HTTP/2 200 
access-control-allow-credentials: true
access-control-allow-headers: X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Authorization, Content-Length, Content-MD5, Content-Type, Cookie, Date, Origin, Set-Cookie, X-Api-Version
access-control-allow-methods: GET,OPTIONS,PATCH,DELETE,POST,PUT
access-control-allow-origin: https://beemcreditunion.ca/
age: 305
cache-control: public, max-age=0, must-revalidate
content-encoding: gzip
content-security-policy: default-src 'self';  script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/ https://calculators.gbst.com/clients/standard_suite/lib/iframeResizer-v4.min.js https://vercel.live https://web.cmp.usercentrics.eu/ https://cdn.jsdelivr.net https://connect.facebook.net https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.youtube.com *.crazyegg.com;  style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.jsdelivr.net *.crazyegg.com fonts.googleapis.com;  img-src * data: https://www.facebook.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com *.crazyegg.com user-images.crazyeggcdn.com;  media-src 'self' https://cdn.sanity.io;  connect-src 'self' https://www.facebook.com https://graph.facebook.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://v1.api.service.cmp.usercentrics.eu https://ppv6mx5n.api.sanity.io https://www.google-analytics.com https://noembed.com/embed https://consent-api.service.consent.usercentrics.eu https://analytics.google.com https://stats.g.doubleclick.net https://assets-can.mkt.dynamics.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://public-can.mkt.dynamics.com *.crazyegg.com;  font-src 'self' data: https://fonts.gstatic.com;  frame-src 'self' https://*.beemcreditunion.ca/ https://www.google.com/recaptcha https://www.gstatic.com/recaptcha https://forms.office.com https://calculators.gbst.com https://beemcu.coconutcalendar.com/ https://vercel.live https://web.cmp.usercentrics.eu/ https://www.youtube-nocookie.com/ https://www.youtube.com/ https://www.facebook.com https://www.googletagmanager.com https://td.doubleclick.net *.crazyegg.com;  worker-src 'self' blob:;  child-src 'self' blob:;
content-type: text/html; charset=utf-8
date: Tue, 26 Aug 2025 18:54:40 GMT
etag: W/"15hrln1l2bo697b"
permissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch
x-content-type-options: nosniff
x-dns-prefetch-control: on
x-matched-path: /personal
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-vercel-cache: HIT
x-vercel-id: cle1::pdx1::6wdf4-1756234786085-512237f64940
x-xss-protection: 1; mode=block
set-cookie: visid_incap_3232526=WVxt6iLESYmEOOhisMQJgyEErmgAAAAAQUIPAAAAAACi4/5EUtrhVDizbT2OlGgP; expires=Wed, 26 Aug 2026 08:12:58 GMT; HttpOnly; path=/; Domain=.beemcreditunion.ca; Secure; SameSite=None
set-cookie: nlbi_3232526=LP7mUX1qgjbpY58Dcy2qsgAAAAAowwiMglfF/Np3/k7JsDfe; HttpOnly; path=/; Domain=.beemcreditunion.ca; Secure; SameSite=None
set-cookie: incap_ses_336_3232526=538yS7BqKSyrEuBno7apBCEErmgAAAAApcemdSA6K3h05v408kk8ow==; path=/; Domain=.beemcreditunion.ca; Secure; SameSite=None
x-cdn: Imperva
x-iinfo: 15-47718181-47718192 PNNN RT(1756234785895 159) q(0 0 0 5) r(1 1) U12