You directly provide WSECU with most of the data and information we collect. Some of the ways we collect and process your information and data happen when you:

• Open an account
• Register for Online Banking
• Make a payment
• Apply for a loan
• Use your credit or debit card
• Make deposits or withdrawals from your account
• Voluntarily complete a customer survey or provide member experience feedback
• Use or view our website via your browser's cookies
• Contact us via email or phone

We also collect your personal information from credit bureaus and other companies we have contracted with to service your account. 

When you open an account at WSECU, we may check your account, credit and employment history and obtain a credit report from third parties, including credit reporting agencies, to verify your eligibility for the accounts and services you request.

All financial companies need to share members’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their members’ personal information, the reasons WSECU chooses to share and whether you can limit this sharing.

We share information for our everyday business purposes, such as processing your transactions, maintaining your account(s), responding to court orders and legal investigations, or reporting to credit bureaus. We also share information with our affiliates, which may include information about your transactions and services. We do not share information about your credit worthiness.

If you are a new member, we can begin sharing your information with our affiliates so they can market to you 30 days from the date we send you the privacy notice.

When you are no longer a member, we will continue to share your information as described in our privacy notice.

WSECU follows Privacy by Design principles as part of our overarching privacy program. End-to-end security and full lifecycle protection are core principles of this framework. In keeping with these principles, all sensitive member data is stored and transmitted in an encrypted format. All authentication traffic, whether external or internal to the WSECU network is also encrypted. Furthermore, access to data is protected from external tools, systems and users that do not have a business justification for accessing the data.

Our digital data retention standard is also designed to ensure full lifecycle management of information. Digital data is destroyed within one year of the end of its functional use unless compliance to data retention regulations requires additional time.

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. We also maintain other physical, electronic and procedural safeguards to protect this information, and we limit access to information to those employees for whom access is appropriate.