ONLINE BANKING AGREEMENT

Please read and accept the Online Banking Agreement below to continue with online banking:

This Agreement states the terms and conditions that apply when you use the Hebron Savings Bank Online Banking Service. These terms and conditions are in addition to those that apply to any accounts you have with Hebron Savings Bank (the "Bank") or any other services you obtain from the Bank. You must also follow all of our instructions and procedures applicable to the services covered by this Agreement. This agreement will be governed by the laws of the State of Maryland and in accordance with appropriate federal laws and regulations.

"You" and "your" mean each person who allows access via the internet to their customer account with the Bank or who uses or is authorized to use an Online Banking identification number (Logon ID) or password (Logon PIN) or other means of access we establish or approve. The term "Online Banking" means our service that allows you to make payments, transfer funds, access accounts, obtain information and perform other transactions over the Internet by use of a personal computer and modem and/or other means we authorize or allow. This service is available only to established customers of the Bank.

IDENTIFICATION NUMBER AND PASSWORD

To access our Online Banking Service, you must use the identification number and/or other means of access we establish or provide for your Online Banking Customer Account, together with a password. Anyone to whom you give your Online Banking identification number and password or other means of access will have full access to your accounts even if you attempt to limit that person's authority.

The first time you access any of your accounts available to you under this service, you confirm your agreement to be bound by all of the terms and conditions of this Agreement and acknowledge your receipt and understanding of this disclosure. You may choose to accept or decline new services or changes to existing services by continuing or discontinuing the services to which such change may relate.

You will be prompted to change your password after the first use of your bank assigned password. We recommend that you change your password on a regular basis. We are entitled to act on any instruction received under your password. You are responsible for keeping your password and account data confidential.

WE STRONGLY SUGGEST THAT YOU DO NOT DELEGATE AUTHORITY OVER YOUR ACCOUNT TO ANYONE THAT IS NOT AN AUTHORIZED SIGNER ON YOUR ACCOUNT AS LISTED ON THE ACCOUNT SIGNATURE CARD.

You must be a principal owner of this account. Notwithstanding any instructions contained on the signature card for your account, you understand and agree that access to your account via the Internet is granted by user codes and passwords that can be entered by a single individual. You should not designate any account that requires more than one signature for withdrawals. However, if you do so designate such an account, you agree that any transaction made via the Internet by use of an identification number and password is authorized.

ONLINE BANKING TRANSACTIONS

You or someone you have authorized by giving them your Online Banking identification number and password or other means of access (even if that person exceeds their authority you purport to grant them), can instruct the Bank to perform the following transactions:

* Make transfers between your qualifying accounts to the extent authorized;

* Obtain information that we make available about your qualifying accounts;

* Make third party payments under the Bill Pay service; and

* Obtain other services or perform other transactions that we authorize or make available at a future date.

BANKING TRANSACTIONS

You must have sufficient collected funds in any account from which you instruct the Bank to make a payment or transfer. If any of your qualifying accounts are money market accounts, certain types of withdrawals from those accounts, including payments and transfers, are limited to a total of no more than six in any monthly statement period. The kinds of withdrawals covered by this limitation are those made by means of preauthorized or automatic transfers and payments or telephone transfers. These rules are further described in the "Deposit Account Disclosure" that you received when you opened your deposit account.

OUR LIABILITY

Except as specifically provided in this Online Banking Agreement or where the law requires a different standard, you agree that neither we nor the service providers shall be responsible for any loss, property damage or bodily injury, whether caused by the equipment, software, the Bank, or by Internet browser providers such as Netscape (Netscape Navigator browser) and Microsoft (Microsoft Explorer browser), OR by Internet access providers OR by online service providers OR by an agent or subcontractor of any of the foregoing, nor shall we or the service providers be responsible for any direct, indirect, special or consequential, economic or other damages arising in any way out of the installation, use or maintenance of the equipment, software, the Online Banking Services, or Internet browser or access software.

If we do not complete a payment or transfer on time or in the correct amount according to our Agreement with you, we will only be liable to you to complete such transfer. Under no circumstances will the Bank be liable for any damages that you may suffer, including consequential damages, due to our failure to complete a transfer. Specifically, the Bank will NOT be liable to any extent whatsoever if:

* Through no fault of the Bank, you do not have sufficient collected funds in the account from which a payment or transfer is to be made, or if the account has been closed or is not in good standing, or if we reverse a payment or transfer because of insufficient funds.

* Any payment or transfer would go over the credit limit of any account.

* Your equipment or ours was not working properly and the breakdown should have been apparent to you when you attempted to conduct the transaction.

* You have not given the Bank complete, correct or current account numbers or other identifying information so that we can properly credit your account or otherwise complete the transaction.

* You do not properly follow our instructions or if you provide the Bank with wrong or inaccurate information or fail to correct or tell us about any inaccuracy of which you become or should have become aware.

* You do not instruct the Bank soon enough for your payment or transfer to be received and credited by the time it is due.

* The money in the account from which a payment or transfer is to be made is subject to legal process or other claim restricts the transaction.

* Circumstances or persons beyond our control prevent, delay, intercept or alter the transaction, despite reasonable precautions that we have taken.

BUSINESS DAYS

Our Online Banking service is generally available 24 hours a day, 7 days a week. Transactions are subsequently processed only on business days, which are everyday except Saturday, Sunday and federal banking holidays.

STATEMENTS

Your Online Banking payments and transfers will be indicated on the monthly statement we provide or make accessible to you. You agree to notify us promptly if you change your address or if you believe there are any errors or unauthorized transactions on any statement, or statement information, as agreed by you and documented in the Bank's "Deposit Account Disclosures and Electronic Funds Transfers Agreement".

YOUR LIABILITY

Each of you agrees to the terms of this service. You are liable for all transactions that you or any of you make or authorize, even if the person you authorize exceeds their authority. You agree not to disclose or share your password and identification number with others.

UNAUTHORIZED TRANSACTIONS OR LOSS OR THEFT OF YOUR ONLINE BANKING IDENTIFICATION NUMBER OR PASSWORD

If you believe your Online Banking identification number or password or other means of access have been lost or stolen or that someone has used them without your authorization:

* Call our Bookkeeping Department immediately at: Hebron Savings Bank (410) 749-1185
* Or, write the Bank at: Hebron Savings Bank, P. O. Box 59, Hebron, Maryland 21830 Att: Bookkeeping Department
* Or, email the Bank at: craynor@hebronsavingsbank.com

As soon as you can, if you think that your statement or receipt is wrong or if you need more information about a transfer listed on the statement or receipt. The Bank must hear from you no later than 60 days after the Bank sent the FIRST statement on which the problem or error appeared.

* Tell the Bank your name and account number (if any).

* Describe the error, the transfer or payment you are unsure about, and explain as clearly as you can why you believe it is an error or why you need more information.

* Tell the Bank the dollar amount of the suspected error.

If you tell the Bank orally, the Bank will require that you send the Bank your complaint or question in writing within 10 business days.

The Bank will tell you the results of its investigation within 10 business days after it hears from you and will correct any error promptly. If the Bank needs more time, however, it may take up to 45 days to investigate your complaint or question. If the Bank decides to do this, it will recredit your account within 10 business days for the amount you think is in error, so that you will have use of the money during the time that it takes the Bank to complete its investigation. If the Bank asks you to put your complaint or question in writing and does not receive it within 10 business days, the Bank may not recredit your account.

If the Bank decides that there was no error, it will send you a written explanation within 3 business days after it finishes its investigation. You may ask for copies of the documents that the Bank used in its investigation.

Customers who are consumers using an account for personal, family, or household purposes have some protection from loss caused by unauthorized access. An "unauthorized electronic funds transfer" means an electronic fund transfer from a consumer's account initiated by a person other than the consumer without actual authority to initiate the transfer and from which the consumer receives no benefit. The term does not include an electronic fund transfer initiated by a person who was furnished with the access device to the consumer's account by the consumer, unless the consumer has notified the financial institution that transfers by that person are no longer authorized or the transfer was initiated with fraudulent intent by the consumer or any person acting in concert with the consumer. If your online password has been compromised and you tell us within 2 business days after you learn of the loss or theft, you can lose no more than $50.00 if someone used your online password without your permission to access a Bank deposit account. If you do NOT tell us within 2 business days after you learn of the loss or theft and we could have stopped someone from taking money without your permission had you told us, you could lose as much as $500.00.

Also, if your statement shows withdrawals, transfers or purchases that you did not make or authorize, please notify us at once. If you do not notify us within 60 days after the paper or online statement was sent to you, and we could have stopped someone from taking money if you had told us in time, you may not get back any money lost after the 60 days. If extenuating circumstances, such as a long trip or hospital stay, kept you from telling us, the time periods in this section will be extended.

MISCELLANEOUS PROVISIONS

* The Bank reserves the right to terminate this Agreement and your access to the Internet service in whole or in part at any time.

* The Bank may assign or delegate certain of its responsibilities under this Agreement to independent contractors or other third parties.

* You agree to take precautions to protect your access code and password. In addition, you should take precautions to protect your personal identification, such as your driver’s license numbers and social security numbers, to help prevent unauthorized access to your account.