Privacy for Consumers at Citi

Our goal is to maintain your trust and confidence when handling personal information about you.

YOU HAVE CHOICES

Citi customers have the opportunity to make choices about how their personal information may be shared. As you consider this, we encourage you to make choices that enable us to provide you with quality products and services that help you meet your financial needs and objectives.

SECURITY OF PERSONAL INFORMATION

The security of your personal information is our priority. We protect this information by maintaining physical, electronic and procedural safeguards that meet applicable law. We train our employees in the proper handling of personal information. When we use other companies to provide services for us, we require them to protect the confidentiality of personal information they receive.

Citi Pay / Masterpass Online Privacy Statement

Our Online Privacy Statement describes how we may collect, use and share information you provide when you visit this website, receive our emails or interact with advertisements we have on third-party websites.

Our Online Privacy Statement does not cover:

• Information collected and used on Citi social media sites such as blog.citigroup.com
• Information you provide to the websites we advertise or place content on and may link to

We encourage you to read the privacy policies on these sites.

1. What Information Do We Collect?
2. How Do We Use the Information We Collect?
3. How Do Our Online Services Use Cookies and Other Tracking Technologies?
4. Can You Control Your Information that’s Collected and Used Online?

1. What Information Do We Collect

We collect two types of online information: non-personal and personal.

Non-Personal Information

When you visit our site, we collect the IP address of the device you use to connect to the Internet. In addition, we gather information such as what browser and which version of it you're using, the type of operating system you have, and which site you came from or advertisement you viewed or clicked on. This device information helps us provide an online experience that matches your device and to manage our online advertising.

We may also supplement the information we collect with information we receive from other companies. For example, we may use marketing segments developed by us or other companies to customize certain services to your local area and provide relevant Citi offers tailored to you.

Personal Information

In addition to the information described in the previous section, we may also gather personal information that you provide to us such as your name, address, phone number, and email address. Collecting this personal information enables us to offer you online experiences that help you with your financial needs. For example, we collect personal information when you are:

• Banking online
• Applying for a new program or account

If you've enrolled in Citi services, such as online bill payment, we collect personal information about your transactions, and how you interact with third parties such as those you pay like a utility company or phone company. Collecting this information enables us to provide you these services. You can refer to the terms and conditions for your account or service to learn how your information is collected and used.

If we have received personal information from you, or have information that is publicly available from other sources, we may use it in combination with the information that Citi collects online. This information may be used to better tailor or personalize our service and marketing communications with you, both online and offline.

If you are a Citi customer, the personal information you provide online is held by the Citi business that maintains your account or is processing your application for a new product or service. You can access and/or change information in connection with your account or application by logging on to your account online or telephoning customer service.

Please see our Privacy Notices, which we provide to all our individual customers, for a comprehensive explanation of how we collect, use and share personal information and what you can do to limit the use and sharing of your information as our customer. If you have a retail store or gas card issued by Citibank, N.A., you may call the number that appears on the Privacy Statement you receive. All customers may also call Customer Service at any time with questions or to make privacy choices.

2. How Do We Use the Information We Collect?

Citi uses the information we collect about and from you to provide services, to manage our business and to offer an enhanced, personalized online experience on our site and third-party websites.

The information we collect allows us to:

• Recognize you when you return to our site so we can personalize your experience
• Process applications and transactions
• Respond to your requests
• Recognize and provide you account related benefits and information on our sites.
• Provide you more relevant product and service offers on our sites and in other advertising

We may also use personal information we have about you such as your email or postal address to deliver advertising to you directly or on third party websites.

3. How Do Our Online Services Use Cookies and other Tracking Technologies?

When you browse our site or view one of our emails, or advertisements, Citi and companies we work with, use Flash objects, cookies, web beacons and/or pixel tags to collect device information and store your online preferences, but they do not capture any information that can be used to personally identify you. The information they gather helps us improve your online experience and may include:

• Your response to one of our emails or advertisements
• Time and duration of your visit to our site
• Pages you viewed while on our site

Device Tracking

We may use similar technologies, particularly in mobile advertising, that use device information to help deliver our advertisements and measure advertising campaign effectiveness. We and companies we work with may collect your device information when you visit one of our sites or see our ads. Compiling and comparing these attributes can create a unique ID for individual devices and can be "matched" to the same attributes appearing on other sites or mobile applications. Some companies we work with are also able to associate related devices into households based on common characteristics, such as IP addresses.

Targeted Advertising

Companies we work with place and track our advertisements on third-party websites.

Like most advertisers, we place advertisements where we think they will be most relevant to customers. We place advertisements by developing and using our own marketing segments that may combine online and offline information about our current and prospective customers.

Network advertising companies that provide these services have their own privacy policies and are not subject to our Online Privacy Statement.

4. Can You Control Your Information That's Collected and Used Online?

It's important to note that the information we use about you helps us provide you with products, services and experiences that benefit you. You have the ability to control how your non-personal information is collected and used online.

E-Mail

When you provide your email address, we will use it to send you general notices or important news about your account, request your feedback or opinions and provide updates on special deals and offers that might interest you.

We believe you should be able to choose what kinds of information you receive via email. If you do not want to receive marketing materials by email, just indicate your preference on the contact information for your account or the 'opt-out' link provided in our marketing emails. Please keep in mind that we will continue to notify you by email regarding your account.

Cookies and Flash Objects

You can control whether to accept cookies or not. If you decide to not accept cookies, some features and services on our site may not work properly because we may not be able to recognize and associate you with your Citi account(s). In addition, the offers we provide when you visit us may not be as relevant to you or tailored to your interests.

If you would prefer not to accept cookies, you can:

• Change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; or
• Set your browser to automatically not accept any cookies

Deleting cookies does not delete Flash objects. You can learn more about Flash objects - including how to control and disable them - through the Adobe interface. If you choose to delete Flash objects from our sites, then you may not be able to access and use all or part of the sites or benefit from the information and services offered.

Targeted Advertising

We believe that online behavioral advertising helps to provide you with more relevant advertising based upon on the websites you visit.

If you prefer to not receive targeted advertising, you can opt out of some network advertising programs that use your information. To do so please visit the NAI Opt-Out Page. Please note that even if you choose to remove your information (opt out), you will still see advertisements while you're browsing online. However the advertisements you see may be less relevant to you and your interests.

Additionally, many network advertising programs allow you to view and manage the interest categories they have compiled from your online browsing activities. These interest categories help determine the types of targeted advertisements you may receive. The NAI Opt-Out Page provides a tool that identifies its member companies that have cookies on your browser and provides links to those companies.

The Digital Advertising Alliance's Self-Regulatory Principles for Online Behavioral Advertising govern certain online advertising and data collection practices. The principles facilitate transparency about online advertising practices and support consumer choice in managing behavioral advertising. We subscribe to these Principles. For more information about the Principles and the Ad Choices icon visit http://www.youradchoices.com/

Because mobile devices may vary in how they operate and may not use cookies, the choice management options listed above may not work for all mobile devices and mobile apps. Mobile ad management providers make available tools for managing your choices regarding behavioral advertising on mobile devices and mobile apps. Depending upon the advertising company, if you opt out on one device they may also opt you out on any screen considered part of the same household.

Do Not Track

Although, there is no standard for how Do Not Track consumer browser settings should work on commercial websites, the industry has self-regulatory initiatives designed to provide consumers a choice in the types of ads they may see online and to conveniently opt-out from online behavioral ads served by some or all of the companies participating in these programs. Due to a lack of such standards, our websites do not respond to Do Not Track consumer browser settings. For more information see the "About Ads" or NAI links provided above. Many of Citi's advertising vendors and companies participate in these programs. Using the choice mechanisms these programs make available may help you see advertising that is relevant to you or help you avoid seeing interest based advertising generally.

Notice of changes.

From time to time, we may change this Online Privacy Statement. The effective date of this statement, as indicated below, shows the last time this statement was revised or materially changed. Checking the effective date below allows you to determine whether there have been changes since the last time you reviewed the statement.

Effective Date.

This Online Privacy Statement was last modified January 22, 2015.