1. Introduction
Welcome to Dropservice LLC. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data in compliance with applicable laws and regulations, including the Federal Trade Commission (FTC) guidelines, the Fair Credit Reporting Act (FCRA), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
2. Information We Collect
We collect the following types of personal information:
Contact Information
- Name (first and last)
- Email address
- Phone number
- Country of residence
Financial Information
- Soft credit data (collected in compliance with FCRA regulations)
- Estimated income range
- Financial qualification status
Usage Data
- Information about how you use our services
- Interaction data and preferences
- Device information and browser type
- IP address and geolocation data
Marketing and Analytics Data
- UTM parameters and campaign tracking data
- Referral source information
- Facebook Pixel data (fbp, fbc identifiers)
3. How We Collect Information
We collect information through:
- Direct Interactions: When you provide information by filling out forms, registering for webinars, or communicating with us.
- Automated Technologies: Through cookies, pixels, and similar tracking technologies as you interact with our website.
- Third Parties: From partners and service providers who assist us in delivering our services.
- Credit Pre-Screening: We may collect financial data through a soft credit pull authorized under the FCRA for the purpose of determining financial qualifications.
- IP Geolocation: We use IP-based geolocation services to determine your country of residence.
4. Use and Processing of Collected Information
We process your personal information for the following purposes:
- Service Delivery: To provide and manage our services effectively.
- Personalization: To tailor our services and communications to your preferences.
- Communication: To send updates, webinar reminders, newsletters, and marketing materials, where permitted.
- Financial Prequalification: To determine eligibility for our programs through soft credit checks.
- Analytics: To understand how our services are used and improve user experience.
- Compliance: To adhere to legal obligations, including FCRA compliance for credit pre-screening.
Note that under some legislations, we may be allowed to process information until you object to such processing (by opting out), without having to rely on consent or any other of the following legal bases below. In any case, we will be happy to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Information is a statutory or contractual requirement, or a requirement necessary to enter into a contract. You further understand that this is a soft pull and will not harm your credit in any way whatsoever.
5. Legal Basis for Processing (GDPR Compliance)
Our legal grounds for processing personal data include:
- Consent: When you have given explicit consent for specific purposes.
- Contractual Necessity: To fulfill our contractual obligations to you.
- Legal Obligation: To comply with legal and regulatory requirements, including FCRA mandates.
- Legitimate Interests: For purposes such as improving our services, marketing, and fraud prevention, provided these interests are not overridden by your rights.
6. Prequalification and Financial Data Use (FCRA Compliance)
We may conduct soft credit checks as part of our financial prequalification process. Important information about this process:
- Soft credit checks are conducted solely for legitimate business purposes in compliance with FCRA regulations.
- These soft pulls will not affect your credit score in any way.
- Financial data collected includes estimated credit scores and income ranges for qualification purposes only.
- We work with authorized credit bureaus and partners who adhere to FCRA guidelines.
- This data is used exclusively to determine eligibility for our programs and is not sold to third parties.
7. Consumer Rights
Under GDPR (European Union Residents)
- Right to Access: You have the right to request access to your personal data.
- Right to Rectification: You can request correction of inaccurate data.
- Right to Erasure: You have the right to request deletion of your data.
- Right to Restriction: You can request the restriction of processing under certain conditions.
- Right to Data Portability: You have the right to receive your data in a structured, commonly used format.
- Right to Object: You can object to processing based on legitimate interests.
Under CCPA (California Residents)
- Right to Know: You can request disclosure of the categories and specific pieces of personal information we have collected.
- Right to Delete: You can request deletion of your personal information.
- Right to Opt-Out: You can opt-out of the sale of your personal information.
- Right to Non-Discrimination: You have the right not to be discriminated against for exercising your CCPA rights.
We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
Under FCRA
- Right to Access Credit Data: You can request information about your credit data collected during the pre-screening process.
- Right to Dispute Inaccuracies: You have the right to dispute any inaccuracies in your credit information and request corrections.
- Purpose Disclosure: We conduct soft credit pulls strictly for the purpose of financial qualification, as permitted by FCRA regulations.
To exercise any of these rights, please contact us using the information provided in Section 13.
8. Data Sharing and Disclosure
We may share your personal information with:
- Service Providers: Third parties who assist us in providing our services (e.g., email providers, payment processors, analytics services).
- Credit Bureaus: Authorized entities for soft credit pulls in compliance with FCRA regulations.
- Legal Obligations: Authorities when required by law or to protect our rights.
- Business Transfers: In connection with mergers, acquisitions, or asset sales.
Soft credit pull data is shared only with authorized entities in compliance with FCRA regulations. We do not sell your personal information to third parties.
9. Data Retention
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.
- Contact and communication data: Retained for the duration of our business relationship plus 3 years.
- Financial/credit data: Retained securely for the duration required by FCRA regulations.
- Marketing data: Retained until you opt-out or request deletion.
- Analytics data: Retained for up to 26 months.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, in compliance with FTC, GDPR, CCPA, and FCRA standards. These measures include:
- Encryption of data in transit and at rest
- Secure server infrastructure
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
11. International Data Transfers (GDPR Compliance)
If we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by the European Commission
- Your explicit consent for specific transfers
12. Children's Privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information promptly.
13. Contact Us
If you have any questions or concerns about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us at:
For FCRA-related inquiries or to dispute inaccuracies in credit information, please include "FCRA Request" in your subject line.
For GDPR or CCPA data subject requests, please include "Data Subject Request" in your subject line.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:
- Posting the new Privacy Policy on our website
- Updating the "Effective Date" at the top of this policy
- Sending you an email notification for significant changes (where applicable)
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.