Citi’s Privacy and Confidentiality Policy articulates principles relating to the collection and processing of personal information, requiring, in part, that personal information only be collected and used as necessary for the performance of the services offered and for the purposes disclosed in a privacy notice.