Online Privacy Policy

This Privacy Notice applies to the HomeTrust Bank website and mobile applications (each a “Site” or collectively “Sites”). It explains how HomeTrust Bank and its affiliates (“we,” “us,” “our”) collect, use, share, and protect information from visitors and users (“you,” “your”) of our Sites. For information about how we collect, use, and share information in connection with your financial accounts, please see our Privacy Notice.

Please read this Notice carefully. This Notice may change from time to time (see Changes to Our Privacy Notice).

Information We Collect

Information You Provide

We collect Personal Information you provide through forms, surveys, applications, or other online fields, including your name, address, email, phone number, or account numbers. We indicate on each form whether a field is required or optional. If you do not provide required information, we may be unable to provide the requested services.

Information We Automatically Collect from You

We use technologies that automatically collect information about visitors to our Sites, including:

Essential Cookies: We use essential cookies to keep our website secure and working properly. These cookies enable core functionality, such as remembering your session and privacy preferences, protecting against fraud, and allowing you to navigate secure areas. These cookies cannot be turned off.
Non-Essential Cookies: With your permission, we use non-essential cookies to understand how our website is used, improve your experience, personalize content, and measure marketing effectiveness. You can update your preferences anytime through our Cookie Preferences tool.
Device Identifiers: An ID number transmitted by your mobile device that helps us track unique visitors. You may adjust your mobile device settings to stop transmitting device identifiers.
Web Beacons: Small images (also called clear gifs, pixel tags, or single-pixel gifs) on a website or email used to measure communication effectiveness and track marketing campaign success.
Web Server Logs: Records of activity created by the server that delivers web pages to your browser. For example, a log may record your search term, the link you clicked, or device information such as your IP address, operating system, and browser.
Relationship-Based Advertising: We collect information about our relationship with you (such as types of accounts) and may use that information to help determine which advertisements or offers to present to you.
Analytics: We use analytics services to collect information about use of our Sites. Through analytics services, we collect information such as how often users visit this Site, what pages they visit when they do so, and what other sites they used prior to coming to this Site. We use this information only to make improvements to the Sites. We do not combine the information collected using analytics services with other Personal Information.
Geolocation Data: We do not track your location unless you specifically initiate this request by using our tools to find the nearest branch or ATM location. You may also limit and customize your location tracking settings for each mobile application on your smartphone.

Do Not Track: We do not track our customers across third-party websites or online services to provide advertising and therefore do not respond to Do Not Track (DNT) signals. However, some third-party websites and mobile applications do keep track of your browsing activities. If you are visiting such sites, you may wish to set a DNT signal on your browser so that third parties know you do not want to be tracked.

How We Use Personal Information

We primarily collect Personal Information to provide you with the products, services, and information you request. We may also use it for customer service, maintenance, and support. We may aggregate this information for business purposes such as analyzing data, identifying trends, improving products or services, and enhancing our Sites. We may also use this information for audit, loss prevention, fraud prevention, and legal compliance. We may use information for other purposes with your consent.

How Personal Information Is Shared

We generally do not share Personal Information, except:

when it is necessary for our or our affiliates’ everyday business purposes, such as maintaining your account, reporting to credit bureaus, or processing a transaction, whether that is to pay an item or to send a notice of dishonor or nonpayment;
to service providers who assist us in operating the Sites and our business, to the extent access to Personal Information is necessary for the performance of their services on our behalf;
to exchange, in the normal course of business, credit information with third-party financial institutions or other business entities or to the extent a third party is required to verify the existence or condition of your account in accordance with applicable law;
to provide information to our regulators or law enforcement when we believe, in good faith, that we have been a victim of a crime or we have observed suspicious activity;
to comply with a government agency inquiry, subpoena or court order or a valid attachment, garnishment, or other legal action;
in accordance with your consent;
to guarantee a check by a third party;
at account opening, account renewal, or account review;
when we are attempting to collect a debt owed to us;
if we sell or otherwise transfer part or the whole of our business or assets to another organization (e.g., in the course of a transaction like a merger, acquisition, bankruptcy, dissolution, or liquidation), any information collected through the Sites, including Personal Information, may be among the items sold or transferred; or
as otherwise permitted by applicable law and appropriate to the circumstance.

In addition, we may from time to time receive credit reports and other information about you from third parties in connection with your accounts. Upon request, we will give you the name and address of each third party from which we obtain such a report or information.

How We Protect Your Information

We have implemented administrative, physical, and technical safeguards to reduce the risk of unauthorized access, use, alteration, or disclosure of Personal Information. Sensitive data entered on the Sites is encrypted and transmitted securely.

We also protect your information offline. Employees are trained on information security and privacy compliance. Only employees who need access to perform their roles may access Personal Information. Our computers and servers are kept in a secure environment.

To protect our customers’ privacy, we only conduct business with organizations that agree to maintain strong confidentiality protections and limit the use of information we may provide.

Despite these efforts, we cannot guarantee the security of Personal Information during transmission or storage. We cannot guarantee that our security measures will prevent unauthorized access by third parties. We do not represent or warrant that Personal Information will be protected against loss, misuse, or alteration.

Retention of Personal Information

We retain your Personal Information for as long as necessary to fulfill the purposes described in this Notice or our Privacy Notice, or as required by law.

Third-Party Sites

We may link to third-party websites or integrate with third-party services and technologies (e.g., financial planning tools, social media widgets) not covered by this Notice. Our Sites typically display a pop-up asking you to confirm before leaving. If you proceed, please review that website’s privacy practices, as they may differ from ours.

Children’s Online Privacy

The Sites are not directed to individuals under the age of 16. We do not knowingly invite or collect Personal Information from children without parental consent.

Correcting, Updating, Accessing, or Removing Personal Information

In addition to other rights you may have depending on where you reside (as described here for California residents), you can request that we correct, update, or delete your Personal Information by contacting us. We will promptly process such requests in accordance with applicable law.

Changes to Our Privacy Notice

We may modify this Privacy Notice at any time. If we make material changes, we will update the date and post the revised Notice on the Sites. We encourage you to review this Notice periodically.