Dear Customer:

As a bank customer, you have a right to financial privacy, and the bank respects this right. Bank employees necessarily acquire confidential information that customers consider to be extremely sensitive. Our employees have been informed that this information must not be revealed to unauthorized persons and that this information is not to be discussed with others within the bank unless the others involved require the information to perform their duties. By bank policy, customer financial information is released to people outside the bank only when the release is authorized by the customer, by the bank, required by state statute, or when the information has been subpoenaed either by a court or the Internal Revenue Service (IRS). Then, we make every effort to ensure that the information released is accurate and within the confines of the authorizing release document. The release of customer information is always based on a written document, and the release is in accordance with the written instructions contained in the document. Under banking regulations we are required to give you a statement regarding the bank's customer privacy protection policies. This letter contains the information the regulations require we give you.

Categories of Information the Bank Collects
We collect information on you when you open an account and through the administration of these accounts. The categories of information the bank collects includes transaction accounts, savings accounts, certificates of deposits, safe deposit boxes, credit applications, loan accounts, and the like. We also obtain credit reports on customers from time to time.

Categories of Information the Bank May Disclose
Except as specifically discussed elsewhere in this letter, this bank does not intend to disclose consumer information to others. In particular, this bank has no intention of selling customer lists to others so that they can market the product directly to you.

Parties to whom the Bank May Disclose Information
Affiliated Businesses - Citizens Business Development Co., LLC; Farmers Deposit Bank, Middleburg, KY.

Information about Former Customers
The bank does not treat information about former customers any differently than it does current customers. Specifically, the bank does not release nonpublic personal information about former customers to outside third parties.

Information Disclosed to Service Providers and Joint Marketers
In the course of routine business, from time to time the bank discloses nonpublic personal information about its customers to third parties who are under contract to the bank to perform services for the bank. When we do so, the contract contains provisions that require the contractor use the information only for the purposes intended and that the contractor not divulge the information it receives from the bank to others. For example, we use a marketing agency, and we give this agency transaction, savings, and credit account information so that it can develop appropriate marketing programs for the bank.

Customer Rights to "Opt Out"
If at anytime in the future the bank changes its policies and shares nonpublic information about customers with outside third parties before doing so we will notify you of our intent and the notice will contain a telephone number you can call to opt out. If you opt out, no nonpublic information that comes from your relationship with the bank will be shared with the third party. Before information is shared, you will be given a reasonable amount of time to make this opt-out decision, and thereafter you may choose to opt out at any time.

Disclosures Required Under the Fair Credit Reporting Act
Under the law, the bank is permitted to share customer information with sister organizations the bank is affiliated with. Under the Fair Credit Reporting Act, you have "opt-out" rights regarding certain information. Before this information is shared with an affiliate, we will send you a notification and we will explain to you how to opt out. Then, if you choose to opt out, the information will not be shared with the affiliated company.

Disclosures Regarding Confidentiality and Security of Information
The bank takes the confidentiality and security of customer information seriously. We restrict access to areas where customer information is kept, and access to the information is granted only to employees who need that access in the performance of their duties. In addition, we have internal procedures that are designed specifically to protect this information from outsiders.

Thank you very much for banking with us. We are proud to have you as a customer and you may rest assured that we are doing everything we can to protect the privacy of the financial information you have entrusted us with.

Sincerely,

Citizens Bank & Trust Co. of Jackson