FACTS

Why?

Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.

What?

The types of personal information we collect and share depend on the product or service you have with us. This information can include:

■ Social Security number and income

■ account balances and payment history

■ credit history and credit scores

■ transaction or loss history

■ overdraft history

How?

All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons First Federal Bank of California chooses to share; and whether you can limit this sharing.

Reasons we can share your personal information

Does First Federal Bank of California share?

Can you limit this sharing?

For our everyday business purposes—such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus

Yes

No

For our marketing purposes—to offer our products and services to you

Yes

Yes

For joint marketing with other financial companies

Yes

Yes

For our affiliates’ everyday business purposes— information about your transactions and experiences

Yes

Yes

For our affiliates’ everyday business purposes— information about your creditworthiness

Yes

Yes

For our affiliates to market to you

Yes

Yes

For nonaffiliates to market to you

Yes

Yes

To limit our sharing

■ Contact our call center, FirstFed Direct at 888-846-3433.

Please note:

If you are a new customer, we can begin sharing your information 30 days from the date we sent this notice. When you are no longer our customer, we continue to share your information as described in this notice.

However, you can contact us at any time to limit our sharing.

Questions?

Contact our call center, FirstFed Direct at 888-846-3433.

What we do

How does First Federal Bank of California protect my personal information?

To protect your information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings.

How does First Federal Bank of California collect my personal information?

We collect your personal information, for example, when you

■ open an account or deposit money

■ pay your bill(s) or apply for a loan

■ use your debit card

■ enter into an investment advisory contract

We also collect your personal information from others, such as credit bureaus, affiliates, or other companies.

Federal law gives you the right to limit only

■ sharing for affiliates’ everyday business
purposes—information about your creditworthiness

■ affiliates from using your information to market to you

■ sharing for nonaffiliates to market to you

Your choices will apply to everyone on your account—unless you tell us otherwise.

Definitions

Affiliates

Companies related by common ownership or control. They can be financial and nonfinancial companies.

■ Our affiliates include nonfinancial companies, such as Oceanside Insurance Agency and Seaside Financial Corporation.

Nonaffiliates

Companies not related by common ownership or control. They can be financial and nonfinancial companies.

■ Nonaffiliates we share with can include insurance companies and direct marketing companies.

Joint marketing

A formal agreement between nonaffiliated financial companies that together market financial products or services to you.

■ Under these arrangements, we select other companies to provide products and services that we do not offer, such as insurance or credit cards.

Supplemental Online Privacy Guidelines

Our Client Privacy Statement explains in general how we protect and, on a limited basis, disclose client information. There is additional information you should know when you visit our website.

Protecting Information Online
As a current client or as a visitor, any information you provide to us at www.firstfedca.com is protected as described below.

Protection of Online Personal Information
When you sign up for online banking, you must provide personal information that is necessary in order to process your transactions. To ensure that your information remains confidential, the information is sent to us in a "secure session" established with our data processing services provider. After you submit your online transaction, it is necessary that you end your online session before leaving your computer in order to ensure the privacy of your information.

We will keep this online information, and may use it to offer you products and services, as described in our Client Privacy Statement.

Handling of E-Mail
When you send us an e-mail, we keep your message, your address and our response in order to handle any follow-up questions, as well as to satisfy legal and regulatory requirements. We may, from time to time, contact you at your e-mail address to inform you of products, services and other benefits we offer.

You should be aware that regular non-encrypted internet e-mail is not secure. If we give you a First Federal Bank of California e-mail address, this address is provided for inquiries of a non-sensitive and non-confidential nature. If you conduct online banking and require secure online transmission of information to us, such as specific questions regarding your account, you should use the secure forms for contacting us provided within the online banking pages of our web site. These inquiries will be secure and use encryption. Confidential account information will not be sent to you in an e-mail response. We will contact you by telephone or U.S. mail to provide information we believe should be kept confidential. You may also contact us by telephone, U.S. mail, or by visiting our branches. See the "Branch Location" pages in our website for additional information.

No Information Gathering in Planning Tools
The calculators in our site that help you make financial decisions are hypothetical, "what if" scenarios. Examples include the mortgage principal and interest calculator and savings goal calculator. These planners do not capture personal information you may provide.

Privacy of Online Banking
Your online banking transactions provides information to us and our outside data processing and other service companies. The information may be retained on our system or the system of the outside provider of these services, depending on what is necessary in order to serve you. We use advanced Internet technology to make online banking as secure as possible, such as requiring 128 bit encryption in order to process your transactions. We also require your social security number or user identification number and personal identification number (PIN) or password to access your accounts. This information is required in order to establish an online banking service for you. You should maintain your password in strict confidentiality to help ensure the security of your banking information, and remember to close your browser at the end of each session.

Encryption
When you provide personal information on our web site, the information is encrypted (scrambled) so that it can be read by First Federal Bank of California but not by others. For more information on our encryption, click here.

Information Gathering and Retention
Some information, such as your e-mail address or account number, is collected and retained by us in order to perform services for you as requested. If you browse our web site without providing that information, personal information such as your e-mail address is not collected. We gather and analyze data regarding usage of our web site, including number of "hits", pages visited, etc., to evaluate the effectiveness of our web site and to improve our services.

Access to Web Site by Children
The responsibility to protect a child's identity and privacy is one that is shared by the online provider and the child's parents. Please be aware that First Federal Bank of California does not intentionally market to children, nor does it intentionally solicit data from children.

Caution Against "Spoofers"
"Spoofing" is the term used to describe the creation of a close-to-identical image of First Federal Bank of California's web site in order to lure our clients to the phony site and capture their confidential information. For example, the fraudulent site could be reached by a link containing a slight misspelling of our address (such as flrstfedca.com). You can make sure that you are not a victim of "spoofing" by carefully reviewing the site when you arrive there to ensure that the address does in fact say http://www.firstfedca.com/.

Protect Yourself Against "Phishing"
The term "phishing" comes from the fact that Internet scammers are using increasingly sophisticated lures as they "fish" for users' financial information and password data. The most common tactic is to copy the Web page code from a major site and use that code to set up a replica page that appears to be part of the company's site. A fake e-mail is sent out with a link to this page, which solicits the user's credit card information or password. When the form is submitted, it sends the data to the scammer while leaving the user on the company's site so they don't suspect a thing. You can make sure you are not a victim of "phishing" by never providing personal information or passwords in response to unsolicited requests over the phone or Internet.

Changes
Our Client Privacy Statement may change from time to time, so please check www.firstfedca.com or your local branch office of First Federal Bank of California for the most up-to-date information.

Thank you for being our client.