PRIVACY NOTICE

CLICK HERE to download our Privacy Notice

Rev. December 2010

FACTS: What does Citizens State bank do with my information?

Why? Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share and protect your personal information. Please read this notice carefully to understand what we do.

What? The types of personal information we collect and share depend on the product or service you have with us. This information can include:

Social Security number and income
Account balances and payment history
Credit history and credit scores

When you are no longer our customer, we continue to share your information as described in this notice.

How? All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Citizens State Bank chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information	Does Citizens State Bank Share	Can you limit this sharing?
For our everyday business purposes — such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus	Yes	No
For our marketing purposes — to offer our products and services to you	Yes	No
For joint marketing with other financial companies	No	We don’t share
For our affiliates’ everyday business purposes — information about your transactions and experiences	No	We don’t share
For our affiliates’ everyday business purposes — information about your creditworthiness	No	We don’t share
For nonaffiliates to market to you	No	We don’t share

Questions? Call toll-free 1-800-369-5362

WHAT WE DO

How does Citizens State Bank protect my personal information? To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

How does Citizens State Bank collect my personal information? We collect your personal information, for example, when you

open an account or deposit money
pay your bills or apply for a loan
use your credit or debit card

We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.

Why can’t I limit all sharing?
Federal law gives you the right to limit only

sharing for affiliates’ everyday business purposes – information
about your creditworthiness
affiliates from using your information to market to you
sharing for nonaffiliates to market to you

State laws and individual companies may give you additional rights to limit sharing.

DEFINITIONS

Affiliates Companies related by common ownership or control. They can be financial and nonfinancial companies.

Citizens State Bank does not share with our affiliates.

Nonaffiliates Companies not related by common ownership or control. They can be financial and nonfinancial companies.

Citizens State Bank does not share with nonaffiliates so they can
market to you.

Joint marketing A formal agreement between nonaffiliated financial companies that
together market financial products or services to you.

Citizens State Bank doesn’t jointly market.

Disclosures

LINKS TO THIRD PARTY WEBSITES

This site may include links to other 3rd party websites. When you click on these links, you will leave our website and will be redirected to another site. We neither endorse nor guarantee any 3rd party offerings. We do not control or make any representation or warranty of any kind about the content, use of, or inability to use linked 3rd party websites.

UNAUTHORIZED ACTIVITY

The activity on this site is monitored for security purposes. This website may be used for authorized purposes only. Unauthorized access or use is not permitted and constitutes a crime punishable by law.

CHILDREN’S ONLINE PROTECTION

This website is not directed to children, although we may periodically advertise special accounts that may be appropriate for children. Parents of children interested in any of our online services should contact us at one of our offices.

SECURITY INFORMATION

Protect yourself while online.

• Don’t provide your personal information while online unless you are sure of whom you are providing it to. Don’t reply to or click links in any e-mail asking for your personal information.

• Before you download any software be sure to read the fine print. Some downloads come with spyware.

• Use anti-virus software and a firewall and be sure to keep the patches up to date.

• Be sure the security settings on your software are set up properly.

• Never allow your browser to save your PIN.

• Keep your internet PIN and passwords in a secure location. Do not store them on your computer.

The following websites are provided as a courtesy. They provide you with up to date information that is important in ensuring that you protect yourself from online fraud.

www.onguardonline.gov

www.cisa.gov

www.ftc.gov

Turnstile Privacy Addendum

Last updated: JUNE 18, 2025

1. INTRODUCTION

Turnstile, developed by Cloudflare, Inc. (Cloudflare), is a pro-privacy website security tool that processes minimal Signals (as defined below) solely to protect web properties against malicious activity by distinguishing human users from bots and blocking bot traffic.

Cloudflare does not control whether a website chooses to use Turnstile; instead, we make Turnstile available to any website that is looking for a way to detect and block bot traffic.

2. SCOPE OF THIS ADDENDUM

This Turnstile Addendum is supplemental to Cloudflare’s main Privacy Policy. It provides additional information specific to your use and interaction with Turnstile. This Addendum also applies to the personal data processed using Cloudflare’s Challenge Platform, and any reference to “Turnstile” in this addendum applies equally to the Challenge Platform.

The Cloudflare Privacy Policy continues to apply to your use and interaction with Turnstile, except where this Turnstile Addendum provides more specific information. In those cases, the more specific information will apply instead.

3. INFORMATION WE COLLECT

Cloudflare Turnstile processes a variety of client-side signals (“Signals”) such as client IP address, TLS Fingerprint, User-Agent Header and Sitekey and associated origin. Cloudflare does not have the ability to directly identify any individuals from any of the Signals Turnstile collects, including IP addresses.

4. HOW WE USE INFORMATION WE COLLECT

(i) Bot detection and blocking

Turnstile is a tool to protect web properties by distinguishing human users from bots and blocking any detected bot traffic that could otherwise harm the safety and security of that property.

It does so by evaluating the Signals listed above specific to both the website visitor and the website visited. The purpose of collecting these Signals is not to identify, profile or target any individuals but solely to detect and block bots. The Signals collected by Turnstile are strictly necessary for this purpose (i.e. detecting and blocking bots to enable visitors to enjoy a safe and secure experience when visiting websites that have implemented Turnstile).

Cloudflare is a data processor of Signals that we process to provide the Turnstile service to our customers, that is, securing our customers’ websites. This means that we process Signals for this purpose on behalf of, and pursuant to instructions issued by, our website operator customers (who are the data controllers of any data processed for this purpose). If you have questions, or wish to exercise any data protection rights, regarding Cloudflare’s processing of Turnstile data to provide our service, please contact the relevant website operator.

(ii) Improving Turnstile’s bot detection capabilities

Cloudflare also processes the Signals described in this Privacy Notice to improve Turnstile. This is necessary to refine and improve our bot detection algorithms in order to respond to evolving bot threats, and to maintain the security of the web properties that website visitors choose to visit.

Cloudflare is a data controller of Signals that we process to improve Turnstile’s bot detection capabilities. This Turnstile Privacy Notice (in conjunction with Cloudflare’s main Privacy Policy) governs our processing of Signals for this purpose.

5. NOTICE TO EU AND UK RESIDENTS

To the extent that the data described in the Turnstile Privacy Notice qualifies as personal data, then:

When processing this personal data as a processor to protect our customers’ websites, our customers, as controllers, determine the lawful basis of this processing, and we process this data under their instruction and on their behalf; and
When processing this personal data as a controller, we rely on our legitimate interests in improving the effectiveness of Turnstile’s bot detection capabilities to process this Turnstile data.

6. COOKIES

The Signals collected by Turnstile are strictly necessary for the purpose of detecting and blocking bots to enable visitors to enjoy a safe and secure experience when visiting websites that have implemented Turnstile.

For more information about the cookies used by Cloudflare, please check our Cookie Policy and our Turnstile Developer Docs.

CONTACT FOR PRIVACY CONCERNS

If you have questions or concerns about this Turnstile Privacy Notice or your personal data processed through Turnstile, please contact Cloudflare’s Data Protection Officer at dpo@cloudflare.com.

ADA Accessibility Statement

Updated 5/14/2021

Citizens State Bank is committed to providing a website that is accessible to the widest possible audience, regardless of technology or ability. We aim to comply with all applicable standards, including WCAG 2.0 accessibility standards. If you experience any difficulty in accessing any part of this website, please feel free to call us at 815.801.4524 or to email us at contact@csbnow.com. We will work with you to provide the information, item, or transaction you seek through an alternate communication methods or one that is accessible for you consistent with applicable law.