Bank of Utah values the privacy of children and of all of its users. This COPPA Privacy Policy (“COPPA Policy”) is designed to comply with the Children’s Online Privacy Protection Act (“COPPA”) and contains important information about how we collect, use, and disclose the personal information we collect from children under thirteen years old who take courses provided through our website, www.bankofutah.com (the “Site”) and the Bank of Utah PEAK Youth Program mobile application, provided on our Site (the “Services”). Bank of Utah partners with a third party to provide the Bank of Utah PEAK Youth Program (hosted on secure isolated servers). In the course of providing these Services, Bank of Utah may come into contact with information, including personal information, from the participate. The solution may be used by children under 13. This COPPA Privacy Policy applies to the information we collect from children under 13 through Bank of Utah PEAK Youth Program directed towards children. Bank of Utah will handle children’s personal information as described in this COPPA Policy. Any personal information we collect about other users (e.g., teens and adults) will be treated in accordance with the Bank of Utah Privacy Policy (“Privacy Policy”). The use of our Site and any dispute over privacy, is subject to this COPPA Policy, the Privacy Policy, and our Terms of Service, including its applicable limitations on damages and the resolution of disputes. Our Terms of Service and Privacy Policy are incorporated by reference into this COPPA Policy.
Who Will Collect Information About Children?
Bank of Utah operates the Site and Services and will collect children’s personal information as described in this COPPA Policy and our Privacy Policy. We can be contacted at:
Bank of Utah
2605 Washington Blvd, Ogden UT 84401
Bank of Utah PEAK Youth Program financial education solutions are offered in conjunction with an outside partner. They will have access to the data provided by your child but are contractually obligated to not disclose the data to any other third party or unauthorized individuals. Bank of Utah may provide partners with aggregate or de-identified information about users.
What Information Do We Collect About Children and Why?
At account opening, we obtain verifiable parental consent in a manner reasonably designed to confirm the identity of the parent or legal guardian, before collecting, using, or disclosing a child’s personal information. As described in further detail below, we collect some personal information from children so that we can track their utilization of the product and track rewards. Data is retained to provide financial management services to the child.
How Information is Collected
As a parent, you will register the child and provide information about the child. In addition, we may collect information about children directly from children, as well as automatically through a child’s use of our Site and Services. We will not require a child to disclose more information than is reasonably necessary to use our Services. a copy of a notice of our privacy policies practices as posted at the bottom of all pages within Bank of Utah PEAK Youth Program. From children under 13, we utilize the date of birth to verify the child’s age. We collect the child’s first name. We do not ask for the child’s last name. As a parent, you create the account and register the child to utilize the solution. This includes creating a username and password and registering the child’s device. When registering the child, we will track the mobile device they are utilizing so that notifications can be sent from the child to the parent. We may also collect additional demographic information (such as race and gender) from the parent. Parents may opt to stop collecting information by product by contacting Bank of Utah at
Information We Collect Automatically
We may automatically collect the following information about a child’s use of our Site through cookies and other technologies: domain name; browser type and operating system; web pages viewed; links clicked; buttons clicked; the length of time spent on our Site; the length of time our solution was utilized; Google Analytics statistics; the referring URL, or the webpage that led the child to our Site; device name and model; operating system type, name, and version; and activities within our Site. We may also collect IP addresses, push notification ID, device identifier or a similar unique identifier from users of our product, including children; we only use such identifiers to support the internal operations of our product and we do not use such identifiers to collect information about the child outside of our Site.
Analytics is configured for COPPA compliance, no advertising features are enabled, IP anonymizations is enabled and no data is used for remarketing. We do not enable Google advertising features or remarketing for children.
Other Information We Collect About Children
We collect information about children’s performance and activities on our Site, including financial performance. This information is for internal use only and will not be disclosed to other entities; however, we do not use this information in personally identifiable form for our own commercial purposes. Before we analyze or use any activity data for our own commercial purposes, we de-identify and/or aggregate such information.
How We Use Children’s Information
We use personal information collected from children for the following purposes:
- To provide our Services; and
- To respond to customer service and technical support issues and requests.
We de-identify and/or aggregate the information we collect from children under 13 before we use it for any other purposes, as noted below. Unique Identifiers. We only collect and use unique identifiers, such as IP addresses, as necessary to operate our Site or Services, including to maintain or analyze their functioning; perform network communications; authenticate users or personalize content; and protect the security or integrity of users and our Site and Services. We never use unique identifiers to track users across third-party apps or websites. Aggregate or De-identified Information. We may use aggregate or de-identified information about children for research, analysis, and similar purposes. When we do so, we strip out names, e- mail, contact information, and other personal identifiers. We may use aggregate or de- identified information for the following purposes:
- To better understand how users’ access and use our Site and Services;
- To improve our Site and Services and respond to user desires and preferences; and
- To conduct research or analysis, including research and analysis by third parties.
How We Share Children’s Information
We do not sell children’s personal information, and a child may not make his or her personal information public through our services. In general, we may disclose the personal information that we collect about children to provide our Services, to comply with the law, and to protect Bank of Utah and other users of our Services. For example, we may share children’s personal information as follows:
- Service Providers. We may disclose the information we collect from children to third- party vendors, service providers, contractors, or agents who perform functions on our behalf.
- Business Transfers. If we are acquired by or merged with another company, if substantially all of our assets are transferred to another company, or as part of a bankruptcy proceeding, we may transfer the personal information we have collected from our users to the other company.
- In Response to Legal Process. We also may disclose the personal information we collect in order to comply with the law, a judicial proceeding, court order, subpoena, or other legal process.
- To Protect Us and Others. We also may disclose the personal information we collect where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Service, Privacy Policy, or this COPPA Policy, or as evidence in litigation in which Bank of Utah is involved.
- With Parents. Parents may request information about the information we have collected from their child by contacting us at
. - Aggregate and De-Identified Information. We may also use and share aggregate or de-identified information about users with third parties for marketing, research, or similar purposes.
Your Rights to Review, Delete, and Control Our Use of Children’s Personal Information
Parents have a right to review the information we have collected about their children, respectively, and to delete it, and to tell us to stop using it. To exercise these rights, you may contact us at
We retain personal information collected from children only for as long as reasonably necessary to fulfill the purposes described in the COPPA Direct Notice, comply with legal obligations, resolve disputes, and enforce our agreements. After that period, the information is securely deleted or de-identified.
Changes to This COPPA Policy
This COPPA Policy is current as of the Effective Date set forth above. We may change this COPPA Policy from time to time, so please be sure to check back periodically. We will post any changes to this COPPA Policy on our Site, at www.bankofutah.com. If we make any changes to this COPPA Policy that materially affect our practices with regard to the personal information we have previously collected from a child, we will endeavor to provide you with notice in advance of such change by highlighting the change on our Site.