We, our and us mean Community Bank, N.A.
This is our privacy notice for our customers. When we use the words "you" and "your" we mean the following types of customers:

• All of our consumer customers who have a continuing relationship with us, such as:
  • Deposit account
  • Loan account
  • Credit card
  • Safe deposit box
  • Self-directed Individual Retirement Account where we act as custodian or trustee
  • Financial, investment, or economic advisory services (for a fee)
• All IRA accounts for which we act as custodian

We will tell you the sources for nonpublic personal information we collect on our customers. We will tell you what measures we take to secure that information.

We first define some terms.

Nonpublic personal information means information about you that we collect in connection with providing a financial product or service to you. Nonpublic personal information does not include information that is available from public sources, such as telephone directories or government records.

An affiliate is a company we own or control, a company that owns or controls us, or a company that is owned or controlled by the same company that owns or controls us. Ownership does not mean complete ownership, but means owning enough to have control.

A nonaffiliated third party is a company that is not an affiliate of ours.

THE INFORMATION THAT WE COLLECT

We collect nonpublic personal information about you from the following sources:

• Information we receive from you on applications or other forms
• Information about your transactions with us
• Information about your transactions with nonaffiliated third parties
• Information from a consumer reporting agency

INFORMATION THAT WE DISCLOSE ABOUT YOU

We do NOT disclose any nonpublic personal information about you to anyone, except as permitted by law.

THE CONFIDENTIALITY, SECURITY AND INTEGRITY
OF YOUR NONPUBLIC PERSONAL INFORMATION

We restrict access to nonpublic personal information about you to those employees who need to know that information to provide products or services to you. We maintain physical, electronic, and procedural safegards that comply with federal standards to guard your nonpublic personal information.

NONPUBLIC PERSONAL INFORMATION AND FORMER CUSTOMERS

We do not disclose nonpublic personal information about former customers, except as permitted by law.