California Consumer Privacy Act (CCPA)

The California Consumer Privacy Act (CCPA) provides California residents with certain rights regarding the personal information that businesses have about them. This includes the right to request access or deletion of your personal information, as well as the right to direct a business to stop selling or sharing your personal information.  This page has been provided to make it easy for you to understand and exercise your rights. For more information about California residents’ rights and our privacy practices please review our California Privacy Statement below.

Opting Out of the Selling or Sharing of Personal Information

While Arvest does not sell your personal information in exchange for any monetary consideration, we do share your information for other purposes that could be deemed a “sale” as defined by the California Privacy Rights Act (CCPA).  Click the link below to control how your information is collected and shared or “sold.”  Your selection is specific to the device, website and browser you are using, and is deleted whenever you clear your browser's cache.

California residents only: Do Not Sell or Share My Personal Information

Submitting a Verifiable Request to Know, Correct or Delete Personal Information

Only you or an authorized agent may make a consumer request to know, correct or delete your personal information. To make a request, please click on the link below or call us at (866) 952-9523:

California residents only: Submit a Verifiable Consumer Request

To designate an authorized agent to submit a Verifiable Consumer Request on your behalf, please click on the link below or call us at (866) 952-9523:

California residents only: Designate an Authorized Agent

California Privacy Statement

This California Privacy Statement (“Statement”) is for California Residents only. This Statement describes the personal information that Arvest Bank (“we,” “our,” or “us”) collects in the course of its business, explains how this information is collected, used, sold, shared, disclosed and retained, describes rights provided by the California Consumer Privacy Act (“CCPA”) to California Residents (“consumers” or “you”) regarding their personal information and explains how they can exercise those rights.

In addition, federal privacy laws protect your financial personal information. Please see our Gramm-Leach-Bliley Act Privacy Notice for more information.

What is Personal Information?

Personal information is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to you (“personal information”). “Personal information” does not include: (1) publicly available information, such as information that is lawfully made available from federal, state or local records, and (2) de-identified or aggregate consumer information.

Certain provisions of the CCPA do not apply to personal information covered by or collected under industry-specific federal and state privacy laws.

Personal Information We collect, Use or Share

In the past 12 months, we have collected the following categories of personal information:

• Identifiers. This may include a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number or other similar identifiers.
• Personal information described in the California Customer Records Statute (Cal. Civ. Code § 1798.80(e)). This may include contact information, government-issued identification numbers, account numbers, health or financial information or other similar information.
• Characteristics of Protected Classifications under California or Federal Law. This may include race, nationality, sex or family/marital status.
• Commercial information. This may include records of personal property, products or services purchased, obtained or considered, or other purchasing or consuming histories or tendencies.
• Internet or other similar network activity. This may include browsing history, search history or information regarding a consumer's interaction with a website, application or advertisement.
• Geolocation data. This may include physical location or movements.
• Audio, electronic, visual, thermal, olfactory or similar information. This may include images or recordings.
• Professional or employment-related information. This may include current or past job history or performance evaluations.
• Education information. This may include student records and directory information.
• Inferences drawn from other personal information. This may include inferences based upon other information collected above to create a profile about a consumer.
• Sensitive personal information. This may include government-issued identification numbers, login information, precise geolocation data, racial or ethnic origin, religious or philosophical beliefs, union membership, sexual orientation or biometric information.

Collecting Your Personal Information

In the past 12 months, we have collected personal information from the following categories of sources:

• You (or your representative)
• Service providers
• Public sector entities (i.e., local, state or federal government entities)
• Our affiliates
• Our websites and mobile applications
• Third party websites, such as social media websites
• Your employers
• Credit reporting agencies
• Government agencies

We may collect and disclose your personal information for the following business or commercial purposes:

• Account Services: We use personal information to (1) establish and maintain an account you may have opened with us and (2) provide services, products or information you may have requested.
• Security and Fraud Detection: We use personal information to detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity; and prosecute those responsible for that activity.
• Debugging: We use personal information to identify and repair technical errors that impair system functionality.
• Improvement of Products and Services: We use personal information to verify, maintain and improve existing products and services.
• Internal Research: We use personal information to research and develop new products and services.
• Audits: We use personal information to review current interactions with you and related transactions (e.g., counting and verifying ad impressions, auditing compliance).
• Merger/Acquisition/Bankruptcy, etc.: We may use your personal information as part of a merger, acquisition, bankruptcy or other transaction where a third party assumes control of us.
• Commercial/Economic Interests: We use personal information to advance our commercial or economic interest.
• Advertising and Marketing Services: We use personal information to provide advertising or marketing services and provide such data to third party advertising platforms for cross-context behavioral advertising.
• Legal Obligations: We use personal information to comply with legal obligations.

Disclosing Your Personal Information for a Business or Commercial Purpose

We may disclose your personal information to service providers, contractors and third parties in order to carry out specific business or commercial purposes. In the preceding 12 months, we have disclosed the following categories of consumer personal information for business or commercial purposes to service providers and the following categories of third parties:

• Identifiers, personal information described in the California Customer Records Statute, commercial information and professional or employment-related information may be disclosed to:
  • Entities to whom you or your representative have authorized us to disclose your personal information
  • Contracted service providers
  • Our affiliates
  • Public sector entities (i.e., local, state or federal governments)
  • Attorney’s and legal counsel where disclosure is required by a legal process
• Characteristics of Protected Classifications under California or Federal Law may be disclosed to:
  • Attorney’s and legal counsel where disclosure is required by a legal process
  • Public sector entities (i.e., local, state or federal governments)
• Internet or other similar network activity may be disclosed to:
  • Contracted service providers
  • Our affiliates
  • Public sector entities (i.e., local, state or federal governments)
  • Attorneys and legal counsel where disclosure is required by a legal process
• Geolocation data may be disclosed to:
  • Contracted service providers
  • Our affiliates
  • Attorneys and legal counsel where disclosure is required by a legal process
• Audio, electronic, visual, thermal, olfactory or similar information may be disclosed to:
  • Entities to whom you or your representative have authorized us to disclose your personal information
  • Contracted service providers
  • Our affiliates
  • Public sector entities (i.e., local, state or federal governments)
  • Attorneys and legal counsel where disclosure is required by a legal process.
• Education information may be disclosed to:
  • Entities to whom you or your representative have authorized us to disclose your personal information.
  • Contracted service providers
  • Our affiliates
  • Public sector entities (i.e., local, state or federal governments)
  • Attorneys and legal counsel where disclosure is required by a legal process
• Inferences drawn from other personal information may be disclosed to:
  • Entities to whom you or your representative have authorized us to disclose your personal information
  • Contracted service providers
  • Our affiliates
  • Public sector entities (i.e., local, state or federal governments)
  • Attorneys and legal counsel where disclosure is required by a legal process.
• Sensitive personal information may be disclosed to:
  • Entities to whom you or your representative have authorized us to disclose your personal information.
  • Contracted service providers
  • Our affiliates
  • Public sector entities (i.e., local, state or federal governments)
  • Attorneys and legal counsel where disclosure is required by a legal process

Selling & Sharing your Personal Information

In the preceding 12 months, the only information we have sold or shared with third parties is Internet or other similar network activity information. We have provided this information to third party advertising platforms for cross-context behavioral advertising so they can market our products to you on other websites that you may visit. We do not use or disclose sensitive personal information for purposes other than those provided by the CCPA regulations at 11 C.C.R. § 7027(m). It is our business practice not to sell or share the personal information of minors under 16 years of age and we have no actual knowledge of doing so.

How Long We Retain Your Personal Information

We store personal information for as long as we believe is reasonably necessary or appropriate to fulfill our business purposes or to comply with applicable law, audit requirements, regulatory requests or orders from competent courts.

Your Rights under the CCPA

As described in more detail below, the CCPA provides you with certain rights regarding the collection, use and disclosure of your personal information. The CCPA also provides consumers with certain rights (for example, opt-out rights) if a business sells or shares personal information.

With a limited exception, the rights described below do not apply to certain personal information, including, for example, information covered by or collected under industry-specific federal or state privacy laws such as the Gramm-Leach-Bliley Act, the Fair Credit Reporting Act, the California Financial Information Privacy Act, the Health Insurance Portability and Accountability Act of 1996 and the California Confidentiality of Medical Information Act.

• Right to Know About Personal Information Collected, Shared, Sold or Disclosed. When we collect personal information, you have the right to know the categories of personal information collected and the categories of sources from which it was obtained, the purposes for which personal information was collected, sold or shared, the categories of third parties to whom we disclosed personal information, the specific pieces of personal information we have collected about you and the categories of personal information that were shared or sold.
• Right to Request Deletion of Personal Information. You have the right to request that we delete your personal information unless we need to keep the information as permitted by the CCPA.
• Right to Request Correction of Inaccurate Personal Information. You have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Opt-Out of the Selling or Sharing of Personal Information. You have the right to opt-out of the selling or sharing of personal information.
• Right to Limit the Use or Disclosure of Sensitive Personal Information. You have the right to limit our use of or sharing of sensitive personal information.
• Right to Non-Discrimination and No Retaliation. We will not discriminate against you for exercising your CCPA rights. If you are an employee, applicant for employment or independent contractor, we also will not retaliate against you for exercising your CCPA rights.

Exercising Your Rights Under the CCPA

Opting Out of the Selling or Sharing of Personal Information

To opt-out of the sharing of your personal information, you may designate your preferences online (Do Not Sell or Share My Personal Information) or call us toll-free at (866) 952-9523

Submitting a Verifiable Request to Know, Correct or Delete Personal Information

Only you (or an authorized agent) may make a consumer request to know, correct or delete your personal information. To make a request, please do so by either:

• Calling us at (866) 952-9523
• Visiting arvest.com

Once you submit a request, we will verify your identity. If you have a password-protected account with us, we may verify your identity through our existing authentication practices for your account.  If you do not have an account with us, we may ask you to provide certain information, such as your first and last name, date of birth, address and social security number to verify your identity.  If you submit a request to know specific pieces of personal information, delete certain information or correct certain information, in addition to verifying your identity with information we have on file, you also may be required to submit a signed declaration under penalty of perjury stating that the requestor is the consumer whose personal information is the subject of the request. Generally, if we are unable to verify your identity, we will explain why we were unable to do so and will deny your request.  However, if we are unable to respond to your request for specific pieces of information, we will evaluate your request as if it is a request to know the categories of personal information that we have collected about you.

Once we receive your verifiable consumer request, we will confirm our receipt of your request within 10 business days and provide you with additional information about how we will process the request. Our goal is to respond to your request within 45 calendar days of receiving the request. However, in the event that we need more time (up to 90 calendar days) to respond to your request, we will notify you and explain why we will need more time to respond.

Our response generally will cover the 12-month period prior to your request. For Requests to Know, we will provide disclosures of the information we collect or maintain about you on or after January 1, 2022, including beyond the 12-month period preceding the date we receive the request unless certain exceptions apply or you request a specific time period. We are only required to respond to a request for access twice within a 12-month period. If we are unable to comply with your request, we will explain why and identify any rights you may have to appeal.

We will not charge you for exercising your rights under the CCPA unless your request is excessive, repetitive or manifestly unfounded. If we determine that the request warrants a fee, we will provide you an explanation and a cost estimate before completing your request.

Authorized Agent for Requests

You may designate an authorized agent to make a request on your behalf. Unless you have a power of attorney, if you would like to use an authorized agent to submit a request, you must provide the authorized agent with written and signed permission to do so and either verify your own identity directly with us or directly confirm that you provided the authorized agent with permission to submit the request. We may deny a request from an authorized agent if we do not receive proof that they are authorized to act on your behalf.

Changes to Our California Privacy Statement

We are required by law to update this California Privacy Statement at least once each year. This California Privacy Statement was last updated on January 1, 2023.

Contact Information

If you have any questions regarding our privacy policies, our California Privacy Statement, the ways in which we collect, use, disclose, share, sell and retain your personal information or how to exercise your rights under the CCPA, please do not hesitate to contact us at:

• Phone: (866) 952-9523
• Website: arvest.com/contact