Notice of Your Financial Privacy Rights

Protecting your privacy is important to Community Bank & Trust Company and our employees. This is our privacy notice for our customers. The following Policy serves as a standard for all Community Bank & Trust employees for collection, use, retention, and security of nonpublic personal information. When we use the words "you" and "your", we mean the following types of customers:

• Deposit account
• Loan account
• Credit card
• Safe Deposit Box
• Home mortgage brokerage
• Telephone banking
• Internet banking
• All IRA accounts for which we act as custodian
• All former customers

What Information We Collect

We may collect "nonpublic personal information" about you from the following sources:

• Information we receive from you on applications or other loan and account forms
• Information about your transaction with us
• Information we receive from third parties such as credit bureaus

"Nonpublic personal information" is nonpublic information about you that we obtain in connection with providing a financial product or service to you. For example, nonpublic personal information includes information regarding your account balance, payment history, and overdraft history.

What Information We Disclose

We do not disclose any nonpublic personal information about you to anyone, except as permitted by law.

We are permitted under law to disclose nonpublic personal information about you to other third parties in certain circumstances. For example, we may disclose nonpublic personal information about you to third parties to assist us in servicing your loan or account with us, to government entities in response to subpoenas, and to credit bureaus.

If you decide to close your account(s) or become an inactive customer, we will continue to adhere to the privacy policies and practices described in this notice.

Our Security Procedures

We take steps to safeguard customer information. We restrict access to your personal and account information to those employees who need to know that information to provide products or services to you. Employees who violate these standards will be subject to disciplinary measures. We maintain physical, electronic, and procedural safeguards that comply with federal standards to guard your nonpublic personal information.