We Are Committed to Protecting the
Privacy of Your Personal Information.

Regions (referred to in this Privacy Statement as "Regions," we, our or us) is committed to protecting the privacy of our users' personal information. To better protect your privacy, we have instituted the security and privacy practices outlined in this Privacy Statement ("Statement"). This Statement applies to www.rhif.regions.com.com including the features, applications, and functionality available via our website whether accessed via computer, mobile device or otherwise (collectively, the "Site"), and explains how Regions uses, collects, and shares information from or about you when you visit the Site. This Statement applies solely to information that visitors provide through our Site and describes the types of information Regions collects from visitors to the Site and what we do with this information.

By using this Site, you consent to this Statement, including your consent to our use and disclosure of information about you in the manner described in this Statement.

When you visit our Site, we may collect the IP address of the device (e.g. computer, mobile device, etc.) you use to connect to the Internet. Additionally, we may gather information such as the browser you're using, the type of operating system you have, and which site you came from. This is done to help us enhance your experience, to alert you of any possible software compatibility issues as well as help us tailor your online experience to best match your device.

In addition to the above mentioned information, we may also gather personal information that you provide to us, including but not limited to your name, address, phone number and email address. Such information may be gathered, for example, when you use the site to apply for and/or use Regions' banking products and services.

Collection of the above mentioned information allows us to offer online experiences and products that we believe may help you with your financial needs.

When you provide information to us through our Site, we may share your personal information with service providers to perform services on your behalf. Additionally, we use collected information for purposes as allowed by law such as: servicing; communicating with you; improving our products, services or Site; legal compliance; risk control; information security; anti-fraud purposes; marketing or the presentation of our products and services to you; tracking website usage, such as number of hits, pages visited, and the length of user sessions in order to evaluate the usefulness of our Site.

Cookies are pieces of data stored on your device. Browser cookies are assigned by a web server to the browser on your device. We use cookies and information gathered through their use to improve your online experience such as offering you more relevant services and products and tracking statistical information about navigation to and throughout certain areas of our site which we use to continually improve the design and functionality for a better experience. The cookie is not used to obtain your name or any personal data, and the information that is tracked is used only for internal purposes, such as to improve site navigation and to measure the effectiveness of our site. However, if you prefer not to accept cookies, you can set your browser to reject them or to alert you before one is placed. (Please see your browser's instructions for deleting or disabling cookies.)

We have policies and procedures restricting access to nonpublic personal information about you to those employees and service providers who have a need to know such information (e.g., to process your transactions). We and our service providers have implemented and maintain physical, electronic, and procedural safeguards designed to protect against loss or unauthorized access, disclosure, alteration or destruction of the information you provide on our Site.

We may choose to reference links in our content to other websites (including blogs, articles and other web sites) controlled by third parties who are not affiliated with Regions (Third-Party Sites). These Third-Party Sites may not follow our same privacy, security, or accessibility standards. We are not associated with the Third-Party Sites and are not responsible for, or endorse or guarantee, the content, websites, products, services or operations of the Third-Party Sites. Regions does not guarantee and is not responsible for the privacy or security of third party websites linking to our website nor the accuracy and completeness of the information they may provide. Regions is not responsible for how these Third-Party Sites collect information.

California residents also have specific privacy rights provided by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”). For more information on these rights, including how they may apply to California residents and how to exercise those rights, please see the Regions California Consumer Privacy Act Disclosure. The Regions California Consumer Privacy Act Disclosure also provides a description of (i) the categories of personal information collected and used; (ii) the categories of sources from which that personal information is collected; (iii) the specific business or commercial purpose for collecting the personal information; (iv) what information is disclosed to what category of third-party or service provider; and (v) the length of time personal information is retained.

In addition to the practices described in the Regions California Consumer Privacy Act Disclosure, Regions also may share your personal information for cross-contextual behavioral advertising.

In the preceding 12 months, Regions has shared the following categories of consumer personal information for cross-contextual behavioral advertising to service providers and the following categories of third parties:

• Identifiers to Social Media Company.
• Personal information described in the California Customer Records Statute (Cal. Civ. Code § 1798.80(e)) to Social Media Company.
• Internet or other similar network activity to Social Media Company.
• Geolocation data to Social Media Company.
• Inferences drawn from other personal information to Social Media Company.
• Sensitive personal information to Social Media Company.

We may share your personal information for the following purposes:

• Advertising and Marketing Services: We share personal information to provide advertising or marketing services on our own behalf.
• Commercial/Economic Interests: We share personal information to advance our commercial or economic interest..

In the preceding 12 months, we have not sold any personal information. In addition, we do not sell personal information. Also, it is our business practice not to sell personal information of minors under 16 years of age and we have no actual knowledge of doing so.

You may opt out of the sharing of your personal information by designating your preferences on our Do Not Sell or Share My Info page or at the bottom of the homepage.

In addition to the practices described in the Regions California Consumer Privacy Act Disclosure, Regions also may share your personal information for cross-contextual behavioral advertising.

In the preceding 12 months, Regions has shared the following categories of consumer personal information for cross-contextual behavioral advertising to service providers and the following categories of third parties:

• Identifiers to Social Media Company.
• Personal information described in the California Customer Records Statute (Cal. Civ. Code § 1798.80(e)) to Social Media Company.
• Internet or other similar network activity to Social Media Company.
• Geolocation data to Social Media Company.
• Inferences drawn from other personal information to Social Media Company.
• Sensitive personal information to Social Media Company.

We may share your personal information for the following purposes:

• Advertising and Marketing Services: We share personal information to provide advertising or marketing services on our own behalf.
• Commercial/Economic Interests: We share personal information to advance our commercial or economic interest..

In the preceding 12 months, we have not sold any personal information. In addition, we do not sell personal information. Also, it is our business practice not to sell personal information of minors under 16 years of age and we have no actual knowledge of doing so.

You may opt out of the sharing of your personal information by designating your preferences on our Do Not Sell/Share My Info page or at the bottom of the homepage.

The Site is not directed to individuals under the age of thirteen (13), and we request that these individuals do not provide any of their personal information through the Site. We do not knowingly collect information from children under 13 without obtaining verifiable consent from their parents. Visit the Federal Trade Commission website for more information about the Children's Online Privacy Protection Act (COPPA).

The Site is not directed to individuals under the age of thirteen (13), and we request that these individuals do not provide any of their personal information through the Site. We do not knowingly collect information from children under 13 without obtaining verifiable consent from their parents. Visit the Federal Trade Commission website for more information about the Children's Online Privacy Protection Act (COPPA).

If we make updates to this Online Privacy Statement, we will update the Policy with changes and revise the "date of most recent update" posted at the top of this Statement. Any updates to the Policy become effective when we post the updates on the Site. Your use of the Site following the update to the Policy will constitute acceptance of the revised Online Privacy Statement.

Click here for a copy of the Privacy Policy that the Bank provides to its loan customers.