This Privacy Policy explains how TBK Bank collects, uses, shares, and protects personal information collected from customers, website visitors, and digital banking users. TBK Bank complies with the Gramm-Leach-Bliley Act (GLBA) and its implementing regulations for nonpublic personal information, the Fair Credit Reporting Act (FCRA) for consumer reporting, and the California Consumer Privacy Act (CCPA) for California residents. TBK Bank does not sell personal information to third parties for their marketing purposes.
This policy applies to tbkbank.co.com, TBK Bank online banking, the TBK Bank mobile app for iOS and Android, and other digital properties. It supplements — rather than replaces — the GLBA Privacy Notice delivered annually to account holders. Customer service at +1-877-482-2265 and branches across Texas, Colorado, Iowa, Illinois, Kansas, and New Mexico handle privacy-related requests. Regulated by the Office of the Comptroller of the Currency; consumer rights supervised by the Consumer Financial Protection Bureau.
Security Overview Contact Us
Categories of personal information collected through application, account activity, digital banking use, and limited analytics.
When you apply for a TBK Bank account or product, we collect identifiers (name, address, Social Security number, date of birth), contact details (email, phone), employment and income information, and government-issued photo ID. When you use TBK Bank services, we collect transaction history, account balances, and payment instructions. When you contact customer service, we record call metadata and, where disclosed, call content for quality and compliance.
When you use TBK Bank online banking, the mobile app, or the website, we automatically collect device identifiers, IP address, approximate location derived from IP or GPS (with permission in the mobile app), browser type and version, operating system, session timestamps, and interaction patterns necessary for security monitoring. Authorized tracking excludes cross-site advertising and behavioral targeting outside TBK Bank properties.
We receive consumer reports from credit reporting agencies governed by the FCRA, identity verification data from ChexSystems, fraud signals from shared banking consortium databases, and information from joint account holders, authorized signers, and referral partners. These third-party sources help prevent fraud, verify identity, and underwrite credit products under federal and state law.
Strictly necessary cookies maintain your login session, protect against cross-site request forgery, and power MFA. Functional cookies remember your preferences. Analytics cookies measure usage patterns in aggregate. We do not use cross-site advertising cookies. The cookie banner on your first visit lets you accept or decline non-essential cookies. Browser Do Not Track signals are treated as a request to decline analytics.
Uses and sharing purposes limited to banking operations, regulatory obligations, fraud prevention, and service delivery.
| Category | Purpose | Shared With | Opt-Out Available? |
|---|---|---|---|
| Transaction processing | Complete deposits, payments, wires | Federal Reserve, ACH network, card networks | No — essential |
| Fraud prevention | Block unauthorized activity | Consortium fraud databases, law enforcement | No — essential |
| Regulatory compliance | BSA/AML, tax reporting, subpoenas | OCC, FinCEN, IRS, courts | No — required by law |
| Service providers | Core banking, mobile platform, print/mail | Vetted vendors under contract | No — bound by GLBA safeguards |
| Marketing (own products) | Relevant TBK Bank product offers | TBK Bank internal only | Yes — opt out any time |
| Marketing (affiliate products) | Affiliate offers | TBK Bank affiliates | Yes — opt out under GLBA |
| Non-affiliate sales | Not applicable | Not shared | TBK Bank does not sell data |
| Cookies — analytics | Aggregate usage measurement | Analytics vendor under contract | Yes — cookie banner |
| Location (mobile app) | Branch locator, fraud signals | None external | Yes — device setting |
| Audit logs | Security and compliance review | TBK Bank internal, examiners | No — essential |
Opt-out instructions in the annual GLBA Privacy Notice. Regulatory sharing covered under OCC examination obligations. FDIC-insured depositor data governed by FDIC rules.
California residents have specific rights regarding personal information collection, use, sharing, and deletion.
Request the categories and specific pieces of personal information TBK Bank has collected about you in the last 12 months, along with the sources, purposes, and categories of third parties with whom it has been shared. TBK Bank verifies identity before fulfilling access requests to prevent unauthorized disclosure.
Request deletion subject to legal retention obligations (banking records retained 7+ years under federal law). Opt out of the sale or sharing of personal information — TBK Bank does not sell personal information. Receive non-discriminatory treatment when exercising CCPA rights. Submit requests via Contact Us or +1-877-482-2265.
How long TBK Bank keeps data, how we protect it, and how we communicate material changes to this policy.
Account records retained at least 7 years after account closure per federal recordkeeping rules. Wire and Bill Pay records retained per regulation. Audit logs for login, MFA events, and transaction reviews retained 7 years.
256-bit TLS on every session, MFA on every login, encryption at rest, access control based on least privilege, background checks on employees with access to customer data, incident response program.
We notify customers of material privacy changes via email, online banking banner, and updated effective date on this page. Minor clarifications may update without notice. Current version: April 15, 2026.
Personal information use, California rights, and cookies.
Transactions, fraud prevention, compliance, service delivery, and relevant product marketing. Governed by GLBA. TBK Bank does not sell personal information.
Know, access, delete (subject to legal retention), opt out of sale/sharing (we do not sell), non-discrimination. Submit via Contact Us or +1-877-482-2265.
Essential cookies for session/security/MFA cannot be disabled. Analytics cookies are optional via the cookie banner. No cross-site advertising cookies.