Privacy Statement

We understand and recognize the sensitivity of your personal financial information and take every effort to ensure your private information is protected. Your privacy is a top priority. This notice fully explains how we collect, use, and safeguard your personal financial information.

VyStar Privacy Policy

Last Modified Date: November 6, 2023  

VyStar Credit Union (collectively, “VyStar”, “we”, “our”, or “us”) is committed to protecting the privacy of our customers and others interested in our business and credit services accessed via https://www.vystarcu.org/, as may be updated from time to time, or any other website that links to this Privacy Policy (the “Sites”, collectively offering, the “Services”).  

This Privacy Policy (“Privacy Policy”) applies to information collected from the Services which collects personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, as defined by applicable privacy laws (“Personal Information”). Personal Information does not include: (i) publicly available information; (ii) deidentified or aggregated consumer information; or (iii) personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (“FRCA”) and the Gramm-Leach-Bliley Act (“GLBA”). For more information on information collected, processed, or disclosed pursuant to the GLBA and its implementing regulations, please refer to our GLBA Privacy Notice. By accessing and using the Sites containing a link to this Privacy Policy, receiving the Services, or otherwise providing us with personal information, you agree to the terms and conditions of this Privacy Policy and any updates we make to it. If you do not agree to the terms and conditions of this Privacy Policy, then please do not provide us with your information. Please note, however, that if you choose to limit the information that you provide to us while using the Services, you may not be able to use or participate in certain features of the Services.  

1. Revisions and Updates to this Privacy Policy 

We reserve the right to revise or update this Privacy Policy at any time, and you should periodically read the Privacy Policy to learn of any revisions or updates. If the revision or update is material, we will provide you notification via email or banner on the Sites; however, for non-material revisions or updates, we will notify you by posting the revised or updated Privacy Policy and its “Last Modified Date” on the Sites. Using the Services thereafter constitutes your agreement to and acceptance of the Privacy Policy and its revisions or updates.   

2. The Types of Personal Information That We Collect  

 VyStar collects Personal Information regarding customers who visit the Sites or register to become a client and applicants who initiate loan applications or inquiries about the Services (collectively, “you”, “your”). We collect Personal Information about you in various ways, including:  

  • Directly from you;   

  • Automatically, when you use the Services; and  

  • From third parties.  

2.1 Personal Information from you directly or via third parties. 

We collect Personal Information directly from you when you use the Services, register to become a member, or apply for a loan.  For example, when you contact us by email or when you complete an application.   We collect Personal Information from third parties including our Affiliates and Subsidiaries, data providers, and credit bureaus where permitted by law and in the course of providing the Services you request. You agree that the third-party providers of data, not VyStar, are responsible for maintaining your information with proper and sufficient accuracy and authority in accordance with all governing laws and regulations. We make no effort to verify any information for any purpose, including accuracy, legality, or non-infringement that we properly receive from third parties.   

We collect the following categories from the above-mentioned sources: 

  • Identifiers, including name, alias, telephone number, postal address, unique personal identifier, online identifier, email address, account name, financial and bank information, social security number, driver’s license number, passport number;  

  • Information Listed in the California Customer Records Statute, including name, signature, physical characteristics or description, postal address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit and/or debit card number, other financial information, medical information, health insurance information;  

  • Protected Classifications under California or Federal Law, including age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information);  

  • Professional or Employment Information, including current or past job history or performance evaluations; and  

  • Sensitive Personal Information, including social security number, driver’s license number, passport number, racial or ethnic origin, and religious or philosophical beliefs.  

2.2 Special Category Information 

Some of the information that we may collect as a result of providing credit solutions is particularly sensitive (e.g., social security number, driver’s license number, passport number, and racial or ethnic origin). We only collect this information as provided by or consented by you.    

Such sensitive information is only shared for the purpose of providing the Services you request or as consented for and will not be shared or used by us for any other purposes.  

2.3 Automatically, when you use the Services 

VyStar and third-party service providers may automatically collect information about you when you use the Sites. Like many other websites, VyStar and its providers may collect and store information that is generated automatically as you navigate through the Sites. This information is primarily needed to maintain the security and operation of the Sites, and for our internal analytics so that we can improve the Services. This information includes:  

  • Internet and Electronic Activity Data, including cookies, details of your visits to the Sites, including traffic data, generalized location data, logs, and other communication data and the resources that you access and use on the Sites, device's unique device identifier, operating system, browser type, mobile network information, device's telephone number, browsing history, browser and device information, advertising identifiers, clickstreams, search history, usage details, IP  address, pixel tags, browser version, operating system, other tracking technologies.  

    • Cookies: small data files that we transfer to your computer’s hard drive for record-keeping purposes. Cookies do not personally identify you; they merely identify the computer or device with which you access the Sites. The Sites uses cookies to analyze trends, recognize you, tailor the Services to you, or to detect and prevent fraud. You can instruct your browser, by changing its options, to disable cookies or to prompt you before accepting a cookie from the Sites. If you disable cookies, however, you may not be able to use all portions or functionality of the Services. For assistance in disabling cookies for our site, follow our opt-out process.  

    • Third-party Cookies: The use of cookies by third-parties is not covered by our Privacy Policy. We do not have access or control over these cookies. Third-parties use session ID cookies to make it easier for you to navigate our Sites. We use third-party services to provide the necessary hardware, software, networking, storage, and related technology required to run and improve our Services.  

    • Web Beacons: Our third-party partners may employ web beacons, also known as pixel tags or clear GIF, to track online user movement to help us better understand what content is effective. Web beacons are tiny graphics with a unique identifier that are embedded in websites and in newsletter emails. With web beacons, our third-party partners may collect information about you, such as your IP address, your browser or email client type, and other similar details. We use the data from our third-party partners to improve our services.  

    • SiteImprove Heat Maps: We utilize a heatmapping tool provided by a third-party vendor, which may be updated from time to time. SiteImprove captures how you use and interact with our Sites through behavioral metrics and heatmaps to improve and market our products/services. Sites usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for Sites optimization, fraud/security purposes, and advertising. View more information about how SiteImprove collects and uses your data.

    • Live Webchat: We utilize a live webchat service provided by a third-party vendor, which may be updated from time to time. Glia, collects, uses, stores, shares, discloses, and protects customer Personal Information in accordance with the Glia’s privacy policy. View Glia's privacy policy. The data Glia stores from our customers is strictly for our use. Information can include operator names and emails, visitor names and emails, visitor phone numbers, email addresses, and IP addresses. There will also be cookies, such as POSH.AI, and local storage kept on Glia’s servers to help provide site history of the Sites visitors. View more information on POSH.AI’s privacy policy.

    • Meta Pixel: We use Meta Pixel Tags to better measure, optimize, and retarget our marketing campaigns. This allows user specific behavior to be tracked after they have been redirected to the advertiser’s website by clicking on a Meta ad. This enables us to measure the effectiveness of Meta ads for statistical and market research purposes. The data collected in this way is anonymous to us, in other words, we do not see the Personal Information of individual users. This data is stored and processed by Meta. Meta may link this information to your Meta account and also use it for its own promotional purposes, in accordance with Meta’s Data Usage Policy. View more information on Meta's opt-out options.  

    • HubSpot: We use HubSpot (Marketing Hub) to send marketing emails, do marketing automation and research. We can also track the pages on our website you have visited, the buttons within the pages you have clicked and our social media accounts you have viewed. HubSpot collects personal data, including your computer’s IP address, when you submit web forms on our Site. The information will be transmitted to and stored by HubSpot. HubSpot uses "web beacons" and "cookies" that are stored on your device and allow us to analyze your use of our site. HubSpot may use this information (e.g., IP address, geographic location, browser type, length of visit, pages viewed) to generate reports on our behalf.  We use HubSpot cookies to store anonymized statistics, time of visit, and track a visitor's identity. We also use HubSpot (CRM) to hold data for marketing purposes and to keep a record of interested parties with whom we would like to communicate with for marketing and legitimate processing purposes. View more information on HubSpot's Privacy Policy.

    • Google Analytics: Visitors to the Sites may be tracked using Google Analytics. The Personal Information collected by Google Analytics is primarily used to optimize the Sites for users; however, we may also use this data for marketing purposes. The Personal Information we automatically collect using Google Analytics is shared with Google. View more information on Google’s Privacy Policies. You can also opt-out of having your personal information used by Google Analytics by following the instructions located in Google's opt-out options. Google Analytics may collect the following types of data from users of the Sites: 

      • Type of web browser used, software manufacture and version number. 

      • Type of operating system 

      • Color processing ability of the users screen 

      • JavaScript support 

      • Flash version 

      • Screen resolution 

      • Network location and IP address 

      • Country, city, state, region, county, or any other geographic data 

      • Hostname 

      • Bandwidth (internet connection speed) 

      • Time of visit 

      • Pages visited 

      • Time spent on each page of the Sites 

      • Referring site statistics 

      • The website the user came through in order to arrive at the Sites 

      • Search engine query used 

    • We also use Google Analytics for Display and Search Advertising and, specifically, Google Analytics Demographics and Interest Reporting, on the Sites to help display advertising for products or services that we think may be of interest to you. We will use demographic information collected through our use of Google Analytics Demographics and Interest Reporting for purposes of performing internal statistical analytics relating to the Sites. You can opt-out of receiving interest-based advertisements through the Sites, as well as customize the types of advertisements that will be displayed to you through the Sites, by following the instructions located on Google's Advertising opt-out.

3. Do-Not-Track

Many web browsers include a Do Not Track (“DNT”) feature or setting that signals your preference not to have data about your online browsing activities monitored and collected.  However, there is currently no uniform standard for recognizing and implementing the DNT signals. As such, VyStar does not monitor or respond to DNT browser requests.  If a standard is adopted that we must follow in the future, then we will inform you about that practice in a revised version of this Privacy Policy.  

4. Purpose of Collection 

 VyStar processes Personal Information for the following purposes:  

  • Provide the Services. We may use your Personal Information to provide the Services or any other products or services you may request from us.   

  • Monitor the Services. We collect your Personal Information for monitoring purposes to help us diagnose problems with our servers, administer and troubleshoot the Services, calculate usage levels, analyze industry standards, and analyze transactions, trends, and statistics regarding the use of the Services.  

  • Personalize your Experience.  We may collect your Personal Information to leverage analytics and retargeting to personalize your experience through the delivery of more relevant content on our websites, marketing emails, product offers, promotions and other similar content. 

  • Respond to Inquiries and Fulfill Requests.  We may use your Personal Information to respond to your inquiries and to fulfill your requests for information. 

  • Communicate with You.  We may use your Personal Information to send you marketing information about the Services, special promotions, and other items that may be of interest to you.  We may also contact you on behalf of our third-party business partners about a particular offering of theirs that may be of interest to you.  

  • Improve the Services.  We may use your Personal Information to make the Sites more stable and user-friendly, to analyze service issues, improve the design and content of the Services, analyze how the Services are used, offer new services, and to develop new marketing programs relating to the Services.  

  • Customer Service. We may use your Personal Information when contacting you regarding customer service, the Services, or in response when you provide feedback. We may also use your information to send administrative emails regarding the Services or to inform you of any changes to this Privacy Policy, our Terms, or our third-party partner’s Terms.  

  • Support Business Operations. We may use your Personal Information to support our internal and business operations, including marketing, security, and advertising.  

  • Enforce Agreements. We may use your Personal Information to enforce separate agreements between you and us, enforce this Privacy Policy, our Terms of Use, or our third-party partner’s Terms of Use, or in connection with a transaction with a similar effect.  

  • Fulfill Other Purposes. We may use your Personal Information to fulfill: (a) any other purpose for which you provide it; (b) any legal or regulatory requirements and any of our internal policies; (c) other purposes disclosed at the time of collection; (d) any other purpose with your consent; and (e) any other purposes set forth in this Privacy Policy.    

5. Disclosure of Personal Information  

We do not sell, share, rent, or otherwise disclose the Personal Information collected from the Services or on the Sites, to third parties for monetary or other valuable consideration, unless otherwise stated below or with your consent or your agent’s consent on your behalf:   

  • Service Providers & Contractors. We may share your Personal Information with service providers and contractors to perform tasks on our behalf and to assist us in providing the Services, including but not limited to internal and business operations, security, identity verification, and related services. Service providers and contractors may use the information only as necessary to provide the services to us and are contractually required to keep your information confidential and secure.  

  • Originators, Lenders, and Business Partners. We may share your Personal Information with our originators, lenders, and business partners to provide you with the Services you have requested. We may also share your personal information to business partners with whom we jointly offer the Services  

  • Advertising Partners. We may share your personal information with third-party advertising partners, such as Meta, Pinterest, LinkedIn, NeXT Door, Yelp, Google Display Advertising and Remarketing services. These advertising partners may use first- and third-party cookies together to inform, optimize, and serve ads based on your past visits to this Sites. You can opt-out of these services using their Ads Preferences Manager or you can use the Google Analytics opt-out browser add-on. These advertising partners may use this information (and similar information collected from other services) for purposes of delivering personalized advertisements to you when you visit digital properties within their networks, commonly referred to as “interest-based advertising.”   

  • Authorized Representatives. If another individual is managing your account or access to the Services on your behalf (for example, a wife managing the account of her husband), as authorized by you or as a personal representative under applicable law, that person can view all Personal Information about you in the Services.   

  • In the Event of Merger, Sale, Divestitures or Change of Control. We may transfer or assign Personal Information to an entity that acquires or is merged with us as part of a merger, acquisition, sale of ownership or assets, or other change of control.  

  • Other Third Parties with your Consent.  We may disclose Personal Information to other third parties to whom you or your agents authorize us to disclose your personal information in connection with the Services we provide to you.  

  • Other Disclosures. We may disclose your Personal Information if we have a good faith belief that disclosure of such information is helpful or reasonably necessary to: (i) comply with any applicable law, regulation, legal process or governmental request; (ii) enforce our contracts with you, including investigations of potential violations thereof; (iii) detect, prevent, or otherwise address fraud or security issues; or (iv) protect against harm to our, your, or third parties’ rights, property, or safety. 

We may share de-identified and/or aggregate analytics with third-party partners about how users interact with the Services, including usage patterns for certain programs, content, services, advertisements, promotions, and/or functionality available through the Services.    

6. Transfer of Personal Information to a Third Country  

If you do not reside in the United States and provide Personal Information to us, please note that your Personal Information will be transferred, processed, collected, used, accessed and/or stored in the United States and subject to U.S. laws. The laws in the United States may not provide the same protections for your Personal Information as the jurisdiction in which you are located. Do not provide your Personal Information to us if you do not want this information to be transferred or processed outside of your country, or if the laws in your country restrict such transfers.  

7. Retention Period  

We keep your Personal Information only as long as necessary to provide you with the Services and for legitimate and essential business purposes, such as maintaining the performance of the Services, making data-driven business decisions about new features and offerings, complying with our legal obligations, and resolving disputes.  

8. Third-Party Sites  

The Services may link to third-party websites, online services, mobile applications and/or contain advertisements from third parties that are not affiliated with us and which may link to other websites, services, or applications.  Please be aware that we are not responsible for the privacy or practices of other websites or third parties, including those using the VyStar branding. We do not make any guarantee regarding those third-party websites, services, or applications, and we are not liable for any loss or damage caused by the use of such sites. Any data collected by third parties is not covered by this Privacy Policy. You should review the policies of the third parties and contact them directly if you have any questions about their services or practices.  

9. Confidentiality and Security  

We maintain appropriate safeguards using industry standard technology to heighten the security, accuracy, and privacy of any Personal Information we have collected, and we have put in place reasonable precautions to protect information from loss, alteration, and misuse. While we implement these measures, please note that 100% security is not possible, and we cannot guarantee that the security measures we have in place to safeguard Personal Information will never be defeated or fail, or that those measures will always be sufficient or effective.  

10. Minors

We do not knowingly collect or solicit personal information from children under the age of 16 without consent from a guardian or parent.  By using the Sites or Services, you represent that you are at least 16 years old or have consent from a guardian or parent. If we become aware that we have inadvertently received or collected Personal Information from a user of the Sites who is under the age of 16, we will attempt to immediately delete that information from our files and records. Furthermore, we encourage users of the Sites that are minors to ask their parents or guardians for permission before sending any information about themselves over the Internet.  If you believe a child who is under the age of 16 has provided us with Personal Information without consent from a parent or guardian, please contact us using the information below.   

11. Choices About Your Personal Information 

You have choices about how we use your information. Please understand that if you choose not to disclose information to us, it may affect your ability to use some features of the Services.   

11.1.Marketing

From time to time if you have supplied your email address, VyStar and its affiliates and service providers may send you marketing or informational emails. If you prefer not to receive any or all of our marketing and promotional communications, you may opt-out of these communications by following the opt-out prompts on these communications. You also may ask us not to send you other marketing or informational communications by contacting us as specified in the Contact Us section below, and we will honor your request. Please note that even after you are removed from our marketing lists, we may still send you non-promotional communications, such as responding to your support requests.  

12. California Residents’ Privacy Rights  

This section explains how we collect, use, and disclose personal information about users, customers, and visitors who reside in California (“consumers” or “you”). It also explains certain rights afforded to consumers under California’s Shine the Light law and the California Consumer Privacy Act of 2018 as revised and updated by the California Privacy Rights Act (together, “CCPA”). This section uses certain terms that have the meaning given to them in the CCPA including personal information. “Personal Information” for purposes of this Privacy Policy is as defined by applicable laws.  

The following section does not apply to individuals who do not live in California on a permanent basis, individuals who do not collect personal information about, or individuals for whom all of the information we collect is exempt from California laws. Most of our data collection, use, and sharing practices are governed by our Gramm-Leach-Bliley Privacy Notice; however, if you are a California resident, the CCPA may apply to the Services for which a continuing customer relationship has not been formed or are otherwise not subject to the GLBA.  

12.1.Categories of Personal Information Collected  

We may collect (and may have collected during the 12-month period prior to the effective date of this Privacy Policy) the below categories of Personal Information about you in Section 4 Selling and Sharing of Personal Information below . 

12.2.Purpose of Collection  

We may use (and may have used during the 12-month period prior to the effective date of this Privacy Policy) your Personal Information for the business or commercial purposes described in the Section 4 Selling and Sharing of Personal Information below.  

12.3.Sources of Personal Information 

During the 12-month period prior to the effective date of this Privacy Policy, we may obtain (and may have obtained) Personal Information about you from the sources identified in the Section 4 Selling and Sharing of Personal Information below.

12.4.Selling and Sharing of Personal Information 

During the 12-month period prior to the effective date of this Privacy Policy, we may have shared or disclosed the following categories of Personal Information about you for a business or commercial purpose with certain categories of third parties, as described below: 

Categories of Personal Information that May Be Sold, Shared, or Disclosed 

Categories of Third Parties to whom Personal Information May Be Sold, Shared, or Disclosed 

Business or Commercial Purpose of Selling, Sharing, or Disclosing Personal Information 

Identifiers 

- Service Providers  - Contractors  - Originators  - Lenders  - Business Partners 

- Provide the Services  - Provide customer service, feedback or support, including notification of any notices, events, or news - Provide marketing and advertisements - Provide, administer, expand, support, personalize, improve, and develop the Sites and the Services  - Monitor and analyze transactions and trends  - Investigate and prevent fraud, unauthorized access, and other illegal activities  - Carry out our obligations and enforce our rights arising from any contracts entered into between you and us 

Personal Information Categories Listed in The California Customer Records Statute (Cal. Civ. Code §1798.80(e)) 

- Service Providers  - Contractors  - Originators  - Lenders  - Business Partners 

- Provide the Services  - Provide, administer, expand, support, personalize, improve, and develop the Sites and the Services  - Support our internal and business operations  - Monitor and analyze transactions and trends  - HR administration and internal communications   - Carry out our obligations and enforce our rights arising from any contracts entered into between you and us 

Protected Classifications under California or Federal Law 

- Service Providers  - Contractors  - Originators  - Lenders  - Business Partners 

- Provide the Services  - Provide, administer, expand, support, personalize, improve, and develop the Sites and the Services - Support our internal and business operations  - Monitor and analyze transactions and trends  - HR administration and internal communications   - Carry out our obligations and enforce our rights arising from any contracts entered into between you and us 

Professional or Employment Information 

- Service Providers  - Contractors  - Originators  - Lenders  - Business Partners 

- Provide the Services  - Provide, administer, expand, support, personalize, improve, and develop the Sites and the Services  - Support our internal and business operations  - Monitor and analyze transactions and trends 

Sensitive Personal Information

- Service Providers  - Contractors  - Originators  - Lenders  - Business Partners 

- Provide the Services  - Provide, administer, expand, support, personalize, improve, and develop the Sites and the Services  - Monitor and analyze transactions and trends  - Investigate and prevent fraud, unauthorized access, and other illegal activities  - Carry out our obligations and enforce our rights arising from any contracts entered into between you and us 

Internet or Other Electronic Network Activity  

- Service Providers  - Contractors  - Business Partners  - Marketing Partners - Advertising Partners

- Provide the Services  - Provide, administer, expand, support, personalize, improve, and develop the Sites and the Services  - Monitor and analyze transactions and trends  - Investigate and prevent fraud, unauthorized access, and other illegal activities 

12.5.California Consumer Privacy Rights 

Under California’s “Shine the Light” law, California residents have the right to request in writing from businesses with whom they have an established business relationship, (a) list of the categories of Personal Information, such as name, email and mailing address and the type of services provided to the customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes; and (b) the names and addresses of all such third parties. To request the above information, please contact us as directed in the Contact Us section below with reference to California Disclosure Information.  

Under CCPA, consumers have certain rights regarding their Personal Information, as described below. 

  • Right of Access: You have the right to request, twice in a 12-month period, that we disclose to you the following information about you, limited to the preceding twelve (12) months:  

    • The categories of Personal Information that we collected about you;  

    • The categories of sources from which the Personal Information is collected;  

    • The business or commercial purpose for collecting or selling Personal Information;  

    • The categories of third parties with whom we share Personal Information;  

    • The specific pieces of Personal Information that we have collected about you;  

    • The categories of Personal Information that we disclosed about you for a business purpose or sold to third parties; and  

    • For each category of Personal Information identified, the categories of third parties to whom the information was disclosed or sold.  

  • Right of Deletion: You have the right to request that we delete any Personal Information about you which we have collected from you, subject to exceptions within the law.   

  • Right to Opt-Out: You have the right to opt-out of the disclosure of Personal Information about you for monetary or other valuable consideration.  However, we do not sell any Personal Information.   

  • Right to Opt-In: We do not have actual knowledge that we collect, share, or sell the Personal Information of minors under the age of 16.  

  • Right to Limit Use and Disclosure of Sensitive Personal Information: You may request specific limitations on further sharing, use, or disclosure of your Sensitive Personal Information that is collected or processed for “the purpose of inferring characteristics about a consumer.”  However, we do not collect or process Sensitive Data for this purpose.  

  • Right to Correction: You have the right to request that we maintain accurate Personal Information about you and correct any Personal Information about you which we have collected from you, subject to exceptions within the law.  

If you would like to exercise your California rights, please refer to the Contact Us, Section 13, below.

12.6.Right to Non-Discrimination  

We may not discriminate against you because you exercise any of your rights under CCPA, including, but not limited to:  

  • Denying goods or services to you;  

  • Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;  

  • Providing a different level or quality of goods or services to you; or  

  • Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services. 

12.7.Verifying Requests 

You may request to exercise your rights of access, deletion, or correction under CCPA by contacting us as described in the Contact Us section below. To help protect your privacy and maintain security, we will take steps to verify your identity before processing your request.  If you request access to or deletion of your Personal Information, we may require you to provide any of the following information: name, date of birth, email address, telephone number, or mailing address. When you make such a request, you can expect the following:   

  • As required under applicable law, we will verify your identity. You will need to provide us with your email address and full name.  We may ask for additional information if needed.  

  • We will confirm that you want your information accessed, corrected, and/or deleted.  

  • We will confirm our receipt of your request within 10 days. If you have not received a response within a few days after that, please let us know by contacting us at the email or phone number listed below.  

  • We will respond to your request within 45 days upon receipt of your request. If necessary, we may need an additional period of time, up to another 45 days, but we will reply either way within the first 45-day period and, if we need an extension, we will explain why.  

  • In certain cases, a request for access, correction, or deletion may be denied. For example, if we cannot verify your identity, the law requires that we maintain the information, or if we need the information for internal purposes such as providing Services or completing an order. If we deny your request, we will explain why we denied it and delete any other information that is not protected and subject to denial. 

 12.8.Authorized Agents 

You may designate an authorized agent to request any of the above rights on your behalf. You may make such a designation by providing the agent with written permission, signed by you, to act on your behalf.  Your agent may contact us as described in the Contact Us section below to make a request on your behalf. Even if you choose to use an agent, we may, as permitted by law, require:  

  • The authorized agent to provide proof that you provided signed permission to the authorized agent to submit the request;  

  • You to verify your identity directly with us; or  

  • You to directly confirm with us that you provided the authorized agent permission to submit the request. 

13. Contact Us  

If you have any questions or concerns in connection with VyStar’s information collection practice summarized in this Privacy Policy, please send an email, with the subject heading "Privacy Policy Question," to VyStarConsumerPriv@vystarcu.org. In the email, please state your questions or concerns.   

If you have any questions about the Services, please contact us at 877-878-9211.

Cookie Policy

What Are Cookies and How Does VyStar Use Them?

We employ the use of cookies on the Services to anonymously track and monitor website usage, traffic usage and fraud prevention. “Cookies” are alphanumeric identifiers in the form of text files that are inserted and stored by your Web browser on your computer’s hard drive. A cookie also assists in keeping you logged into your VyStar Credit Union account.

VyStar Credit Union may also employ the use of pixel tags from time to time to help better understand Site traffic and improve user experience. Pixel Tags refer to clear gifs and web beacons (which are 1x1 images) set on web pages to track page traffic. These tags do not track personal information, they only track anonymous behavioral data.

Most Internet browsers will allow you to stop cookies from being stored on your computer and to delete cookies stored on your computer. Please note, however, that if you choose to restrict the use of cookies, the full functionality of the Services may be impaired.

“First party” cookies are stored by the domain (website) you are visiting directly. They allow the website’s owner to collect analytics data, remember language settings and perform useful functions that help provide a good experience.

From time to time we may also employ the services of third-party agents to help us analyze certain online activities and to gather and track aggregate statistical information on the Services on our behalf. The third parties may employ cookies and web beacons to this end. While we do not have control over these cookies and the use of third-party cookies is not governed by this Policy, this aggregated information is not tied to users’ Personally Identifiable Information. The only intended use is to improve the Services and troubleshoot inconsistencies. They may be used for cross-site tracking, retargeting and ad-serving. You should be careful to review any privacy policies posted on third-party websites before signing up with or using them.

Cookies Used on the VyStar Credit Union Website

  1. Strictly Necessary Cookies: These cookies are vital to us providing website’s functionality and cannot be disabled by users. For example, an essential cookie may be used to prevent users from having to log in each time they visit a new page in the same session or utilize chat.

  2. Performance Cookies: These cookies collect information about your site use to improve website functions and browsing experience. These cookies are used to enhance the performance and functionality of a website but are not essential to its use. However, without these cookies, certain functions (like videos) may become unavailable.

  3. Marketing Cookies: These are typically third-party cookies that observe browsing activities to deliver more personalized content and targeted ads. These cookies allow us to display content relevant to you and your interests, based on the way you have used our website previously.

Disable Cookies