Website Privacy Policy

Effective Date: June 12, 2024
This Notice was last updated: June 12, 2024

This Privacy Policy (“Policy”) describes how Chevy Chase Trust Company and our brands and subsidiaries (collectively, “CCT,” “we,” “us” and “our”) collect, use, and disclose your Personal Information when you visit any of our websites (the “Sites”) or otherwise interact with any of our features or services that reference this Policy (collectively, the “Services”). This Policy also explains how you can exercise certain rights you may have in connection with your privacy and personal information.

Your use of our Services, and any dispute over privacy, is subject to this Policy.

For ease of reference, you may click on any of the following links to jump to one of the sections addressed below:

1. Scope of this Privacy Notice
2. Our Commitment to You
3. Changes to this Privacy Policy
4. Accessibility Statement
5. Personal Information We Collect, Use and Share
6. Social Media Engagement
7. Interest-Based Advertising
8. Our Use of Cookies
9. Global Privacy Control
10. Do Not Track
11. Information Regarding Children
12. Your Privacy Rights
13. Your GDPR Privacy Rights
14. Retention and Disposal of Personal Information
15. Links
16. Updates to This Policy
17. Contact Us

Scope of this Privacy Notice

This Policy applies to all CCT websites and covers only the Services identified above and does not apply to information which you may send us by other means. If you are a client of CCT through either a separately managed account, a trust or estate for which CCT serves as fiduciary, a beneficiary of a trust or Individual Retirement Account at CCT, or an investor in a fund, collective investment trust or other investment vehicle for which we act as investment advisor (collectively, “Clients”), please visit our Client Privacy Policy at: https://www.chevychasetrust.com/client-privacy-policy/ to learn more about how we handle your Personal Information.

If you are within or are a resident of a member nation of the EUROPEAN ECONOMIC AREA (the “EEA,” which includes the 27 European Union Member States, Iceland, Lichtenstein and Norway), Switzerland or the United Kingdom (“UK”) (collectively, the “EU”), these Services may apply to you.

This Site contains links to external sites, including those embedded in third-party advertisements or sponsor information, that are not controlled by CCT. We are not responsible for the privacy practices and data collection policies for such third-party sites. You should consult the privacy policies of those sites for details.

Our Commitment to You

Our privacy commitments are fundamental to the way we run our business. These commitments apply to everyone who has a relationship with us – including customers, partners and website visitors. We are committed to providing you with the best overall experiences in all of our products and services. We strive to strike the right balance between using your data to ensure the quality of those experiences and protecting your privacy.

Changes to This Privacy Policy 

CCT reserves the right to make changes to this Policy at any time. Since this Policy may change as we modify or expand our Services, we suggest that you check back from time to time in order to understand how we treat your information. Our Policy’s effective date will always be set forth at the beginning and end of the Policy. Any changes will be immediately incorporated into this Policy and will be prospective only. We will not make any changes that have retroactive effect unless legally required to do so.

Any change to this Policy is effective immediately. Your continued use of the Services after any changes are made to this Policy constitutes your acceptance of the changes. If any changes are unacceptable to you, you should cease all use of the Services.

Accessibility Statement

CCT is committed to making its website, https://www.chevychasetrust.com, usable by all people, including those with disabilities. We are constantly in the process of making upgrades to achieve this goal.

Our Commitment to Help 

We are dedicated to meeting your accessibility needs. Should you have specific questions or concerns about the accessibility of this site or need assistance in using the processes found within this site, we have individuals here at CCT to assist you.  

Please contact us directly at [email protected]. We would be happy to assist in making your visits to our site as convenient as possible. 

Third Party Applications 

While you are visiting our site, you will notice that we make use of third-party sites such as LinkedIn, Facebook, Twitter, Wealth Access, and YouTube to provide information about CCT. Though individuals may have challenges with access to these sites, CCT does not control or remedy the way content is portrayed.

Personal Information We Collect, Use and Share

Personal information is generally defined as information that, by itself or in combination with other information, identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, device, or household (“Personal Information”). Personal Information can include, but is not limited to, your name, address, telephone number, email address, username and password, IP address or other online identifiers, browsing or search history, credit/debit card number or other financial information, professional or employment-related information, office address and other business information, demographic information, consumer preferences, biometric information such as fingerprints, precise location information, or any other type of information that, directly or indirectly, can be linked to or is reasonably capable of being associated with you.

We will only collect, use and share your personal information where we are satisfied that we have a legal basis to do so. In these cases, we will look after your information at all times in a way that is proportionate and respects your privacy rights. We will not take any action that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.

When using the Services, we may collect, use, and share the following categories of Personal Information from you in the following ways:

Categories of Personal Information We Collect

• Contact information such as your name, email, phone number, address, and preferred method of contact.
• Message contents if you contact us, such as when you send us an email, including any attachments thereto, records and copies of your correspondence, including your name, email, and any other information you choose to provide or communicate to us while using the Services.
• Preference you may select regarding communication method.
• Information such as IP address, unique device identifiers, operating system, and other information related to the device used to access our Services.
• “Clickstream” data (e.g., information regarding which of our Web pages you access, the frequency of such access, and your product and service preferences) may be collected by CCT itself, or by our service providers, using cookies, Web beacons, page tags, or similar tools that are set when you visit the site or when you view an advertisement we have placed on another Web site.
• Information related to how you interact with the Services and advertisements, such as referring and exit web pages and URLs, browsing history, and other similar information. As described below in the “Our Use of Cookies” section, we may use analytics providers and technologies, including cookies and similar tools, to collect this information.
• Personal Information about you collected through our affiliates, business partners, and vendors who provide services on our behalf.

We May Collect This Personal Information When You…

• Send us an email, call via telephone, or submit an online “contact” web form.
• Embed information into documentation sent over email.
• Any other correspondence provided or made available to CCT.
• Visit the Site.
• Use our Services which involve our affiliates, business partners, and vendors.

We Collect This Personal Information So That We May…

• Use for Administrative Purposes. To assess the usage, value and performance of our online products and services; to improve your experience with the site; and as otherwise permitted by applicable law or regulation.
• Operate our Business. We use Personal Information to allow you to use our Services, and otherwise run our day-to-day operations.
• Communicate with You. We may use Personal Information to communicate with you about our Services, and to respond to your inquiries, including if you contact us with a question or concern.
• Evaluate and Improve our Services. We may use the Personal Information we collect to evaluate and improve our Services and to measure, improve, and understand the effectiveness of our Services and its features. We may also use this information to develop new Service offerings.
• Marketing and Advertising. We may use Personal Information to contact you with surveys and information regarding our Services and those of our affiliates that we believe may be of interest to you. This may include commercial emails sent on behalf of us, our affiliates, and our advertisers.
• Security Purposes. We may use Personal Information to mitigate fraud and protect CCT.
• Legal Requirements. We may use Personal Information to comply with lawful court orders, law enforcement requests, or other legal requirements.
• Other Operational Purposes. We may use Personal Information for purposes not provided for in this Notice, but if we do, we will notify you (and, if necessary, obtain your consent) before using your Personal Information in this way.

Types of Third Parties That May Receive This Personal Information

• This information may be processed by us, or on our behalf by other entities, solely in accordance with our instructions.
• We disclose information we collect from you to service providers, consultants, auditors, attorneys, vendors, contractors, or agents who perform functions on our behalf. This includes entities that host our Site, perform research and development, and assist us in performing analytics on our Site.
• We disclose the information we collect from you to our affiliates or subsidiaries.
• We may disclose your information to others when it is necessary to provide the Services you requested.
• If (i) we or our affiliates are or may be acquired by, merged with, or invested in by another company, or (ii) if any of our shares or assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from you to the other company. As part of the business transfer process, we may share certain of your personal information with lenders, auditors, and advisors, including attorneys and consultants.
• We disclose Personal Information to comply with the law, a judicial proceeding, court order, or other legal process, such as in response to a court order or a subpoena.
• We disclose Personal Information when we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of this Notice, or as evidence in litigation in which we are involved.
• We may disclose Personal Information for a new use or purpose not described in this Notice. We will notify you before disclosure, if necessary, and provide you with the choice of opt-in or opt-out consent.

In the past twelve months, we have not sold any personal information.

Social Media Engagement

Our websites include social media features, such as the Facebook Like button and other widgets that run on our site. These features may collect your IP address and which page you are visiting on our site and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our site. Your interactions with these features are governed by the privacy policy of the organization providing it. For example, if you create or log into your account through a third-party social networking site, we may have access to certain information from that site, such as your name, account information and friends, in accordance with the authorization procedures determined by such third-party social networking site. We may also collect information about you from other sources to help us correct or supplement our records, improve the quality or personalization of our services to you, and prevent or detect fraud. We work closely with third parties (for example, business partners, service providers, sub-contractors, advertising networks, analytics providers, search information providers, fraud protection services) in an effort to constantly improve our products and services and may receive information about you from them.

Interest-Based Advertising

We may ourselves, or with third-party vendors, use non-personal information in connection with our own or vendor information to deliver targeted advertising to you when you visit other websites or our site. For example, if you are searching for information on a particular product, we or our vendor may cause an advertisement to appear on other websites you view with information on that product. This form of advertising, sometimes called “behavioral advertising,” is not based on any information that specifically identifies you. As a result, we and our vendor know your interests, but do not personally identify you in connection with the delivery of that specific ad. We believe that such advertising is helpful because you will see advertisements that are relevant to your interests. However, if you would like to opt out of these interest-based advertisements, please follow the opt-out process via the consent management platform on our website and toggle the targeted advertising as off.

If you generally want to “opt out” of receiving online interest-based advertisements on your internet browser from advertisers and third parties that participate in a self-regulatory programs like the Digital Advertising Alliance (DAA) program or the Network Advertising Initiative (NAI), please follow the instructions at WebChoices: Digital Advertising Alliance’s Consumer Choice Tool for Web US (aboutads.info) and NAI Consumer Opt Out (networkadvertising.org) to place an “opt-out” cookie on your device indicating that you do not want to receive interest-based advertisements. If you want to “opt out” of receiving online interest-based advertisements on mobile devices, please follow the instructions at YourAdChoices.com | AppChoices and Mobile Opt Out – NAI: Network Advertising Initiative (thenai.org).

Our Use of Cookies

Cookies are small text files that may be placed on your Web browser when you visit our Sites, or when you view advertisements that we have placed on other Web sites. Cookies allow your browser to remember some specific information which the Web server can later retrieve and use.  When you quit your browser, some cookies are stored in your computer’s memory, while some expire or disappear.

Cookies are used primarily for administrative purposes, to improve your experience with our Web sites. Examples of this would include the use of cookies:

• To improve site security by “authenticating” you (i.e., verify that you are who you say you are) when you sign in to our Sites.
• To keep track of your specified preferences such as language, time zone and timeouts after periods of inactivity.
• To allow you to navigate our Sites more easily by “remembering” your identity so that you do not have to input your password multiple times as you move between pages or services.

We use Cookies for the following purposes:

• Website Operation. Cookies help us run our websites securely and enable basic functions like page navigation.
• Performance and Analytics. Cookies help us analyze how you interact with our Sites. These Cookies enable us to monitor and improve website performance, Services, and your experience.

If you wish to prevent Cookies from tracking your activity, or visits across multiple websites, you can set your browser to block certain Cookies or notify you when a Cookie is set. If you block Cookies, certain features and Services may not work. For more information on how you can customize your browser’s Cookie setting, please visit the link to your web browser below:

• Google Chrome
• Safari
• Microsoft Edge
• Mozilla Firefox

We are not responsible for the completeness, effectiveness, or accuracy of any third-party opt-out options or programs.

Global Privacy Controls

Website visitors who are using a browser or extension that is Global Privacy Control (GPC) compliant will have their signal automatically applied to their consent settings.

Do Not Track

Some website browsers offer a “Do-Not-Track” setting or extension you can activate

 to signal your preference not to have data about your online browsing activities monitored and collected. Currently, our Site and Services do not recognize “Do-Not-Track” requests. You may, however, disable certain tracking as discussed in this section (e.g., by disabling cookies).

Information Regarding Children

The Services are intended for individuals 18 years of age and older. Our Services are not directed at, marketed to, nor intended for, children under 16 years of age. CCT does not knowingly collect, use, or sell any information, including Personal Information, directly from children under 16 years of age.

If children under 16 years of age are named as a beneficiary with respect to an account or in a will or trust, personal information may be collected from the parent(s) or legal guardian(s) with their consent. If CCT learns that it has collected any information regarding a person younger than 16 years of age without consent, CCT will delete or destroy the information immediately.

If there is concern that information regarding a person younger than 16 years of age was somehow collected by CCT, any minor, or the parent(s) or legal guardian(s) of such minor, who wishes to request the removal of the minor’s information should submit their request by using the contact details provided in the “Contact Us” section below.

Your Privacy Rights

We provide you with certain rights regarding your personal data, subject to certain exceptions and limitations. Those rights include:

• Right to request access to the personal data we have collected about you, restrict the processing of specific pieces of personal information we collected about you and learn how we collect this information, our purpose in collecting it,
• Right to correct or delete the personal data we have collected from you,
• Right to opt-out of the sale or sharing of your personal data,
• Right to limit use and disclosure of sensitive personal information, if applicable, and
• Right not to receive discriminatory treatment for the exercise of [the relevant] privacy rights conferred by applicable laws.

If applicable under the California Privacy Rights Act (CPRA), “Sensitive personal information” means: (A) personal information that reveals your social security, driver’s license, state identification card, or passport number; account log‐in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of your mail, email and text messages, unless we are the intended recipient of the communication; genetic data; and the processing of biometric information for the purpose of uniquely identifying you; (B) personal information collected and analyzed concerning your health; or (C) personal information collected and analyzed concerning your sex life or sexual orientation. Note that “Sensitive personal information” excludes information that is made publicly available.

We do not use or disclose sensitive personal information for purposes to which the right to limit use and disclosure applies under the California Consumer Privacy Act (CCPA).

If you would like to access, review, edit, delete or have us properly dispose of any copies of the Personal Information that CCT collected about you (subject to any applicable legal exceptions), or if you would like to exercise the above rights in any other way, please contact us at [email protected] or use the mailing address provided in the “Contact Us” section below.

You may be able to opt out of CCT sharing your Personal Information with the entities identified in this Policy by sending us an email at the address above, unless the sharing of your Personal Information is necessary to perform one of the following business purposes: to count ad impressions and evaluate their effectiveness; to detect, protect against, and prosecute security incidents; to debug or troubleshoot functional errors that may arise with the Services; to complete short-term tasks related to an existing interaction you have with CCT; to maintain or service your account; to process payments and fulfill orders or other transactions you authorize; to verify your customer information; and to ensure the safety and quality of the Services.

CCT will attempt to accommodate any request to delete or properly dispose of any copies of your Personal Information, but we cannot guarantee we can eliminate all Personal Information from the specified uses. Therefore, please be as specific as possible in any request to delete or dispose of copies of your Personal Information. We may deny your deletion request if retaining the information is necessary for us or our service providers to:

• Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise to perform a contract we entered into with you;
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
• Debug products to identify and repair errors that impair existing intended functionality;
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law;
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546);
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent;
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
• Comply with a legal obligation; or
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

If you choose to delete certain portions of your Personal Information, it may affect your ability to use certain Services. If the request relates to information that CCT needs to make the Site or other Services function properly for you, you may no longer be able to use those Services. Any removal of content by CCT does not ensure or guarantee complete or comprehensive removal of the content in all places. The content may have been shared or reposted by other parties, or federal or state law may require maintenance of the content or information.

You may grant an authorized agent written permission to submit requests regarding your Personal Information, but we may deny authorized agent requests absent proof that you authorized such agent to act on your behalf, or if we are unable to verify your identity.

CCT is required to verify the identity of any person or entity that requests the disclosure or deletion of Personal Information. If you have a password-protected account with us, we will use our existing authentication procedures to verify your identity. For most other consumer requests, CCT will ask you to provide information that matches at least two pieces of personal information we store about you before responding to your request. If you would like to request the specific pieces of your personal information that CCT has collected, or if you would like us to delete highly sensitive information, you will need to match at least three pieces of information we store about you, and you must provide a signed declaration under penalty of perjury that you are the consumer whose personal information you are requesting.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

We may send periodic promotional emails to you. You may opt out of promotional emails by following the opt-out instructions contained in the email. If you opt out of receiving promotional emails, we may still send you emails about other services you have requested to receive from us.

Your GDPR Privacy Rights

European Economic Area (EEA) residents should be aware that you may be entitled under applicable data protection laws to the following rights with regard to CCT’s collection, use and sharing of your Personal Information:

• Right to object to certain data processing: To the extent that CCT is relying upon the legal basis of legitimate interest to process your personal data, then you have the right to object to such processing, and CCT must stop such processing unless we can either demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or where CCT needs to process the data for the establishment, exercise or defense of legal claims. Where CCT relies upon legitimate interest as a basis for processing we believe that we can demonstrate such compelling legitimate grounds, but we will consider each case on an individual basis.
• Information and access: You have the right to be provided with certain information about CCT’s processing of your personal data and access to that data (subject to exceptions).
• Rectification: If your personal data changes, we encourage you to inform us of the change. You have the right to require inaccurate or incomplete personal data to be updated or corrected.
• Erasure: You have the right to require that your data be erased in certain circumstances, including where it is no longer necessary for us to process this data in relation to the purposes for which we collected or processed the data, or if we processed this data on the basis of your consent and you have since withdrawn this consent.
• Data portability: Where we process your personal data on the basis of your consent, or where such processing is necessary for entering into or performing our obligations under a contract with you, you may have the right to have the data transferred to you or another controller in a structured, commonly used and machine-readable format, where this is technically feasible.
• Right to restriction of processing: You have the right to restrict CCT’s processing of your personal data while your request for data rectification or objection to personal data processing is being considered, if we no longer need to process your data but you need that data in connection with a legal claim, or if our processing is unlawful but you do not want us to erase the data. If this right applies, we will continue to store your data but will only further process it with your consent, for the establishment, exercise or defense of legal claims, to protect the rights of another person, or for reasons of important public interest.
• Right to withdraw consent: If we require your consent to process any of your information, we will request this consent separately. To the extent that CCT relies on your consent to process any of your personal data, you have the right to withdraw your consent to such processing at any time.
• Complaint: You also have the right to lodge a complaint with a supervisory authority, in particular that in your Member State of residence, where applicable.

If you would like to exercise the above rights in any way, please contact us at [email protected] or use the mailing address provided in the “Contact Us” section below

Retention and Disposal of Personal Information

Securing Personal Information

CCT is committed to protecting the privacy and confidentiality of your personal information. We maintain physical, electronic and procedural safeguards to protect the information against loss, misuse, damage or modification and unauthorized access or disclosure. Some of the other central features of our information security program are:

• A dedicated group that designs, implements and provides oversight to our information security program;
• The use of specialized technology such as firewalls;
• Testing of the security and operability of products and services before they are introduced to the Internet, as well as ongoing scanning for publicly known vulnerabilities in the technology;
• Internal and external reviews of our Internet sites and services;
• Monitoring of our systems infrastructure to detect weaknesses and potential intrusions;
• Implementing controls to identify, authenticate and authorize access to various systems or sites;
• Protecting information during transmission through various means including, where appropriate, encryption; and
• Providing CCT personnel with relevant training and continually updating our security practices in light of new risks and developments in technology.

Legal Disclaimers

Nothing in this Notice restricts our ability to:

1. Comply with federal, state, or local laws;
2. Comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, or local authorities;
3. Cooperate with law enforcement agencies concerning conduct or activity that we reasonably and in good faith believe may violate federal, state, or local law;
4. Exercise or defend legal claims;
5. Detect security incidents and protect against fraudulent or illegal activity and prosecute those responsible for such activity; or
6. Transfer Personal Information as part of a merger or acquisition, dissolution, bankruptcy, or any other transaction in which a third party assumes control of all or part of our business.

Links

Our Site and Services may contain links to unaffiliated websites. Any access to and use of such linked websites is not governed by this Policy, but instead is governed by the privacy policies of those websites. We are not responsible for the information practices of such websites.