Terms of Service – Data Minimization, Deletion, and Retention Policy
Effective Date: 12/13/2024
These Terms of Service govern the data minimization, retention, and deletion practices of [Cash Flow and Capital, LLC.] (“we,” “us,” or “our”). By using our services (“Services”), you agree to the practices outlined in this document regarding how we collect, retain, and delete your data.
1. Purpose
We are committed to protecting your privacy and ensuring that your data is handled in compliance with applicable data privacy laws. This Data Minimization, Deletion, and Retention Policy outlines how we collect, store, retain, and delete personal and sensitive data, in order to meet our obligations under privacy regulations such as the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable laws.
2. Data Minimization
We will collect and retain only the minimum amount of personal and sensitive data necessary to provide our services to you. Specifically, we commit to:
Limiting Collection: We only collect data relevant to the purposes for which it is being used. Data Accuracy: We will ensure that any personal data we collect is accurate and up to date.
3. Data Retention
We will retain your data for no longer than is necessary for the fulfillment of our business purposes, in accordance with the following guidelines:
Legal and Contractual Requirements: We may retain your data if required for compliance with legal or regulatory obligations, or as necessary for the performance of our contractual obligations with you.
Business Necessity: We will retain your data as long as it is required to provide the Services you have requested, such as maintaining your account, processing transactions, or fulfilling other business purposes.
Retention Periods: Specific retention periods for different types of data will be determined based on legal, contractual, and business requirements. If you wish to learn more about the retention periods specific to your data, please contact us using the information provided at the end of this policy.
4. Data Deletion
Once your data is no longer needed for the purposes outlined above or if you request deletion, we will securely delete your data. Our data deletion practices include:
Automated Deletion: Where applicable, your data will be automatically deleted once the retention period expires.
Manual Deletion: If automated deletion is not possible, we will manually review and securely delete your data when it is no longer needed.
User Requests for Deletion: You have the right to request deletion of your personal data. If you would like us to delete your data, please contact us using the methods outlined below. We will honor your request unless we are required to retain certain data for legal, regulatory, or other business purposes.
For additional information on how we handle deletion requests, please refer to our Privacy Policy.
5. Exceptions to Data Deletion
In some cases, we may be required to retain data beyond the standard retention period:
Legal Holds: If data is required to be retained for legal reasons (e.g., ongoing litigation, regulatory investigation), we will retain the necessary data until the legal matter is resolved.
Regulatory Compliance: In some cases, regulatory bodies may require us to retain certain data for a longer period.
Backup and Disaster Recovery: Your data may be temporarily retained in backup systems for disaster recovery purposes. These backups are deleted after a reasonable period but may not always align exactly with standard retention schedules.
6. Access and Security
We take the security of your data seriously. To protect your data from unauthorized access, alteration, or deletion, we implement strong security measures including:
Access Controls: We limit access to your data to only those employees and contractors who need it to provide services to you.
Encryption: Your data is encrypted both in transit and at rest to prevent unauthorized access.
Audit Trails: We maintain records of who accesses your data, when, and why, to ensure compliance with this policy.
7. Compliance with Privacy Laws
We comply with applicable data privacy laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), and provide mechanisms to exercise your data protection rights, including:
Right to Access: You can request to access the personal data we hold about you.
Right to Rectification: You can request corrections to any inaccurate or incomplete data we hold about you.
Right to Erasure: You may request that we delete your data, subject to certain exceptions as outlined in this policy.
Right to Restrict Processing: You can request that we limit how we process your data.
Right to Data Portability: You can request that we provide your personal data in a structured, commonly used, and machine-readable format.
8. Your Rights and Choices
As a user, you have the following rights regarding your data:
Access to Data: You may request a copy of the personal data we hold about you, subject to applicable laws.
Correction of Data: If you believe the personal data we hold about you is incorrect, you can request that we correct it.
Deletion of Data: You have the right to request the deletion of your personal data when it is no longer needed for the purposes outlined above.
Data Portability: You may request your personal data in a structured, machine-readable format, to transfer to another service provider if applicable.
To exercise any of these rights, please contact us at the contact information provided at the end of this policy.
9. Policy Changes
We may update this Data Minimization, Deletion, and Retention Policy from time to time to reflect changes in our practices or legal obligations. If any significant changes are made, we will notify you by email or through our Services. Please review this policy periodically to stay informed about how we are protecting your data.
10. Contact Information
If you have any questions or concerns about this policy, or if you would like to exercise any of your rights under applicable data privacy laws, please contact us at:
Email: [email protected]
Phone: (855) 553-3732
Mailing Address: 9393 W 110th St, Suite 100, Overland Park, KS, 66210
By using our Services, you acknowledge that you have read and understood this Data Minimization, Deletion, and Retention Policy and agree to its terms. If you do not agree with this policy, please refrain from using our Services.