Privacy and Security Policy

At Territorial Savings Bank, your privacy is a top priority. This notice describes how we protect the privacy of your nonpublic personal information. Throughout this notice, the word “information” refers to personal information about you that may not be publicly available.

Information That We Collect and Disclose to Others

We collect information about you from the following sources:

• Information we receive from you on applications and other forms (such as your name, address, social security number, assets and income);

• Information about your transactions with us, our affiliates or others (such as your account balance, payment history, and parties to transactions);

• Information we receive from consumer reporting agencies, employers, or others to verify information (such as your creditworthiness, credit history, and employment history).

Parties to Whom We Disclose the Information

We may disclose information about you to the following types of third parties:

• Financial service providers, such as other financial institutions, mortgage bankers, credit card issuers, and insurance companies and agents;

• Non-financial companies, such as check printing companies and mailing service companies.

We may disclose all the information we collect, as described above, to companies that perform marketing services on our behalf, or to other financial institutions with whom we have joint marketing agreements.

We may also disclose information about you under other circumstances, as permitted or required by law. For example, we may disclose information where it is necessary to complete a transaction or to resolve errors; in order to verify the existence and condition of your account for a third party such as credit bureau or merchant; in order to comply with court orders or what we believe to be proper requests by a government agency; in connection with an examination or inquiry by our regulators; if you or we report a possible crime involving your account; to a “check guarantee service” if your account is closed for cause or if an inquiry is made regarding the availability of funds to pay a check that you have written; to any person who is named with you as an owner of the account, or their representative; to any of our agents or persons with whom we do business that perform data processing, audit, legal, marketing, insurance or other services; or if you give us written permission to do so.

From time to time, customers of Territorial Savings Bank are offered discounted prices or other special promotions. Your participation in these promotions may identify you

If you decide to terminate your relationship with Territorial Savings or your account becomes inactive, we will not share information we have collected about you, except as may be permitted or required by law.

How We Protect Your Information

We restrict access to information about you to those employees who need to know that information to provide products or services to you or to conduct our business. We maintain physical, electronic, and procedural safeguards that comply with federal regulations to guard your information.

Our website brings together a combination of industry-approved security technologies to protect data for the bank and for you, our customer. It features a VeriSign-issued Digital ID for the bank's Internet Service Provider hosting our website, Secure Sockets Layer (SSL) protocol for data encryption, and a router and firewall to regulate the inflow and outflow of server traffic.

Secure Data Transfer

Once a server session is established on an https secure page, the user and the server are in a secured environment. Because the server has been certified as a 128-bit secure server by VeriSign, data traveling between the user and the server is encrypted with Secure Sockets Layer (SSL) protocol. With SSL, data that travels between the bank and customer is encrypted and can only be decrypted with the public and private key pair. In short, the bank's server issues a public key to the end user's browser and creates a temporary private key. These two keys are the only combination possible for that session. When the session is complete, the keys expire and the whole process starts over when a new end user makes a server session.

Router and Firewall

Secure forms must filter through a router and firewall before they are permitted to reach the server. A router, a piece of hardware, works in conjunction with the firewall, a piece of software, to block and direct traffic coming to the server. The configuration begins by disallowing ALL traffic and then opens holes only when necessary to process acceptable data requests, such as retrieving web pages or sending customer requests to the bank.

Using the above technologies, your Internet loan application and check reorder transactions are secure.

Please contact us to request more information

TSBRev.01/07