padlock

Online Privacy Notice


High Plains Bank Online Privacy Notice & Disclosure

High Plains Bank (“High Plains Bank,” “the Bank”, “we,” or “us”) is committed to protecting your privacy. This Online Privacy Notice describes the types of information we may collect from you, including when you visit www.highplainsbank.com, www.hbpgo.com or use our other online applications, products and services (collectively, the “Services”), how we use the information we collect, with whom we share it, how we protect it, and the choices we offer you regarding our collection and use of such information.

By accessing this website or using our Services, you acknowledge and agree to the collection and use of your information as outlined in this Online Privacy Notice. We use cookies and similar tracking technologies as described in this Online Privacy Notice. Where required by applicable law, we will obtain your consent before placing non-essential cookies. You can adjust your cookie consent at any time by clicking the “Cookie Settings” button at the bottom of our site.

For more information about the privacy of consumer financial information governed by the Gramm-Leach-Bliley Act (GLBA) when you apply for or obtain a product or service, you may review our High Plains Bank Privacy Policy. In the event of any conflict between this Online Privacy Notice and the High Plains Bank Privacy Notice provided pursuant to the GLBA, the GLBA privacy notice will control with respect to consumer financial information. Privacy of your information provided to our Digital Banking Services (online banking and mobile banking) is covered in our Digital Banking End User License Agreement (EULA).

Rev. June. 2026

Information We Collect

We may collect personal information about you, meaning information that can uniquely identify you, from various sources, such as:

  • Directly from you when you use the Services, such as when you register for an account, access certain features or content; and
  • Our service providers, business partners, and other third parties.

The personal information (“Personal Information”) we collect about you may include, to the extent applicable based on the products or services you use:

  • Contact information, such as name, postal address, email address, and phone number;
  • Demographic information, such as age, date of birth, gender, job information, and postal code;
  • Location information, such as your zip code or IP address;
  • Login information, such as username, password, and security questions and answers;
  • Personal identification numbers, such as Social Security number and driver’s license number or other ID number;
  • Payment and financial details, such as payment card number, expiration date, authentication code, billing address, and bank account number;
  • Biometric identifiers (such as voice authentication data) only to the extent used in connection with specific services offered by the Bank and in accordance with applicable law; and
  • Device attributes and identifiers that help us recognize you through the devices you use to access our services.

We collect and use Personal Information only as reasonably necessary to provide our Services, comply with legal obligations, and support our business operations.

The online and mobile activity information we may collect by automated means may include, without limitation:

  • Information about the devices you use to access the Services (such as the IP address and the type of the device, operating system, and web browser);
  • Referring websites;
  • Dates, times, and duration of use of the Services (including whether you are a repeat or first-time visitor); and
  • Information on actions taken when using the Services (such as page views and website navigation patterns).

The information we automatically collect using cookies or other online tracking devices helps us to improve and personalize our Services, including by enabling us to identify and authenticate users. To the extent that we pair any of this automatically-collected information with your Personal Information, we will treat it in accordance with this Online Privacy Notice.

Information Collected Through your Use of our Social Media Pages

High Plains Bank has official pages on social media websites such as Facebook, LinkedIn, and Instagram, which enable both customers and prospective customers to discuss experiences and understand about products and services. When you access social media pages managed by High Plains Bank, we may collect Personal Information and information about your activity on these pages. We may use Personal Information collected through our social media pages to assist in verifying your identity and account status. Additionally, we may combine this online information with information collected from offline sources, or information we already have. If you engage in social media, the information we collect may include:

  • Personally identifiable information such as name, username, and email address when available through promotional contest form, survey, advertisement response, public post, response or comment, or private message;
  • Information you provide through social media partner interactions, but only if you choose to share with them and they in turn, share such information with us;
  • Engagement information such as your likes, interests, preferences and feedback; and
  • Publicly posted content (such as pictures, comments, suggestions, opinions, complaints or Personal Information).

High Plains Bank strongly recommends that you never include sensitive personal, financial or other confidential information such as Social Security number, account number, phone number, mailing address or email address when posting or commenting online. Given the public nature of social media, it is critical that you safeguard confidential and financial information. Any posts you make on our official social media pages – including posts that contain pictures, comments, suggestions, complaints or Personal Information – are available to others who use those pages and are subject to the policies of the companies that operate the websites on which they appear. We are not responsible for the privacy policies, statements, and practices of these companies. This Online Privacy Notice only governs information collected on the Services. Please refer to the policies of those companies to better understand your rights and obligations with regard to such posts. You are also subject to this Online Privacy Notice and any social media guidelines when you visit our official social media pages.

We may contract with third parties to maintain and monitor the bank’s social media channels and assist the bank in marketing decisions. Any information you submit to us, including Personal Information, may be placed and stored on computer systems maintained by third party service providers acting on our behalf and subject to contractual obligations regarding confidentiality, security, and permitted use. We do not use social media information to make credit, lending, or account decisions.
How We Use the Information We Collect

We use Personal Information only as reasonably necessary to provide our Services, comply with legal and regulatory obligations, and support our business operations. We may use information we obtain about you to:

  • Determine what Services are available to you, such as when we collect your zip code in connection with our Open an Account form;
  • Verify your identity and recognize the devices you use to access the Services;
  • Process orders you place and complete other transactions you have requested using the Services, and provide you with products and services you request;
  • Send you information or materials you request;
  • Maintain a record of your transactions using the Services;
  • Respond to your questions and comments and provide customer support;
  • Communicate with you regarding your accounts, transactions, and, where permitted by applicable law, information about our products, services, offers, and promotions;
  • Operate, evaluate, and improve our business and the products and services we offer;
  • Analyze and enhance our marketing communications and strategies, including by identifying when emails sent to you have been received and read;
  • Analyze trends and statistics regarding use of the Services and transactions conducted using the Services;
  • Protect against and prevent fraud, unauthorized transactions, claims, and other liabilities, and manage risk exposure, including by identifying potential hackers and other unauthorized users;
  • Enforce our Terms of Use and other agreements; and
  • Comply with applicable legal requirements and industry standards.

We may also use the information we obtain about you for additional purposes that are compatible with the purposes described in this Notice and disclosed at the time of collection, where required by law.
Disclosure of Information

We may disclose aggregated, pseudonymous, or anonymized information about our users, and information that does not identify any individual user, without restriction.

We may disclose Personal Information about you:

  • To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep Personal Information confidential and use it only for the purposes for which we disclose it to them;
  • To comply with any court order, law, or legal process, including to respond to any government or regulatory request;
  • To enforce or apply our Terms of Use and other agreements;
  • If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of High Plains Bank, users of the Services, or others;
  • With your consent. Where we rely on your consent, we will obtain such consent through clear affirmative action at the time of collection where required by law.

Your Personal Information may be transferred as part of the servicing, sale, or assignment of a loan, as permitted by applicable law.

For more information, please see our High Plains Bank Privacy Notice disclosure.

We also reserve the right to transfer your Personal Information to a buyer or other transferee in the event of a merger, divestiture, restructuring, reorganization, dissolution, sale, or other transfer of some or all of our assets. Should such a sale, merger, or transfer occur, we will use reasonable efforts to direct the transferee to use your Personal Information in a manner that is consistent with our Online Privacy Notice.

Additionally, we reserve the right to access, read, preserve, and disclose any information as it reasonably believes is necessary to (i) satisfy any applicable law, regulation, legal process or governmental request, (ii) enforce this Online Privacy Notice and our Terms of Use, including investigation of potential violations hereof, (iii) detect, prevent, or otherwise address fraud, security or technical issues, (iv) respond to customer support requests, or (v) protect our rights, property or safety, and the public. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention.

The Bank does not sell Personal Information to third parties for monetary consideration.
Children’s Online Privacy (COPPA)

Our Services are intended for a general audience and are not directed to children under the age of 13. We do not knowingly collect, maintain, or use personal information from children under the age of 13 through our website or mobile applications. If we learn that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete that information from our systems. If you are a parent or legal guardian and believe your child under 13 has provided us with personal information, please contact us immediately at 1-800-984-0010. (Toll-Free).
Data Security

We have implemented measures intended to protect your Personal Information from accidental loss and from unauthorized access, use, alteration and disclosure. Please note that the electronic transmission of information is not completely secure. We cannot guarantee that the security measures we have in place to safeguard Personal Information will never be defeated or fail, or that such measures will always be sufficient or effective. Any transmission of Personal Information is at your own risk. Our website uses encryption technologies designed to protect information transmitted online; however, no method of transmission over the internet is entirely secure. In the event of a security incident involving Personal Information, we will respond in accordance with applicable law and regulatory requirements.
Retention Period

We will retain your Personal Information for the period necessary to fulfill the purposes outlined in this Online Privacy Notice, including to satisfy legal, regulatory, accounting, operational, and risk management requirements. When those purposes come to an end, we will securely delete or de-identify Personal Information when it is no longer required to be retained in accordance with applicable law and regulatory requirements.
Your Choices

We offer you the following choices about the information we collect from you and how we communicate with you:

Cookies

Most browsers will tell you how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to disable existing cookies. Please note, however, that without cookies you may not be able to take full advantage of all of the features of the Services. Disabling cookies is browser specific. If you disable cookies in Microsoft Edge, for example, that will not disable cookies in Safari, Firefox or Google Chrome.

Promotional Communications

If you have received a promotional email from us, you can opt out of receiving future promotional emails from us by following the unsubscribe instructions contained in such email.

Location Information

If you access our Services using a mobile device, you may adjust the settings on your mobile device to allow or prevent the sharing of location information. For example, you can disable “Location” (or “Location Services” on iOS-based devices) on your mobile device to prevent sharing your location information with us. Please refer to instructions provided by your mobile service provider or the manufacturer of your mobile device to learn how to adjust your mobile device settings. Please note that if you disable the sharing of location information, you may be unable to access some features of our Services that are designed for mobile devices.

Web Analytics

We may use third-party analytics and service providers (such as Google Analytics) to collect information about your use of the Services. These providers may use cookies and similar technologies to collect information about your online activities over time and across different websites and services.

You may opt out of the aggregation and analysis of data collected about you on our website by Google Analytics by installing the Google browser add-on, available at https://tools.google.com/dlpage/gaoptout.
Accessing and Changing Your Information

You can review and change the Personal Information associated with your account by logging into your online banking account and visiting your account profile page. You may also contact us via secure chat in the HPBGO Mobile app, or by phone at 1-800-984-0010 to request access to, correct, or delete any Personal Information that you have provided to us. Requests for deletion will be evaluated and fulfilled only to the extent permitted by applicable law, as the Bank may be required to retain certain information for legal, regulatory, fraud prevention, audit, and account servicing purposes. We may not accommodate a request to change information if we believe the change would violate any law, regulatory requirement, or legal requirement or cause the information to be incorrect.
Changes to Our Online Privacy Notice

High Plains Bank reserves the right to update or change this Online Privacy Notice at any time. If we make a material change to our Online Privacy Notice, we will provide notice to you (by email, through your account, and/or by posting on the website) that our privacy practices have changed and will provide a link to the new document. In the event we make a material change to how we use your Personal Information, we will provide you with an opportunity to opt out of such new or different use. The date this Online Privacy Notice was last revised is at the top of this page. We encourage you to review this Online Privacy Notice periodically to check for any updates or changes.
Data Transfers

High Plains Bank is based in the State of Colorado in the United States. When we obtain information about you, we may transfer, process, and store such information outside of the country in which you reside, including in the United States. By using the Services, you consent to the transfer to and processing and storage of your information in countries outside of your country of residence, which may have different data protection laws than those in the country where you reside. The Services are intended for use by individuals located in the United States and are not directed to individuals outside the United States. Residents of certain states may have additional rights under applicable law. Contact us to learn more.
Contact Us

If you have questions about this policy or our privacy practices, please contact us: