Privacy Policy | NexTier Bank

Information You Provide Directly

When you open an account, apply for a loan or use NexTier Bank services, you provide information including your full legal name, date of birth, Social Security number or tax identification number, physical address, email address, phone number, employment information, income details and government-issued identification. For business accounts, this includes business formation documents, EIN, beneficial ownership information and authorised signer details.

You also provide information when you communicate with us through secure messaging, telephone, email, in-branch conversations or correspondence. This includes the content of your communications and any supporting documentation you submit in connection with account inquiries, loan applications, dispute resolutions or service requests.

Information We Collect Automatically

When you use NexTier Bank online banking, the mobile app or our website, we automatically collect technical information including your IP address, browser type and version, device type and operating system, session duration, pages visited, referring URL, and device identifiers. This information is collected through server logs, cookies and similar tracking technologies.

We also collect transaction data generated by your use of NexTier Bank products and services, including deposit and withdrawal amounts, payment recipients, transfer details, loan payment history, bill pay activity, wire transfer records and debit card transaction details. This transactional data is inherent to providing banking services and is retained in accordance with federal record-keeping requirements.

Account Administration and Service Delivery

We use your information to open and maintain accounts, process transactions, originate and service loans, execute fund transfers and wire transfers, process bill payments, deliver eStatements and account notices, and provide customer support. Your contact information is used to send account alerts, transaction confirmations, regulatory disclosures and service updates. Your financial information is used to assess creditworthiness for loan applications and to manage the ongoing risk of existing credit relationships.

Security, Fraud Prevention and Compliance

We use your information to verify your identity during account opening and authentication, detect and prevent fraud and unauthorised account access, monitor transactions for suspicious activity, comply with the Bank Secrecy Act and anti-money laundering regulations, file Currency Transaction Reports and Suspicious Activity Reports as required by FinCEN, and respond to law enforcement requests and court orders. Device and session data is used to power our adaptive multi-factor authentication system and to identify potentially compromised accounts.

Sharing Under the Gramm-Leach-Bliley Act

The Gramm-Leach-Bliley Act (GLBA) governs how financial institutions may share customer information. Under GLBA, NexTier Bank may share your nonpublic personal information with affiliated companies for everyday business purposes such as processing transactions and maintaining accounts. We may also share information with non-affiliated third parties as permitted by law, including service providers who perform functions on our behalf (such as data processing, payment processing, loan servicing and statement printing).

NexTier Bank does not share your nonpublic personal information with non-affiliated third parties for their own marketing purposes. Under federal law, you have the right to limit certain types of information sharing. You may opt out of information sharing with non-affiliated third parties for marketing purposes by calling 724-543-2900 or visiting any NexTier Bank branch. The Consumer Financial Protection Bureau provides additional resources about your privacy rights under federal law.

Other Disclosures

NexTier Bank may disclose your information when required by law, including in response to court orders, subpoenas, regulatory examinations and law enforcement requests. We may also share information with credit reporting agencies as part of our regular reporting obligations, with government agencies for tax reporting purposes (such as IRS Forms 1099 and 1098), and with other financial institutions to process transactions you have authorised (such as ACH transfers and wire transfers).

In the event NexTier Bank is involved in a merger, acquisition or asset sale, your information may be transferred to the acquiring entity. You would be notified of any such transfer and of any changes to privacy practices before they take effect. We may also share aggregated, de-identified data that cannot reasonably be used to identify you for analytical, statistical or research purposes.

Technical Safeguards

All data transmitted between your device and NexTier Bank systems is encrypted using AES-256 encryption. Customer data at rest is stored in encrypted databases with access controls that limit information to authorised personnel on a need-to-know basis. Our online banking platform employs adaptive multi-factor authentication, device fingerprinting, automatic session timeout and real-time fraud monitoring.

NexTier Bank conducts quarterly penetration testing by independent security firms, annual third-party information security audits, and continuous vulnerability scanning across our digital infrastructure. Our information security programme is reviewed by federal bank examiners and meets or exceeds the standards established by the Federal Financial Institutions Examination Council (FFIEC) for financial institution cybersecurity.

Administrative and Physical Safeguards

All NexTier Bank employees undergo background checks and receive annual training on information security, privacy regulations and data handling procedures. Access to customer information is role-based and logged, with regular access reviews to ensure permissions remain appropriate. Employees who violate privacy or security policies are subject to disciplinary action, including termination.

Physical records containing personal information are stored in secured facilities with access controls, surveillance and environmental protections. Document destruction follows NIST 800-88 guidelines for media sanitisation. Branch offices maintain clean-desk policies and secure disposal bins for documents containing customer information.

Pennsylvania Privacy Protections

Pennsylvania's Breach of Personal Information Notification Act (Act 73 of 2005, as amended) requires NexTier Bank to notify you without unreasonable delay if a data breach compromises your personal information, including your name combined with Social Security number, driver's license number, or financial account information with access codes. Pennsylvania law defines "personal information" broadly and imposes notification obligations that complement federal banking regulations.

Pennsylvania residents also benefit from the state's Unfair Trade Practices and Consumer Protection Law, which prohibits deceptive practices in the collection, use and disclosure of personal information. NexTier Bank complies with all applicable Pennsylvania privacy and consumer protection statutes. The Federal Trade Commission provides additional consumer protection resources at the federal level.

Your Privacy Choices

You have the right to opt out of certain information sharing with non-affiliated third parties by contacting NexTier Bank at 724-543-2900, visiting any branch or sending a written request to our Privacy Officer. You may request access to the personal information we hold about you and request corrections to inaccurate information. You may opt out of marketing communications at any time by following the unsubscribe instructions in any marketing email or by calling 724-543-2900.

You may limit the account alerts and notifications you receive (except security-critical alerts, which cannot be fully disabled for your protection). You may enroll in or opt out of eStatements at any time. If you close your NexTier Bank account, we will retain your information only as required by federal record-keeping regulations (typically 5-7 years depending on the record type) and will securely destroy records after the retention period expires.

Types of Cookies We Use

Essential cookies are required for the operation of our online banking platform, including session management, authentication and security. These cannot be disabled without losing access to online banking functionality. Functional cookies remember your preferences (such as language and display settings) to provide a more personalised experience. Analytics cookies help us understand how visitors use our website so we can improve content, navigation and performance.

NexTier Bank does not use third-party advertising cookies or participate in cross-site behavioural advertising networks. We do not sell cookie data or browsing information to third parties. You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent access to online banking.

Do Not Track Signals

NexTier Bank honours Do Not Track (DNT) browser signals. When we detect a DNT signal from your browser, we disable non-essential analytics tracking for your session. Essential cookies required for security and online banking functionality remain active regardless of DNT settings, as they are necessary for the safe operation of our digital banking services.

Our website does not respond to Global Privacy Control (GPC) signals differently from DNT signals at this time. If you have questions about our online tracking practices, contact our Privacy Officer at 724-543-2900 or privacy@nextierbank.co.com.

Children's Privacy

NexTier Bank does not knowingly collect personal information from children under the age of 13 through our website or digital banking platforms. Our online banking and mobile banking services are intended for use by adults (18 years or older) or minors with parental or guardian authorisation for custodial accounts. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

Custodial accounts for minors are subject to the same privacy protections as adult accounts. Parents and guardians who open custodial accounts on behalf of minors may access and manage the account information through standard online banking channels or by contacting NexTier Bank directly.

Policy Updates and Contact Information

NexTier Bank reserves the right to update this privacy policy at any time. Material changes will be communicated through our website, online banking portal, email notification or direct mail, depending on the nature and significance of the change. The "Last Updated" date at the top of this policy indicates when the most recent revision took effect. We encourage you to review this policy periodically. Continued use of NexTier Bank services after a policy update constitutes acceptance of the revised terms.

If you have questions, concerns or requests regarding this privacy policy or NexTier Bank's data practices, contact our Privacy Officer at:

NexTier Bank Privacy Officer
Phone: 724-543-2900
Email: privacy@nextierbank.co.com
Mail: NexTier Bank, Attn: Privacy Officer, Butler, PA 16001

NexTier Bank is a member FDIC institution. NMLS #407872. Equal Housing Lender. This privacy policy was last updated on March 29, 2026.

Questions About Your Privacy?

NexTier Bank is committed to protecting your personal information. If you have questions about this privacy policy or want to exercise your privacy rights, call 724-543-2900 or email privacy@nextierbank.co.com. Member FDIC. NMLS #407872.

Contact Us

NexTier Bank Privacy Policy

Information We Collect