identity.

• Processing your refund and transferring funds to your designated account.

• Meeting the requirements of any applicable law, regulation or legal process, including complying with orders from courts of law, regulatory agencies, and law enforcement.

We will not sell or otherwise give your information to third parties for marketing purposes.

Your Rights Regarding Your Information and Accessing and Correcting Your Information

Depending on where you live, your current jurisdiction and applicable data protection laws, and subject to any relevant restrictions/exemption, you may be entitled to certain rights with regards to our processing of your Personal Information. (Please note: depending on the country you live in and the applicable data protection laws, you may only have access to some of the rights listed below).

• Restrictions. You may have the right to restrict our processing of your Personal Data under certain circumstances. In particular, you can request we restrict our use of it if you contest its accuracy, if the processing of your Personal Data is determined to be unlawful, or if we no longer need your Personal Data for processing but we have retained it as permitted by law.

• Portability. To the extent the Personal Data you provide Standard is processed based on your consent or that we process it through automated means, you have the right to request that we provide you a copy of, or access to, all or part of such Personal Data in structured, commonly used and machine-readable format. You also have the right to request that we transmit this Personal Data to another controller, when technically feasible.

• Withdrawal of Consent. To the extent that our processing of your Personal Information is based on your consent, you may withdraw your consent at any time. Withdrawing your consent will not, however, affect the lawfulness of the processing based on your consent before its withdrawal, and will not affect the lawfulness of our continued processing that is based on any other lawful basis for processing your Personal Information.

• Right to Deletion. You may have the right, subject to some exceptions, to request that we delete Personal Information about you that we have collected or maintain. We will not delete personal information about you when the information is required to fulfill a legal obligation, is necessary to exercise or defend legal claims, or where we are required or permitted to retain the information by law. For example, we cannot delete information about you while continuing to provide you with certain products and services or where we are legally required to retain certain information. This right is generally excluded from data kept for archival or back-up purposes.

• Complaints. You have the right to lodge a complaint with the applicable supervisory authority in the country you live in, the country you work in, or the country where you believe your rights under applicable data protection laws have been violated. However, before doing so, we request that you contact us directly in order to give us an opportunity to work directly with you to resolve any concerns about your privacy.

Submitting a Request and Verifying Your Identity

You may exercise any of the above rights by contacting us through our website or any of the methods listed under Contact Information below, including by emailing us directly at info@standardintbank.com.

Please note that under California law, we are only obligated to respond to personal information requests from the same consumer up to two times in a 12-month period. Under both EU and California law, if an individual makes unfounded, repetitive, or excessive requests (as determined in our reasonable discretion) to access Personal Data, we may charge a fee subject to a maximum set by law.

Before providing information you request in accordance with these rights, we must be able to verify your identity. In order to verify your identity, you may need to submit information about yourself, including, to the extent applicable, providing answers to security questions, your name, and email. We will match this information against information we have previously collected about you to verify your identity and your request. If we are unable to verify your identity as part of your request, we will not be able to satisfy your request. We are not obligated to collect additional information in order to enable you to verify your identity. For deletion requests, you will be required to submit a verifiable request for deletion and then to confirm separately that you want personal information about you deleted.

If you would like to appoint an authorized agent to make a request on your behalf, you must provide the agent with written, signed permission to submit privacy right requests on your behalf, or provide a letter from your attorney. The agent or attorney must provide this authorization at the time of request. We may require you to verify your identity with us directly before we provide any requested information to your approved agent.

Information collected for purposes of verifying your request will only be used for verification. If you chose to exercise any of these rights, to the extent that they apply, U.S. state law prohibits us from discriminating against you on the basis of choosing to exercise your privacy rights. We may, however, charge a different rate or provide a different level of service to the extent permitted by law.

How We Keep Your Information Secure

We have designed policies and procedures to protect both your confidentiality and the security of your information, including your nonpublic personal information. Despite Standard’s efforts to keep your information secure, we cannot guarantee the security of your information. As a result, we strongly encourage you to take action to protect your personal data and any device you use to access our Services. In the unlikely event that we come to learn that either our system or your account specifically has suffered a security breach, we may attempt to notify you electronically so that you can take appropriate protective steps, by email, text message, phone call, a notice on our website, or any other way, depending on the requirements of applicable law.

Links to Other Sites

We are not responsible for the privacy practices of any third parties or the content of sites that are linked from our Services. We strongly encourage you to read the applicable privacy policies and terms and conditions of such parties or websites.

Do Not Track Signals

Some web browsers permit you to broadcast a signal to websites and online services indicating a preference that they “do not track” your online activities. At this time, we do not honor such signals and we do not modify what information we collect or how we use that information based upon whether such a signal is broadcast or received by us.

Your Choices

Standard may collect information regarding your location. You may be able to prevent this collection through your device operating system settings or by following the standard uninstall process to remove our mobile application from your device. Similarly, you may be able to control how your browser interacts with cookies. However, if you remove stored cookies or block them from being set, you may affect the availability and functionality of our Services.

Opting Out of This Policy

If you no longer wish to use our Services and would like to delete or deactivate your account, please contact us at contact email with the Subject Line: Privacy. We are required by law to retain your information, and may also do so for legitimate business purposes, including internal analytics. However, we will not share or use your information for promotional and marketing purposes (except in an anonymized or de-identified form) after you have deleted or deactivated your account. As previously noted, your usage of our Services is contingent on your expressly opting in to this Privacy Policy.

Changes To Our Privacy Policy

We may change this policy from time to time. If we make changes, we will notify you by posting the updated policy and revising the “Last Updated” date above. We encourage you to review the policy whenever you use our Services to stay informed about our information practices and about the choices available to you. You acknowledge and agree that it is your responsibility to review the Policy. Your continued use of this Site and App, and any offerings made available on the Site after a change is posted, including but not limited to the use of the Services, will constitute acknowledgment and acceptance of the then-published Policy.

 Indemnification

You are entirely responsible for maintaining the confidentiality of your username(s), password(s), and your account(s), as well as all activities that occur under your account(s). You hereby agree to indemnify, defend, and hold us, our agents, representatives and other authorized users, and each of the foregoing entities’ respective officers, directors, owners, employees, agents, representatives and assigns (collectively the “Indemnified Parties”) harmless from and against any and all losses, damages, liabilities and costs incurred by the Indemnified Parties in connection with any claim arising out of any breach by you of this Privacy Policy or claims arising from our Services. You agree to use your best efforts to cooperate with us in the defense of any claim. We reserve the right, at our own expense, to employ separate counsel and assume the exclusive defense and control of any matter otherwise subject to indemnification by you.

 Contact Us

For any and all inquiries regarding our Privacy Policy, please reach out at info@standardintbank.com.