Skip to main content
OVCB & ESCB Rotating Logo

California Consumer Privacy Act Policy

This California Consumer Privacy Act Policy (“CCPA Disclosure”) supplements the information contained in any other Privacy Statement or Notice provided by Oak Valley Community Bank, its subsidiary Eastern Sierra Community Bank, and Oak Valley Bancorp ("we" or "our”) and applies solely to residents of the State of California. It describes our practices both online and offline to comply with the California Consumer Privacy Act of 2018 (“CCPA”) regarding the collection, use, disclosure, and sale of personal information and the rights of California residents (“consumers” or “you”) regarding their own personal information.

Under the CCPA, “personal information” is information that identifies, relates to, or could reasonably be linked directly or indirectly with a particular consumer. The specific personal information that we collect, use, and disclose relating to a consumer will vary depending on our relationship or interaction with that individual.

Personal information does not include:
  • Publicly available information from government records;
  • Deidentified or aggregated information; or
  • Other information excluded from the CCPA’s scope.

This CCPA Disclosure does not apply to information collected, processed or disclosed pursuant to the Gramm-Leach-Bliley Act and its implementing regulations or the California Financial Information Privacy Act. It also does not apply to information we collect of job applicants, employees, contractors, temporary employees, directors and shareholders, which are subject to our Human Resources CCPA Disclosure -

  1. The Information We Collect
    Below is a list of the categories of personal information we have collected about consumers in the past 12 months. For each category of personal information, we have provided the categories of the sources used to collect, our business or commercial purpose for collecting the information, and the categories of third parties with whom we share personal information.
A. Identifiers
A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.
  • Directly from you
  • From your device or your use of our website
  • From third parties
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.
  • Directly from you
  • From your device or your use of our website
  • From third parties
C. Protected classification characteristics under California or federal law
Age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
  • Directly from you
  • From your device or your use of our website
  • From third parties
D. Commercial information
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
  • Directly from you
  • From your device or your use of our website
  • From third parties
E. Biometric information
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
  • Directly from you
  • From your device or your use of our website
F. Internet or other similar network activity
Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.
  • From your device or your use of our website
G. Geolocation data
Physical location or movements.
  • From your device or your use of our website
H. Sensory data
Audio, electronic, visual, thermal, olfactory, or similar information.
  • Directly from you
  • From video surveillance on premises.
I. Professional or employment-related information
Current or past job history or performance evaluations.
  • Directly from you
  • From third parties
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
  • N/A
K. Inferences drawn from other personal information
Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
  • Directly from you
  • From third parties

* Please refer to Section 2 for additional information on “Source” and Section 1 of our Privacy Statement for more details about the information we collect.

  1. Sources of Personal Information
    We obtain the categories of personal information listed in the table above from the categories of sources specified therein.

    Examples of sources and when information would be collected are listed below:

    Directly from you. For example, when creating an account, receiving products and/or services.

    From your Device or your use of our Services. For example, from observing your actions on our website, device fingerprinting and similar technologies.

    From third parties. For example, from public databases, social media platforms, other industry-standard data vendors.

  1. How We Use and Disclose Your Personal Information
    We may use, or disclose to a third party, the personal information we collect for one or more of the following purposes:

    Categories of Personal Data*
    Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytic services, or providing similar services.
    A, B, C, D, E, F, G, H, I, K
    Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
    A, B, C, D, F, H, I, K
    Complying with laws and regulations and to comply with other legal process and law enforcement requirements (including any internal policy based on or reflecting legal or regulatory guidance, codes or opinions).
    A, B, C, D, F, G, H, I, K
    Undertaking activities to verify or maintain the quality or safety of a service controlled by us, and to improve, upgrade, or enhance the service controlled by the business.
    A, B, C, D, F, H, I, K
    Auditing related to a current interaction and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
    D, F, K
    Debugging to identify and repair errors that impair existing intended functionality.
    D, F, K
    Undertaking internal research for technological development and demonstration.
    D, F, K

* Please refer to the categories of data listed in Section 1

  1. Your Rights and Choices

    Your Right to Know About Personal Information Collected, Disclosed, or Sold
    You have the right to request that we disclose the personal information we have collected, used, disclosed and sold about you during the past 12 months.

    Only you or your authorized agent may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

    Your Right to Request Deletion of Personal Information
    You have the right to request we delete any personal information about you which we have collected or maintained.

    Once we receive and confirm your verifiable consumer request we will delete your personal information from our records, unless an exception applies.

    Only you or your authorized agent may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

    Your Right to Opt-Out of the Sale of Personal Information
    You have the right to opt-out of the sale of your personal information. As stated above, we do not and will not sell the personal information of consumers to third parties.

    Your Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights
    Discrimination may exist where a business takes or suggests that it will take the following actions in response to a consumer exercising their rights under the CCPA:

    • Deny access to or use of goods or services.
    • Charge different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
    • Provide a different level or quality of goods or services.

You have a right not to receive discriminatory treatment by us for exercising any of your privacy rights under the CCPA.

  1. Exercising Your Rights

    To exercise your rights described above, please submit a verifiable consumer request to us by either: Verifiable Consumer Request
    You may only make a verifiable consumer request twice within a 12-month period. The verifiable consumer request must:
    • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
    • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information such as name, date of birth, email address, telephone number, postal address, and your business relationship with Oak Valley Community Bank.
    • If you designate an authorized representative to make a request on your behalf, we may require you to verify your identity directly to us and provide a copy of the authorized written permission.

To verify your identity, we will use the personal information provided in the verifiable consumer request. We cannot respond to your request if we cannot verify your identity or your authorized agent’s authority to make the request and confirm the personal information relates to you.  We may require you, or your authorized agent, to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.

Authorized Agent
A consumer may designate an authorized agent to make a request under the CCPA on their behalf.

If you wish to have an authorized agent make a verifiable consumer requests on your behalf, they will need to provide us with sufficient written proof that you have designated them as your authorized agent.

An authorized agent is someone who has registered with the California Secretary of State to act on your behalf, or whom you have provided power of attorney pursuant to California Probate Code sections 4000 to 4465.

If your authorized agent makes a request on your behalf, we will still require you to provide sufficient information to allow us to reasonably verify that you are the person about whom we collected personal information. However, we cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you.

Response Timing and Format
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days from the date of receiving your request), we will inform you of the reason and extension period in writing.

Any disclosures we provide will only cover the 12-month period preceding the date of the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

  1. More Information

    Contact Information
    If you have any questions or concerns about our privacy policies and practices, please call 1-866-844-7500, Monday thru Friday 8:00 AM to 5:00 PM Pacific Time or email us at

Changes to our California Consumer Privacy Act Policy
We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on our website and update the notice’s effective date.

Date last updated: September 20, 2022.

Home | Personal Banking | Commercial Banking | Investments | Online Banking | Banking Resources | About Us
Branches | Careers | Contact Us | Stock Price | Privacy Statement | Security Statement | California Privacy
866-844-7500 | Customer Service | © 1999- Oak Valley Community Bank. All Rights Reserved
OVCB ESCB Logo Footer

Oak Valley Community Bank Eastern Sierra Community Bank