We, our, and us, when used in this notice, mean Security State Bank and Burt Bancshares, Inc.

This is our privacy notice for our customers. When we use the words "you" and "your" we mean the following types of customers.

• Our consumer customers who have a continuing relationship by purchasing or holding financial products or services such as a(n):
  - Deposit account
  - Loan account
  - Safe deposit box
  - Insurance policy issued by or through us
  - Self-directed Individual Retirement Account
  - Internet banking services

We will tell you the sources of the information we collect about you. We will tell you what measures we take to secure that information.

We first define some terms.

Nonpublic Personal Information means information about you that we collect in connection with providing a financial product or service to you.

Nonpublic personal information does not include information that is available from public sources, such as telephone directories or government records. Hereafter, we will use the term "information" to mean nonpublic personal information as defined in this section.

An affiliate is a company we own or control, a company that owns or controls us, or a company that is owned or controlled by the same company that owns or controls us. Ownership does not mean complete ownership, but means owning enough to have control.

A nonaffiliated third party is a person we do not employ or a company that is not an affiliate of ours. This is also known as nonaffiliated third party, or simply, an "other party".

THE INFORMATION WE COLLECT

We collect information about you from the following sources:

• Information you give us on applications or other forms such as your name, address, social security number, assets and income
• Information about your transactions with us
• Information about your transactions with our affiliates such as your account balance, payment history, parties to transactions and credit card usage
• Information from a consumer reporting agency such as your creditworthiness and credit history
• Information we receive through our Customer Identification Program

INFORMATION WE DISCLOSE ABOUT YOU

We may disclose all of the information we collect as described above to companies that perform maketing services on our behalf or to other financial institutions with whom we have joint marketing agreements.

We may disclose nonpublic personal information about you to the following types of third parties:

• Financial service providers, such as securities broker-dealers and insurance agents.

We many also disclose non public personal information about you to nonaffiliated third parties as permitted by law.

THE CONFIDENTIALITY, SECURITY AND INTEGRITY OF YOUR NONPUBLIC PERSONAL INFORMATION

We restrict access to information about you to those employees who need to know that information to provide products or services to you. We maintain physical, electronic, and procedural safeguards to protect this information. Except as described above, we do not disclose any nonpublic person information about our customers to anyone, except as permitted by law.

INFORMATION ABOUT FORMER CUSTOMERS

We do not disclose information about former customers, except as permitted by law.