HABERSHAM BANCORP'S CONSUMER PRIVACY STATEMENT AND PRINCIPLES

Overview
Thank you for viewing our Principles of Privacy. At Habersham Bancorp, we are committed to quality customer service to all of our customers. We strive to serve our customers as effectively and professionally as possible, while at the same time, we place the highest priority in our customers' privacy. We will apply our privacy principles to all information that our customers share with us.

Visitors to our site will remain anonymous. We do not collect personal identifying information about visitors to our site. Our servers collect standard non-identifying information about visits to the site, such as date and time visited, IP address, city, state, and country. The information is used to compile standard statistics on the site usage. If you have provided personal identifying information via e-mail (such as name and address), the information will only be used to communicate with you to handle your request.

Principles of Privacy
We recognize and respect each customer's expectation that their privacy will be protected.
We will collect and use only that information about our customers needed for legitimate business purposes.
We will strive to maintain information about our customers that is both accurate and complete.
We will aim to limit access to information about our customers to those authorized individuals who have a legitimate reason to know.
We will maintain security measures that guard access to and disclosure of information about our customers We will not disclose information about accounts or transactions to outside parties unless there is an appropriate legal or business justification.
We will ask outside parties who process information about our customers to abide by our company's Principles of Privacy.

Information Sharing
Habersham Bancorp companies are permitted to share information within our organization concerning a customer's account history. Other information that could be shared within our company includes information a customer has given to one of our companies as part of an application for one of our products and information that we have received from a consumer reporting agency or other third party.

Customers may request that we not share the above types of information by calling us toll free at 1-800-822-0316. We will no longer share information once a request is received by the company.

Habersham Bank Security Statement
Our website brings together a combination of industry-approved security technologies to protect data for the bank and for you, our customer. The service provider for our Internet Banking product is eSolutions. They provide the router and firewall, through their parent company Fiserv, to regulate the inflow and outflow of server traffic.

Once a server session is established on a https secure page, the user and the server are in a secure environment.

Security Services
eSolutions Security Services is designed to provide Internet Banking transaction access through the Internet and provide network-based firewall screening of our IP addresses from Internet visibility and filtering of non-HTTP traffic originating from the Internet, intrusion monitoring and detection, and suspicious activity reporting.

Intrusion Detection
Intrusion detection monitors are deployed throughout the Fiserv network. This system is "passive" in that it is not bound to a protocol stack in any way, thus making it immune from external attack. The primary functions of this system is to detect unauthorized attempts to access firewalls, routers or any other security component. It is able to take corrective action on known attach patterns by terminating connections, disabling the firewall and router ports as well as notifying the appropriate personnel so that additional corrective action can be taken. The system is actively monitored 24 hours per day. There is automation built into the system to alert when intrusion activity is detected and to page the appropriate personnel. All technical staff supporting firewalls and intrusion detection systems are provided with remote access systems so that they can immediately respond to these incidents even when they are physically removed from the component. Using current technology and monitors, your Internet use is secure.

Concerns and questions about this site should be directed to:
Bonnie C. Bowling Compliance Officer, Habersham Bancorp
P.O. Box 1980 Cornelia, GA 30531
Fax (706) 776-9020 | Phone (706) 778-1000

USA Patriot Act

Important information about procedures for opening a new account.

To help the government fight the funding of terrorism and money laundering activities, Federal law requires all financial institutions to obtain, verify, and recrd information that identifies each person who opens an account.

What this means for you:

When you open an account, we will ask for your name, address, date of birth, and other information that will allow us to identify you. We may also ask to see your driver's license or other identifying documents. We thank you for your understanding and for joining us in securing a safer tomorrow.