What BMO's terms say

Bad 7

• Location data may be collected, used and/or shared

  The digital privacy policy states: "Location information about your device’s approximate physical location for purposes such as validating your identity, the prevention, suppression or detection of crime, and to enhance the functionality of a service, for example locating a nearby BMO branch. Our ability to access location information is controlled by your device. Please refer to the user guide and settings for your device regarding how to allow, block, or limit the collection of location information. If you choose not to provide location information, some Services may not operate effectively."

  Where it says this ↗

• Your personal information is used for many different purposes

  The Digital Privacy Policy states: "We may use and disclose your Personal Information that is collected through our Services in accordance with applicable law and our Privacy Codes to: Verify your identity; Ensure we have accurate information about you; Understand your financial needs (including your eligibility for products and services you requested or accepted or were pre-approved for); To manage our relationship; Protect against fraud and manage other risks; Communicate with you regarding products and services that may be of interest; Understand our customers, including through analytics, and to develop and tailor our products and services; Comply with legal or regulatory requirements, or as permitted by law; and Respond to questions you may have."

  Where it says this ↗

• Third-party cookies are used for advertising

  The digital privacy policy states: "Marketing and Advertising cookies and other technologies allow us and our partners to provide you personalized, interest-based advertising, which could include geolocated advertising. When a BMO website or app presents you with an option to manage your preferences, you can make a decision to accept or turn off these technologies."

  Where it says this ↗

• You may be tracked on other websites

  The Digital Privacy Policy states: "We, our service providers and third parties we select, may use data collected about you over time across multiple websites or other sources"

  Where it says this ↗

• Instead of asking directly, this Service will assume your consent to changes of terms merely from your usage

  The Terms of Use states: "By continuing to access this Website after the date of any amendments to these Website Terms of Use, you agree to be bound by the amended Website Terms of Use."

  Where it says this ↗

• This service assumes no liability for unauthorized access to your personal information

  The Terms of Use state: "We are not liable if you send confidential information to us over the Internet using regular, unencrypted e-mail and that information subsequently becomes public through no fault of ours."

  Where it says this ↗

• Your biometric data is collected

  The California Consumer Privacy Policy states: "The categories of personal information we collect depend on the products or services you have with us, your use of B M O websites and services, and if you are a current, past or prospective employee of B M O. Over the past 12 months and on an ongoing basis, the categories of information we have collected and may collect includes: [...] Biometric and Geolocation Information"

  Where it says this ↗

Worth knowing 10

• Your personal data may be aggregated into statistics

  Your personal data is aggregated into statistics

  The Digital Privacy Policy states: "We may use and disclose your Personal Information that is collected through our Services in accordance with applicable law and our Privacy Codes to: ... Understand our customers, including through analytics, and to develop and tailor our products and services;"

  Where it says this ↗

• First-party cookies are used

  The Digital Privacy Policy states: "Website Use Information such as browsing behavior on BMO websites, links and locations you select, form data and downloads, as well as other data gathered from the use of web tools (for example, Cookies, Pixel Tags, Software Development Kits (SDKs) and Web Beacons) to better understand your interests and needs so that we can serve you better."

  Where it says this ↗

• Blocking first-party cookies may limit your ability to use the service

  The Digital Privacy Policy states: "If you would like to use our Services you will be required to accept these cookies to maintain session integrity and enhanced security."

  Where it says this ↗

• This service assumes no responsibility and liability for the contents of links to other websites

  The digital privacy policy states: "Our websites may contain links to other sites that we do not own or operate. Also, links to our websites may be featured on third party websites on which we advertise, or in instances that we have not endorsed. We do not manage, and we are not responsible for, the digital marketing and cookie practices of third parties, for example, third party websites linked to/from BMO digital channels. The linked websites have separate and independent privacy statements, notices and terms of use, which we recommend you read carefully."

  Where it says this ↗

• The service is provided 'as is' and to be used at your sole risk

  The Terms of Use state: "SUCH INFORMATION OR TOOL IS PROVIDED "AS IS" WITHOUT WARRANTY OR CONDITION OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING,WITHOUT LIMITATION, THE IMPLIED CONDITIONS AND WARRANTIES OF NON-INFRINGEMENT OF THIRD PARTY RIGHTS, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE."

  Where it says this ↗

• You are responsible for any risks, damages, or losses that may incur by downloading materials

  The Terms of Use state: "Although considerable care has been taken in preparing and maintaining the information and materials contained on this Website, they are provided on an "as is" basis, without warranty of any kind either express or implied. In particular, all responsibility or liability for any damages caused to computer systems, software or electronic files by computer viruses, "worms", "trojan horses" or other items or forces of an intrusive, disruptive or destructive nature is disclaimed."

  Where it says this ↗

• You are prohibited from attempting to gain unauthorized access to other computer systems

  The Terms of Use state: "Unauthorized use of this Website and our systems including but not limited to unauthorized entry into our systems, misuse of passwords, or misuse of any information on the Website is prohibited."

  Where it says this ↗

• There is a date of the last update of the agreements

  in the digital privacy policy it says: "Last Updated: August 28, 2025"

  Where it says this ↗

• Your IP address is collected, which can be used to view your approximate location

  The digital privacy policy states: "Information about your operating system, browser, IP address, MAC address or other device identifier, geolocation, security status and other similar device information in order to improve your experience, and/or to protect against fraud and manage risk."

  Where it says this ↗

• This service does not guarantee that it or the products obtained through it meet your expectations or requirements

  The Terms of Use state: "Although considerable care has been taken in preparing and maintaining the information and materials contained on this Website, they are provided on an "as is" basis, without warranty of any kind either express or implied."

  Where it says this ↗

Good 4

• A list of all cookies used by the service is provided

  A list of all cookies set by the website is provided

  The Digital Privacy Policy states: "The cookies and other similar technologies that we use on our websites can be categorized into the following groups: Strictly necessary cookies and other technologies are essential in order to enable you to move around a website and use its features, such as accessing secure areas of the website. Without these technologies, certain services you may have asked for cannot be provided. These technologies do not gather information about you that could be used for marketing or remembering where you have been on the Internet. These technologies are always enabled and cannot be turned off. Performance cookies and other technologies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they receive error messages from web pages. These technologies do not collect information that identifies a visitor. All information these technologies collect is anonymous and is only used to improve how a website works. When a BMO website or app presents you with an option to manage your preferences, you can make a decision to accept or turn off these technologies. Functionality cookies and other technologies allow a website to remember choices you make (such as your username, language or the region you are in) and provide enhanced features. These technologies can also be used to remember changes you have made to text size, font and other preferences on web pages that you can customize. They may also be used to provide services you have requested, such as watching a video , and “remember me” functionality. The information these cookies collect may not always be anonymous and by using our websites, you agree that we can place these types of cookies on your device. When a BMO website or app presents you with an option to manage your preferences, you can make a decision to accept or turn off these technologies. Marketing and Advertising cookies and other technologies allow us and our partners to provide you personalized, interest-based advertising, which could include geolocated advertising. When a BMO website or app presents you with an option to manage your preferences, you can make a decision to accept or turn off these technologies."

  Where it says this ↗

• You can limit how your information is used by third parties and the service

  The Digital Privacy Policy states: "You may have the ability to limit this collection of data either through your browser settings or by managing your preferences on BMO websites. Please see OPTING OUT OF ONLINE BEHAVIOURIAL ADVERTISING Opting out of online behavioural advertising Opting out of online behavioural advertising Opting out of online behavioural advertising section below on other information on how to opt-out of online behavioural advertising."

  Where it says this ↗

• Do Not Track (DNT) headers are respected

  The Digital Privacy Policy states: "BMO honors Do Not Track opt-out preferences that you make to participating third party advertising networks that we hire to perform advertising on our behalf."

  Where it says this ↗

• The service claims to be CCPA compliant for California users

  The California Consumer Privacy Policy states: "This California Consumer Privacy Policy (“Policy”) applies to California residents. This Policy explains how BMO (“BMO,” “we,” “us,” “our”) collects, uses, retains, and/or discloses personal information about California residents, and as such includes our Notice at Collection. This Policy also explains how California residents may exercise certain rights they have under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”). For non-California residents, please refer to our Privacy Code and our Digital Privacy Policy for additional information about BMO’s privacy practices. If you are a California resident who is a BMO employee, please refer to the California Employee Privacy Disclosure provided to you and available on the BMO intranet."

  Where it says this ↗

Bad 1

• Tracking pixels are used in service-to-user communication

  The digital privacy ploicy states: "Pixels: Our emails may contain a single, campaign-unique “web beacon pixel” to tell us whether our emails have been opened and, combined with other technology, verify any selection on the links within our email(s). We may use this information for determining which of our emails are more interesting to you and to query whether users who do not open our emails wish to continue receiving them. The pixel is deleted when you delete the email. If you do not wish the pixel to be downloaded to your device, please select to receive emails from us in plain text rather than HTMLH T M L, choose not to select links that we send you, or unsubscribe from the receipt of our emails. Pixel-related information may be connected to your personal identity."

  Where it says this ↗

Good 1

• You can opt out of receiving promotional communications

  You can opt out of promotional communications

  The Digital Privacy Policy states: "Email Communications: If you prefer not to receive email communications from us, you can unsubscribe by selecting the “Unsubscribe” button provided in the promotional emails you receive from us. Please allow up to 10 business days for us to process your request. However, if you unsubscribe, we may still send you email notifications that are legally required (for example, a notice about an upcoming change affecting your account) or reply to specific email requests about your accounts and services."

  Where it says this ↗