Find the most up-to-date privacy information below.
This Privacy Policy for California Consumers supplements the information contained in the Privacy Statement of Wintrust Financial Corporation and its subsidiaries (collectively, “we,” “us,” or “our”) and applies solely to consumers who reside in the State of California (“consumers” or “you”). Any terms defined in the California Privacy Rights Act of 2020 (California Civil Code § 1798 et seq.) (“CPRA”) have the same meaning when used in this notice. This Privacy Policy for California Consumers can be found online at www.wintrust.com/cpra
We may collect, use, or share your Personal Information, including Sensitive Personal Information. We only process Sensitive Personal Information for the purpose for which we originally collected it. We do not and will not sell personal information or Sensitive Personal Information for monetary consideration. We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). In particular, we have collected the following categories of personal information from consumers within the last twelve months:
Category | Examples |
---|---|
Identifiers. | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. |
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. |
Protected classification characteristics under California or federal law. | Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). |
E. Biometric information. | Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. (Only for employees of Wintrust Financial Corporation and its subsidiaries) |
G. Geolocation data. | Physical location or movements. |
Professional or employment-related information. | Current or past job history or performance evaluations. |
Personal information does not include:
We obtain the categories of personal information listed above from the following categories of sources:
We may use or disclose the personal information we collect for one or more of the following business purposes:
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
We may disclose your personal information to a service provider for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the preceding twelve months, we have disclosed the following categories of personal information for a business purpose: Identifiers; California Customer Records personal information categories; Protected classification characteristics under California or federal law; Professional or employment-related information.
We disclose your personal information for a business purpose to the following:
In the preceding twelve months, we have not sold any personal information.
We will retain your information as identified above for a period that is reasonably necessary and proportionate to the stated purpose or for such period as required by applicable law, regulation, or rule.
Factors used to determine retention periods include but are not limited to: 1) any customer relationships to provide our products and services to you; and 2) any applicable legal obligation or right we have to retain.
The CPRA provides California consumers with specific rights regarding their personal information and Sensitive Personal Information. This section describes your CPRA rights and explains how to exercise those rights.
You have the right to request that we disclose certain information to you about our collection and use of your information over the past twelve months. You have the right to require that we provide you a report of:
We cannot provide you specific pieces of personal information if the disclosure would create a substantial, articulable, and unreasonable risk to the security of that personal information, the consumer’s account with the business, or the security of the business’s systems or networks.
You have the right to request that we correct any inaccurate information, unless an exception applies.
You have the right to request that we delete any of your information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your information from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service providers to:
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by either:
Wintrust Financial Corporation
Attention: CPRA Requests
9700 W. Higgins Rd., #700
Rosemont, IL 60018
Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request. A household may exercise its rights for aggregate household personal information by submitting a verifiable consumer request, as long as we are able to identify each member in the request individually.
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an online account with us, we can deliver our response to that account at your request. If you do not have an account with us, we will deliver our written response by mail or electronically, at your direction. Any disclosures we provide will only cover the 12-month period preceding the date of receipt of consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.
We will not discriminate against you for exercising any of your CPRA rights. Unless permitted by the CPRA, we will not:
We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will notify you by email or through a notice on our website homepage.
If you have any questions or comments about this notice, our Privacy Statement, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Phone: 1-844-801-6100
Website: www.wintrust.com/cpra
(NOTE: WE WILL NOT ACCEPT REQUESTS FOR ACCESS TO SPECIFIC INFORMATION AND DATA PORTABILITY RIGHTS OR DELETION REQUESTS AT THE BELOW ADDRESSES)
Email: cpra@wintrust.com
Postal Address: Wintrust Financial
Attn: CPRA Requests
9700 W. Higgins Rd., #700
Rosemont, IL 60018
This policy must be updated every twelve months.
Date Updated: June 30, 2023