Privacy Policy

Bank Policy Institute Privacy Policy

Updated: January 22, 2020

Effective: February 21, 2020

This privacy policy (“Policy”) explains how the Bank Policy Institute (“BPI,” “we,” or “us”) collects, uses, and shares information in connection with an individual’s (“you” or “user”) use of,  and our other websites and mobile applications that link to this Policy (collectively, the “Services”).  It also describes your rights and choices with respect to the information we collect.

By accessing or using our Services, you acknowledge that you have read, understand, and agree to the terms of this Policy and consent to the collection, use, and sharing of information in a manner consistent with this Policy.

Information that We Collect

We collect a variety of information when you use or access our Services, including:

We may combine information collected through the Services with other information that we or third parties collect about you in other contexts, such as our communications with you, our events, or through referrals.  We will treat such combined information in accordance with this Policy.

How We Use Information

We use the information we collect for a variety of purposes, including:

How We Share Information

We may share information with third parties in various contexts, including:

Third-Party Analytics and Interest-Based Advertising

We partner with third parties to engage in analytics, auditing, research, and reporting on our Services.  These third parties collect information regarding your usage of the Services as described in the section above titled “Information that We Collect,” and they may use server logs, cookies, web beacons, tags, pixels, mobile advertising IDs (such as Apple’s IDFA or Google’s Advertising ID), and similar technologies.  In particular, we use Google Analytics on the Services.  You can learn more about Google Analytics’ data practices here and opt out here.

We also partner with third parties to provide advertising services that are targeted based on your online activities across websites, mobile apps, and devices over time (commonly referred to as “interest-based advertising”).  Our advertising partners may collect information about your activities on our Services on your current device and combine it with information about your activities on other websites, mobile apps, and devices.  They may collect such information using server logs, cookies, web beacons, tags, pixels, mobile advertising IDs (such as Apple’s IDFA or Google’s Advertising ID), cross-device linking, and similar technologies.  For example, our advertising partners may use the fact that you visited our websites or used our mobile apps to target advertising to you on non-BPI websites and mobile apps on your current device or on other devices you use.  You can opt out of interest-based advertising in web browsers and mobile apps on your current browser or device by following the instructions below.

You can also opt out for participating companies by downloading the Digital Advertising Alliance’s AppChoices tool at and following the instructions in the app.  For more information about opting out on mobile devices, please see

Please note that the opt-outs described above will apply only to the specific browser or device from which you opt out, and therefore you will need to opt out separately on all of your browsers and devices.  If you delete or reset your cookies or mobile advertising identifiers, change browsers (including upgrading certain browsers), or use a different device, any opt-out cookie or tool may no longer work and you will need to opt out again.  Our Services do not respond to Do Not Track signals at this time.

Information for Users Outside the United States

The information that we collect through or in connection with our Services is controlled by the Bank Policy Institute, which is headquartered in the United States at the address listed in the “Contact Us” section below.  Your information may be transferred to and processed in the United States for the purposes described above.  BPI also may subcontract the processing of your data to, or otherwise share your data with, third parties in the United States or countries other than your country of residence.  The data protection laws in these countries may be different from, and less stringent than, those in your country of residence.  By agreeing to this Policy when registering for an account on the Services and/or using the Services or by providing any information to us, you expressly consent to such transfer and processing.

To the extent required by law, our legal basis for processing information, as described above, will depend on the type of information at issue and the purpose for which it is collected and used.  In many cases, we rely on your consent to process information, or we process information as necessary for the performance of our agreements with you.  We also may rely on our legitimate interests to process your information, for the purposes described in this Policy, except where such interests are overridden by your data protection interests or fundamental rights and freedoms.

Your Privacy Rights and Choices

BPI provides you with choices to review, access, and update your information or to exercise your privacy or data protection rights, as follows:

Data Security and Retention

BPI uses reasonable physical, technical, and administrative safeguards to protect your information against loss or unauthorized access, use, modification, or deletion.  However, no security program is 100% secure, and thus we cannot guarantee the absolute security of your information.

BPI retains your information for as long as reasonably necessary for its legitimate business purposes, to provide the Services to you, to fulfill the purposes described in this Policy, or as required by law.

Links to Other Websites

The Services may contain links to websites or mobile apps of other third parties, including social media sharing features that link to third-party websites.  If you follow a link to any of these websites or apps, please note that these websites and apps (and any services that may be accessible through them) have their own privacy policies.  We are not responsible for the privacy practices of other websites or apps or the information you share through such other websites or apps.  We encourage our users to be aware when they leave the Services and to read the privacy policies applicable to such third-party websites and apps.  This Policy applies solely to information collected in connection with the Services.

Children’s Privacy

Our Services are not intended for use by children under the age of 13.  We request that such children do not provide information to us through any of the Services.

Sensitive Information

We ask that you not send us, and you not disclose, any sensitive information (e.g., social security numbers, financial information, health information, information related to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, or sexual orientation) on or through the Services or otherwise to us.

Updates to this Privacy Policy

BPI reserves the right to change this Policy from time to time by updating this page, so please review this page periodically for changes.  The “updated” and “effective” dates provided at the top of the page will indicate when the Policy was most recently updated and became effective.  Your continued use of our Services will serve as an acceptance of any changes to the Policy.

Contact Us

If you have any questions or concerns regarding this Policy, please contact us by email at, with “Attn:  Privacy” in the subject line, or by mail at Bank Policy Institute, Attn:  Privacy, 600 13th Street NW, Suite 400, Washington, DC 20005.