Fulton Financial Corporation ("FFC") is a financial holding company headquartered in Lancaster, Pennsylvania and engaged, through its banking and other subsidiaries, in the business of providing financial services to customers located primarily in Pennsylvania, New Jersey, Maryland, Delaware, and Virginia. FFC's banking subsidiaries include: Fulton Financial Advisors, N.A., Lancaster, Pennsylvania; Fulton Bank, Lancaster, Pennsylvania; FNB Bank, N.A., Danville, Pennsylvania; Lafayette Ambassador Bank, Easton, Pennsylvania; Swineford National Bank, Middleburg, Pennsylvania; Skylands Community Bank, Hackettstown, New Jersey; The Bank, Woodbury, New Jersey; Hagerstown Trust Company, Hagerstown, Maryland; The Peoples Bank of Elkton, Elkton, Maryland; Delaware National Bank, Georgetown, Delaware; The Columbia Bank, Columbia, Maryland. FFC's non-banking subsidiaries include: Fulton Life Insurance Company; Fulton Insurance Services Group, Inc.; Dearden, Macguire, Weaver and Barrett, Inc.; Homebanc, LLP; CW and Company of Virginia, d/b/a Real Estate Investment Protection Agency; Resource Service Corporation; Financial Planners Mortgage, LLP; Virginia Financial Services, LLC; Bankers Insurance, LLC; BI Investments; Alliance One Mortgage, LLP; Mortgage Resources, LLP.  When used in these Privacy Principles, the terms "we," "our" and "us" refer to any one or more of FFC and its banking and other subsidiaries with which you maintain or have maintained account relationships or through which you have completed any financial transactions. The term "our affiliates" refers to any one or more of FFC and its banking and other subsidiaries with which you do not have an account or other relationship. The term customer refers, and these Privacy Principles apply only to individuals.

The Importance of Trust and Privacy

In order to fulfill our mission of creating financial success for our customers, we recognize that it is essential that we maintain the trust placed in us by our customers. We understand and respect, as we have for many years, our customers' expectations that we will safeguard and appropriately use the information our customers have shared with us. We recognize that satisfying those expectations is an important cornerstone in building and preserving our customers' trust in us. With that in mind, we have adopted the following Privacy Principles. These Principles represent our commitment to our customers concerning how we will collect, use and maintain the information our customers choose to share with us. We will collect, use and maintain information about our customers only in compliance with applicable state and federal law.

Collection and Use of Customer Information

We will collect and use information about our customers only where we reasonably believe the information will be necessary or useful to provide to our customers the products and services they request from us, as well as to help us identify new opportunities to provide products, services and information to help our customers achieve financial success. The information we collect and use about our customers helps us to maintain the security of our customers' accounts with us, improve the customer service we provide, and operate more efficiently, so we can keep the cost of the products and services our customers obtain from us low.

Accuracy of Customer Information

The accuracy of the information we collect and maintain is important both to us, and to our customers. We have established procedures which we believe reasonably ensure that customer information is accurate, current and complete, consistent with the intended use of the information. We will respond promptly to requests to correct any information which is inaccurate.

Employee Access to Information

Our Code of Conduct sets forth our fundamental expectations concerning access to, and the proper use of customer information by our employees. Employees who violate our Code of Conduct are subject to disciplinary action. We have also established security and other procedures which we believe are reasonably designed to limit our employees' access to customer information to only that information necessary to perform their job functions. We provide training to our employees concerning the proper use of our customers' information and the security and other procedures we use to safeguard that information.

Confidentiality and Security of Customer Information

We employ various physical, electronic and procedural safeguards which we believe reasonably protect the confidentiality and security of the information we collect and maintain concerning our customers.

Information We are Permitted to Share

With Our Affiliates. As we pursue our mission to create financial success for our customers, we may, as permitted by applicable law, from time to time share with one or more of our affiliates information concerning our experience and transactions with our customers. This information could include, for example, a customer's account balance and history with us and the length of time a customer has had an account with us. Sharing this information enables us and our affiliates to provide to our customers the products and services they request from us, as well as to help us identify new opportunities to provide products, services and information to help our customers achieve financial success.

With Certain Nonaffiliated Third Parties. We may, as permitted by applicable law, share information concerning our customers with third parties not affiliated with us:

• where our customer has authorized us to share the information;
• where it is necessary to process or complete any transaction a customer has initiated with us or which affects any of a customer's accounts with us;
• where the nonaffiliated third party has been engaged by us to assist us in servicing our customers accounts, such as in providing data processing support, account statement preparation and mailing or providing other services on our behalf;
• where we have entered into a joint marketing agreement with the nonaffiliated third party to offer certain financial products, such as insurance, to our customers;
• in order to verify the existence and condition of a customer's account for a third party, such as a credit bureau or a merchant in connection with a transaction involving our customer; or
• where we believe the disclosure is required or permitted by law, such as in response to a subpoena or court order.

When we provide access to information concerning our customers to unaffiliated third parties, such as data processing companies, who assist us in providing products and services to our customers, or companies who have entered into joint marketing agreements with us to offer certain financial products, we require those third parties to agree to protect the confidentiality of our customers' information and we prohibit those nonaffiliated third parties from using our customers' information for any other purpose.

Your Right to Direct Us not to Share Certain Information

With Our Affiliates. As we pursue our mission to create financial success for our customers, we may, as permitted by applicable law, from time to time share with one or more of our affiliates information concerning our customers, such as information that may be obtained from an account application or consumer credit report. Sharing this information enables us and our affiliates to provide to our customers the products and services they request from us, as well as to help us identify new opportunities to provide products, services and information to help our customers achieve financial success. If you do not want us to share this information with our affiliates, please send us your request in writing, and include your name, address and social security number, to:

• The Columbia Bank
• 7168 Columbia Gateway Drive
• Columbia, MD 21046
• Attention: Privacy Request Coordinator

Medical Information

We recognize that our customers have an important and legitimate interest in the privacy of their medical and health information. Except as is necessary in connection with our insurance activities, we do not routinely collect or maintain medical or health information concerning our customers. When we do obtain medical or health information concerning a customer, we will use that information solely for the purposes for which that customer provided the information, and we will not disclose that information to our affiliates or to nonaffiliated third parties, unless the disclosure is necessary to process transactions or provide services the customer has requested or initiated, or the customer has authorized the disclosure.

Amendments

Our commitment to our customers concerning the collection, use and maintenance of information our customers share with us is an enduring one. We may, however, from time to time determine that a change in applicable law, our organization or our business requires an amendment to these Privacy Principles. Accordingly, we may amend from time to time all or any part of these Privacy Principles.