Privacy Policy

This Privacy Policy describes how Christopher Holland, a Colorado sole proprietor doing business as Credit Comeback Club ("Company," "we," "us," or "our"), collects, uses, stores, shares, and protects personal information obtained through creditcomebackclub.com, our DisputeFox/Scorexer intake and scheduling tools, our secure client portal, and other interactions with our services.

1. Information We Collect

1.1 Information You Provide Directly

• Contact and application information, such as your name, email address, phone number, postal address, state, company or business name, referral source, and answers or notes you choose to submit
• During secure onboarding or service delivery, identity and contact information such as your address, date of birth, and Social Security Number when necessary for authorized credit-report and dispute services
• Credit-report data from Experian, TransUnion, and Equifax, documents you upload, and information about accounts you ask us to review
• Billing records and payment-related information handled by the applicable payment processor; we do not intentionally store full payment-card numbers on the public website
• Communications you send to us via email, phone, or text

Do not submit a Social Security Number, date of birth, full account number, credit report, or identity document through a public consultation, guide, partner, or referral form. Sensitive service documents should be provided only through the secure onboarding or client-portal process we direct you to use.

1.2 Information Collected Automatically

• Website usage data including pages visited, time spent, and referring URLs
• IP address and browser type
• Cookies and similar tracking technologies used to improve site functionality

1.3 Information from Third-Party Platforms

• Netlify: Hosts the public website and may process ordinary request, device, security, and diagnostic data when pages are loaded.
• DisputeFox: Directly receives and stores information submitted through our public consultation, guide, partner-application, referral, and embedded contact forms. It supports CRM records, source and note fields, workflow assignment, onboarding, case administration, and related communications.
• Scorexer: Provides consultation scheduling after a lead is submitted and provides the separate secure member portal used for onboarding and client access.
• Supabase: Supports authenticated internal or administrative systems and storage of existing operational and client records. New public intake forms are not submitted to Supabase.
• Resend: May deliver transactional or administrative email from internal systems where that service remains enabled. New public intake forms are submitted directly to DisputeFox rather than routed through Resend.
• Lob: Processes and mails physical dispute correspondence by USPS First-Class Mail.
• Anthropic: Supports authenticated internal credit-report fact extraction, case classification, and staff-directed drafting workflows. The public marketing website does not submit its intake forms or a public chat to Anthropic.
• Google Gemini: Supports the authenticated client concierge using only a limited, privacy-filtered case summary rather than raw credit-report documents.

Our public forms transmit submitted information directly to DisputeFox/Scorexer. Netlify serves the website pages but is not the CRM for those new submissions. Records created through earlier systems may remain in those systems for service administration, security, dispute resolution, or legal retention; this technology transition does not automatically delete existing records.

2. How We Use Your Information

• To provide, manage, and improve our credit repair services
• To communicate with you about your case, progress, and account
• To draft and send dispute correspondence to credit bureaus, collectors, creditors, or data furnishers as supported by your file
• To process payments and maintain billing records
• To schedule and conduct consultations
• To review and administer partner applications, referral relationships, and partner portal access
• To comply with applicable legal obligations under FCRA, CROA, and other applicable law
• To respond to inquiries and provide customer support

We do not sell your personal information to third parties. We do not use your information for advertising purposes unrelated to our own services.

3. How We Share Your Information

3.1 Service Providers

• The hosting, CRM, scheduling, portal, email, mailing, data, and technology providers described in Section 1.3, only as reasonably necessary for their stated functions and subject to their own terms and privacy practices
• Any payment processor activated for client payments, subject to that processor's privacy policy
• Postal and mailing services used to send dispute correspondence

3.2 Credit Reporting and Account-Reporting Parties

In the course of providing credit repair services, we may send dispute correspondence and supporting documentation to credit bureaus, collectors, creditors, or data furnishers as supported by your file. This is performed with your authorization.

3.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights or your safety.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction with advance notice provided.

4. Data Security

• Secure transmission of sensitive data (SSL/TLS encryption on our website)
• Access controls limiting who within our organization can view sensitive client data
• Use of established, reputable third-party platforms with their own security protocols

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Retention of Data

We retain personal information for as long as reasonably necessary to provide services, administer accounts, maintain security, resolve disputes, enforce agreements, and satisfy legal or regulatory obligations. Retention periods vary by record type and applicable law. A platform transition does not automatically delete a record that must or may lawfully be retained. You may request deletion subject to applicable retention duties and other lawful exceptions by contacting us at creditcomebackclub@gmail.com.

6. Your Rights and Choices

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal retention requirements
• Opt-Out: Opt out of any marketing communications at any time

7. Colorado Privacy Rights

To the extent the Colorado Privacy Act (CPA), C.R.S. § 6-1-1301 et seq., applies to our processing, Colorado residents may have rights to access, correct, delete, or obtain a portable copy of certain personal data and to opt out of certain processing. These rights and exceptions depend on the law's applicability and the type of data involved. To submit a privacy request, contact us at creditcomebackclub@gmail.com. We will respond within the period required by applicable law.

8. Sensitive Personal Information

In the course of authorized onboarding and credit repair services, we may collect sensitive personal information including Social Security Numbers and detailed financial-account information. We use it only as reasonably necessary to provide requested services, maintain security, and satisfy applicable legal obligations. We apply administrative, technical, and organizational safeguards appropriate to the nature of the information, but no system can guarantee absolute security.

9. Cookies and Tracking

Our website uses cookies and similar technologies to improve user experience and analyze site traffic. You may disable cookies through your browser settings; however, doing so may affect certain website functionality. We do not currently use third-party advertising cookies or cross-site tracking technologies.

10. Third-Party Links

Our website contains links to third-party websites including our client portal. This Privacy Policy does not apply to those third-party sites. We encourage you to review their privacy policies independently.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on our website with a revised effective date and will notify active clients of material changes via email.