Consumer Privacy Policy
Protecting your privacy is important to Thorntons. We value the trust you have placed in us, and your continued confidence is important to us. As you review our pledge, please remember that: We make safeguarding the information we gather about you a priority.We maintain security practices to keep personal information about you safe. We do not sell or share customer information with unrelated companies so that they can market their products to you. When we believe that an unrelated company offers products or services that would be of interest to you, we may communicate to you about them. These companies will not learn about your relationship with us unless you respond to their offer. When it comes to privacy, we believe that you have the right to make meaningful choices. If you tell us not to do so, we will not call, or send direct mail to you, for additional products or services. We will provide you with helpful information about privacy and information security.
Online Privacy and Security
Thorntons pledges to protect your privacy online by adhering to the practices described below.Using Information to Help You
Using Information to Help Us
Security of Online Sessions
Preventing Identity Theft
Links to External Sites
Using Information to Help You
To safeguard your information online, we will need to collect or remember information about you from time to time. During registration, we will ask you to provide us with a Personal ID and Password. This ensures that when you interact online with us, it will always be safe and secure.Thorntons sites use temporary session "cookies" to assist us in securing your online activities and enhance the performance of the site. We examine group activity and do not watch individual browsing patterns. In addition, Thorntons sites use persistent cookies to personalize your banking visit and to analyze visitor trends. For example, personalizing your visit allows you to see unique products and services developed especially for your state of residence. We also analyze our visitor trends to help us understand how our customers are using our Web site. This enables us to build a more user-friendly experience. While your browser may allow you to "reject" cookies, our Web site requires that you accept all cookies in order for the Web site features and security mechanisms to function fully.
Using Information to Help Us
Occasionally, you may encounter banner ads for Thorntons products and services on other Internet sites. We may use third party ad serving companies to distribute our ads on sites where we've paid to advertise. When you click on a Thorntons banner, it will take you to our site where the advertised product or service is found. Sometimes these ads contain small graphics or tags in them. These tags capture information such as IP address, browser type and pages being viewed when a user clicks on an ad so we can track the effectiveness of our advertising. These tags do not capture personal information about you. The vendors we use to distribute our ads are prohibited from using any information collected except to track advertising effectiveness.We will ask for an email address when you set up a new account or service with us. We may use this address to communicate with you regarding our products and services. You will, however, have the option to "opt out" of receiving any marketing materials.
Security of Online Sessions
We are committed to protecting the confidentiality of your information and online transactions. We use the highest industry standard for online security -- Secure Sockets Layer (SSL) encryption -- to secure your online sessions. This process safeguards your banking session from intruders.Preventing Identity Theft
Thorntons is dedicated to protecting your personal information. Strict policies and procedures have been implemented to ensure that your personal information is kept confidential. Only authorized signers can access account information. Every effort is made to protect our customers from fraud. We will never initiate a request for sensitive information from you via email (ie. Password). If you receive an email that requests this type of sensitive information, you should be suspicious of it. We strongly suggest that you do not share your password with anyone, under any circumstances.Links to External Sites
At times, we may provide links to sites outside the control of Thorntons to alert you to products, information and services offered by third parties. Provided links are meant to supplement Thorntons products, services or information or provide other information we believe may be of interest to you. Although we will only provide links to sites we believe are reputable, we do not make any representations concerning the linked sites' contents or availability. Please note that linked sites may have different privacy and information security policies than Thorntons. You should review each site's privacy and information security policies carefully before you enter confidential information onto the site.California Privacy Center
California Privacy Center
Updated: January 2023
We are dedicated to doing the right thing. The information on this page provides details on how we respond to and implement processes to uphold applicable state laws. The laws on this page give individuals certain rights regarding the personal information that we or our affiliates have collected from or about them.
The information on this page complements the notices and disclosures regarding your rights under federal laws and regulations (e.g., the Gramm-Leach-Bliley Act). For more information, please visit our Privacy Policy.
California Privacy Notice for California residents
Last updated: January 2023
This Privacy Notice for California Residents (this "Notice") applies solely to residents of the State of California ("consumers" or "you") and supplements the information contained in any other Privacy Statement or Notice provided by us and our affiliates (collectively, "our" or "we"). Please note that some of our affiliates may provide a separate privacy notice, in which case that notice will apply to your personal information. We adopt this Notice to comply with the California Consumer Privacy Act of 2018 and, as amended, the California Privacy Rights Act of 2020 (together, "CPRA"). This Notice describes how we collect, use, and disclose information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household ("personal information"). This Notice applies to personal information we collect online and offline, such as when you apply for our products or services, use our websites or applications, respond to surveys, contact customer support, when you visit our offices or attend one of our events, or otherwise interact with us (collectively, "Services"). The information on this page complements the notices and disclosures regarding your rights under federal laws and regulations (e.g., the Gramm-Leach-Bliley Act). For more information, please visit our online Privacy Policy.
The rights contained in this Notice may not apply in certain situations depending on your relationship with us and our other legal obligations, and as otherwise provided for in the CPRA, and the GLBA exemption contained therein. We may, from time to time, make changes to this Notice. If we do make changes to the Notice, we will let you know by posting the revised Notice with a new "Last Updated" date posted at the top of the Notice. Any changes to this Notice will become effective when posted unless indicated otherwise. We encourage you to review this Notice regularly to stay informed about our information practices and the choices available to you.
Categories of Personal Information We Collect
Where We Collect Your Personal Information
Use of Personal Information
Disclosure of Personal Information for a Business Purpose
Retention Period
Sharing or Selling Your Personal Information
Use of Sensitive Personal Information
Summary of Prior 12-Month Personal Information Handling Practices
Your Rights and Choices
Annual Report
Contact Information
Categories of Personal Information We Collect
We may collect the following categories of personal information when you engage our Services:- Identifiers - A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number
- Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))- A name, Social Security number, address, telephone number, passport number, driver's license or state identification card number, employment, bank account number, credit card number, debit card number and ATM card number, or any other financial information.
- Sensitive personal information - Social Security number, driver's license, state identification card, or passport number; your account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; racial or ethnic origin, religious beliefs, or union membership; the contents of your mail, email, and text messages unless we were the intended recipient of the communication.
- Internet or other electronic network activity information - Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
- Audio and visual Information - Audio, electronic, or similar information we capture through your communications with us, e.g., voice recordings of telephone conversations, emails and instant messaging, and security images.
- Employment information - Current or past job history.
- Inferences drawn from other personal information - Inferences drawn from any of the information identified above to create a profile about you reflecting preferences, characteristics, attitudes and or similar trends.
Where we collect your personal information
We will collect the personal information described above from one or more of the following sources:- Directly from you or your company when you provide this information to us, when you request information, apply for products or services from us, use our websites or applications, respond to surveys, contact customer support, when you visit our ATMs, branches or offices or attend one of our events, or otherwise interact with us
- From our affiliates, co-owners, partners and other related parties
- From other online and offline sources, such as public databases, social media platforms, and other third parties
- Vendors who provide services on our behalf
Use of personal information
We may use or disclose personal information that we collect for one or more of the following business purposes to, among other things:- Provide you with, or evaluate your eligibility for, products and services that you or your company request from us.
- Communicate with you about your accounts or transactions with us.
- Send you important information regarding our products and services, changes to this Notice and/or other similar administrative information.
- Enter into transactions and conduct business dealings with our business partners, service providers and contractors.
- Allow you to participate in surveys, sweepstakes, contests and similar promotions, and to administer such promotions (note that these promotions may contain additional disclosures regarding our collection and/or use of your information).
-
Consistent with local law, required disclosures, and choices and controls that may be available to you:
- Send you offers and promotions for our products and services, or products and services that may be of interest to you;
- Personalize content and experiences on our Services;
- Verify your identity and/or location (or the identity or location of your authorized representative) for security, fraud prevention and other risk control purposes; and
- Provide you with advertising based on your activity on our Services and on third-party websites and applications. For additional information regarding our use of your information for personalization and tracking, please refer to the Online Tracking and Advertising section of the Online Privacy and Security Policy.
- Optimize or improve our products and services.
- Help to ensure security and integrity. Detect, investigate, and prevent activities that may violate our policies or be illegal.
- Report to credit bureaus
- Comply with our legal and regulatory obligations.
- Enforce our terms and conditions and otherwise protect our rights and operations.
Disclosure of personal information for a business purpose
We may disclose your personal information for a business purpose to the following categories of parties:- Affiliates;
-
Service providers and contractors who help manage, develop, and analyze our business and/or deliver
services to us and our clients, such as;
- Professional services organizations, such as auditors and law firms
- Our business partners
- Online advertising services and networks
- Internet service providers
- Data analytics providers
- Operating systems and platforms
- Social networks
- Data brokers
- Agencies and organizations working to prevent fraud in financial services; or
- Law enforcement, regulatory and other governmental agencies.
Retention period
We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.Sharing or selling your personal information
We do not sell personal information to third parties for monetary consideration without your prior consent, but we may share your personal information with third parties for cross-context behavioral advertising. The categories of personal information that we may have shared are:- Identifiers, including IP addresses, cookie identifiers, and other pseudonymous identifiers
- Account information
- Protected classification information
- Internet or other electronic network activity information
- Professional or employment information
- Inferences drawn from personal information
For more on your personal information share/sale rights, see Right to Opt-out of Sharing or Selling.
We reserve the right to transfer any personal information we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, dissolution or liquidation).
Use of sensitive personal information
Under the CPRA, we collect the types of sensitive personal information described in theCategories of Personal Information We Collect section above. We only collect and use sensitive personal information for certain limited purposes, such as providing services and products to consumers, detecting data security incidents and protecting against fraud ("Limited Purposes"). Because we use this sensitive personal information for Limited Purposes, there is no need for us to provide a Limit Use and Disclosure of Sensitive Personal Information right under the CPRA.Summary of 12-month personal information handling practices
We provide in the chart below a summary of our prior 12-month personal and sensitive information handling practices. You can learn more about the information we collect at or before the point of collection above in the Categories of Personal Information We Collect, Where We Collect Your Personal Information, Use of Personal Information, and Disclosure of Personal Information for a Business Purpose sections.| Categories of Personal Information | Sources | Business or Commercial Purpose of Processing and Disclosure and Recipients of Personal Information |
|---|---|---|
| Identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, or other similar identifiers. |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
| Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as a name, Social Security number, address, telephone number, passport number, driver’s license or state identification card number, employment, bank account number, credit card number, debit card number, or any other financial information. Some personal information included in this category may overlap with other categories |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
| Sensitive personal information, such as social security, driver's license, state identification card, or passport number; your account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; the contents of a your mail, email, and text messages unless we were the intended recipient of the communication; |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
| Internet or other electronic network activity information, such as browsing history, search history, information on a consumer's interaction with a website, application, or advertisement |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
| Audio and visual information, such as audio, electronic or similar information such as call recordings. |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
| Employment information, such as current or past job history |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
| Inferences drawn from other personal information, such as inferences drawn from any of the information identified above to create a profile about you reflecting preferences, characteristics, attitudes and or similar trends |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
Your rights and choices
This section describes your CPRA rights and explains how to exercise those rights:Right to know
You have the right, subject to certain exceptions defined in the CPRA and other applicable laws and regulations, to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- The business or commercial purpose for collecting, selling, or sharing the personal information.
- The categories of third parties with whom we disclose that personal information.
- The categories of personal information that each recipient received.
- The specific pieces of personal information we collected about you.
Right to Request Deletion
You have the right, subject to certain exceptions defined in the CPRA and other applicable laws and regulations, to request that we delete any of your personal information that we collected from you and retained. Once we receive and confirm your verifiable consumer request we will delete (and direct the recipients of your personal information to delete) your personal information from our records.Right to Correct Your Personal Information
You have the right, subject to certain exceptions defined in the CPRA and other applicable laws and regulations, to submit a request to correct any inaccurate personal information that we may have about you. To correct your information, go to the My profile screen, click the Edit link by Contact Information, and correct the relevant fields. You can also submit your request to correct personal information by clicking Support in the left navigation, select Contact us, and then contact a customer service representative via the options listed.Exercising your rights
To exercise the rights described above, please submit a verifiable consumer request to us through the following method:Right to know
To request the details of the personal information that we have about you and to request access, to that information please call the number or send an email to the address in the Contact Us link on the left side of the page. Please include the following information in the request:- First Name
- Last Name
- Street Address
- City
- State
- Postal Code
- Phone Number
- User ID
You may only make a verifiable consumer request for access twice within a 12-month period.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will generally verify your identity by asking you to provide personal information related to your recent interactions with us. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
Requests by Authorized Agents
You may exercise your privacy rights through an authorized agent. If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf.Nondiscrimination
You have the right not to be discriminated against for exercising any of your privacy rights. This includes us not: (a) denying you goods or services; (b) charging you different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; (c) providing you a different level or quality of goods or services; (d) suggesting to you that you will receive a different price or rate for goods or services or a different level or quality of goods or services; and (e) retaliating against you for exercising your privacy rights.Annual Report
2022 CCPA Annual Report
| Status | Right to know | Right to request deletion | Right to opt out | Total |
|---|---|---|---|---|
| Total requests received | 167 | 109 | N/A | 276 |
| Total requests fulfilled | 118 | 72 | N/A | 190 |
| Total requests denied/not fulfilled | 8 | 11 | N/A | 19 |
| Average number of days to respond | 11.91 | 11.98 | N/A | 11.94 |