ONLINE	WHAT DOES NORTHRIM BANK DO WITH INFORMATION COLLECTED ONLINE?
Why?		Northrim Bank values your privacy. Our goal is to maintain your trust and confidence when handling personal and financial information about you.
What does this cover?		This Online Privacy Policy describes how we collect information when you visit or use Northrim Bank's websites, mobile applications and other online services. It also describes how we use and share that information and explains your privacy choices. Our online services are intended for a U.S. audience.
What about my financial information?		Our Bank Privacy Policy applies to information we collect about individuals who seek, apply for or obtain our financial products and services. To review our Bank Privacy Policy, visit northrim.com/home/utility/security-and-privacy.

HOW DOES NORTHRIM BANK COLLECT INFORMATION ONLINE?
Directly from you	Such as when you apply or register for our products and services, use our online banking services or mobile apps, communicate with us, respond to surveys or provide feedback.
Automatically	We and others on our behalf may collect Device Data, Online/Mobile Activity Data and other information automatically when you interact with us online.

WHAT INFORMATION DOES NORTHRIM BANK COLLECT?
Depending on how you interact online with us, we may collect various types of information. For example, when you sign up for or use a financial product or service online, we may collect:
Contact or identity data	Your name, mailing address, email address, phone number, date of birth, government-issued identifier (e.g., Social Security number, tax ID number, driver's license number or other identifier), citizenship, username and password and other information that directly identifies you.
Account-related data	Account number, credit/debit card number, account history, account balances, loan details, vehicle or property information, information about beneficiaries and joint account holders, business-related information and other information related to your Northrim Bank accounts, applications or inquiries.
Transaction data	Credit/debit card purchases, payment or transaction history, transaction details when you transfer money to or from your Northrim Bank accounts and third-party billing information or statements.
Credit report information	Your credit score, credit history and other information that we receive from credit reporting agencies.
Demographic data	Gender, marital status, age, household size/composition, education level, income, occupation and employment status.

When you browse our website or use our mobile apps, we may also collect or request access to:
Device data	Your device type, web browser type and version, operating system type and version, display/screen settings, language preferences, device contacts (e.g., to facilitate Zelle® payments), your device's camera (e.g., to deposit checks), internet protocol address, mobile network information, general location (e.g., city, state, or country), precise location (e.g., to find a nearby Northrim Bank branch or ATM), cookie IDs, device IDs, mobile advertising IDs and likely connections among different browsers and devices that you use ("Device Data").
Online/mobile activity data	Login data, search history, information about how you use and interact with our online services (including content viewed, links clicked, and features used), when and how often you use our online services, the webpage from which you clicked a link to come to our online services and crash reports ("Online/Mobile Activity Data").
Marketing data	Your marketing preferences, information about products or services we think you might like and inferences based on your interactions with us.
Communications data	Your communication preferences and details or the content of your communications with us (e.g., chat messages).
Survey and research data	Your responses to questionnaires, surveys, requests for feedback and research activities.
If you disclose information relating to other people to us or to our service providers, you represent that you have the authority to do so and to permit us to use it in accordance with this Online Privacy Policy. We may combine information collected online with information from other contexts, such as phone calls and emails with you, third-party data sources used for fraud prevention, identity verification, or marketing purposes and publicly available data sources. Combined information is treated in accordance with this Online Privacy Policy.

HOW DOES NORTHRIM BANK USE THIS INFORMATION?
Providing, maintaining and servicing your accounts	Enabling you to apply for and obtain Northrim Bank products or services, evaluating your application or eligibility, providing customer service, communicating with you and providing online tools and features.
Processing transactions and payments	Transferring funds between accounts, fulfilling orders and conducting settlement, billing, processing, clearing or reconciliation activities.
Verifying your identity	Authenticating your login credentials, verifying your location to allow access to your accounts and storing security questions for subsequent verification online or over the phone.
Detecting and preventing fraud	Determining fraud risk and identifying fraudulent transactions.
Protecting against security risks	Monitoring network activity logs, detecting security incidents, conducting data security investigations and otherwise protecting against malicious, deceptive, fraudulent or illegal activity.
Advertising and marketing	Sending you offers for special products and services via mail, email or text message, displaying online advertising, targeting our offers or promotions, conducting market research and evaluating or improving the effectiveness of our marketing efforts.
Conducting analytics and research	Examining which parts of our website you visit or which aspects of our mobile apps you find most useful, evaluating user interface and experience, testing features or functionality, performing debugging and error repair and analyzing the use of our online services.
Improving our products and services	Personalizing and optimizing your website and mobile experiences, recognizing you across different browsers and devices, improving existing products and services and developing new products and services.
Carrying out legal and business purposes	Complying with applicable laws, responding to civil, criminal or regulatory lawsuits, subpoenas or investigations, exercising or defending legal claims, resolving complaints and disputes, performing compliance activities, analyzing credit risk, conducting credit reporting activities, regulatory reporting and otherwise operating and managing our business.
Using aggregated and de-identified information	Using or modifying information in a manner that does not allow us to reasonably identify you, such as compiling aggregated statistics to understand trends. Aggregated and de-identified information is no longer subject to this Online Privacy Policy.

HOW DOES NORTHRIM BANK SHARE THIS INFORMATION?
Affiliates	We may share your information with companies affiliated with Northrim Bank.
Business partners	We may share your information with companies that we have partnered with.
Service providers	We use other companies to provide services on our behalf, such as hosting our information systems, servicing customer accounts, detecting and preventing fraud, communicating with our customers, analyzing and improving our online services and targeting our advertising.
Third parties you authorize	We share information with your consent or at your direction, such as when you use an account aggregation tool, send money to friends and family via Zelle® or transfer funds to another bank.
Credit bureaus	We share information with credit reporting agencies, such as Experian, Transunion and Equifax, to report on or learn about your financial circumstances and for other lawful purposes.

Government entities and others

For legal or necessary purposes, such as:

· To respond to requests from our regulators or to a warrant, subpoena, governmental audit or investigation, law enforcement request, legal order or other legal process.

· To facilitate a merger, acquisition, sale, bankruptcy or other disposition of some or all of our assets.

· For other legal purposes, such as to enforce our terms and conditions, exercise or defend legal claims or protect the life, safety or property of our customers, ourselves or others.

Recipients of aggregated data

We may share aggregated and de-identified information with third parties for any purpose.

WHAT ONLINE TRACKING TECHNOLOGY DOES NORTHRIM BANK USE?
We and third-party providers acting on our behalf use a variety of online tools and technologies to collect Device Data and Online/Mobile Activity Data, including for debugging, fraud prevention, session management, personalization, analytics and targeted advertising. We may associate this tracking data with your Northrim Bank account.
Server logs	Automatically record information and details about your online interactions with us, such as your visit to our website on a particular time and day.
Cookies	Small text files that a website's server stores in your web browser to recognize your device and store information about your account and preferences, such as pages visited, language preferences and your relationship with us. You may be able to manage cookies on your device.
Pixel tags	An image or small string of code (also known as a web beacon, clear GIF, pixel or tag) placed in a website, advertisement or email, used to determine whether you have interacted with a specific part of our website, viewed a particular advertisement or opened a specific email.
SDKs and mobile advertising IDs	Our mobile applications may include third-party software development kits ("SDKs") that allow us and our service providers to collect information about your mobile app activity. Some mobile devices come with a resettable advertising ID that allows us and our service providers to identify your mobile device over time for advertising purposes.
Third-party plugins	Our online services may include plugins from other companies, including social media companies, which may collect information about the pages you visit and share it with the company that created the plugin. These plugins are governed by the privacy policies of the companies that created them.

PERSONALIZATION, ANALYTICS AND TARGETED ADVERTISING
Personalization	We may customize content and advertisements for our products and services on our websites and mobile apps, using information we collect about you online, alone or combined with information about your relationship with us.
Analytics	We and our third-party providers use online tracking technologies to engage in data analytics, auditing, measurement, research, reporting and debugging, and to measure the effectiveness of our advertising.
Targeted advertising	We and our third-party providers may collect information about your activities on our online services and across different websites, mobile apps and devices over time for targeted advertising purposes, and may show you ads based on that information, including across the internet and on other devices.
You may opt out of certain targeted advertising. Please note that you may still receive general advertising from Northrim Bank even after you opt out of targeted advertising.

YOUR PRIVACY RIGHTS AND CHOICES
Review or update your account information	You may review or update certain account information by logging into your account online. If you cannot change the incorrect information online, please contact our Call Center, or call or write to us using the contact information listed on your account statements or records.
Opting out of marketing e-mail	Our marketing emails contain instructions on how to opt out. You may receive subsequent marketing emails until we can act on your request. If you opt out, we may still send you emails about your account or for other non-marketing purposes.
Opting out of targeted advertising in mobile apps	You can adjust the privacy settings available on your mobile device (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android).
Managing marketing cookies	You may configure your web browser to inform you when cookies are set, delete your cookies or block cookies altogether. Your decision not to accept cookies could limit access to some of our online services and features.
Do Not Track and Global Privacy Control	Certain web browsers can transmit "Do Not Track" signals, but there is no universally accepted standard for how to interpret them, and our online services do not function differently in response. Some browsers and browser extensions also support Global Privacy Control (GPC), an automated signal indicating a preference to opt out of the sale or sharing of personal information. You may still opt out of certain targeted advertising as described above.

MANAGE HOW NORTHRIM BANK SHARES YOUR FINANCIAL INFORMATION

Our Bank Privacy Policy governs how we share certain information with our affiliates and third parties, including for direct marketing purposes, and will enable you to opt out of certain types of sharing.

DATA RETENTION

We retain the information described in this Online Privacy Policy for as long as necessary to provide our online services to you, to comply with our legal, regulatory and recordkeeping obligations, to resolve disputes, to enforce our agreements and for other legitimate business purposes. Retention periods vary depending on the type of information and the purpose for which it was collected.

KEEPING INFORMATION SECURE

At Northrim Bank, we care about your safety and security. We have an information security program that includes administrative, technical and physical measures to protect information within our company. While
we strive to protect your information, no method of data transmission or storage is 100% secure, and we cannot ensure or warrant the security of your information.

If you suspect a website or mobile app is pretending to be from Northrim Bank ("spoofing"), do not enter personal information. Instead, contact us in a branch or through a phone number you know is associated with your account.

If you receive a communication that claims to be from us, but you are unsure of its origin, do not click any links or share personal or financial information. Instead, contact our Call Center so we can help you determine if we initiated the communication.

If you have reason to believe your interaction with us is no longer secure, please immediately call us. Visit our Security and Privacy page at northrim.com/home/utility/security-and-privacy for more information.

LINKS TO THIRD-PARTY WEBSITES

Our online services may contain links to websites and services operated by third parties, provided for your convenience. We do not control, and are not responsible for, the privacy or security practices or the content of any third-party website or service and linking to it does not mean we endorse it. We encourage you to review the privacy policy and terms of use of any third-party website or service before providing your information.