COLORADO, CONNECTICUT, UTAH AND VIRGINIA RESIDENTS:
PRIVACY POLICY NOTICE
This Privacy Policy Notice is intended for Colorado, Connecticut, Utah and Virginia residents pursuant to the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act and the Virginia Consumer Data Protection Act, respectively. This policy supplements the information contained in the above Privacy Policy. Any terms defined in these laws and related regulations have the same meaning as used in this Privacy Policy Notice.
1. Personal Data We Collect About You
We may process personal data that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be directly or indirectly linked, with a consumer, device, or household (“personal data”).
Personal data does not include:
- Publicly available information from government records.
- Deidentified or aggregated consumer information.
- Information excluded from the scope of the above privacy laws, such as (but not limited to) information governed by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the Fair Credit Reporting Act (“FCRA”), and the Gramm-Leach-Bliley Act (“GLBA”).
We regularly process (and have processed in the past 12 months) several types of personal data about individuals regarding accounts we service or purchase, including:
| Category | Examples |
|---|---|
| Identifiers | Name, signature, postal address, Internet Protocol address, email address, telephone number, account number, Social Security number, or other similar identifiers |
| Financial information | Bank account number, credit card number, debit card number, or other financial information; medical insurance information |
| Protected classifications | Age, gender, medical condition, disability, veteran or military status |
| Commercial information | Records of products or services purchased, obtained |
| Internet or other similar network activity | Information on a consumer’s interaction with our website(s) or application(s) |
| Audio, electronic, visual or similar data | Call recordings |
| Professional, or employment-related information | Current or past job history |
| Non-public education information | Student financial information |
| Inferences drawn from personal information | To create a profile reflecting the consumer’s preferences, characteristics, aptitudes, or behavior |
| Personal information | A consumer’s social security number, driver’s license, state identification card, or passport number; a consumer’s account log-in in combination with any required security or access code, password, or credentials allowing access to the account |
2. Why We Process Your Personal Data
We regularly process personal data for one or more of the following business purposes:
- Fulfill the reason you provided the information. For example, if you share your personal data to make a payment, we will use that information to process your payment.
- Perform services on behalf of a business or service provider, including maintaining or servicing accounts, providing customer service, processing transactions, verifying customer information, processing payments, providing analytic services, or providing similar services on behalf of the business or service provider.
- Provide you with information or services that you request from us.
- Auditing related to consumer interactions.
- Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
- Debugging to identify and repair errors that impair existing intended functionality.
- Short-term, transient use, where the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction.
- Undertaking activities to verify or maintain the quality of a service or device that is owned, made by or for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, made by or for, or controlled by us.
- Respond to law enforcement requests and as required by applicable law or court order.
- As appropriate to protect the rights, property, or safety of us, our clients, or others.
- As described to you when collecting your personal information or as otherwise permitted by law.
We will not collect additional categories of personal data or use the personal data we collected for materially different purposes without providing you notice.
3. Third Parties To Whom We Disclose Personal Data
We regularly disclose (and have disclosed in the past 12 months) the above listed categories of personal data for business purposes to one or more of the following categories of third parties: our creditor clients, our service providers (payment processing, mailing, collection, call analytics and other vendors), credit reporting agencies, regulatory and law enforcement agencies.
4. We Do Not Sell Personal Data Or Engage In Targeted Advertising Or Profiling
We do not sell your personal data, process your personal data for targeted advertising, or process your personal data for automated decision-making including profiling in furtherance of decisions that produce legal or similarly significant effect on you.
5. How To Request To Exercise Your Rights
Upon our verification of identity through commercially reasonable means, Colorado, Connecticut, Utah and Virginia residents may request to exercise one or more of the following rights:
- To confirm whether or not we are processing your personal data and to access such personal data;
- To delete personal data provided by or obtained about you;
- To obtain a copy of your personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another company without hindrance, where the processing is carried out by automated means.
- To correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes for processing the data.
You may request to exercise these rights by one of the following methods:
D&A Services:
- Calling us at 1-877-314-4308
- Emailing us at contact@dnasllc.com
- Mailing us at 1400 E. Touhy Ave., Suite G2, Des Plaines, IL 60018
Colorado, Connecticut, and Virginia residents may appeal our decision concerning your request by using the information listed above, e.g., contacting us using any of the above methods, within 45 days of your receipt of our decision on your request, to advise of your appeal.
Last modified: 06-10-2024