Information Security Policy

At Highland Bank, your privacy and security are important to us. All transmissions between your computer and our computer network are encrypted using industry-standard protocols. To access your account information and to transact business using our Digital Banking system, you must use two-factor authentication (2FA).

Highland Bank will NEVER ask you for your Password or Security Code.

Safeguarding Consumer Information

Highland Bank maintains internal controls sufficient to protect customer financial information as outlined in our Information Security Policy and procedures.

The Bank’s Information Security Program is designed to:

• Ensure the security and confidentiality of our customers’ information
• Protect against any anticipated threats or hazards to the security or integrity of such information
• Protect against unauthorized access to or use of such information that could result in substantial harm or inconvenience to any customer
• Ensure the proper disposal of customer information and consumer information

If you think that your identity may have been compromised, please contact us and follow the recommended steps provided in The Federal Trade Commissions (FTC) website.

Highland Bank respects your privacy. If you prefer not to receive consumer-related direct marketing communications from Highland Bank by telephone or mail, you may ask to be placed on Highland Bank’s internal Do Not Call List and/or Do Not Mail List.

This policy applies to marketing communications from Highland Bank. It does not apply to important service-related, transactional, account, legal, regulatory, security, fraud prevention, collection, or other non-marketing communications that Highland Bank may be required or permitted to provide.

How to Request Placement on Our Do Not Call and/or Do Not Mail Lists

You may submit your request using any of the following methods:

1. Tell a Highland Bank representative during a telephone call or in person that you would like to be placed on Highland Bank’s Do Not Call List and/or Do Not Mail List.
2. Call Highland Bank Client Services at 952.858.4888 or 877-457-1305 and speak with a representative.
3. Submit your request in writing by mail or email.

Where to Send Written Requests

Written requests may be mailed to Highland Bank, Attn: Do Not Call/Do Not Mail List, 2100 Ford Parkway, St. Paul MN 55116. Requests may also be submitted by email to [email protected].

Information to Include With Your Request

To help us accurately process your request, please provide your full name, mailing address, telephone number(s), including area code if requesting placement on the Do Not Call List, and a clear statement that you want to be placed on Highland Bank’s Do Not Call List, Do Not Mail List, or both.

When Your Request Will Take Effect

Highland Bank will process Do Not Call and Do Not Mail requests as promptly as reasonably practicable. Please allow up to 30 days for your request to be fully processed. Because marketing campaigns may be prepared in advance, you may receive a communication that was already in progress before your request was processed.

How Long We Maintain Your Preference

Highland Bank will maintain telephone numbers associated with Do Not Call requests for at least five years, unless you ask us to remove the restriction or otherwise provide express permission for marketing calls. Highland Bank will maintain Do Not Mail preferences indefinitely unless you ask us to remove or change the preference.

Important Note

• This request does not place your telephone number on the National Do Not Call Registry. To register a telephone number with the National Do Not Call Registry, visit donotcall.gov or call 1-888-382-1222 from the telephone number you wish to register.