Privacy Policy

This Privacy Policy governs the collection, handling, governance, and safeguarding of nonpublic personal information gathered across all digital platforms, branches, and service channels operated by United Federal Credit Union. Effective January 1, 2025.

1. Information United Federal Credit Union Gathers from Members

United Federal Credit Union gathers specific personal and financial records to establish member relationships, underwrite lending requests, and provide ongoing financial services across Michigan, Ohio, and neighboring regional communities. We prioritize clarity when identifying how records enter our systems, limiting collection strictly to facts necessary to deliver federally insured financial solutions.

Direct member engagement accounts for the primary share of this record collection. When you open a share draft account, submit an application for an auto loan, or register for digital banking, our systems log identifiers including your full legal name, home address, social security number, taxpayer identification number, email address, and verified telephone details. Lending reviews add secondary documentation such as tax returns, employer verifications, overall debt obligations, and baseline income amounts.

Automated systems collect technical telemetry whenever your browser or mobile phone communicates with our electronic platforms. These automated data streams register internet protocol addresses, browser varieties, operating software build versions, mobile device identifiers, geo-location estimates, and usage logs showing which account administration tools were activated. Independent credit reporting bureaus supply external files that inform risk management decisions, including debt payment backgrounds and public registry filings.

2. Institutional Commitments Under the Gramm-Leach-Bliley Act (GLBA)

Under federal consumer protection standards, United Federal Credit Union provides this privacy overview to clarify how member financial data is shared and how member preferences are respected under the Gramm-Leach-Bliley Act (GLBA). Our cooperative model maintains that data sharing is limited to essential operational partners rather than revenue-generating external ventures.

GLBA mandates disclosure of nonpublic personal records exchanged with nonaffiliated third parties. United Federal Credit Union shares member balance logs, account numbers, and settlement history with core transactional vendors exclusively to post automated clearing house items, settle wire instructions, manage shared branch networks, and produce monthly statements. Federal rules permit you to restrict specific forms of information sharing, notably our distribution of eligibility details among administrative affiliates or joint promotion arrangements.

Each member receives our annual privacy disclosure through electronic document delivery or postal mail, providing a consistent schedule of practices and opt-out mechanics. United Federal Credit Union deposit products are NCUA-insured up to standard limits per member category, and our compliance systems adhere to NCUA privacy supervisory frameworks alongside federal banking statutory baselines.

3. Operational Purposes for Processing Member Records

Processing member records enables United Federal Credit Union to service deposit accounts, process credit applications, secure account authentications, and maintain statutory ledgers. We do not engage in automated algorithmic profiling that disadvantages applicants without manual human review.

Routine operational processing focuses on routine transaction settlements. Our servers verify routing instructions, record debit card authorizations, confirm direct deposit entries, calculate interest accruals, and print accurate monthly tax forms. Secondary processing focuses on defensive measures, including real-time fraud monitoring engines that review incoming payments against historical usage baselines to detect compromised credentials.

Regulatory reporting requires another tier of data processing. Under the Bank Secrecy Act and anti-money laundering frameworks, United Federal Credit Union compares transaction patterns against official supervisory watchlists and logs currency transaction reports. Marketing workflows use general account profiles to recommend suitable credit union services, such as home equity lines or certificate promotions, without transferring account authority to external marketing entities.

4. Controlled Disclosures and Third-Party Sharing Boundaries

United Federal Credit Union maintains strict boundaries regarding who may receive member data, allowing external access only when required for core operations, legal compliance, or member-authorized tasks. United Federal Credit Union does not sell member personal information to third parties, nor do we disclose member directories to commercial data brokers.

Service providers acting under contractual obligations receive limited access to perform targeted services. These entities include check printers, electronic bill payment processors, card production facilities, core data processing bureaus, and statements dispatch providers. Each service provider must execute confidentiality agreements restricting data usage solely to our designated tasks, while maintaining technical security controls comparable to our internal standards.

Statutory mandates require disclosures to government agencies, regulatory overseers, and legal authorities. When served with valid court subpoenas, IRS summonses, or NCUA supervisory directives, United Federal Credit Union produces responsive documents in accordance with legal requirements. We also disclose transaction details during joint asset recovery operations or insurance settlement claims connected with loss-prevention activities.

5. Member Rights and Choices Concerning Data Controls

Members can decline optional data disclosures and modify their marketing choices at any time through our branch network or member portal. We maintain simple processes for members wishing to inspect, update, or correct their personal files.

Direct marketing preferences can be altered via online banking settings or by notifying a credit union representative. Members may opt out of promotional emails, promotional postal correspondence, and telemarketing contacts regarding voluntary financial programs. Because operational notifications—such as overdraft alerts, balance statements, and security notices—are necessary for account administration, members cannot opt out of transactional communications.

To update outdated addresses, adjust contact telephone numbers — or correct misspelled personal data, members can initiate a change of address within digital banking or present verified identification at any local branch. United Federal Credit Union offers bilingual support for Privacy Policy questions across select Michigan branches, assisting members with questions regarding record corrections, sharing restrictions, and privacy preferences.

6. Notice for California Consumers Under State Privacy Standards

Although financial institutions regulated under the federal Gramm-Leach-Bliley Act maintain exemptions from several state-level consumer privacy mandates, United Federal Credit Union outlines this notice in accordance with the California Consumer Privacy Act (CCPA) for eligible consumers and non-GLBA interactions.

Over the past twelve months, United Federal Credit Union has gathered consumer identifiers (such as names, addresses, and email accounts), internet browsing patterns on our public landing sites, and employment records submitted by mortgage or job applicants. Because financial records covered by GLBA remain exempt, CCPA coverage applies primarily to non-member visitors browsing our educational website, prospective commercial contacts, and employment applicants residing in California.

Eligible individuals may submit verifiable requests to inspect the specific items of personal information we have recorded outside GLBA boundaries. Consumers can request that we delete qualifying personal records, subject to statutory retention exceptions for fraud defense, legal recordkeeping, and operational requirements. United Federal Credit Union will never discriminate against any consumer for exercising statutory privacy protections, whether in rate structures, fee waivers, or account service levels. Identity verification requires matching two to three recorded account points before fulfillment.

7. Digital Tracking Technologies and Cookie Administration

Our public websites and account dashboards rely on digital trackers, localized web storage objects, and cookies to ensure operational integrity, assess page traffic, and safeguard digital sessions against unauthorized takeovers.

Session cookies operate temporarily within memory, expiring the instant your web browser window terminates. These files track session continuity so that you navigate through online banking menus without re-authenticating on every page. By contrast, persistent tracking files stay stored on the user's hard drive across distinct calendar periods, serving to identify familiar browsers, remember preferred branch locations, and assist fraud monitoring systems in recognizing unauthorized devices.

Third-party web measurement partners evaluate visitor navigation paths to optimize page loading speeds and interface clarity. United Federal Credit Union does not alter web service architectures in response to automated Do Not Track header transmissions, as uniform technical consensus across consumer browsers remains unstandardized. Site visitors can adjust browser preferences to reject persistent tracking files, although disabling standard cookies can impact navigation within online banking.

8. Safeguarding Member Records and Technical Defenses

United Federal Credit Union maintains comprehensive administrative, technical, and physical safeguards designed to defend member records against unauthorized interception, destruction, or data breaches. Our cybersecurity framework aligns with guidance established by the Federal Financial Institutions Examination Council.

Technical layers employ Transport Layer Security (TLS) cryptographic protocols to encode data traversing between member browsers and our back-office servers. Storage repositories rely on enterprise encryption standards, restricting stored database files behind redundant firewall configurations and intrusion monitoring systems. Multi-factor authentication mechanisms safeguard internal staff terminals alongside public-facing digital banking portals.

Administrative controls restrict employee data access strictly to personnel whose job functions require account reviews. Every team member undergoes annual information security training, comprehensive background reviews, and strict accountability monitoring. In the event of an operational data incident, our response team executes containment plans, forensic investigations, and required member notifications in accordance with applicable federal and state data breach reporting laws.

9. Protection of Children's Digital Privacy

United Federal Credit Union strictly enforces protections for young individuals pursuant to the Children's Online Privacy Protection Act (COPPA). Our general digital presence, promotional publications, and digital banking platforms are not directed toward children under 13 years of age.

We do not knowingly collect, harvest, or track personal details from children under 13 across our digital platforms. If a parent or legal guardian opens a minor savings account on behalf of a child, that enrollment occurs directly within a branch or through authenticated adult guardian workflows where adult legal consent is confirmed. If our staff identifies an unverified online transmission of personal data from a child under 13, our systems delete that transmission.

Parents who suspect that an unauthenticated minor has transmitted personal data through our digital portals may contact our privacy department to review the issue. We review reported records promptly, purging associated files from storage systems once identity verifications are completed.

10. Data Retention Schedules and Asset Destruction Standards

United Federal Credit Union stores member records for defined intervals required to fulfill business operations, resolve financial audits, and comply with state and federal financial regulations. Retention periods depend on the underlying nature of the document.

Routine deposit logs, signature cards, check copies, and monthly periodic statements remain in active or archive storage for a minimum of seven years following account closure, satisfying standard IRS, NCUA, and state statutory limitation periods. Loan documentation, real estate titles, and underwriting files are retained for the lifetime of the credit obligation and applicable post-settlement monitoring years. Non-member electronic tracking archives and anonymous web metrics are regularly overwritten or purged within shorter operational cycles.

When scheduled document lifespans conclude, our teams destroy personal records to prevent secondary exposure. Paper documents undergo on-site micro-cut shredding by bonded records disposal specialists who supply destruction certifications. Electronic records, backup tapes, and retired server drives undergo cryptographic wiping or physical demagnetization and shredding pursuant to National Institute of Standards and Technology (NIST) disposal standards.

11. Revisions and Updates to This Privacy Policy

United Federal Credit Union reviews and updates this Privacy Policy periodically to reflect technological adjustments, evolving supervisory mandates, or operational enhancements across our institution. The effective date posted at the start of this disclosure indicates the latest comprehensive revision.

Whenever material adjustments alter how we share personal data or modify member opt-out avenues, we provide appropriate notice through account statements, digital alerts, or prominent updates on our primary website. Continued use of our financial services, branches, or online systems after posted updates demonstrates understanding of the updated policy terms. United Federal Credit Union publishes Privacy Policy fee schedules in PDF and HTML for Arkansas, Indiana, Michigan, Nevada, North Carolina, Ohio — and Pennsylvania, headquartered in St. Joseph, MI clients, allowing convenient review across diverse electronic formats.

Members should review this policy periodically to stay informed about institutional safeguards. Archival versions of historical policy texts remain accessible upon written application to our administrative compliance offices.

12. Contacting United Federal Credit Union Regarding Privacy Matters

Members and consumers with inquiries regarding this Privacy Policy, our data governance frameworks, or state-specific rights may contact United Federal Credit Union through our verified communication lines. Our privacy compliance personnel address policy matters and assist with privacy preferences.

Inquiries can be submitted by electronic mail directly to [email protected]. Please omit account numbers and social security credentials from unencrypted email messages to safeguard your privacy during transit. Written correspondence, formal legal notices, and statutory requests should be directed to:

United Federal Credit Union Attn: Privacy Compliance Officer Corporate Headquarters St. Joseph, Michigan Email: [email protected] Web: unitedfederal.us.com

Our administrative offices process consumer identity verifications and respond to privacy requests within statutory timelines defined by applicable state and federal regulatory frameworks.

Your rights as a California resident

The California Consumer Privacy Act (CCPA) lets a covered California consumer request details about what personal information was collected and ask for deletion of data that is not subject to an exception. For privacy requests and identity verification, contact [email protected].