Rev. 10/2010       Facts WHAT DOES CARROLL COUNTY STATE BANK DO WITH YOUR PERSONAL INFORMATION?   Why? Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do.   What? The types of personal information we collect and share depend on the product or service you have with us. This information can include: ■ Social Security number and income ■ account balances and payment history ■ credit history and credit scores When you are no longer our customer, we continue to share your information as described in this notice.   How? All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Carroll County State Bank chooses to share; and whether you can limit this sharing. Reasons we can share your personal information Does Carroll County State Bank share? Can you limit this sharing? For our everyday business purposes— such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus Yes No For our marketing purposes— to offer our products and services to you Yes No For joint marketing with other financial companies Yes No For our affiliates’ everyday business purposes— information about your transactions and experiences No We don't share For our affiliates’ everyday business purposes— information about your creditworthiness No We don't share For our affiliates to market to you No We don't share For non affiliates to market to you No We don't share   Questions? Call 800-329-8620 or go to www.carrollia.com/ccsb   Page 2  ___________________________________________ Who are we  Who is providing this notice? Carroll County State Bank,126 W. 6th Street, Carroll, IA 51401 Council Bluffs Savings Bank (a division of Carroll County State Bank) What we do  How does Carroll County State Bank protect my personal information? To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. How does Carroll County State Bank collect my personal information? We collect your personal information, for example, when you ■ Open an account or apply for a loan ■ Pay your bills or deposit money ■ Use your credit or debit card We also collect personal information from others, such as credit bureaus, affiliates, or other companies Why can’t I limit all sharing? Federal law gives you the right to limit only Federal law gives you the right to limit only ■ sharing for affiliates’ everyday business purposes—information about your creditworthiness ■ affiliates from using your information to market to you ■ sharing for non affiliates to market to you State laws and individual companies may give you additional rights to limit sharing. Definitions Affiliates Companies related by common ownership or control. They can be financial and nonfinancial companies. ■ Carroll County State Bank does not share with our affiliates. Nonaffiliates Companies not related by common ownership or control. They can be financial and non financial companies. ■ Carroll County State Bank does not share with nonaffiliates so they can market with you. Joint marketing A formal agreement between nonaffiliated financial companies that together market financial products or services to you. ■ Our joint marketing partners include credit card companies. Other important Information

■ OTHER PRIVACY INFORMATION

Our Website and Children’s Privacy

Our website is directed to a general audience. We do not knowingly solicit or collect information from children on our site. Visitors may elect to provide us with personal information via E-mail or online registration forms. This information is used internally, as appropriate, to handle the sender's request. It is not disseminated or sold to other organizations. Some areas of our Website may use a “cookie” temporarily stored in the visitor’s computer memory (RAM) to allow the web server to log the pages you use within the site and to know if you have visited the site before. Visitors to this bank Website remain anonymous. We do not collect identifying information about visitors to our site. We may use standard software to collect non-identifying information about our visitors, such as:

■Date and time our site was accessed
■IP address (A numeric address given to servers connected to the Internet)
■Web browser used
■City, state, and country

The Bank uses this information to create summary statistics and to determine the level of interest in information available on our site.