Some of the core features of the program include:

• Policies, standards, processes and guidelines that govern information technology resources to protect information assets and safeguard personal information
• Technologies such as firewalls, encryption, endpoint protection, intrusion detection, Virtual Private Networks, log aggregation and analysis, SPAM Filtering as well as data loss prevention
• Verification of security controls conducted both internally and by independent third parties
• Ongoing internal and external threat and vulnerability assessment and remediation
• 24/7/365 monitoring of our systems and networks to detect weakness and potential intrusions
• Processes executed at consistent intervals, designed to continuously assess and remediate potential security risks
• Continuous identification, assessment and management of enterprise and branch level risk
• Due diligence to manage risk when selecting and retaining external vendors and service providers that help us service your needs
• Ongoing Continuous and mandatory security awareness program for all staff and branch personnel
• Continuous training of staff in financial and technology best practices, products and processes

Encryption

Encryption technology is designed to secure personal and confidential communications between your computer and Cetera servers, so that they are protected from being read by any third parties. Cetera’s web and mobile applications require a minimum 128-bit SSL TLS encryption, which is the de-facto industry standard for encrypting and safeguarding websites.

Sessions and System Inactivity

All Cetera websites and mobile applications allowing access to client personal information require all users to log in with a user name and password. While you are logged in, if you leave your browser window open, Cetera applications will automatically log you out after a period of inactivity. Similarly, if you close your browser window or mobile application window without logging out, you will be automatically logged out. Both of these measures are designed to protect your information from unintended access by a passerby or different user of your computer.

Unsubscribe:

If you would like to unsubscribe from marketing emails sent by Cetera Financial Group, Inc. you can do so by clicking the unsubscribe link included in the footer of our emails, emailing us directly or you can also unsubscribe here.

Personal Information We Collect

There are two primary ways we collect information about you: (1) when you voluntarily provide it to us while using the Services or acting as a Business Contact; and (2) with automatic technologies connected to our online Services. We explain this in further detail below in the sections titled “Information You Provide to Us” and “Information We Automatically Collect.”

This section describes the categories of personal information we may collect or may have collected from or about you, and the purposes for which this information is used.

We do not “sell” or “share” personal information, as those terms are defined by relevant law, except to the extent personal information is shared with our advertising partners through the placement of marketing cookies on the site. You can opt-out of marketing cookies sharing by clicking on the “Cookies Settings” icon on the site.

How We Disclose Information About You

We may disclose information we collect about you to entities, including business partners and affiliates, services providers, and third parties:

• Business Partners and Affiliates: We disclose your personal information to business partners with whom we work with, such as our affiliates and other companies that help us improve, market, or provide our services to you.
• Service Providers: We may permit our agents, vendors, contractors, consultants, and other service providers to access information we collect about you through the Services to carry out work on our behalf.
• Third parties: We may disclose information about you to third parties: (1) if we are required to do so by law, regulation, or legal process (such as in response to a court order or subpoena); (2) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity; or (3) in the context of a business negotiation or transaction relating to CFG or any affiliated entity (e.g., further to a merger, reorganization, liquidation, or any other business transaction), including negotiations of such transactions. Cetera does not sell your Personal Information; however, we may share your Personal Information for the purposes of targeted advertising.

Use of Cookies and Similar Technologies

We use cookies, web beacons, or similar technologies to collect information through data analytics tools like Google Analytics and other third-party tracking pixels to improve your site experience, to serve you more personalized ads on other sites, and to track your activity over time and across websites, as well as across different devices you use to access the Internet. We may use information collected this way to target marketing we believe corresponds to your interests within and outside our Services, for example, by utilizing retargeting or other targeted marketing practices (collectively, “Online Behavioral Advertising”). When engaging in Online Behavioral Advertising, we follow the cross-industry Self-Regulatory Principles for Online Behavioral Advertising managed by the Digital Advertising Alliance. To learn more about Online Behavioral Advertising, your choices regarding the information collected for that purpose, or to opt out, you may visit http://www.aboutads.info/ or http://www.networkadvertising.org/choices. If you choose to opt out of Online Behavioral Advertising, a cookie will be placed on your browser indicating your choice. Because cookies are stored by your browser, any opt out choice you make will be effective only for the computer/browser combination you used to opt out. Please note that even if you opt out of Online Behavioral Advertising, you may still receive advertisements from us, but they will not be customized based on your online browsing activities. Clearing your browser's cookies will reset your opt out instruction because the instruction is stored in a browser cookie. If you were to clear your browser cookies, you would need to renew any opt out choice you previously made.

Many web browsers provide options to allow you to stop accepting new cookies, or to disable existing cookies. Please be aware that if you disable cookies on your browser, you may not be able to use certain features of the Services or other websites, and disabling cookies may invalidate opt-outs that rely on cookies to function.

How We Respond to Do Not Track

How We Respond to Do Not Track - Our website respects and honors Do Not Track (DNT) signals. We use OneTrust to manage cookie preferences, and it is configured to accept and honor DNT signals. This means that if you have enabled DNT in your browser settings, non-essential cookies will not be set on your device. You can still manage your cookie preferences through our OneTrust preference center, ensuring you have control over your data. This practice aligns with our commitment to privacy and compliance with relevant regulations. To learn more about “do not track” signals, you may wish to visit http://www.allaboutdnt.com/.

Updating and Correcting Your Personal Information

Keeping your information current is important. If you are a customer of an affiliated broker-dealer in the CFG network, you may update, correct, or delete contact information by contacting your financial professional. If you are a customer or a financial professional who has enrolled in online Services with CFG or one of its affiliates, you can access your profile, review contact information that is stored, and revise certain types of information by signing into your online account. To make any other updates, customers should contact their financial professionals, and financial professionals should contact their CFG-affiliated broker-dealer. Business Contacts should contact their CFG business owner.

Your Choices

As a consumer or customer of a Cetera-affiliated broker-dealer, you can learn more about how and why we share information about you and your options related to such sharing by reviewing the broker-dealer’s Consumer Privacy Notice (“Notice”), available below:

• Cetera Advisors LLC
• Cetera Wealth Services LLC
• Cetera Financial Specialists LLC
• Cetera Investment Services LLC

Federal law gives consumers and customers, as those terms are defined in the Gramm-Leach-Bliley Act (“GLBA”), the right to limit some but not all sharing of their information by financial companies like Cetera. As explained in the Notices, you may opt out of sharing by calling the number provided in the Notice and following the prompts. (Please see the “To Limit Our Sharing” section in the Notice for instructions.) Your request will be addressed, but you will not receive a confirmation. Please note that customers will continue to receive annual Notices as required under Federal law; however, you do not need to respond to maintain a previous opt-out designation.

Unsubscribe Information

If you would like to unsubscribe from marketing emails sent by Cetera, you can do so by clicking the unsubscribe link included in the footer of our emails or UNSUBSCRIBING HERE. Please note that even if you opt out of receiving such communications from us, we may continue to send you transactional emails, such as communications regarding your account or our ongoing relationship with you.

Links to Affiliate and Non-Affiliate Websites

You should be aware that linked sites may have their own privacy policies or notices that differ from this Privacy Policy. Your use of linked sites is governed by the privacy policies and terms and conditions of those sites, which we strongly suggest you review.

Children's Privacy

We do not knowingly collect personal information from children under the age of 16 through our Services, and we do not knowingly market to children under the age of 16 without parental consent. If we learn that we have received information directly from a child who is under the age of 16, we will delete the information in accordance with applicable law.

Security

We employ administrative, technical, and physical safeguards to secure personal information. Cetera’s Information Security Program is designed to allow our representatives to use the tools and software we provide with confidence. Although we use reasonable efforts to safeguard information, transmission via the Internet is not completely secure and we cannot guarantee the security of information collected through our Services.

Your California Privacy Rights

This section describes your rights under the California Consumer Privacy Act , as amended by the California Privacy Rights Act (collectively CCPA)

Under the CCPA, “Personal Information” means “information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” As a financial services organization, any information we collect, process, or disclosed pursuant to the Gramm–Leach–Bliley Act (Public Law 106–102) or the California Financial Information Privacy Act (Division 1.4 (commencing with Section 4050) of the Financial Code) is exempt from the requirements of CCPA. In addition, some information we collect may be exempt because it is considered public information (i.e., it is made available by a government entity) or because it is subject to other federal privacy laws, such as the Health Insurance Portability and Accountability Act ("HIPAA").

To the extent that we collect Personal Information that is subject to the CCPA and CPRA, your rights as a California resident with respect to that information are described below.

Cetera does not “sell” your Personal Information as term term is defined by CCPA; however, we may "share" as that term is defined by the CCPA when we collect and use Personal Information we automatically collect for Online Behavioral Advertising. We provide details below regarding how you can opt-out of the sharing of your Personal Information.

Description of Your Rights

Subject to certain limitations, you have the following rights with respect to your Personal Information.

• Right to Know/Access Information – You have the right to request that we disclose certain information to you about our collection and use of your Personal Information with respect to the following:
  • The categories of Personal Information we have collected about you.
  • The categories of sources from which we have collected your Personal Information.
  • Our business or commercial purpose for collecting hat Personal Information.
  • The categories of Personal Information we have disclosed to a third party for business purposes.
  • The categories of third parties to which we have disclosed each category of Personal Information collected.
  • The specific pieces of Personal Information we have collected about you.
• Right to Request Deletion of Information – You have the right to request in certain circumstances that we delete Personal Information that we have collected from you. It should be noted that we may not be able to delete certain Personal Information due to business, regulatory, legal, and compliance purposes. In addition, deletion of your Personal Information may affect our ability to provide services, products, and support to you.
• Right to Correct – You have the right to request that we correct inaccuracies in the Personal Information we maintain about you.
• Right to Opt-Out of the Sharing of Your Personal Information – You have the right to opt out from the "sale" or "sharing" of Personal Information for the purposes of Online Behavioral Advertising.
• Right to Limit Use/Disclosure of Sensitive Personal Information – You have the right to limit the use/disclosure of your sensitive Personal Information.
• Right to Non-Discrimination – You have the right to not be denied goods or services, charged different prices or rates for goods or services, or receive a different level or quality of goods or services, as a result of exercising the above rights.

How to Submit a Request

You may submit a request to exercise your California privacy rights through any one of these means:

• By filling out a Consumer Data Request Form available at www.cetera.com/ccpa.
• By calling us at (888) 443-6380.

Verification Procedures – In order to process your request to know about, delete, or correct your Personal Information, we must verify your identity. We do this by requesting that you provide personal identifiers that we can match against information we may have collected from you previously. We may also request you to confirm your request using the email account or telephone number stated in the request.

Requests by Authorized Agent – You may authorize another individual or a business entity, called an authorized agent, to make requests on your behalf. To process a request made by an authorized agent, we require that you provide documentation confirming the identity of an authorized agent, and your signed permission for them to act on your behalf. Such documentation may include, but is not limited to, a power of attorney, conservatorship or guardianship documentation, letters testamentary, or notarized statements (as may be appropriate under the circumstances). Parents of minor children may be required to submit a birth certificate of the child, in order to make requests on the child’s behalf. Depending on the circumstances, we may also require that you verify your own identity with us, and directly confirm with us that you provided the authorized agent permission to submit the request on your behalf.

Retention of Personal Information

We retain your personal information in accordance with our record retention schedules and policies. Personal information is retained as long as necessary to meet business, legal, and regulatory requirements. Retention may be extended in connection with litigation or investigations.

Changes to this Privacy Policy

If we make changes to this Privacy Policy, we will revise the "Last Updated" date at the top of this page. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on the applicable Service. Your use of such Service following these changes means that you accept the revised Privacy Policy.

Contact Us

For any questions you may have regarding this Privacy Policy, other than to opt out (please see the “Your Choices” section above for information on opting out), you have several options for reaching us. You may email us at privacy@cetera.com, phone us at 800.362.9547, or write to us at the following address: