Security

Poppy Bank is committed to your cybersecurity. Please review these resources to help inform and guide you in keeping your online data secure.

FDIC Cybersecurity Resources

Poppy Bank’s Best Practices for Online Banking

CCPA Privacy Policy

Online Privacy Policy

Effective: April 1, 2023
Last Updated: July 20, 2023

This notice is provided pursuant to the CCPA and explains how Poppy Bank collects, uses and discloses Personal Information (PI) of California residents.

CCPA is not applicable to Personal Information collected, used and disclosed by Poppy Bank when it is subject to the federal Gramm-Leach-Bliley Act (GLBA). This notice is not applicable to Personal Information collection, use and disclosure activities involving Personal information subject to GLBA.

Collection and Disclosure of Personal Information

In the past 12 months Poppy Bank has collected and disclosed the following categories of Personal Information for business purposes:

• Name
• Address
• Date of birth
• Telephone number
• Email address
• Internet or other electronic network activity including IP address, browsing history and website interaction

In the past 12 months Poppy Bank has also collected and disclosed the following categories of Sensitive Personal Information for business purposes:

• Tax ID number, driver license, passport or ID card number
• Geolocation
• Bank account number and other financial information

Poppy Bank collects Personal Information and Sensitive Personal information from a variety of sources including directly form you in the context of a credit or deposit application and from your devices when you visit www.poppy.bank or our social media webpages and profiles.

Poppy Bank collects Personal Information and Sensitive Personal Information for a range of purposes including the following:

• Validation and identification of our customers
• Communication with our customers
• Processing financial transactions
• Offering target marketing and personalizing advertising that may be of interest to our customers and potential customers
• Fraud prevention
• Legal Compliance
• Data Analysis

Poppy Bank collects Sensitive Personal Information exclusively for the purpose of performing the services reasonably expected by an average consumer who requests those services and for the purpose of complying with any applicable laws and regulations.

Poppy Bank shares Personal Information or Sensitive Personal Information collected with our service providers and vendors who provide services to support our business activities.

Poppy Bank has not sold Personal Information or Sensitive Personal Information collected in the preceding 12 months to any third party.

Retention of Personal Information

Poppy Bank takes into account the following criteria when defining the duration for which your Personal Information and Sensitive Personal Information will be retained:

• We will retain your Personal Information and Sensitive Personal Information for as long as we maintain a business relationship with you in order to be able to provide the contracted services.
• We will retain your Personal Information and Sensitive Personal Information for as long as it is required by any applicable law or regulation.
• Additionally, we might retain your Personal Information and Sensitive Personal Information in connection to any relevant legal claim for the periods necessary to sustain those claims and in relation to any potential regulatory audits or investigations or any other relevant legal matter.

Your Rights as a California Resident

If you are a California resident you have the rights described below, with respect to the Personal Information and Sensitive Personal Information we have collected or disclosed about you as a consumer.

•Right to Know and Right to Request Information

You have the right to request that we disclose what personal information we collect, use, disclose or sell. You have the right to request information about the personal information we have collected about you within the last twelve months. You may request to know if we have collected, sold or shared with third parties for a business purpose the following information:

•The categories of personal information we have collected about you.
•The categories of sources of personal information we collected about you.
•Our business or commercial purpose for collecting or selling personal information about you.
•The categories of third parties with whom we share personal information.
•The specific pieces of personal information we have collected about.
•Whether we have sold your personal information and if so the categories of personal information that each category of recipient purchased.
•Whether we have disclosed your personal information for a business purpose and if so, the categories of personal information that each category of recipient received.

You may request this information no more than two times per year. To access the Individual Rights Management tool, click here.

• Right to Request Correction

You have the right to request that we correct inaccurate Personal Information that we maintain about you.

• Right to Request Deletion

You have the right to request that we delete your personal information. Under certain circumstances we may be unable to delete your personal information, for example, to comply with legal obligations, or to complete a business transaction that you have requested.

You can exercise your rights by calling us at (888) 636-9994 or writing to us at:

Poppy Bank
111 Santa Rosa Avenue, Suite 320
Attention: Compliance Department
Santa Rosa, CA 95404

or compliance-privacy@poppy.bank

Please identify which privacy right(s) you would like to exercise, include your name, address and a detailed description of your current or previous relationship with Poppy Bank.

You have the right to have someone you authorize make a request on your behalf. If this is the case, we might request proof of authorization.

Poppy Bank will process requests within 30 days.

Non discrimination

Poppy Bank shall not discriminate against a consumer because the consumer exercised any of the consumer’s rights under CCPA described above, including, but not limited to, by:

• Denying goods or services to the consumer.
• Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties.
• Providing a different level or quality of goods or services to the consumer.
• Suggesting that the consumer will receive a different price or rate for goods or services or a different level or quality of goods or services.

Changes to this CCPA Privacy Policy

Changes to this policy may be made at any time. When changes are made, the revised Policy will be posted to poppy.bank and will include a new “Effective” date.

If you have questions regarding your rights under the CCPA, please call us at: (888) 636-9994.

Privacy Policy

Why?

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do

What?

The types of personal information we collect and share depend on the product or service you have with us. This information can include:

• Social Security number and income
• Account balances and payment history
• Transaction history and overdraft history
• Images – Check Images for deposits

When you are no longer our customer, we continue to share your information as described in this notice.

How?

All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Poppy Bank chooses to share; and whether you can limit this sharing

Reasons we can share your personal information	Does Poppy Bank share?	Can you limit this sharing?
For our everyday business purposes— such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus	Yes	No
For our marketing purposes— to offer our products and services to you	Yes	No
For joint marketing with other financial companies	No	We don’t share
For our affiliates’ everyday business purposes— information about your transactions and experiences	Yes	No
For our affiliates’ everyday business purposes— information about your creditworthiness	No	We don’t share
For non-affiliates to market to you	No	We don’t share

Who is providing this notice?

Poppy Bank

How does Poppy Bank protect my personal information?

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. We restrict access to personal information about you to those employees who need to know that information to provide products or services to you.

How does Poppy Bank collect my personal information?

We collect your personal information, for example, when you

• Open an account or deposit money
• Pay your bills or apply for a loan
• Provide account information
• Give us your contact information

We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.

Why can’t I limit all sharing?

Federal law gives you the right to limit only

• Sharing for affiliates’ everyday business purposes—information about your creditworthiness
• Affiliates from using your information to market to you
• Sharing for non-affiliates to market to you

State laws and individual companies may give you additional rights to limit sharing.

The Poppy Bank website employs “cookie” technology, which is a small piece of data placed on your computer at the start of each “session” when you sign on to let our system know that you are an authorized user. This cookie is used throughout your entire session to allow you access to your account information and to provide you with the best service possible. If you disable cookies on your browser, the site may not function properly.

Poppy Bank does not collect any personally-identifiable information on the website without consent. We use cookies to gather aggregate information about our visitors’ browsing activities in order to improve our site and better serve our members. We use this data to analyze trends, track visitor movement, and gather demographic information. IP addresses are not linked to personally identifiable information. Poppy Bank provides calculators and other online tools to assist visitors in making financial decisions. These tools do not collect or store any information entered by web visitors. Online loan applications require additional information necessary to process online requests and this information is protected in accord with the financial institution’s Privacy Policy.

Cookies and Online Advertising

Both the Network Advertising Initiative and the Digital Advertising Alliance provide information about and technologies to opt-out of receiving some or all interest-based advertising. You can also opt-out of online advertising by clicking on the appropriate icon within an interest based ad which will take you to tools to help you manage these choices. These technologies are browser and device specific, they must be adopted on each device you use. If you block or clear cookies, these technologies may not work. You will continue to see ads on the site which reflect how you use the site and our services.

If you would prefer not to receive online advertising, you can opt-out of this activity at the DAA website by visiting http://www.aboutads.info/choices/.

Required Cookies

These cookies ensure that the website functions properly.

Analytical Cookies

These cookies allow us to analyze site usage so we can measure and improve performance of our sites.

Social Media

These cookies allow you to connect to your social networks and read reviews.

Targeted Advertising Cookies

These cookies are used to help better tailor advertising to your interests, both within and beyond Poppy Bank website.

In light of recent news about the Banking industry and the uncertainty that it has caused, I wanted to reach out to you to let you know your money is safe with us. Poppy Bank is a very strong financial institution with strong capital, liquidity and risk management practices. The three banks that failed had unique characteristics that contributed to their failure. One of the banks relied heavily on deposits from fintech and venture capital firms, while the other two relied heavily on crypto currency deposits.

At Poppy Bank, we apply a more conservative approach to managing our balance sheet. We do not deal with crypto currencies or provide financing to start ups. Additionally, we are extremely careful in how we invest client deposits in securities and loans. Specifically, we avoid concentrations in long-term, fixed rate securities. As of December 31, 2022, our securities portfolio consisted primarily of high-quality government securities with variable rates that reprice every three months or less, so we are not exposed to the same interest rate risk and investment losses being mentioned in recent news reports.

Other points to note about Poppy Bank:

• We are rated “5-Stars” by BauerFinancial Inc., “A” by Egan-Jones Rating Company, and “A+” by DepositAccounts.com, and we are recognized as one of the strongest financial institutions in the nation
• We are opening 10 branches in 2023, a testament to our growth and strength
• We do not rely on fintech, venture capital, or crypto currency deposits

As a result of Poppy Bank’s strength and the security of our clients’ deposits, we are in fact being contacted by clients of other banks about moving deposits to us from other financial institutions. We will continue to apply conservative decision making to ensure our clients’ deposits remain safe and secure. Thank you for being a valued client of Poppy Bank.

Sincerely,

Khalid Acheckzai
President and CEO
Poppy Bank

Commercial Property Assessed Clean Energy (C-PACE) Financing

C-PACE provides long-term, fixed rate and low cost capital to commercial property owners for water conservation, seismic and clean energy projects — and can be used to retroactively finance energy-efficient construction that has already been completed.

C-PACE is a national initiative with renewable energy programs tailored to meet local market needs. Programs are approved by local government and passed by state legislature. Then, program carriers like Poppy Bank are able to qualify projects and provide the financing.

Unlike other project financing, the borrowed capital from C-PACE projects is repaid over time via a voluntary tax assessment on the property. The security provided by the tax assessment, results in long term investments in building performance and transferability of the payment obligations to the next property owner when sold.

Location

Financing Terms

Qualifying Commercial Properties

We proudly serve a multitude of industries. Properties that qualify include, but are not limited to:

---

---

C-PACE financing may cover a significant percentage of the overall building property value and can be used for hundreds of energy-efficient improvements, including: seismic retrofitting for commercial buildings or industrial properties located in earthquake-prone areas, installation of solar panels or boilers, energy-efficient roofing, LED lighting upgrades and more. If what you are envisioning isn’t listed here, contact us to learn more about your options.

---

---

Recover Cash From Previous Projects Today!

Commercial property owners who have completed eligible projects within the past three years may be able to retroactively finance their projects with C-PACE financing. Retroactive financing allows property owners to pull additional liquidity out of their asset with C-PACE’s low-rate, long-term financing. To learn more about Poppy Bank’s C-PACE program contact Dan Ryan at dryan@poppy.bank.

Open a Poppy Premier Online Savings Account Today!

Poppy Bank’s Premier Online Savings allows you the flexibility to open an account from anywhere. Maximize the most of your deposits and
allow your cash to make money for you with one of the best high-yield savings accounts available. Get the most from your deposits today! Poppy
Bank’s Premier Online Savings account is FDIC-insured up to the allowable limits.

Visit One of our California Branch Locations to Learn More About Poppy Bank’s Products and Services

Poppy Bank can create a personal deposit portfolio that will put your money to work for you! We recognize that achieving your personal financial goals is very important and we are pleased to offer a full spectrum of competitive products and services to help. Below is a listing of our personal products and services. Please contact us for a more detailed explanation and schedule of fees and charges.

• CD Accounts
• Checking Accounts
• Savings Accounts
• Money Market Accounts
• Personal credit cards
• ATM/Debit Cards
• Online Banking
• Mobile Banking
• Mobile Deposit
• Automatic Transfers
• Safe Deposit Boxes
• Wire Transfers

Below is a listing of available Personal CD accounts. Please contact us for a more detailed explanation and schedule of fees and charges.

Features	3-MONTH CD	6-MONTH CD	9-MONTH CD	12-MONTH CD
Minimum Balance Requirement	$1,000	$1000	$1,000	$1,000
Interest Rate (a)	3.92%	3.92%	3.92%	3.92%
Annual Percentage Yield (a)	4.00%	4.00%	4.00%	4.00%
Automatically Renews at Maturity (b)	Yes	Yes	Yes	Yes
Free Online/Mobile Banking Access	Yes	Yes	Yes	Yes
Statement Frequency	Quarterly	Quarterly	Quarterly	Quarterly
Early Withdrawal Penalty (c)	3.00% of principal withdrawn prior to maturity	3.00% of principal withdrawn prior to maturity	3.00% of principal withdrawn prior to maturity	3.00% of principal withdrawn prior to maturity

Features	18-MONTH CD	24-MONTH CD	36-MONTH CD	48-MONTH CD	60-MONTH CD
Minimum Balance Requirement	$1,000	$1,000	$1,000	$1,000	$1,000
Interest Rate (a)	3.68%	3.68%	3.68%	3.68%	3.68%
Annual Percentage Yield (a)	3.75%	3.75%	3.75%	3.75%	3.75%
Automatically Renews at Maturity (b)	Yes	Yes	Yes	Yes	Yes
Free Online/Mobile Banking Access	Yes	Yes	Yes	Yes	Yes
Statement Frequency	Quarterly	Quarterly	Quarterly	Quarterly	Quarterly
Early Withdrawal Penalty (c)	3.00% of principal withdrawn prior to maturity	3.00% of principal withdrawn prior to maturity	3.00% of principal withdrawn prior to maturity	3.00% of principal withdrawn prior to maturity	3.00% of principal withdrawn prior to maturity

(a) Interest will be compounded daily and credited to your account monthly. We use the daily balance method to calculate the interest on your account. This method applies a daily periodic rate to the principal in the account each day. Interest begins to accrue on the business day you deposit noncash items (for example, checks). If you close your account before interest is credited, you will receive your accrued interest. The annual percentage yield assumes interest will remain on deposit until maturity. A withdrawal will reduce earnings.
(b) Your CD account will automatically renew at maturity for the same term length. You will have a grace period of seven calendar days after the maturity date to withdraw funds without penalty. We will notify you in advance of your account automatically renewing to provide the new maturity date, and you can contact us at (888) 636-9994 to learn what the interest rate and annual percentage yield will be upon renewal. You may call us at the same number to withdraw your funds at maturity or during the seven-day grace period.
(c) We will impose a penalty if you withdraw any of the principal from your account before the maturity date. The fee imposed will equal 3.00% of the principal amount withdrawn early.

Refer to the Personal Schedule of Fee & Charges for additional fees that may apply to your account.