What you should know.

1. Definitions for terms used in this notice
Nonpublic Personal Information is any information that we collect about you in connection with providing a financial product or service to you. Nonpublic personal information does not include information that is available to the general public from either government records or widely distributed media such as telephone directories.

• Affiliate, in the context of this notice, means a company we own or control.
• Nonaffiliated third party means a company that is not an affiliate of ours.

2. Information we collect
We collect nonpublic personal information about you from the following sources:

• Information we receive from you on applications or other forms;
• Information about your transactions with us, our
  affiliates, or others; and
• Information we receive from a consumer reporting agency.

We collect this information so we can 1) deliver products and services tailored for your needs, 2) know who you are and thereby prevent unauthorized access to your information, and 3) comply with laws and regulations that govern us.

3. Parties to whom we disclose nonpublic personal information
By policy, we do not disclose any nonpublic personal information about our customers or former customers to anyone except as permitted by law. By law the bank may disclose nonpublic personal information in the following circumstances.

• To companies who perform transaction processing for the bank.
• To disclose information necessary to enforce the bank’s legal or contractual rights or the rights of any other person who is engaged in the financial transaction.
• To disclose information required in the ordinary course of business.
• To provide information to insurance rate advisory organizations, guaranty funds or agencies, agencies that are rating the bank, persons who are assessing the bank’s compliance with industry standards, and the bank’s attorney’s, accountants and auditors.
• To the extent permissible under the Right to Financial Privacy Act and the Fair Credit Reporting Act.
• To comply with federal, state or local laws, rules and other applicable legal requirements.

We may also disclose all of the information that we collect as described in Section 2 above to companies that perform marketing services on our behalf or to other financial institutions with whom we have joint marketing agreements.

Deposit Customers: we may also disclose nonpublic personal information about you to our affiliate, NOR-AM Service Corporation, to provide you with information about additional products and services.

4. Former Customers
If you decide to close your account(s) or become an inactive customer, we will adhere to the privacy policies and practices described in this notice.

5. Confidentiality and security
We restrict access to nonpublic personal information about you to those employees who need to know that information to provide products or services to you. We maintain physical, electronic, and procedural safeguards that comply with federal standards to guard your nonpublic personal information.

Special notice regarding U.S.A. PATRIOT ACT Customer Identification Requirements
In accordance with Section 326 of the USA PATRIOT Act signed October 26, 2001, North American Savings Bank, F.S.B. is required to obtain a copy of the documents used in identifying our new account customers and in identifying signatory individuals added to an existing or new account. In some cases, identification will be requested for those individuals banking with the Bank prior to the effective date of the customer identification requirements because original documentation was not obtained with the opening of the account, or the Bank is unable to form a reasonable belief that it knows the true identity of the existing customer. In all cases, protection of our customer’s identity and confidentiality is the Bank’s pledge to you.