Privacy

SFGI Direct, a division of Burke & Herbert Bank & Trust Company
Online Privacy Policy Statement

Introduction

Burke & Herbert Financial Services Corp. is the financial holding company for Burke & Herbert Bank & Trust Company. Burke & Herbert Bank & Trust Company is the oldest continuously operating bank under its original name headquartered in the greater Washington DC metropolitan area. Burke & Herbert’s community banking operations consists of over 75 branches across Delaware, Kentucky, Maryland, Virginia, and West Virginia.

Information We Collect

We may collect non-identifying information from visitors to our website. However, visitors to our website remain anonymous. We do not collect identifying information about visitors to our site. We may use standard software to collect non-identifying information about our visitors, such as:

Date and time our site was accessed
IP address (A numeric address given to servers connected to the Internet)
Web browser used
City, state and country

We collect non-identifying information for a variety of purposes. We use this information to create summary statistics and to determine the level of interest in information available on our site. Visitors may elect to provide us with personal information via Email, online registration forms, or our guest book.

How We Use Information We Collect

This information is used internally, as appropriate, to handle the sender’s request. It is not disseminated or sold to other organizations. However, information we collect from visitors to our website may be released to third parties, shared and/or used to protect against or investigate fraud, if required by law and/or to establish or exercise our legal rights or defend against claims.

Technology We Use on Our Website

One of the ways we gather information about customer visits is through cookies.

“Cookies” are electronic files recorded by your browser to retain information about your Website visits on your computer’s hard drive. Some areas of our Website may use a cookie temporarily stored in the visitor’s computer memory(RAM) to allow the web server to log the pages you use within the site and to know if you have visited the site before. We do not use cookies to record, store or transmit any personal identifying information.

Security Statement

This Internet Banking System brings together a combination of industry-approved security technologies to protect data for us and for you, our customer. It features password-controlled system entry, a Digital ID for Burke & Herbert Bank & Trust Company server issued by VeriSign, the experts in digital identification certificates, Secure Sockets Layer (SSL) protocol for data encryption, and a router loaded with a firewall to regulate the inflow and outflow of server traffic.

Secure Access and Verifying User Authenticity

To begin a session with our server the user must key in a Log-in ID and a password. Our system, the Internet Banking System, uses a “3 strikes and you’re out” lock-out mechanism to deter users from repeated login attempts. After three unsuccessful login attempts, the system locks the user out, requiring either a designated wait period or a phone call to us to verify the password before re-entry into the system. Upon successful login, the Digital ID from VeriSign authenticates the user’s identity and establishes a secure session with that visitor.

Secure Data Transfer

Once the server session is established, the user and the server are in a secured environment. Because the server has been certified as a 128-bit secure server by VeriSign, data traveling between the user and the server is encrypted with Secure Sockets Layer (SSL) protocol. With SSL, data that travels between us and the customer is encrypted and can only be decrypted with the public and private key pair. In short, our server issues a public key to the end user’s browser and creates a temporary private key. These two keys are the only combination possible for that session. When the session is complete, the keys expire and the whole process starts over when a new end user makes a server session.

Router and Firewall

Requests must filter through a router and firewall before they are permitted to reach the server. A router, a piece of hardware, works in conjunction with the firewall, a piece of software, to block and direct traffic coming to the server. The configuration begins by disallowing ALL traffic and then opens holes only when necessary to process acceptable data requests, such as retrieving web pages or sending customer requests to us.

Using the above technologies, your Internet banking transactions are secure.

We reserve the right to change this privacy policy at any time. Any change to this policy will be posted on our website in a timely manner.