Privacy & Data Handling Notice

Sensitive Financial and Credit Information

Purpose of This Notice

This Privacy & Data Handling Notice supplements our Privacy Policy and describes specifically how LuxReset Credit Solutions LLC ("LuxReset," "we," "us," "our") collects, uses, discloses, and safeguards the sensitive identity, financial, and credit-related information involved in providing credit repair services (the "Services"). We provide this notice in the format used by financial institutions under the Gramm-Leach-Bliley Act's privacy framework, given the sensitivity of the information you share with us.

1. Categories of Nonpublic Personal Information We Collect

• Identifying information you provide at enrollment: full name, address, date of birth, and the last four digits of your Social Security number.
• Credit information: information contained in your credit reports and credit monitoring account, including account histories, balances, payment histories, public records, and inquiries, accessed through your SmartCredit or IdentityIQ credit monitoring account with your authorization.
• Transaction and payment information processed by Stripe and Apple Pay in connection with your account.
• Communications and records generated during the course of the Services, including dispute correspondence and outcomes.

2. Your Authorization for Credit Report Access

By enrolling in the Services, you authorize LuxReset and our designated dispute-management platform to access your credit reports and credit monitoring data solely to identify and dispute items that appear inaccurate, incomplete, unverifiable, or outdated, and to otherwise perform the Services you have requested. This authorization is limited to the purposes described in your Client Service Agreement. You may revoke this authorization at any time by contacting us, subject to our need to complete work already in progress and to comply with applicable recordkeeping requirements.

3. Categories of Information We Disclose, and to Whom

We disclose nonpublic personal information only as necessary to provide the Services or as required by law:

• To DisputeFox and/or DisputeForMe, our dispute-management platform(s), to prepare, track, and submit disputes on your behalf;
• To SmartCredit and/or IdentityIQ, to access your credit reports and monitoring data with your authorization;
• To Stripe and/or Apple Pay, to process payments;
• To consumer reporting agencies and furnishers, as necessary to submit and pursue disputes;
• To our regulators, or as required by subpoena, court order, or law; and
• To professional advisors (such as our accountant or attorney) who are bound by confidentiality obligations.

We do not sell nonpublic personal information, and we do not share it with unaffiliated third parties for their own independent marketing purposes. If LuxReset receives a referral fee, commission, or other compensation from SmartCredit or IdentityIQ for enrolling clients in their monitoring products, that relationship will be disclosed to you before you enroll in the applicable product.

4. Data Security

We limit access to client nonpublic personal information to personnel and service providers who need it to perform their functions, require our service providers to maintain appropriate safeguards, use encryption for data in transit where applicable, and maintain access controls on our client portal. Our team is bound by confidentiality obligations regarding client information.

5. Data Retention and Deletion

We retain your signed disclosure statement and Client Service Agreement for at least two years after the date you sign, as required by CROA. We retain other personal information for as long as needed to provide the Services and to satisfy legal, accounting, and dispute-resolution requirements, after which we securely delete or de-identify it.

6. Your Choices

You may ask us at any time to: provide a copy of the nonpublic personal information we hold about you; correct inaccurate information; delete information we are not otherwise required to retain; or opt out of any use of your information for marketing purposes. Send these requests to info@luxresetcredit.com; we will respond within the time required by applicable law.

7. If Our Data Practices Change

We will notify you before using previously collected nonpublic personal information in a materially different way than described when it was collected, and, where required by law, we will seek your consent.

8. Notice of Security Incidents

If a breach involving your personal information occurs, we will notify affected clients and any required regulators in accordance with applicable state breach-notification laws.

9. Contact Us

LuxReset Credit Solutions LLC
Philadelphia, PA 19103
Email: info@luxresetcredit.com