First National Bank is committed to protecting the privacy of its customers’ information. As part of our commitment to protecting our customer’s privacy we have adopted the following privacy principles and have implemented them at all levels of our organization.

1. Our Customers Expect Privacy.
   We understand that you expect your personal financial affairs to be held in the strictest confidence. As a customer of First National Bank, you have entrusted us to protect your privacy and to safeguard your personal information. We take this responsibility seriously and have designed policies and procedures to prevent misuse of this information.
   
   
2. Why We Collect, Retain, and Use Customer Information.
   We collect, retain, and use information about you only where we believe it will help administer our business or provide products, services, and other opportunities to you. If we collect information about you, we will do so only for a specific business purpose; and if you request, we will tell you why we are collecting the information. Some of the reasons we use your information are the following: to protect and administer your records, accounts, and funds; to comply with certain laws and regulations; to help us design and improve our products and services: and to better understand your financial needs.
   
   
3. We Will Maintain Accurate Information.
   Maintaining the accuracy of your personal information is important. We have procedures to help assure that your personal information is accurate, current and complete. We also have procedures to correct inaccurate information in a timely manner, including processes to update information or remove outdated information. If you discover any information we have about you that is incorrect, please let us know.
   
   
4. We Limit Employee Access To Your Information.
   Access to personally identifiable information about you is limited to those employees who have a specific business reason to know such information. Our employees are educated and trained on the importance of confidentiality and privacy of customer information. Appropriate disciplinary action is taken if this Policy or procedures relating to this Policy are not adhered to.
   
   
5. Security Procedures Protect Your Information.
   We establish and maintain security procedures designed to help prevent unauthorized access to your private, confidential information. We also update and test our computers, hardware, software, and other technology to assure the integrity and security of our information systems.
   
   
6. We Restrict Disclosure of Account Information.
   We do not reveal specific information about your accounts or other personally identifiable data to parties outside our organization unless it is under the following circumstance: you request or authorize disclosure; the information is provided to help complete a transaction initiated by you; the information is provided to a reputable credit bureau or similar information reporting agency; or the disclosure is other wise lawfully permitted or required.
   
   
7. We Maintain Your Privacy When We Do Business Outside Our Organization.
   It is sometimes necessary to provide personally identifiable information about you to a party outside our organization. Some examples are when we hire a vendor or service company to prepare your account statements or to provide support for one or more of our products or services. When we work with outside businesses or companies, these vendors must abide by applicable law. If a vendor is hired to use your information for marketing purposes, we will disclose this to you in advance and give you the opportunity to “opt out,” in which case your information would not be provided to the vendor for marketing purposes.
   
   
8. We Will Not Share Your Information Outside Our Organization.
   We maintain procedures designed to protect your confidential information. Other than under the limited exceptions explained in paragraph seven, above, it is our practice not to share confidential customer information outside our organization. You do not need to request this confidentiality – it is our standard practice.