Last updated: October 1, 2025
Amalgamated Bank (the “Bank,” “we,” “our,” or “us”) understands the importance of privacy, and we respect and take responsibility for protecting personal and financial information. This Supplemental Policy for California Residents (“Supplemental CA Policy”) supplements our Online Privacy Policy and should be read in conjunction with that Policy.
As a bank, our personal information processing practices are subject to federal law and California’s Financial Information Privacy Act (“CFIPA”). However, to the extent we process personal information that is not subject to these laws, and you are a California resident, you may have rights relating to your personal information under the California Consumer Privacy Act (“CCPA”) and California “Shine the Light” law (Cal. Civ. Code § 1798.83).
Your Right to Know
Under the CCPA, you have the right to be informed of the categories and specific pieces of personal information collected about them, including sensitive personal information, collected, used, and disclosed, the categories of sources from which that information is collected, whether that information is sold or shared, the categories of third parties to whom that information has been disclosed, the business or commercial purposes for collecting and using each category of personal information, and the intended retention period for each category of personal information.
Amalgamated makes the following disclosures regarding the Personal Information it has collected within the 12-month period preceding the Effective Date of this Privacy Policy:
Sources of Personal Information
We collect Personal Information from the categories of sources detailed in the How We Collect Personal Information section in our Online Privacy Notice.
Use of Personal Information
We collect Personal Information for the business and commercial purposes detailed in the How We Use Personal Information section in our Online Privacy Policy.
Disclosure of Personal Information
Please see the below chart for detailed information about the categories of personal information we have collected from California residents during the twelve months preceding the date on which this Supplemental CA Policy was last updated and the categories of third parties to whom we sell or share personal information. We do not knowingly sell or share the Personal Information of minors under the age of 16.
Personal Information Category set forth in Cal. Civ. Code § 1798.140 | Categories of Third Parties to Whom We Sell or Share Personal Information |
Personal Identifiers, including real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, or other similar identifiers. | Third-party analytics providers, marketers, network advertisers, and other third parties that set cookies and other online tracking technologies on our Site. |
California Customer Records Personal Information (Cal. Civ. Code § 1798.80(e)), including name, signature, physical characteristics or description, address, telephone number, education, employment, employment history, etc. | Third-party analytics providers, marketers, network advertisers, and other third parties that set cookies and other online tracking technologies on our Site. |
Characteristics of Protected Classifications under California or federal law. This may include age, veteran status, accommodations information, gender identity and expression, sexual orientation, and religion. | We do not sell or share this category of personal information. |
Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | We do not sell or share this category of personal information. |
Biometric information. | We do not sell or share this category of personal information. |
Internet or other similar network activity, including, but not limited to, browsing history, search history, and information about individual interactions with an Internet website, application, or advertisement. | Third-party analytics providers, marketers, network advertisers, and other third parties that set cookies and other online tracking technologies on our Site. |
Geolocation data, such as your IP address. | Third-party marketers, analytics providers and other third parties that set cookies and other online tracking technologies on our Site. |
Non-public education information, as defined in the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g; 34 C.F.R. Part 99). | We do not sell or share this category of personal information. |
Inferences from other Personal Information. | We do not sell or share this category of personal information. |
Sensitive Personal Information, as set forth in Cal. Civ. Code § 1798.140, including social security number, driver’s license number, state identification card, or passport number; citizenship or immigration Information; racial or ethnic origin; account access credentials (like usernames or account numbers combined with password or other security/access code to access an account). | We do not sell or share this category of personal information. |
In addition, each of the above referenced Personal Information categories may be shared with government agencies or other third parties as required by law or compelled by legal process; to assignees as part of a merger or asset sale; to respond to an emergency or otherwise protect the rights, property or security of our customers, third parties, or Amalgamated; exercise or defend the legal rights of Amalgamated and its employees, affiliates, customers, contractors, and agents; or to other parties at the individual’s request (or to the individual directly). To learn more about these additional disclosures and associated practices, please visit the How We Disclose Personal Information section in our Online Privacy Policy.
Other California Privacy Rights
California Shine the Light - Under California Civil Code Section 1798.83, individual customers who reside in California and who have an existing business relationship with us may request information about our disclosure of certain categories of Personal Information to third parties for the third parties’ direct marketing purposes, if any. Please be aware that not all information sharing is covered by these California privacy rights requirements and only information on covered sharing will be included in our response. This request may be made no more than once per calendar year.
Other CCPA Rights – California residents also have the following rights under the CCPA:
- Access – The right to request access to and obtain a copy of any personal information we may have about you.
- Deletion – The right to delete your personal information that we have collected or obtained, subject to certain exceptions.
- Correction – The right to request that we correct any inaccuracies in your personal information, subject to certain exceptions.
- Opt Out of Certain Processing – The right to: (a) opt out of the processing of your personal information for purposes of targeted advertising, (b) opt out of the sale or sharing of your personal information; (c) limit the use of your sensitive personal information (if applicable), and (c) opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not collect or process sensitive personal information outside of purposes permitted by law (such as section 7027(m) under the California Consumer Privacy Act Regulations), so we do not offer the option to limit its use. We also do not profile you or other individuals in a manner that would result in legal or similarly significant effects, so we do not offer an opt out.
- Objection/Restriction of Processing – The right to object or restrict us from processing your personal information in certain circumstances.
- Withdraw Consent – The right to withdraw your consent where we are relying on your consent to process your personal information.
Exercising your Privacy Rights
To exercise any of the privacy rights afforded to you under applicable data protection laws, e-mail us at ab-online@amalgamatedbank.com, call us at 800-662-0860, or submit a request through our data subject portal. Your request must include your first and last name, e-mail address, telephone number, and a description of your request. You may also exercise your opt out rights by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC). We honor Opt-Out Preference Signals, including GPC. If you choose to use an Opt-Out Preference Signal, you will need to turn it on for each supported browser or browser extension you use.
You will not be discriminated against in any way by virtue of your exercise of the rights listed in this Notice. However, should you withdraw your consent or object to processing of your personal information, or if you choose not to provide certain personal information, we may be unable to provide some, or all, of our Services to you.
Only you, or an authorized agent that you authorize to act on your behalf, may make a request related to your personal information. You may also make a request on behalf of your minor child. We must verify your identity before fulfilling your requests, and if we cannot verify your identity, we may request additional information from you. If you are an authorized agent making a request on behalf of another person, we will also need to verify your identity, which may require proof of your written authorization or evidence of a power of attorney. We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.
We do not charge a fee to process or respond to your requests unless they are excessive or repetitive. If we determine that a request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We may deny certain requests, or only fulfill some in part, as permitted or required by law. If you are not satisfied with the resolution of your request and you are afforded a right to appeal such decision, you will be notified of our appeal process in our response to your request.
Changes to this Policy
Please note that we may modify or update this Policy from time to time, so please review it periodically. If we change our practices in a material way, we will notify you according to applicable law. Unless otherwise indicated, any changes to this Policy will apply immediately upon posting to our Site. You are responsible for periodically visiting our Site and this Policy to check for any changes.
Contacting Us
To exercise your rights, submit an appeal, or for privacy-related inquiries, please use our data subject portal, contact us by phone at 800-662-0860, or email at ab-online@amalgamatedbank.com.