Hacker News Reader

Comment by Animats | Hacker News Reader

I don't see anything in https://www.mctrpayment.com/cardholder-agreement that defines "external" as outside of their bank.

It's standard banking terminology.[1][2]

[1] https://www.commercebank.com/personal/online-features/extern...

[2] https://www.lawinsider.com/dictionary/external-bank-account

View on HN

I don't usually cite on other sites, when this is plainly spelled out in the site I'm talking about ("International" clearly different than "Domestic and International").

Regarding using information for marketing purposes, the privacy policy at https://www.mctrpayment.com/privacy/ explicitly says they don't do that, they only share information related to everyday business purposes, not for marketing. What leads you to believe otherwise?

The New York Community Bancorp, Inc.'s consumer privacy notice mailed with the VISA debit card. Their form M-135389, rev 12/21, page 1 of 2. If there is sufficient interest, I will scan it and post the scan.

Table:

Reasons we can share your personal information: For joint marketing with other financial companies.

Does New York Community Bancorp, Inc. share?: YES.

Can you limit this sharing: NO.

This probably violates the California Consumer Privacy Act.

It does not unfortunately because this is covered by federal law under the Fair Credit Reporting Act. There are exceptions to the CCPA for FCRA, HIPAA, and GLBA.

Interesting. Is there also conflicting information (what came with the card mailing vs. what's published on the website) regarding the fees or does that match?

Reply on news.ycombinator.com