U.S. Consumer Privacy Notice | U.S. Consumer Privacy Notice (PDF) | California Consumer Privacy Notice | M&T Equipment Finance Corporation California Consumer Privacy Notice | Canada Privacy Notice (PDF) | Career Site Privacy Notice

This Digital Privacy Notice ("Notice") applies to users of the M&T Bank website and mobile application ("Online Services"). The term "M&T", "we", "us" or "our" on any website we own or control and, in this Notice, refers to M&T Bank and our affiliates or subsidiaries that link to this Notice. This Notice describes how M&T Online Services may collect, use and share information from or about you.

By viewing or using our Online Services, you consent to this Notice which includes your consent to disclose and use information about you in the manner detailed in the Notice. Depending upon your relationship with us, you may receive other M&T privacy notices providing additional detail about our privacy practices.

We collect two kinds of information through Online Services: non-personal information and personal information.

The non-personal information we collect includes information about your use of Online Services and other information including: the visitor's browser type, device type and operating system, area(s) of Online Services site visited, date and time of access, host or Internet Service Provider (ISP) information, and identity of the referring site (any site from which the visitor accessed Online Services).

Personal Information means personally identifiable information such as information you provide via forms, surveys, applications or other fields including name, postal or email addresses, social security number (SSN), telephone, fax or mobile numbers, or account numbers.

We also collect personal information that can identify a visitor, user or customer, including but not limited to name, address or other contact information, visitor interactions with or viewing of video content, or other information that you may choose to provide to us. If you apply for a job, we may collect personal information about your work and educational history.

We may offer you the ability to register and access your accounts via Online Services. When you access your accounts via Online Services, we may also collect and analyze the below (in addition to the other types of information discussed in this Notice):

We may collect information about your device such as your phone number, the device model, installed applications, identity of the carrier and the name and version of the operating system.

There may be certain information transmitted to us regarding your location when you log in or request information through Online Services. We collect the Internet Protocol (IP) address of the device to determine your physical location for Online Services. This information may be provided to mapping applications to assist you in locating nearby branches and ATMs and for security purposes. Your location data will be retained by M&T for as long as needed to fulfill business purposes but will only be used for the limited purposes stated within this Notice.

We may collect information when you initiate a transaction (for example, when you upload a check image while using M&T Mobile Deposit). This information will be used or shared in order to provide the service that you requested.

This information is also collected and analyzed to assist us with fraud detection and for other security purposes, and to enhance our ability to optimize your experience while on our site. It will only be used for the purpose(s) stated within this Notice and retained by M&T for only as long as needed to fulfill the business purpose(s).

We may collect certain behavioral biometrics such as mouse movements and patterns, touch screen interactions and movements, keyboard interactions, typing cadence, and navigation patterns. 

This information is collected and analyzed to assist us with fraud detection and for security purposes.

M&T may collect SSNs in the course of our business. We strive to protect the confidentiality and security of SSNs in our possession, custody or control by: (i) limiting access to SSNs and (ii) maintaining reasonable administrative, technical and physical safeguards to protect against the loss, misuse or unlawful disclosure of SSNs.

We may use the information we collect through Online Services for several purposes including:

• to provide you with, renew, or modify products and services; 
• to provide you with the information and documents you request and for other customer service purposes; 
• to provide you with information about Online Services or required notices; to allow you to participate in digital surveys and other forms of market research; 
• to deliver affiliate marketing communications or promotional materials that may be of interest to you, and to assist us in determining relevant advertising; 
• to improve the services we provide and the usefulness of Online Services; 
• to customize your experience when using Online Services; 
• to comply with applicable laws; 
• to perform research; 
• and to prevent and detect fraud, infringement and other potential misuse.

We also may anonymize, combine or aggregate any of the information we collect through the Online Services or elsewhere for any of these purposes or for analyzing usage statistics and trends.

Except as otherwise provided in our US Consumer Privacy Notice, we may share the information identified in the Types of Information we Collect section with affiliates and third parties described below:

• Our affiliates and third party service providers, who provide services to us or help us provide services to you, including for marketing purposes;
• Other companies to bring you products and services that you have requested;
• Other companies or affiliates in connection with a merger, consolidation, acquisition, divestiture or other corporate restructuring;
• Other third parties for complying with legal obligations, such as responding to subpoenas or court orders, tackling fraud, security or technical challenges, enforcing terms of use, or to safeguard the rights, property, and security of our customers or third parties. Where applicable, we will limit our sharing of your information in accordance with the choices you have made.

We may share anonymous or aggregated information with our third parties for analytics, product improvement, performance tracking, and other purposes.

Data obtained through text messaging programs will not be shared with any third parties for their marketing purposes.

Cookies and Visitor Tags. To better serve you and to provide more effective Online Services, we use "Cookies" as part of our interaction with the device you are using. Cookies are small data files that are placed on your web browser when you visit a website. In addition to Cookies, we may use other devices such as visitor tags, including those sometimes referred to as web beacons or pixels. These are similar small files on our M&T websites, not the user’s browser, that use a unique identifier enabling us to recognize when someone has visited our websites or opened an e-mail that we have sent them. Information collected with these tools can include pages and content viewed, including text, image, and video content, time and duration of visits, search queries entered into search fields, and whether a user clicked on an advertisement. We may also use other technologies, such as the real time capture of screenshots, commonly known as session replay, while you are using our Online Services, to understand how you navigate and use the Services.

You can find more information about these data collection tools, as well as descriptions of how we use them, in the M&T Bank Cookie Notice. You can refuse to accept certain Cookies by indicating your preference via the “Manage Cookies” link at the bottom of our website, www.mtb.com.

You can also visit the "Help" section of your browser for how to manage your Cookie settings, or follow the links below:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

For further general information on Cookies and more detailed advice on how to disable and enable them, please go to www.allaboutcookies.org.

While, as described above, you may have the ability to control the use of Cookies through your web browser, unless the browser settings block our data collection, we do not currently respond to "Do Not Track" signals or other mechanisms. The available settings vary greatly by browser; please refer to your Internet browser settings for more information. For more information about Do Not Track, please visit www.allaboutdnt.com.

We recognize that protecting children's identities and privacy online is important and that the responsibility to do so resides with both the business and the parents. We do not knowingly solicit data from children under the age of 13, and we do not knowingly market through our website to such children. We comply with the requirements of the Children's Online Privacy Protect Act (COPPA) that are applicable to us.

From time to time, M&T may establish a relationship with other companies and vendors who provide us with the tools used to collect and analyze the aforementioned data that is used to improve the operation of our Online Services or for marketing purposes.

M&T offers access to other websites either using hyperlinks or through "co-branded" sites in which both M&T and the other company share the same URL, domain name or pages within a domain name on the Internet. In some cases, the other site will also collect information from you. This information may include, but is not limited to, name, address, SSN, account numbers and date of birth. Prior to providing any information to any third party, review their privacy policy to determine the extent to which they may disclose your information.

It is important for us to have your most accurate and up-to-date contact information. If any of your contact information has changed, please call or write us at the proper telephone number or address located within the Help Center. You may also call or write us at the telephone number or mailing address located on your account statements or other records as indicated.

We protect information you provide us online in several ways. M&T Mobile Banking leverages multiple layers of security, including password protection and the SSL (Secure Sockets Layer) communication protocol, which employs 256-bit encryption to ensure information is passed to M&T without being intercepted by third parties. As always, we strongly encourage you to assist us in that effort by not sharing your M&T Banking User ID or Passcode with anyone. For more information about Online Services security, please visit the Help Center.

Please use caution when using aggregation websites. Aggregation websites offer the ability to access all your financial account information on one website. To do this, an aggregation provider may request access to your User IDs and Passcodes. You should use caution and ensure that the aggregator company has appropriate policies and practices to protect the privacy and security of any information you provide or to which they are gaining access. We are not responsible for the use or disclosure of any Personal Information accessed by any other company or person to whom you provide your User ID and Passcode.

All transactions initiated by an aggregation website, using access information you provide are considered to be authorized by you, whether or not you were aware of the specific transaction. If you decide to revoke the authority you have given to an aggregation website, we strongly recommend that you change your User ID and Passcode to ensure that the aggregation website cannot continue to access your account.

This Notice should be reviewed periodically as it is subject to change from time to time. When a change has been made, we will post the revised Notice on this page with a new "Last Updated" date at the top of the page. All changes will become effective when posted unless indicated otherwise.

Your continued use of any of our Services following the posting of a revised version of this Digital Privacy Notice will constitute your acceptance of the revised Notice. If you do not agree with the revised Digital Privacy Notice, do not use any of our Online Services.

The California Consumer Privacy Act ("CCPA") is a law which applies to residents of the State of California, who are not currently covered under the Gramm-Leach-Bliley Act ("GLBA").

California defines residency as: (1) every individual who is in the State for other than a temporary or transitory purpose, and (2) every individual who is domiciled in the State who is outside the State for a temporary or transitory purpose. All other individuals are nonresidents. Examples of domicile include paying taxable income, maintaining a permanent home, paying resident tuition, voting in a California election, or any other benefit not ordinarily extended to nonresidents.

Note that as part of servicing consumer requests and customer accounts, M&T Bank and Wilmington Trust ("M&T") may collect certain categories of information as noted in the "California Consumer Privacy Notice"; however, not all categories of information are likely to be collected from or about each individual consumer. The specific categories of information collected are dependent on the M&T service(s) provided.

For further information on the categories of information M&T collects, and on the rights available to California residents, please visit M&T Bank's California Privacy Notice page.

Due to other Federal and State laws, M&T may not be able to fulfill a request to delete personal information because such information is needed to provide your product or service and/or meet other legal requirements.