Privacy Policy

Updated July 2020


This privacy policy describes how Kendall Bank dba Helix by Kendall Bank collects, uses, and shares personal information when you visit our websites, communicate with us, or submit information to a third party that provides it to us or provides services for us.

By using or accessing our websites, you are accepting the terms of this privacy policy and agree to the collection, use, disclosure and protection of your information as described in this policy.

Please read this notice carefully to understand how we collect, share, and protect your personal information, as well as what you can do to limit this sharing.

Information We Collect

Helix collects information from you directly and from other sources, such as credit bureaus, business partners and other companies. This information may include:

  • Personal Data: name, previous name, postal address, telephone number, and signature
  • Financial Data: credit report information, credit scores, bank account information, credit or debit card number; transaction information to your account and linked to our product, financial information used to validate your identity, household income type and amount
  • Demographic Data: gender, date of birth, household income
  • Online and Device Activity: unique identifiers, Internet protocol address, geolocation data, email address, social profile name, client portal account user name, referring website, browser, device type and other device information
  • Government Identifiers: social security number, state driver’s license or state ID
  • Protected Classification Characteristics: citizenship, military status
  • Purchase History: customer purchase history
  • Internet, Application, and Network Data: text messages or emails you send to us, messages and reviews you post on our social platforms, user open and click activity for emails we send, web browsing information, user activity on our websites, cookie and third-party tracking data
  • Sensory Data: voice recordings when you call us
  • Employment Data: employer, employer phone, employment history, and education

The type of information we collect depends on the product or service you have with us. For example, we collect information:

  • Before you submit an application.
    We use third-party technologies to identify prospects who may be interested in our products and services.
  • When you apply for a loan.
    We collect the information you provide in the application forms on our websites. During the application process, your consent is obtained to use your information to obtain a consumer report and begin an inquiry for credit. Furthermore, we use information about you to authenticate your identity. We also ask for your consent to send text messages about your loan status and our products and services.
  • When you make payments toward your loan.
    We keep a record of these transactions to service your loan. In any such transaction you will be asked to provide financial information, such as your bank account number and routing details to initiate a bank transfer. This information may also be shared with a third party for payment processing. We use technology designed to encrypt the transmission of data to us through our system, as well as financial information we receive, transfer or maintain.
  • When you communicate with us via our website chat, by phone, through email and SMS, and our social platforms to inquire about our products or your account.
    We store the content of these communications, including the channel through which you contacted us, in order to ensure effective customer support. Please note that by communicating with us, you acknowledge your communication may be overheard, monitored, or recorded without further notice or warning.
  • When you visit our websites.
    We use cookies and scripts to make our websites operate efficiently and to collect website analytics. We also use technologies to monitor how you interact with our websites so we may improve their function, and understand how we may adjust our products and services to be more useful.
  • When you interact with our websites, emails, and advertisements.
    We use third-party cookies, pixels, clear GIFs, and similar technologies to understand how you interact with our communications to you. We also use these for behavior-based marketing activities and interest-based advertising.
  • When you respond to our surveys or provide feedback.
    We use this information to understand your opinions about our company and to act upon your feedback or issues.
Use of Information

In addition to the use cases noted above, we also use personal information for the following business purposes:

  • To identify you when you visit our websites.
  • To provide products and services.
  • To assess and manage institutional risk.
  • To authenticate your identify and mitigate fraud.
  • To service and manage your account with us.
  • To optimize our application process.
  • To improve and develop new products and services.
  • To respond to inquiries.
  • To perform analysis.
  • To develop and send customized marketing content related to our products and services.

We may use your personal information for other purposes disclosed at the time you provide or we collect, and as permitted by applicable law. We may also use collected data in aggregate reporting and on an anonymous basis for other business purposes, as permissible by applicable law and regulation.

Sharing of Information

In addition to the descriptions above, we may disclose your information to others in these scenarios:

  • Affiliates. We may share personal information with affiliates in order to service accounts, improve products, or for other purposes permissible under applicable law.
  • Third-party collection agencies: We may transfer accounts to third-party debt servicing agencies specializing in the resolution of delinquent accounts. This may occur in the event customers do not respond to first-party efforts to establish a new payment plan to resolve their debit, and they are unable or unwilling to fulfill the contractual obligations set forth in their signed loan agreements.
  • Third-party service providers: We may share your personal information with non-affiliated companies that perform support services for us. This may include advertising networks, internet service providers, data analytics providers, operating systems and platforms, social networks, and other service providers.
  • Legal process and emergency situations: We may disclose to third parties as permitted by, or to comply with, applicable laws and regulations. Examples include responding to a subpoena or similar legal process, protecting against fraud and cooperating with law enforcement or regulatory authorities. We may also disclose your information if we believe it is necessary or appropriate to protect our rights, property or safety or the rights, property or safety of our employees, customers or others, or to enforce our contractual rights.
  • Corporate transactions: In the event of a corporate transaction (e.g. restructuring, divesture, dissolution, financing, merger), some of the personal information we hold may be included during negotiations or as assets or liabilities transferred to a buyer or successor.

When you are no longer our customer, we continue to share your information as described in this policy. However, you can contact us at any time to limit our sharing.

We also share personal information with others when you provide your consent, and with your authorized representatives, agents and beneficiaries.

How Helix Protects Personal Information

To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. Additionally, Helix requires and trains its employees to comply with its privacy standards, which are designed to protect customer information.

While we are diligent in our efforts to protect your personal information from unauthorized access, no form of online transmission is fully secure. Therefore, we cannot guarantee the security of your personal information. In the event of a breach of your personal information, we may notify you electronically, in writing, or by telephone, as permitted by law.

For more information, please see our Security Policy.

Note: When your account is created, you are assigned a password for accessing your Online Client Portal. You are responsible for maintaining the confidentiality of your password and responsible for use of your account by anyone else who has obtained your password, whether or not such use has been authorized by you. If you are aware of any unauthorized use of your password or account, please contact us as soon as possible.

What You Can Limit
For our everyday business purposes — such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus Yes No
For our marketing purposes — to offer our products and services to you Yes Yes
For joint marketing with other financial companies No We do not share
For our affiliates’ everyday business purposes — information about your transactions and experiences Yes No
For our affiliates’ everyday business purposes – information about your creditworthiness Yes Yes
For non-affiliates to market to you No We do not share

REASON WE CAN USE & SHARE YOUR PERSONAL INFORMATION: For our everyday business purposes — such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus

REASON WE CAN USE & SHARE YOUR PERSONAL INFORMATION: For our marketing purposes — to offer our products and services to you

REASON WE CAN USE & SHARE YOUR PERSONAL INFORMATION: For joint marketing with other financial companies
CAN YOU OPT OUT? We do not share

REASON WE CAN USE & SHARE YOUR PERSONAL INFORMATION: For our affiliates’ everyday business purposes — information about your transactions and experiences

REASON WE CAN USE & SHARE YOUR PERSONAL INFORMATION: For our affiliates’ everyday business purposes – information about your creditworthiness

REASON WE CAN USE & SHARE YOUR PERSONAL INFORMATION: For non-affiliates to market to you 
CAN YOU OPT OUT? We do not share

To Limit Sharing

To limit sharing of your personal information, contact us using one of the following methods:

  • Call 800.619.5309
  • Email
  • Visit our opt-out web page to limit third-parties’ collection and use of your information for marketing purposes, as well as to opt out of email communications and SMS text.
  • Some of our ads that are displayed on other websites will have an Ad-Choices icon inside the ad. Clicking on the icon inside the ad will allow you to opt out of interest-based advertising for the third-party platform that is delivering the ad.

Note: If you choose to opt out, a cookie will be placed on your browser or device indicating your preference. This cookie is specific to a particular browser and device. So if you use different browsers or devices, you will need to opt out on each. In addition, because the opt out is facilitated by cookies, if you clear your cookies on your browser or device, you will need to opt out again.

Why can’t I limit all sharing?
Federal law gives you the right to limit only:

  • sharing for affiliates’ everyday business purposes—information about your creditworthiness
  • affiliates from using your information to market to you
  • sharing for nonaffiliates to market to you

State laws and individual companies may give you additional rights to limit sharing.

What happens when I limit sharing for an account I hold jointly with someone else?
Your choices apply to everyone on your account.

Residents of California

California residents have certain rights in relation to your personal information pursuant to the California Consumer Privacy Act (CCPA). These include the right to:

  • Request information about the personal information that we collect about you and the manner in which we process and disclose that information
  • Obtain the specific pieces of personal information that we have collected about you in the 12 months preceding your request
  • Delete certain personal information that we have collected about you
  • Opt-out of disclosures of your personal information to third parties under certain circumstances
  • Not be discriminated against as a result of exercising any of the aforementioned rights

California residents should be aware that this section does not apply to:

  • Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) and its implementing regulations, the California Financial Information Privacy Act (CalFIPA), and the Driver’s Privacy Protection Act of 1994; or
  • Other information subject to a CCPA exception.

If you would like to discuss or exercise such rights, please contact us through our CCPA Intake Form or at 800.619.5309.

California law requires that we verify the requests we receive from you when you exercise certain of the rights listed above. To verify your request, we will check the information you provide us in your request against third party identity verification tools. As part of this process, we may call you after you submit your request to verify information. You may also designate an authorized representative to exercise the rights listed above on your behalf by providing the authorized representative with power of attorney pursuant to the California Probate Code. If an authorized representative submits a request on your behalf, we will contact you to verify that they represent you.

California law requires that we describe certain disclosures of personal information where we receive valuable consideration. California law treats such disclosures as “sales” even if no money is exchanged. We do not sell information to third parties as defined under California law.

Definitions of Terms

Affiliates: Companies related by common ownership or control. They can be financial and non-financial companies.

Non-affiliates: Companies not related by common ownership or control. They can be financial and non-financial companies.

Joint Marketing: A formal agreement between non-affiliated financial companies that together market financial products or services to you.

Definitions of Tracking Technologies

Like many websites, we use tracking technologies that include as cookies, web beacons, and similar technologies. We may use these technologies, when applicable, to monitor traffic to our websites, understand use of our websites, measure interactions with our online advertisements, for security purposes, and to personalize user experience.

You may limit some tracking technologies when you use our websites. Many web browsers automatically accept cookies, but you can usually modify your browser’s settings to decline cookies if you prefer. Note, if you choose to decline cookies, certain website features may not function properly or may not remain accessible to you. Additionally, you may also render some web beacons unusable by rejecting or removing their associated cookies.

For more information about your choices, see Interest-Based Advertising below.

Cookies: Cookies are small pieces of data that a website sends to your device when you view a website or advertising on other websites. Cookies allow your browser to remember information that the web server can later retrieve and use. When you quit your browser, some cookies are stored in your device’s memory, while others expire or disappear.

Web Beacons: Tags, Pixels, Clear GIFs
A web beacon, also called a tag, tracking pixel, or clear GIF, are unobtrusive, usually transparent images located on web pages or in email messages. Generally, these indicate when a user has accessed content (e.g. downloaded a document, opened an email, clicked a button or link) by transferring that information back to a web server.

Interest-Based Advertising
Interest-based advertising refers to the collection of information about your online browsing activities across different websites and devices to display advertisements that you may find interesting or relevant. We use interest-based advertising to deliver targeted ads and content to our prospects and customers on other websites. We work with third-party advertising agencies and platforms that use this technology to deliver these ads and content.