Information We Collect from Customers and Consumers
Bank Consulting Group, inc. (“BCG”) may collect nonpublic personal information about customers and consumers from various sources. These include, but may not be limited to, individual information summarizing compensation and benefits, insurance applications, plan participant forms and information related to an individual’s history of transactions with our firm.
Our Practices Regarding the Confidentiality and Security of Consumer and Customer Information
We restrict access to nonpublic personal information about our current or former customers and consumers to those authorized individuals who need to know that information in order to provide them with products or services. We also require outside companies and independent contractors. We also provide services on our behalf or with whom we have entered a joint marketing agreement enter into agreements that protect the confidentiality of any customer information we provide and restrict the use of such information to those purposes. Finally, we maintain physical, electronic and procedural safeguards that comply with federal regulations to guard customers’ and consumers’ nonpublic personal information.
Certain records are stored in print and are maintained in lockable filing cabinets located within the secure premises of Bank Consulting Group offices with access limited to our employees.
Information is stored on a Local Area Network (“LAN,”) accessible to BCG employees. Access to the LAN is password protected. A firewall is maintained preventing access thru the Internet. Remote access to the LAN is permitted to a small group of BCG employees only and is password protected. Information submitted to BCG via our website is encrypted to protect it from interception by a third party. The personal identification numbers and user sign on protocol also ensure that the information provided remains secure.
All BCG employees have agreements prohibiting them from disclosing nonpublic information to any third party except in furtherance of client and potential client goals on a need-to-know basis. Our standard procedures include sharing information internally only on a need-to-know basis, keeping nonpublic personal information in closed files when not physically working with it and logging off the LAN whenever information is not in use.