Capital Area REALTORS® FCU Routing & Transit #255077639
Capital Area REALTORS® Federal Credit Union
Last Updated: October 18, 2026
Capital Area REALTORS® Federal Credit Union (“CARFCU,” “we,” “us,” or “our”) respects the privacy and security of our members, consumers, and website visitors. Protecting personal and financial information is an important part of our responsibility as a federally chartered credit union.
We collect, use, disclose, retain, and safeguard personal information as necessary to provide financial products and services, maintain and service accounts, process transactions, communicate with members and consumers, satisfy legal and regulatory requirements, prevent fraud, manage risk, and operate CARFCU.
This Privacy Policy describes our general privacy practices, including practices applicable to our website and SMS/text messaging program. CARFCU also provides applicable consumers and members with privacy notices required by federal law concerning the collection and sharing of nonpublic personal information.
Depending upon a person’s relationship and interactions with CARFCU, we may collect information including:
The information CARFCU collects depends upon the products, services, and methods of interaction involved.
CARFCU may use personal information to:
CARFCU maintains physical, administrative, and technical safeguards designed to protect the security and confidentiality of member information and protect against unauthorized access to or use of such information.
Access to personal information is limited to employees and other authorized persons who require access to perform legitimate business functions or provide products and services.
CARFCU’s employees receive appropriate guidance and training regarding their responsibility to protect confidential information.
CARFCU also manages relationships with service providers that receive or have access to member information consistent with applicable legal and regulatory requirements.
NCUA Part 748 requires federally insured credit unions to maintain a written security program designed, among other things, to ensure the security and confidentiality of member records, protect against anticipated threats and unauthorized access, and respond to unauthorized access or use that could substantially harm or seriously inconvenience members. NCUA additionally identifies due diligence, contractual safeguards, and risk-based monitoring as considerations in service-provider arrangements.
CARFCU may disclose personal information as permitted or required by applicable law and consistent with CARFCU’s applicable federal privacy notices.
Depending upon the circumstances, information may be disclosed to service providers and other parties necessary to process and service transactions, provide requested products and services, protect against fraud or unauthorized activity, comply with legal or regulatory requirements, or otherwise operate CARFCU as permitted by law.
CARFCU’s practices concerning the disclosure of nonpublic personal information are governed by applicable federal financial privacy requirements and CARFCU’s applicable member/consumer privacy notices.
This wording is intentionally more precise than saying CARFCU “never shares information.” Regulation P expressly addresses limitations and exceptions involving disclosures to nonaffiliated third parties, including service-provider and transaction-processing contexts.
CARFCU may offer SMS/MMS text messaging to members and consumers who consent to receive such communications.
SMS/MMS communications may include account servicing communications, transaction-related notifications, application status updates, document requests, appointment reminders, fraud or security-related communications, loan-related communications where applicable, and other communications concerning financial products or services requested by the recipient.
Mobile phone numbers, SMS consent, and SMS opt-in data collected in connection with CARFCU’s text messaging program will not be sold or shared with third parties for their marketing or promotional purposes.
SMS consent and opt-in data will not be transferred to third parties for their own marketing or promotional purposes.
This SMS-specific restriction does not prohibit CARFCU from using service providers as necessary to provide and support CARFCU’s text messaging service, provided such use is consistent with applicable law and CARFCU’s privacy and information-security requirements.
That bolded language directly addresses the deficiency Dialpad identified when scanning CARFCU’s existing Privacy Policy.
CTIA’s best-practices document specifically includes sections covering opt-in, opt-out, renting/selling/sharing opt-in lists, and maintaining a conspicuous privacy policy.
CARFCU obtains consent before sending SMS/MMS communications when consent is required.
Consent to receive SMS/MMS messages is not a condition of purchasing a CARFCU product or service.
Message frequency may vary depending upon the recipient’s accounts, applications, transactions, requested services, and interactions with CARFCU.
Message and data rates may apply.
Recipients may:
Where applicable, CARFCU maintains records of SMS consent and honors requests to discontinue SMS communications.
Text messaging may not be an appropriate channel for transmitting sensitive financial or authentication information.
Members should not send Social Security numbers, account passwords, PINs, security codes, or other sensitive authentication information through SMS unless specifically using a CARFCU-authorized secure process.
CARFCU representatives will not request passwords or PINs through unsolicited text messages.
When individuals interact with CARFCU’s website or electronic services, CARFCU may collect information provided directly by the individual as well as certain information relating to use of those services.
Information collected through online forms is used for the purposes disclosed when the information is collected and for other purposes permitted by applicable law.
Where CARFCU uses an online form to obtain consent for SMS communications, CARFCU should provide access to this Privacy Policy as part of that consent process.
CARFCU may use service providers to support financial services, technology, communications, security, fraud prevention, transaction processing, regulatory compliance, and other operational activities.
CARFCU evaluates and manages service-provider relationships in accordance with applicable legal, regulatory, security, and risk-management requirements.
NCUA guidance states that credit unions should exercise appropriate due diligence when selecting service providers and require service providers by contract to implement appropriate safeguards, with monitoring where indicated by the credit union’s risk assessment.
CARFCU maintains safeguards designed to:
These principles align with the security-program requirements applicable to federally insured credit unions under 12 CFR Part 748.
CARFCU encourages members and consumers to help protect their information.
CARFCU provides applicable federal privacy notices regarding its collection and sharing of consumers’ nonpublic personal information.
Those notices should be read together with this website Privacy Policy. If a federal privacy notice applies to an individual’s financial relationship with CARFCU, that notice describes CARFCU’s applicable information-sharing practices and any privacy choices available under federal law.
Regulation P requires covered financial institutions to provide a clear and conspicuous initial notice that accurately reflects their privacy policies and practices and contains separate rules governing annual and revised notices.
CARFCU may update this Privacy Policy to reflect changes in its services, technology, privacy and security practices, or applicable legal and regulatory requirements.
The “Last Updated” date at the top of this page identifies the date of the most recent revision.
When applicable law requires a separate privacy notice or other notification concerning a change in CARFCU’s practices, CARFCU will provide the required notice.
Questions concerning this Privacy Policy or CARFCU’s privacy practices may be directed to:
Capital Area REALTORS® Federal Credit Union
15201 Diamondback Drive, Suite 150
Rockville, MD 20850
Phone: 240-314-0734
Email: info@carfcu.org