NOTICE OF YOUR FINANCIAL PRIVACY RIGHTS

Protection of Information
Community Trust Bank recognizes its customers’ needs and expectations of privacy and confidentiality when dealing with their personal financial information. We maintain standards and have policies in place designed to protect their privacy and to prevent unauthorized access to confidential customer information. We update and test our technology annually to improve the protection and assure the integrity of our customer information.

Collection, Use, and Retention
The bank and its affiliates will collect, use, and retain information about customers that is necessary to allow us to provide superior service and products tailored to customer needs, and to offer opportunities that we think will be of interest to and benefit our customers. We collect non-public personal information about our customers from the following sources:

• Information we receive from customers on applications or other forms
• Information about transactions with us, our affiliates, or others, and
• Information we receive from consumer reporting agencies.

We will tell our customers why we are collecting and retaining this information at their request.

Maintenance of Accurate Information
The bank has procedures in place to assure that customers’ financial information is accurate, current, and complete. We have procedures in place to respond to customer requests to correct inaccurate information in a timely manner. We will comply with all federal and state laws and regulations regarding accurate information. We encourage customers to notify us immediately if they receive information regarding their business with the bank that they believe to be inaccurate.

Limitation of Employee Access
The bank will insure that any employee who has access to customers’ information has a business reason for that access. Community Trust Bank discusses with all employees the importance of maintaining confidentiality of any and all customer records. The privacy of customer information is stressed in the bank’s Code of Conduct that is signed by all employees, and employees are notified that, should this policy be violated, appropriate disciplinary measures will be taken.

Restrictions on Disclosure of Account Information
The bank does not disclose any non-public personal information about our customers or former customers to anyone, except as permitted by law and this privacy agreement.

Privacy in Business Relationships for Ancillary Products and Services Maintained
The bank is very selective in choosing third parties that assist us in the delivery of products and services to our customers. There will be occasions when we partner with third parties that are unaffiliated with us in order to offer ancillary products and services that may be of benefit to our customers. Such arrangements may require sharing of customer information collected as described in this policy, to companies that perform marketing services on our behalf and with whom we have joint marketing arrangements. When we enter into such a partnership, we will require these third parties to adhere to similar privacy principles.

Former Customers
Confidential information of persons who are known to no longer be customers of the bank will be handled on the same basis as if they were still customers.

Availability
The bank wants our customers to understand our commitment to privacy issues. This privacy policy will be made available at all banking locations for distribution to our customers upon their request, will be provided at the time of establishment of the customer relationship and annually thereafter.