Truist Privacy | Truist (2024)

This Truist Statement of Online Privacy Practices (“Privacy Policy”) describes how we collect information when you visit or use Truist’s websites, mobile applications, and other online services (“Online Services”) that link to this Privacy Policy. It also describes how we use and share such information and explains your privacy rights and choices.

Our Online Services are intended for a U.S. audience. The terms “Truist,” “we,” “us,” or “our” mean Truist Financial Corporation and its U.S. affiliates. “You” means an individual who visits our Online Services and does not refer to a business or other entity or to individuals outside the U.S.

Truist’s business address is Truist Financial Corporation, 214 N. Tryon Street, Charlotte, North Carolina 28202, USA. Our Client Contact Center may be reached at844-4TRUIST (844-487-8478).

When you visit a Truist website, mobile application, or otherwise interact with us online, we may collect the following information:

• Your browser type (such as Google Chrome, Microsoft Edge)
• Your Internet Protocol or (“IP”) address or other unique device identifiers (such as Media Access Control (MAC)
• The presence of any software on your device that may be necessary to view our site
• Configuration information about the device you are using, including, but not limited to, your device type, web browser type and version, operating system type and version, display/screen settings, and language preferences
• Information from your mobile device, such as contacts, photos (for example, to deposit checks or capture receipts), mobile network information, and cross-device IDs
• Location information from your device to find nearby branches, ATMs, and other locations or mobile device location information to provide optional deals
• Personal information submitted on applications, forms, and onsite electronic messaging. Types of personal information typically include:
  • Name
  • Social Security number
  • Driver’s license number or other government-issued ID
  • Address
  • Email
  • Telephone number
  • Account numbers and account information
  • Usernames
  • Passwords and other authentication information like PINs, security questions, and other secure sign-on methods¹
  • Communication or opt-out preferences (such as email or text messages)
  • Other non-public information, including credit and income information, and in certain cases Protected Health Information (as defined by the U.S. Health Insurance Portability and Accountability Act)
• Website analytics information such as pages visited and average time spent on a particular page
• Search engine traffic referral information
• Responses to advertisem*nts and promotions
• Transactional information from behind the secure login about your relationship with us (such as types of accounts or the state in which you bank)

^{Disclosure 1} About biometric-enabled sign-ons: Your device stores the information it needs to recognize your facial features or fingerprints. Truist’s Mobile App uses your device’s functionality to obtain a signal that your device recognizes your facial features or fingerprints when you sign on. Truist does not have access to the information your device uses to enable facial or fingerprint recognition, nor does Truist have access to or store your facial image or fingerprint data. You can always turn off facial or fingerprint recognition and go back to inputting user ID and password at any time.Your device’s user information will have additional information regarding its user controls and settings, including its privacy and security controls.

The information we collect online or through your mobile device helps Truist to:

• Effectively manage your account:
  • Protectyour identity and the security of your personal and account information from unauthorized access
  • Process transactions on your account
  • Respond to product applications and questions
• Fulfill regulatory requirements
• Analyze our site usage and enhance the user's experience:
  • Diagnose server problems
  • Alert users of any possible software compatibility issues
  • Help us make decisions about how various technologies are used and identify usage trends
• Send marketing communications:
  • Present personalized or targeted offers, ads, or content we believe may be of interest to you
  • Determine the effectiveness of promotional campaigns
• Make business decisions
• Analyze data and credit risk
• Perform market research
• Conduct audits
• Develop and improve products and services
• Carry out other day-to-day business operations, such as to comply with applicable laws; share with our affiliates and subsidiaries; disclose to contractors, business partners, and other third parties under specific contracts and agreements; perform compliance activities; conduct credit reporting activities; and engage in human resources activities
• Prevent and detect fraud
• Defend against risks to security:
  • Monitor network activity logs
  • Detect security incidents and conduct data security investigations
  • Guardagainst malicious, deceptive, fraudulent, or illegal activity
• For any other purposes outlined in our Consumer Privacy Notice.

Truist shares your information in different ways as permitted and required by law. For example, we may share your information with:

• Affiliates and other entities in the Truist family
• Businesses with which we partner to offer products and services for our clients or prospective customers, such as joint marketing partners or bill pay partners
• Service providers that provide various services to us, such as those we use to help detect and prevent fraud, improve our online services, and to better market and advertise our services to you
• Other parties when you authorize or direct us to share your information, such as when you use a third-party service to help manage your financial information across various financial institutions or when you transfer funds from Truist
• Credit reporting agencies to report on or learn about your financial circ*mstances and as permitted by law
• Government entities and other third parties as needed for legal or similar purposes, such as:
  • To respond to requests from our regulators
  • To respond to a warrant, subpoena, governmental audit or investigation, law enforcement request, legal order, or other legal process
  • To facilitate a merger, acquisition, sale, bankruptcy, or other disposition of some or all of our assets
  • To exercise or defend legal claims

Please see theTruist Consumer Privacy Noticefor more information on how Truist may share your personal information and how you may be able to limit certain types of sharing.

Please note, we may also share aggregated and de-identified data, such as aggregated statistics regarding product usage, with third parties.

We reserve the right to transfer personal information we have about you in the event we sell or transfer all or a portion of our business or assets (including, without limitation, in the event of a reorganization, dissolution, or liquidation).

Truist and its online advertising and marketing partners may employ various technologies to collect information, including:

• Cookies –

  Cookies are pieces of information stored directly on your device. Cookies provide information that is used for security purposes, to facilitate navigation, to display information more effectively, and to personalize/customize your online experience. The cookies Truist uses do not collect or store any personally identifiable information about you. Truist uses persistent cookies to learn how visitors use our site, such as which pages are viewed the most, to identify the most common navigation paths, or to customize the presentation of information on the site. Truist also uses session cookies to assist in delivering some online transactions, like online banking. Session cookies are no longer active after you log off the service that initiated them, and all session cookies are automatically deleted when you close all browser windows. Truist may also contract with third parties, including, but not limited to, Adobe (see Cross-Device Tracking, below), to track user activity on our website. You can choose to block or disable these cookies as most devices and browsers offer their own privacy settings. Doing so, however, may result in diminished performance on our site.

• Marketing pixels, web beacons, clear GIFs, or other technologies –

  This technology may be placed on certain pages of our website, applications, emails, and other marketing initiatives. These tags usually work in conjunction with cookies and allow us to measure the effectiveness of our site and compile statistics about usage and response rates.

• Software Development Kits (SDKs) –

  Our mobile applications may include third-party SDKs that allow us and our service providers to collect information about your mobile app activity. In addition, some mobile devices come with a resettable advertising ID (such as Apple’s IDFA and Google’s Advertising ID) that, like cookies and pixel tags, may allow us and our service providers to identify your mobile device over time for advertising purposes in compliance with applicable app store consent rules.

• Advertising and Cross-Device Tracking –

  Truist uses certain Adobe Analytics services and products, which help companies build websites, applications, and advertisem*nts that seamlessly flow between all your devices (such as a desktop, laptop, tablet, phone, or smart watch).The Adobe services recognize which of your devices are linked through use of technology that includes cookies and your IP address (without collecting your sensitive personal information). Visit theAdobe websitefor more information on opting out of certain services, cross-device tracking, and/or to unlink your devices. NOTE: Adobe needs to install a cookie on your browser to identify that you have opted out. If you delete the opt-out cookie, or change devices or web browsers, you will need to opt out again.

• Firewalls, passcodes, data encryption, and other safety features –

  Truist uses these technologies to help secure the information you provide to us. To learn more about how we safeguard your information online, please visit ourTruist fraud and securitycenter for measures you can take to protect yourself.

• Third-party plugins –

  Other companies may have plugins that appear on certain pages of our website or applications. Some of these, for example, may be from social media companies (for example, the Facebook “Like” button). These plugins may collect information, such as information about the pages you visit, and share it with the company that created the plugin even if you do not click on the plugin. These third-party plugins and the way they operate are governed by the privacy policies and terms of the companies that created them.

Truist advertises its products and services on pages within our sites and on mobile applications. To make the content and advertising as informative and useful as possible, Truist may target and personalize content and advertisem*nts for products and services on our site and within Online Banking (when clients sign on or off to online accounts with their user ID/password).

If you would prefer to not receive aspecificadvertisem*nt, content or offerson Truist authenticated (after signing in) pages, you can click “No Thanks” to the specific pop-up ad you’re being presented. Note that this will not prevent you from potentially receiving other ads, content, or offers for a different product or service. Also note that simply closing the pop-up message by clicking on the “X” will not register that you do not wish to receive this specific message again.

Truist advertisesits products and services on websites and applications not affiliated with Truist. The third-party companies we hire to display these ads use their own tracking technologies to measure the effectiveness of these ads and to understand your interests. Many of our third-party partners have their own privacy policies. We encourage you to review these policies carefully.

Some of our third-party advertising is interest-based and may use information about your online interests to customize the online ads you see. Truist has adopted the use of AdChoices offered by the Digital Advertising Alliance for our interest-based advertising (excluding ads appearing on platforms that do not accept the icon). To opt out of interest-based advertising and conduct a DAA Webchoices Browser Check, visit YourAdChoices. Anyone receiving an interest-based ad can click on the displayed icon to receive more information. YourAdChoices does not prevent you from receiving advertisem*nts; instead, it allows you to control whether you receive interest-based advertisem*nts and from which companies. For additional options, you may also visit NAI Opt Out of Interest-Based Advertising.

Truist provides experiences on social media platforms such as Facebook, Instagram, LinkedIn, or Twitter that enable online sharing and collaboration. We use social media to facilitate social engagement and sharing, when such sharing is appropriate and safe. Read more about Truist and social mediaterms and conditions here. Please note, any content you post, such as pictures, information, opinions, or any personal information that you make available to other participants on these social platforms, is subject to the terms of use and privacy policies of those platforms. Please refer to them to better understand your rights and obligations with regard to such content.

Given the very public nature of social media, it is critical that we all safeguard confidential financial information. If you post information on a Truist site that we feel should be shielded from public view, we will remove it. This includes not only specific details about your Truist accounts and other private, confidential information (such as your Social Security number), but details of information relayed in private conversations between you and Truist representatives. Please know that in taking down or editing your posts, we are focusing our experience and best judgment to keep your personal information safe.

Email transmitted across the internet is normally not protected and may be intercepted and viewed by others. Therefore, you should refrain from sending any confidential or private information via unsecured email to Truist. We'll never ask you to send confidential information to us via email, such as your logon ID, password, full account numbers, or Social Security number. To secure your communications with us, use Secure Messaging in online banking.

Occasionally, we will retain the content of your email—and our replies—to confirm proper responses to your questions and requests, to comply with legal and regulatory requirements, and to ensure that we consistently deliver an enjoyable client experience to you.

In summary, the following links can help you to customize and control your privacy preferences when interacting with Truist online:

• You can also control your marketing preferences for direct mail, email, and telemarketing preferences, along with the sharing of your personal information via our automated voice response line at888-800-3420, or our Client Contact Center.
• Do Not Track and Global Privacy Control
  • We will respond to the Global Privacy Control signal as explained further in our CCPA Notice at Collection. At this time, we do not currently respond to other browser “do not track” signals or other mechanisms that allow you to tell websites you do not want to have online activities tracked.
• You can also update your email preferenceshere.

Keeping your account information accurate and up to date is very important. If your account information is incomplete, inaccurate or not current, please visit the Privacy Center. You can also contact us or call or writeto us at thetelephone numbers or appropriate addressfor changes listed on your account statements, records, online or other account materials. You can also speak to a client representative at a branch location, your financial advisor, or an account representative.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.We will ask you to verify your identity to help us respond efficiently to your request.

Under non-U.S. data protection laws, you may have the right to complain to a data protection authority about our collection and use of your personal information.