CIBC US Digital Banking Privacy Notice

Last Updated: October 2025

This Digital Banking Privacy Notice (“Notice”) describes how CIBC US1 collects, uses, and protects your personal information when using our websites, mobile applications (“Mobile Apps”), or other Services that link to this Notice (collectively “Digital Banking”) in the United States. It also describes how we use and share such information and explains your privacy rights and choices. It should be read in conjunction with the applicable privacy notices. For more information about privacy as it applies to your financial account, please review the Consumer Privacy Notice for the CIBC US product(s) you have.

CIBC Bank USA Privacy Notice

We may revise this Notice periodically at any time. Any changes to this Notice will become effective when posted unless indicated otherwise. If we make any material changes, we'll revise the “Last updated” date on this Notice.

Through Digital Banking, we don't knowingly collect, use or maintain any information through our websites from or about children who are under the age of 13 years. If a parent or guardian becomes aware that their child under the age of 13 has provided us with their information, please contact us.

What isn’t covered by this Notice?

This Notice does not apply to the Digital Banking portion of CIBC US’s businesses and affiliates that do not directly link to this Notice. Some CIBC US businesses and affiliates have their own privacy policies, which can be found on their websites. It also does not apply to third-party websites to which we link online. Please review the privacy policies of other websites and services you visit to understand their privacy practices.

What information do we collect?

Our Digital Banking platform collects information that identifies you, as well as information about you. The types of information we collect may depend on which CIBC US product(s) or service(s) you use.

We collect the following categories of information:

  • Contact Information, such as first and last name, home or physical address, email address, telephone number, and any other identifier that permits the physical or online contacting of a specific individual
  • Sensitive Information and Other Personal Identifiers, such as social security number, date of birth, government identifiers, account access credentials, demographic data, and other sensitive information collected on an application
  • Information on a Digital Banking Application – Service providers that support our digital banking applications require identity documents and biometrics to conduct identify verification and fraud checks, as well as third-party bank information to complete a funds transfer prior to new account openings. If you provide your personal information in an online form, but don’t complete the application, with notice to you, we may retain the personal information to contact you regarding your application.
  • Account or Application Information, such account number (including credit or debit card number and details), account history, account balances, loan details, credit and income information, or enrollment in offers or alerts
  • Transactional Information about your use of our products and services, including third party bank information to complete a funds transfer, information you enter, or any other information you may provide when using our Digital Banking platform
  • Device Information, derived from how you use our Digital Banking platform
    • Location information about your device’s approximate physical location for purposes such as validating your identity, the prevention, suppression or detection of crime, and to enhance the functionality of a service, for example locating a nearby CIBC Bank USA branch 
    • Information about your operating system, browser, IP address, MAC address or other device identifier, geolocation, security status and other similar device information in order to improve your experience, and/or to protect against fraud and manage risk 
    • Information about how you use your device while using CIBC US Mobile Apps, including system settings, call status, a list of other installed apps, device orientation, certain key or tap events, network and device connections, and clipboard events 
    • Your contact list information to facilitate digital payments. You can turn this access on or off 
    • A signal sent by your device when your device recognizes your facial features or fingerprints when you sign on. We do not have access to the information your device uses to enable facial or fingerprint recognition, nor do we have access to or store your facial image or fingerprint data.  
    • Images such as check images collected from your device’s storage, camera or photo applications, and are used to enable the delivery of mobile banking products and services, including mobile deposits 
  • Online Activity Data, such as browsing history, interaction with our sites, and usage information (including which pages on our Website that you access, what you click on, and how long you access the Website). This includes online tracking technologies (for example, cookies, pixels, and beacons) that also help us to better understand your interests and serve you better. You may have the ability to limit this collection of data through your browser settings or by managing your preferences on CIBC US websites. Review your choices.
  • Other Information such as feedback you may provide to us, answers to surveys and questionnaires, and use of online tools and calculators

How do we collect information?

CIBC US, including through use of third-party services, may collect this information in the following ways:

  • Through users’ use of our Digital Banking platform, such as by establishing an account, logging on and off, conducting transactions, using a device’s camera to deposit checks, and sending messages 
  • Directly from users via telephone, email, or survey 
  • From CIBC US clients, which may be users’ employers 
  • From credit bureaus, affiliates, or other companies 
  • From service providers which perform services like identity verification and fraud prevention
  • From online tracking technologies, like cookies, pixels and beacons, which provide us with information about how you use our Digital Banking platform, such as your browsing activity and which pages you visit, information about your interests and preferences, location, and technical information about the device, operating system, and web browser you use. Review Cookie Policy

How do we use information?

In connection with our Digital Banking platform, CIBC US may use this information in the following ways: 

  • To fulfill the reason the user provided the information, such as to submit an Account Application, facilitate mobile check deposits, payments, and other transactions, and provide user support 
  • To create, maintain, customize and secure the accounts users interact with 
  • To provide, maintain, support, personalize, and develop our Digital Banking platform
  • To confirm the authority of users to access our Digital Banking platform
  • To detect, prevent, and address fraud, unauthorized transactions or access, and other risks 
  • To comply with legal and/or regulatory requirements and risk management expectations 
  • To respond to legal and/or regulatory requests or orders, such as from law enforcement, regulators, courts, or other authorities 
  • To market to users and assess effectiveness of marketing campaigns 
  • Make business decisions 
  • Analyze data and credit risk 
  • Perform market research
  • To conduct audits

These uses may involve sharing with any of our affiliates (persons or entities under common ownership or control with us), our service providers, and/or unaffiliated third parties.

CIBC US does not “sell” personal information subject to the California Consumer Privacy Act (CCPA) nor have we “sold” personal information of minors under the age of 16. For purposes of this Notice, “sold” means the disclosure of personal information to a third party for monetary or other valuable consideration as defined by CCPA.

How do we share information?

CIBC US may share information that is collected through our Digital Banking platform in accordance with applicable law and our Notice with:

  • Affiliates and other entities in the CIBC family
  • Businesses with which we partner to offer products and services for our clients or prospective customers, such as joint marketing partners or bill pay partners
  • Service providers that provide various services to us, such as those we use to help detect and prevent fraud, improve our Digital Banking platform, and to better market and advertise our services to you
  • Other parties when you authorize or direct us to share your information, such as when you use a third-party service to help manage your financial information across various financial institutions or when you transfer funds from CIBC US
  • Credit reporting agencies to report on or learn about your financial circumstances and as permitted by law

The information may be shared in order to:

  • Verify your identity
  • Ensure we have accurate information about you
  • Understand your financial needs (including your eligibility for products and services you requested or accepted or were pre-approved for)
  • To manage our relationship
  • Protect against fraud and manage other risks
  • Communicate with you regarding products and services that may be of interest
  • Understand our customers, including through analytics, and to develop and tailor our products and services
  • Comply with legal or regulatory requirements, or as permitted by law
  • Respond to questions you may have
  • To facilitate a merger, acquisition, sale, bankruptcy, or other disposition of some or all of our assets
  • To exercise or defend legal claims

Please note, we may also share aggregated and de-identified data, such as aggregated statistics regarding product usage, with third parties.

Federal law gives consumers the right to limit some, but not all, sharing, such as the sharing of creditworthiness information and transaction information among affiliates. Please review your choices.

How and why do we retain information?

We keep information as long as it is necessary or relevant for the purposes for which it was collected, in accordance with CIBC US’s record retention policies. We also keep information as required by law.

How do we protect information?

We maintain appropriate physical, electronic and procedural safeguards to protect the security, integrity and privacy of your personal information. Information you submit through the CIBC US website is encrypted to industry standards.

We continually review our security safeguards in order to protect customer information we gather, transmit and store in connection with our online products and services. Remember to educate yourself on scams and threats and keep your computer operating system and data security software up to date. We'll never ask for personal identifying information, login or password information in an email message. Also, never select an unverified link in an email message. You should refrain from sending confidential or personal information through regular email since those email transmissions may not be secure.  Rather use the CIBC US messaging process through the CIBC US Digital Banking. To learn more about protecting yourself, review fraud prevention. Also, to protect yourself against online fraud, review and download Trusteer Rapport. Trusteer Rapport is a free online banking security software. 

Your choices

Online behavioral advertising:

CIBC US responds to Global Privacy Control signals as explained in the CCPA Notice at Collection and Privacy Policy. Because a Do Not Track (DNT) standard has not been adopted, CIBC US does not process DNT signals. You can refuse online tracking technologies, such as cookies, that are not necessary for the proper functioning of our website and mobile app, and you can also modify your online marketing preferences at any time by going to Manage cookie preferences. Your choices are specific to the device, website, mobile app and browser you are using. They can be reset when you clear your browser’s cookies and data on your device. For more information on cookies, visit the Cookie Policy. 

Mobile functionality: 

The mobile application requests access to information stored on your device such as location, camera, contacts, or other features you are enrolled in to enrich and simplify your own user experience and improve our services, as well as provide additional security to protect your account. Before granting access to this information, you will be prompted to give the application that permission. If you do not wish to grant that permission, you may decline. If you later change your mind, those permissions can be updated in your device's settings. Some examples of information your mobile app will request access to are: Location used to provide you directions to our bank branch and ATM locations when using our app, contacts used for peer to peer transfers when using our app, and camera used for Remote Deposit Capture when using our app. You can always turn off facial or fingerprint recognition and go back to inputting user ID and password at any time. Your device’s user information will have additional information regarding its user controls and settings, including its privacy and security controls. 

Voluntary Participation: 

From time to time, you may choose to enter your information in order to participate in online surveys or other activities that we sponsor. We use this information for a variety of reasons, such as measuring the performance of the website, or identifying products and services that might interest you. All information is used in accordance with the purposes outlined in this Notice and the terms of the activity, if applicable. Do not participate in these voluntary activities if you do not want your information used for these purposes. 

Marketing Preferences 

Email Communications: 

If you prefer not to receive email communications from us, you can unsubscribe by selecting the “Unsubscribe” button provided in the marketing emails you receive from us. Please allow up to 10 business days for us to process your request. However, if you unsubscribe, we may still send you email notifications that are legally required (for example, a notice about an upcoming change affecting your account) or reply to specific email requests about your accounts and services. 

To manage your email preferences, please call the Client Service Center (CSC) at  877-448-6500 Opens your phone app. or send an to help manage email opt-outs/unsubscribe. 

Telemarketing: 

If you prefer not to receive telemarketing communications from us, you can opt-out by calling the Client Service Center (CSC) at  877-448-6500 Opens your phone app. or sending an . Please allow up to 10 business days for us to process your request. However, if you opt-out, we may still make calls or send texts that are legally required (for example, a notice about an upcoming change affecting your account) or reply to specific requests about your accounts and services. 

Affiliate and joint marketing :

In certain cases, you can also control your marketing preferences, such as the sharing of creditworthiness information and transaction information among affiliates by calling 877-448-6500 Opens your phone app.. 

Your privacy rights 

The CCPA gives California residents additional privacy rights. For information about how CIBC US handles personal information subject to the CCPA and how California residents can exercise individual rights under the CCPA, please refer to our CCPA Notice at Collection and Privacy Policy.

Specific regions 

California 

The CIBC CCPA Notice to California residents — your privacy rights applies to certain information we collect about California residents that are not retail clients. 

Employment-related 

The CIBC US Employee Privacy Statement Opens a new window. applies to information we collect, use, share and retain from prospective, current and former employees and contingent workers. 

The CIBC CCPA Notice to California residents — your privacy rights regarding your actual or prospective employment applies to information we collect, use, share and retain from prospective, current and former employees and contingent workers who are California residents. 

Contact Us

The branch, office or channel where you interact can answer any questions you may have. If your concerns are not resolved, please involve the Manager/Supervisor. Alternatively, contact us at: 

CIBC US Corporate Address: 

120 South LaSalle Street, Chicago, Illinois 60603.   

For personal or household accounts: 

Or you can contact CIBC’s US Client Support Center at 877-448-6500 Opens your phone app.  or email .  

For commercial or institutional accounts: 

If you have questions about your commercial account at CIBC US, please call  312-564-6800 Opens your phone app.  or email  .