Your privacy, clearly explained and fully protected.
We are committed to being transparent about how we collect, use, and protect your information. Whether you are a current member, a prospective member, or simply visiting our website, this page gives you access to all of our privacy policies and the tools to exercise your rights.
If you have questions about any of these notices, our team is available to help.
Clear, accessible privacy notices for every member.
California Consumer Privacy Act (CCPA)
SMS Privacy Policy
Consumer Privacy Policy.
Last updated and effective: May 1, 2024
Your privacy is important to us. This Consumer Privacy Policy explains how we collect, share, use, and protect your personal information through your online and offline interactions with us. It also references our other privacy policies, which serve different purposes under various laws and regulations that apply to us. Please read this notice carefully to understand how we handle your privacy.
I. Categories of Personal Information We Collect
In the preceding 12 months, we have collected the following categories of personal information (note that some categories may overlap):
| Category | Examples |
|---|---|
| A. Identifiers | A real name or alias; postal address; signature; home phone number or mobile phone number; member number, credit card number, debit card number, or other financial information; physical characteristics or description; email address; account name; Social Security number; date of birth, driver’s license number or state identification card number; passport number; or other similar identifiers. |
| B. Protected classification characteristics under state or federal law | Age, race, ancestry, national origin, citizenship, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status. |
| C. Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
| D. Biometric information | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information. |
| E. Internet or other similar network activity | Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. |
| F. Geolocation data | Physical location or movements. For example, city, state, country, and ZIP code associated with your IP address or derived through Wi-Fi triangulation; and, with your permission in accordance with your mobile device settings, and precise geolocation information from GPS-based functionality on your mobile devices. |
| G. Sensory data | Audio, electronic, visual, or similar information. |
| H. Professional or employment-related information. | Current or past job history, and salary. |
| I. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g, 34 C.F.R. Part 99)). | Educational records directly related to a class roster or student identification card, college or university, major (course of study), and graduation date. |
| J. Inferences drawn from other personal information. | Profile reflecting a person’s preference, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
II. Categories of Sources of Information We Collect
We obtain the categories of personal information listed above from one or more of the following categories of sources:
- A) From You or Your Authorized Agent: We may collect information directly or indirectly from you or your authorized agent, such as when you provide your name and Social Security number to open an account or when we collect information in the course of providing services to you.
- B) From Our Website and Mobile Applications: We collect certain information from your activity on our website and mobile banking app, including your IP address, device identifiers, browser type, operating system, date and time of visits, links clicked, and pages viewed. Geolocation data is only collected when actively used, and you can adjust location permissions at any time in your device settings.
The Role of Cookies and Online Tracking Technologies
We, and our service providers, may use cookies, web beacons, local shared objects, and other tracking technologies for fraud prevention and to improve your experience. These tools may detect characteristics of the device you use to access our online services.
Cookies are small data files stored on your device that help track areas of interest and may be used to customize your experience over time. Most browsers allow you to adjust settings to decline or delete cookies, though doing so may affect site functionality.
Clear GIFs, pixel tags, and web beacons are small transparent images used to recognize users, assess traffic patterns, and measure site and campaign engagement.
Local Shared Objects (“flash cookies”) may be stored on your device and function similarly to cookies but require separate management. For more information on managing Local Shared Objects, visit Adobe’s support page.
We use the following general categories of cookies:
- Essential Cookies: Technically required for website functionality and cannot be disabled. For example, they prevent users from having to log in on every new page in the same session.
- Performance and Function Cookies: Enhance website performance and functionality. Without them, certain features may be unavailable.
- Analytics and Customization Cookies: Track user activity to help us understand how visitors use our site and improve the experience.
- Advertising Cookies: Customize ad experiences and help prevent the same ad from appearing repeatedly.
Online Advertising and Behavioral Advertising
Advertisements on our site may be for our own products and services or for third-party offerings. The ads you see may be influenced by information we or our partners have about you, including account types and transactional history. We do not engage in online behavioral advertising (OBA).
- C) Third-Party Service Providers: We collect information from third-party service providers connected to our services, such as credit bureaus for loan evaluations or security firms that help us detect fraudulent activity.
- D) Third Parties for Commercial Purposes: We partner with a limited number of analytics and advertising firms that may collect information about your visits to our site and others in order to provide customized experiences. We require such partners to comply with all applicable laws.
- E) Google Analytics: We use Google Analytics to understand how visitors engage with our website. For information on how Google uses this data, visit Google’s Privacy Terms at policies.google.com.
III. How We Use Your Personal Information
We may use or disclose your personal information for the following purposes:
- To fulfill the reason for which the information was provided, such as processing a loan application
- To provide you with products, services, and information you have requested
- To send you alerts, event registrations, and notices about our products, services, or news of interest
- To carry out our contractual obligations, including billing and collections
- To improve our website and its content
- For testing, research, and analysis to improve existing products and develop new ones
- To protect the rights, property, or safety of Firefighters First, our employees, members, or others
- To detect and prevent security incidents, fraud, or illegal activity
- To respond to law enforcement or comply with applicable laws and court orders
- To evaluate or facilitate a merger, sale, or restructuring of our assets
We also use your personal information to advance our commercial interests, such as advertising our products, services, and membership.
IV. Sharing Personal Information
We may disclose your personal information to third parties for business or commercial purposes, under contracts that require recipients to keep your information confidential and use it only as agreed.
In the preceding 12 months, we have shared all 10 categories of personal information (Categories A through J) for business purposes with the following types of third parties:
- Our third-party service providers
- Our affiliated websites and businesses, where permitted by law
- Companies offering co-branded services or products
- Third parties that help us advertise our products and membership
- Third parties you authorize us to share your information with
- Third parties involved in a corporate transaction such as a merger or sale
- Third parties to comply with legal requirements, subpoenas, court orders, or to protect security and safety
V. Selling Personal Information
We do not sell your personal information for monetary consideration. In the preceding 12 months, we have not sold any personal information and do not intend to do so. If this changes, we will notify you as required by applicable law.
VI. Your Rights and Choices
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) regarding how we collect, use, share, and protect your personal information.
- A) Exceptions: These rights do not apply if you are not a California resident, or if the personal information in question is covered by specific financial privacy laws such as the Gramm-Leach-Bliley Act (GLBA), the Fair Credit Reporting Act (FCRA), or the California Financial Information Privacy Act (FIPA). Information governed by the GLBA or FIPA is covered under our separate federal privacy policy.
- B) Right to Access and Data Portability: You may request that we disclose the categories and specific pieces of personal information we have collected about you in the past 12 months, including the sources, purposes, and categories of third parties with whom it was shared. You may make this request up to twice per 12-month period.
- C) Right to Delete: You may request that we delete personal information we have collected from you, subject to certain legal exceptions, such as when the information is needed to complete a transaction, comply with a legal obligation, or detect and prevent fraud.
- D) How to Exercise Your Rights: To submit a verifiable consumer request, you may:
- Call us toll-free at 800.231.1626
- Complete the web form at https://www.firefightersfirstcu.org/ccpa-form/
- Visit one of our branch locations
After receiving your request, we will send instructions to verify your identity. Requests submitted by an authorized agent must include written proof of authorization. We will not charge a fee to process your request.
- E) Response Timing: We will respond to verifiable consumer requests within 45 days of receipt. If additional time is needed, we will notify you of the reason and the extension period in writing.
- F) Right of Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. This means we will not deny services, charge different rates, or provide a lower quality of service based on your exercise of these rights.
- G) Right to Correct: You may request corrections to personal information we retain about you. We generally rely on you to update and correct your information directly.
- H) Objection to Processing of Sensitive Information: In some cases, you may object to our use or disclosure of sensitive personal information we have collected. For details on the types of sensitive information we collect, refer to Section IV above.
VII. Do Not Track Signals
We do not currently employ tracking signals on our website and are therefore unable to recognize Do Not Track (DNT) signals. If tracking mechanisms are added in future updates, we will revise this policy to explain how we respond.
VIII. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy at any time. When changes are made, we will notify you by email or through a notice on our website homepage.
IX. Children’s Online Privacy
Our website is not intended for children under the age of 13. We do not knowingly collect or maintain personal information from children under 13 without parental consent. For more information about the Children’s Online Privacy Protection Act (COPPA), visit the Federal Trade Commission’s website at ftc.gov.
X. Third-Party Website Links
Our website may include links to third-party websites. When you visit a linked site, you are subject to that site’s privacy and security practices. We are not responsible for how third-party websites collect, use, or share your information, and we encourage you to review their privacy policies before providing any personal information.
XI. Security
We use reasonable physical, electronic, and procedural safeguards that comply with federal standards to protect and limit access to your personal information, including device safeguards and secured facilities. Please note that information transmitted electronically may not be fully secure in transit. We recommend avoiding unsecured channels when communicating sensitive information such as your Social Security number.
XII. Contact Us
If you have questions or comments about this Privacy Policy, how we handle your personal information, or wish to exercise your rights, please contact us:
Phone: 800.231.1626
Website: Contact Us – Firefighters First Credit Union
Mail: Firefighters First Credit Union, Attn: Operations, 1520 West Colorado Blvd, Pasadena, CA 91105