California Residents Only
The rights you have are determined by your state of residence. If you choose to exercise these rights, we may ask you to verify your identity and your state of residence.
California Consumer Privacy Act of 2018 (the “CCPA”) (see California Civil Code Section 1798.100 et seq.), covered businesses that collect the “personal information,” including “sensitive personal information,” of California residents must provide notice regarding their data collection, use, and sharing practices. The CCPA also provides for exemptions that may be applicable to you depending on your relationship with FHLBank Boston. For example, the CCPA provides for an exemption for categories of data that are subject to The Gramm–Leach–Bliley Act, also known as the Financial Services Modernization Act of 1999.
California law also permits California consumers to request certain details about their “personal information” and “sensitive personal information” (as defined by California Civil Code Section Civil Code – CIV § 1798.140) that FHLBank Boston has collected about you.
We do not share, disclose, or sell personal information with third parties or affiliates for those third parties’ or affiliates’ own direct marketing purposes.
As used in this section, “business” means FHLBank Boston.
Personal Information We Collect, Use, Disclose, Share of Sell
Categories of Personal Information We Collect, Categories of Sources of Personal Information, Business or Commercial Purposes for Which Personal Information Will Be Used, and Third Parties with Whom Personal Information is Sold, Shared, or Disclosed.
We collect certain categories of personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. The chart below includes categories of personal information collected, how such personal information is collected, the purpose for collecting the information, and any third-party with whom such personal information may be shared. Not all of the categories of collected personal information described below may be applicable to you.
Please note that if you elect to provide information to FHLBank Boston that we did not request, for example via email, that information may not be retained by FHLBank Boston.
Within the last twelve (12) months, we may have collected the following categories of personal information from the sources identified below for the business and commercial purposes indicated, and disclosed, shared, or sold (as indicated) such categories of personal information with the specified categories of third parties:
Categories of Personal Information Collected by FHLBank Boston:
Examples of Personal Information Collected:
A real name, alias, postal address, login credentials for the Site, and Internet Protocol address(es)
Categories of Sources of Personal Information Collected:
Directly from you, for example when you apply to become a member, enroll in or service your member login credentials, or when you seek information or enroll in events and seminars, or if you elect to voluntarily provide us this information.
Business or Commercial Purpose(s) for Which Collected, Disclosed, Sold, or Shared:
We use this personal information for performance of our service, our business operations, or for human resources purposes. For example:
- To provide you with the services that you request, such as by completing transactions or evaluating your membership.
- To communicate with you, for example to respond to inquiries.
- To help maintain the safety, security, and integrity of the Site, information systems, databases and other technology assets.
- To create, maintain, customize, and secure accounts with us.
- To provide alerts or other messages via email and/or text messages concerning our products or services that may be of interest to you.
- For testing, research, analysis, and product development, including to develop and improve our website, products and services.
- To keep track of records related to our relationship with members and individuals.
Categories of Third Parties to Which Personal Information is Shared, Sold, or Disclosed:
Vendors and other service providers and government agencies including to support regulatory and legal requirements.
Examples of Personal Information Collected:
A name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Categories of Sources of Personal Information Collected:
Directly from you, for example when you apply to become a member, enroll in or service your member login credentials, or when you seek information or enroll in events and seminars, or if you elect to voluntarily provide us this information.
Directly from you, for example when you apply to work for us or in your duties as our personnel.
From third parties that interact with us in relation to hiring or human resources operations.
Business or Commercial Purpose(s) for Which Collected, Disclosed, Sold, or Shared:
We use this personal information for performance of our service, our business operations, or for human resources purposes. For example:
- To provide you with the services that you request, such as by completing transactions or evaluating your membership.
- To communicate with you, for example to respond to inquiries.
- To help maintain the safety, security, and integrity of the Site, information systems, databases and other technology assets.
- To create, maintain, customize, and secure accounts with us.
- To provide alerts or other messages via email and/or text messages concerning our products or services that may be of interest to you.
- For testing, research, analysis, and product development, including to develop and improve our website, products and services.
- To keep track of records related to our relationship with you, including members, employees, and other personnel.
- To determine and track eligibility to work in the United States.
- To provide appropriate services and benefits to employees and other personnel.
- For reporting to government agencies or regulators.
Categories of Third Parties to Which Personal Information is Shared, Sold, or Disclosed:
Vendors and other service providers and government agencies including to support regulatory and legal requirements.
Examples of Personal Information Collected:
Personal information that reveals: a social security number or other government identifier; account login information or a financial account number with associated credentials; citizenship or immigration status; precise geolocation; contents of mail, email, or text messages; or genetic information. Or any of the following: the processing of biometric information to uniquely identify a consumer; collection and analysis of information that concerns a consumer’s health information; collection and analysis of information that concerns a consumer’s sexual orientation or sex life.
Categories of Sources of Personal Information Collected:
Directly from you, for example when you apply to become a member, enroll in or service your member login credentials, or when you seek information or enroll in events and seminars, or if you elect to voluntarily provide us this information.
Directly from you, for example when you apply to work for us or in your duties as our employee or other personnel.
From third parties that interact with us in relation to hiring or human resources operations.
Business or Commercial Purpose(s) for Which Collected, Disclosed, Sold, or Shared:
We use this personal information for performance of our service, our business operations, or for human resources purposes. For example:
- To provide you with the services that you request, such as by completing transactions or evaluating your membership.
- To communicate with you, for example to respond to inquiries.
- To help maintain the safety, security, and integrity of the Site, information systems, databases and other technology assets.
- To create, maintain, customize, and secure accounts with us.
- To provide alerts or other messages via email and/or text messages concerning our products or services that may be of interest to you.
- For testing, research, analysis, and product development, including to develop and improve our website, products and services.
- To keep track of records related to our relationship with you, including members, employees, and other personnel.
- To determine and track eligibility to work in the United States.
- To provide appropriate services and benefits to employees and other personnel.
For reporting to government agencies or regulators.
Categories of Third Parties to Which Personal Information is Shared, Sold, or Disclosed:
Vendors and other service providers and government agencies including to support regulatory and legal requirements.
Examples of Personal Information Collected:
Age, national origin, religion, citizenship, marital status, physical or mental disability, genetic information or ancestry, sex, veteran or military status.
Categories of Sources of Personal Information Collected:
Directly from you, for example when you apply to work for us or in your duties as our personnel.
From third parties that interact with us in relation to hiring or human resources operations.
Business or Commercial Purpose(s) for Which Collected, Disclosed, Sold, or Shared:
We use this personal information for our business operations or human resource functions, including:
- To keep track of personnel’s eligibility to work in the United States.
- For reporting to government agencies or regulators.
- To provide appropriate services and benefits to all personnel.
Categories of Third Parties to Which Personal Information is Shared, Sold, or Disclosed:
Vendors and other industry service providers; educational institutions and providers;
government agencies including to support regulatory and legal requirements; and affiliates.
Examples of Personal Information Collected:
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Categories of Sources of Personal Information Collected:
Directly from you, for example when you apply to work for us or in your duties as our personnel, or as a customer when you fill out our forms, or from your transactions with us.
From third parties that interact with us in relation to hiring or human resources or business operations and in connection with the products and/or services that we provide. These include analytics providers, advertising networks, and search information providers.
Business or Commercial Purpose(s) for Which Collected, Disclosed, Sold, or Shared:
We use this personal information for performance of our services and for our business operations. For example:
- To provide you with the services that you request, such as by completing transactions or evaluating your membership.
- To communicate with you, for example to respond to inquiries.
- To develop and market additional products or services.
- Communicating with you, for example to respond to inquiries.
Categories of Third Parties to Which Personal Information is Shared, Sold, or Disclosed:
Other third parties with which you or we maintain a relationship regarding your services or products; government agencies including to support regulatory and legal requirements; and
affiliates.
We do not collect this category of personal information.
Examples of Personal Information Collected:
Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements.
Categories of Sources of Personal Information Collected:
Collected through automated means and through the use of Tracking Technologies as the result of your use of our Site.
Business or Commercial Purpose(s) for Which Collected, Disclosed, Sold, or Shared:
We use this personal information for performance of our services and for our business operations or human resource functions. For example:
- To provide access to our website and the information about our products and services contained therein.
- For the security of our website and information systems.
- To provide you with information, including communications about products that may be of interest to you.
- To support, personalize, improve our Site, products, or services.
- To protect our information systems and other property from harm or damage.
- To secure our information systems against attacks or misuse.
- To verify compliance with our policies, procedures, and workplace rules.
- To measure success of our own marketing campaigns and use of our website.
- To train our employees and other personnel, and other internal operational purposes.
Categories of Third Parties to Which Personal Information is Shared, Sold, or Disclosed:
Other third parties with which you or we maintain a relationship regarding your services or products; government agencies including to support regulatory and legal requirements; and affiliates.
Examples of Personal Information Collected:
Geographic tracking data, physical location, and movements.
Categories of Sources of Personal Information Collected:
Directly from you, for example when you use our Site, applications, or applicable services or products.
Business or Commercial Purpose(s) for Which Collected, Disclosed, Sold, or Shared:
We use this personal information for performance of our business operations. For example:
- Geolocate individuals to confirm the availability of our products and services.
- For the security of our website and information systems. To provide you with information, including communications about products that may be of interest to you.
- To protect our information systems and other property from harm or damage.
- To secure our information systems against attacks or misuse.
- Providing you with the services that you request, such as by completing transactions or evaluating your membership.
- Communicating with you, for example to respond to inquiries.
- To support, personalize, improve our Site, products, or services.
Categories of Third Parties to Which Personal Information is Shared, Sold, or Disclosed:
Vendors and other industry service providers; government agencies including to support regulatory and legal requirements; and affiliates.
Examples of Personal Information Collected:
Images and audio, video or call recordings created in connection with our business activities.
Categories of Sources of Personal Information Collected:
Directly from you, for example when you call FHLBank Boston or attend a FHLBank Boston event or seminar that is recorded.
Business or Commercial Purpose(s) for Which Collected, Disclosed, Sold, or Shared:
We use this personal information for performance of our business operations. For example:
- To provide you with the services that you request, such as by completing transactions or evaluating your membership.
- For testing, research, analysis, and product development, including to develop and improve our website, products, and services.
- To develop and market additional products or services.
- To keep track of records related to our relationship with you, including members, employees, and other personnel.
Categories of Third Parties to Which Personal Information is Shared, Sold, or Disclosed:
Vendors and other industry service providers; government agencies including to support regulatory and legal requirements; and affiliates.
Examples of Personal Information Collected:
Business contact details in order to provide you our services at a business level, job title as well as work history and professional qualifications if you apply to work with us.
Current and/or past employment history, payroll records, benefits records, leave documentation, or medical records.
Categories of Sources of Personal Information Collected:
Directly from you, for example when you apply to work for us or in your duties as our employee or other personnel.
Directly from you, for example, when you provide us information in your capacity on behalf of a business.
Business or Commercial Purpose(s) for Which Collected, Disclosed, Sold, or Shared:
We use this personal information for performance of our business operations. For example:
- To provide you with the services that you request, such as by completing transactions or evaluating your membership.
- For testing, research, analysis, and product development, including to develop and improve our website, products, and services.
- To develop and market additional products or services.
- To keep track of records related to our relationship with you, including members, employees, and other personnel.
- To keep track of personnel’s eligibility to work in the United States.
- For reporting to government agencies or regulators.
- To provide appropriate services and benefits to all personnel.
Categories of Third Parties to Which Personal Information is Shared, Sold, or Disclosed:
Vendors and other industry service providers; government agencies including to support regulatory and legal requirements; and affiliates.
Examples of Personal Information Collected:
Student records and directory information.
Categories of Sources of Personal Information Collected:
Directly from you, for example when you apply to work for us or in your duties as our employee or other personnel.
Business or Commercial Purpose(s) for Which Collected, Disclosed, Sold, or Shared:
We use this personal information for performance of our business operations. For example:
- To keep track of records related to our relationship with you, including members, employees, and other personnel.
- To keep track of personnel’s eligibility to work in the United States.
- For reporting to government agencies or regulators.
- To provide appropriate services and benefits to all personnel.
Categories of Third Parties to Which Personal Information is Shared, Sold, or Disclosed:
Vendors and other industry service providers; government agencies including to support regulatory and legal requirements; and affiliates.
Examples of Personal Information Collected:
A person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
Categories of Sources of Personal Information Collected:
Directly from you, for example based on information you provide us.
Through automated means, including based on your activity on our Site, for example.
Business or Commercial Purpose(s) for Which Collected, Disclosed, Sold, or Shared:
We use this personal information for performance of our business operations. For example:
- To provide you with the services that you request, such as by completing transactions or evaluating your membership.
- For testing, research, analysis, and product development, including to develop and improve our website, products, and services.
- To develop and market additional products or services.
- To keep track of records related to our relationship with you, including members, employees, and other personnel.
Categories of Third Parties to Which Personal Information is Shared, Sold, or Disclosed:
Vendors and other industry service providers; government agencies including to support regulatory and legal requirements; and affiliates.
Information About Our Personal Information Processing Activities
Additional details of how we process personal information is set forth in the chart above.
We do not sell consumers’ personal information.
We do not share personal information (for purposes of cross-context behavioral advertising).
We do not sell or share (for purposes of cross-context behavioral advertising) the personal information of minors under 16 years of age.
We do not use or disclose sensitive personal information for purposes other than the following:
- To perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services.
- To prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted personal information.
- To resist malicious, deceptive, fraudulent, or illegal actions directed at the business and to prosecute those responsible for those actions.
- For short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer’s current interaction with the business, provided that the personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer’s experience outside the current interaction with the business.
- To perform or provide services to members and other consumers.
- To verify or maintain the quality or safety of a product or service that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured by, manufactured for, or controlled by the business.
- To collect or process sensitive personal information where such collection or processing is not for the purpose of inferring characteristics about a consumer.
Your Privacy Rights
Right to Notice
You have the right to receive notice at or before the point of collection about our collection and retention practices. This Privacy Policy provides the requisite notice at collection.
Submitting Consumer Requests
You may submit a consumer request to us by email at legal@fhlbboston.com to make a consumer request. You may make up to two disclosure requests in any 12-month period. Please review the consumer request forms below.
Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.
Making a verifiable consumer request does not require you to create an account with us.
When you submit a verifiable consumer request, we will take steps to verify your request by email or telephone call. In some cases, we may request additional information in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify the requestor. Authorized agents will be required to provide proof of their authorization and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.
We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
Right to Know and Access Your Information
You have the right to request that we disclose to you certain descriptions and categories of the personal information we collect, use, disclose, share, or sell about you. For example, you may request the following through a consumer request:
- The categories of personal information we have collected about you.
- The categories of sources from which the personal information is collected.
- The business or commercial purpose for collecting, selling, or sharing personal information.
- The categories of third parties to whom we disclose the personal information.
- The specific pieces of personal information we have collected about you.
You may make up to two disclosure requests in any 12-month period. See above for additional details on making a consumer request.
Right to Request Deletion
You have the right to request that we delete your personal information. See above for additional details about how to submit a consumer request.
You should be aware, however, that California law allows us to retain your personal information under certain conditions, even if you have asked us to delete it, such as when retaining your personal information is necessary for us to complete a transaction with you or provide you with a good or service you have requested. We will notify you of any denial of your deletion request and the reason for such denial.
Right to Request Correction
You have the right to request that we correct your personal information. See above for additional details about how to submit a consumer request.
Right to Limit the Use of Your Sensitive Personal Information
We use and disclose sensitive personal information we collect about you. You or your authorized representative may limit our uses and disclosures of your sensitive personal information by making a request.
To submit a request under the Right to Limit, please provide the information necessary to identify the consumer to whom the request should be applied and reasonable identifying information that you are authorized to make the request and submit an email requesting your “Right to Limit” to legal@fhlbboston.com.
Once you make a request to limit our use and disclose of your sensitive personal information, we will wait at least twelve (12) months before asking you again. However, you may change your mind and opt back in to personal information sharing or at any time by submitting an email requesting your “Revoke Right to Limit” to legal@fhlbboston.com.
Right to Opt-Out of the Sharing or Sale of Personal Information
FHLBank Boston does not share or sell personal information.
Right to Non-Discrimination for Exercise of Consumer Privacy Rights
We will not discriminate against you because you have chosen to exercise any of your privacy rights provided by the CCPA.
Using an Authorized Agent
You may use an authorized agent to submit a consumer request. To use an authorized agent, you will need to (i) provide written instruction to your agent, and verify your identity to us, or (ii) provide a power of attorney pursuant to California Probate Code Sections 4000 to 4465.
Contact us
Please read this Policy carefully to understand our practices regarding how we process CCPA personal information. If you should have any questions regarding this Privacy Policy please contact us at legal@fhlbboston.com.
If you would like to contact us with a general question, please review this website page: https://www.fhlbboston.com/fhlbank-boston/contact-us.
