Privacy Policy Overview

This Privacy Policy discloses the privacy practices of Central Portfolio Control (“CPC”, “us,” or “we”). CPC is committed to protecting and respecting your privacy. We maintain a compliance management system that directs and monitors policies and procedures and employees’ debt collection activities to ensure conformance with all applicable rules and regulations. In addition, CPC has developed policies and procedures to assist its employees in performing business operations. We believe that making you aware of how we collect and use your non-public personal information (Personal Information), and to whom it is disclosed will form the basis for a relationship of trust between the public and us.

CPC’s website is located at https://cpcrecovery.com/ (its “website”) and is not intended for individuals less than the age of eighteen. CPC does not knowingly collect data relating to individuals less than the age of eighteen.

Nothing in this Privacy Notice is intended to contradict your rights under the Fair Debt Collection Practices Act. CPC will not disclose any information to third parties that is otherwise prohibited by the Fair Debt Collection Practice Act (“FDCPA”).

Data Controller

CPC is the data controller and responsible for your personal data.

Questions, comments, and complaints about CPC’s data practices can be submitted to:

10249 Yellow Circle Drive
Suite 200,
Minnetonka, MN 55343

Toll-free Telephone Number: 1-800-606-6841

E-Mail: [email protected]

Information We Collect

Nonpublic Personal Information. Nonpublic personal information is defined as any personally identifiable financial information provided by the consumer to obtain a financial product; or resulting from transactions with that product; or information a financial institution obtains about the consumer in connection with that product (e.g., credit bureau information). For example: Social Security number; driver’s license numbers (in some states); place of employment or work telephone number; non-listed home phone; where the consumer banks; details about the particular account. Other examples of nonpublic personal information include: account balances; payment histories; transaction history; or any information that discloses that this individual has a financial relationship with the institution.

Public Personal Information. Public personal information (or information which a financial institution reasonably believes is publicly available) can be disseminated without restriction under the Act and regulations; this type of information includes:

Motor vehicle ownership, drivers’ license information (in some states) and real estate ownership data, which have been, derived from public records; addresses and phone numbers from paper or electronic. Information obtained from any website which can be accessed by anyone without restriction (paying a fee for this information is not a restriction). Presumably, and the regulations do not mention it, information about a debtor that is publicly available in court records (e.g., banks successfully garnished for a debtor; employers successfully garnished for a debtor; existence of a debtor’s Chapter 7 or Chapter 13 filings) are examples of “public personal information” not subject to this regulatory regime.

However, we cannot disclose data about the debt or financial relationship to third parties unless that transaction is a matter of public record (for example, real estate mortgages).

These “public” data can be exchanged with third parties without privacy notices because the data is not “nonpublic personal information.” HOWEVER, as a “debt collector” under the Fair Debt Collection Practices Act (“FDCPA”), there are other restrictions on disclosure of any data about a debtor and his/her debt that are NOT supplanted or superseded by the privacy regulations.

We may have collected the following categories of personal information from consumers within the last 12 months. Inclusion of a category indicates that we may collect some information in that category. It does not mean that we collect all information listed in that category in all situations.

Examples of Specific Types of Personal Information Collected
A real name, alias, postal address, email address, telephone numbers, Internet Protocol address, account number, Social Security number, date of birth, or other similar identifiers.

Collected
Yes

Purpose
(a) Necessary to provide the services
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate business interests
(d)  Prevent fraud

Examples of Specific Types of Personal Information Collected
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.

Collected
Yes

Purpose
(a) Necessary to provide the Sservices
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate business interests
(d)  Prevent fraud

 

Examples of Specific Types of Personal Information Collected
Age (40 years or older), veteran or military status

Collected
Yes

Purpose
(a) Necessary to provide the services
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate business interests

 

Examples of Specific Types of Personal Information Collected
Information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.

Collected
Yes

Purpose
(a) Necessary to provide the services
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate business interests

 

Examples of Specific Types of Personal Information Collected
Current or past job history.

Collected
Yes

Purpose
(a) Necessary to provide the services
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate business interests

Examples of Specific Types of Personal Information Collected
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.

Collected
Yes

Purpose
(a) Necessary to provide the services
(b) Necessary to comply with a legal obligation
(c) Necessary for our legitimate business interests

Examples of Specific Types of Personal Information Collected
Government-issued identifying numbers, such as a driver’s license, passport or social security number, financial account details that allow access to an account, such as a credit card number and access code, Genetic data, precise geolocation, race or ethnicity, religious or philosophical beliefs, union membership, contents of mail email or text messages, biometric data related to your unique identification.

Collected
Yes

Purpose
(a) Necessary to provide the services
(b) Maintain and service your account
(c) Process payments
(d) ensure security and integrity regarding the use of such personal information
(e) verify or maintain the safety and quality of the services
(f) Necessary to comply with a legal obligation
(g) Necessary for our legitimate business interests

AUTOMATIC DATA COLLECTION TECHNOLOGIES

As you navigate through and interact with our Website, we may use automatic data collection technologies to collect usage data.

Usage data may include information such as your device’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When you access the Website by or through a mobile device, we may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.

We may also collect information that your browser sends whenever you visit our Website or when you access the website by or through a mobile device.

The information we collect automatically is only statistical data and does not include Personal Information, we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve the Website and to deliver a better and more personalized service, including by enabling us to:

  • Estimate our audience size and usage patterns.
  • Store information about your preferences, allowing us to customize our Website according to your individual interests.
  • Speed up your searches.
  • Recognize you when you return to our Website.

TRACKING TECHNOLOGIES AND COOKIES

We use cookies and similar tracking technologies to track the activity on our Website and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to provide you with a better website. A cookie in no way gives us access to your computer or any information about you, other than the information you choose to share with us. The technologies we use may include:

  • Cookies or Browser Cookies. A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Service. Unless you have adjusted your browser setting so that it will refuse cookies, our Website may use cookies.
  • Flash Cookies. Certain features of our Service may use local stored objects (or Flash Cookies) to collect and store information about Your preferences or Your activity on our Service. Flash Cookies are not managed by the same browser settings as those used for Browser Cookies. For more information on how You can delete Flash Cookies, please read “Where can I change the settings for disabling, or deleting local shared objects?” available at https://helpx.adobe.com/flash-player/kb/disable-local-shared-objects-flash.html
  • Web Beacons. Certain sections of our Services and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on your personal computer or mobile device when you go offline, while Session Cookies are deleted as soon as You close Your web browser. Learn more about cookies: What Are Cookies?.

We use both Session and Persistent Cookies for the purposes set out below.

NECESSARY / ESSENTIAL COOKIES

Type: Session Cookies

Administered by: Us

Purpose: These Cookies are essential to provide you with services available through the Website and to enable you to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that you have asked for cannot be provided, and we only use these Cookies to provide you with those services.

COOKIES POLICY / NOTICE ACCEPTANCE COOKIES

Type: Persistent Cookies

Administered by: Us

Purpose: These Cookies identify whether users have accepted the use of cookies on the Website.

FUNCTIONALITY COOKIES

Type: Persistent Cookies

Administered by: Us

Purpose: These Cookies allow us to remember choices you make when you use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide you with a more personal experience and to avoid you having to re-enter your information.

We also use a tool called “Google Analytics” to collect information about your use of the website. Google Analytics collects information such as how often users access the website, what pages they visit when they do so, etc. We use the information we get from Google Analytics only to improve our Website and services. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Google’s ability to use and share information collected by Google Analytics about your visits to this website is restricted by the Google Analytics Terms of Use and the Google Privacy Policy.

How We Use Your Information

Personal information is collected solely for the purpose of debt recovery in a lawful manner and remains part of our records until we determine the information is no longer needed, or we are required by law to delete such information. We will collect the minimum amount of data necessary to collect a debt.

We may use your personal information for one or more of the following business purposes:

  • To fulfill or meet the reason you provided the information. For example, if you share your personal information to make a payment, we will use that information to process your payment.
  • Performing services on behalf of the business or service provider, including maintaining or servicing records, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, or providing similar services on behalf of the business or service provider.
  • To provide you with information or services that you request from us.
  • To respond to law enforcement requests and as otherwise permitted by applicable law, court order, or governmental regulations.
  • To Ensure security and integrity to the extent personal information is reasonably necessary and proportionate to these purposes;
  • To verify or maintain the quality or safety of the services or account, or to prevent fraud.

Sensitive personal information is collected only as necessary to perform our services, process payments, maintain or service your account, to ensure security and integrity regarding the use of such personal information, and to verify or maintain the safety and quality of the Services. Sensitive personal information is not collected with the purpose of inferring characteristics about you.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

How We Collect Your Information

We collect most of this personal information directly from our clients for whom we provide services to, as well as from you by telephone, written correspondence through the mail, email or fax, by viewing public social media/network pages, or other information available online. However, we may also collect information:

  • From publicly accessible sources (e.g., property records or court records);
  • From your transactions with us;
  • From our service providers (e.g., correspondence vendors, location vendors, payment processing vendors, call analytics vendor, and/or electronic signature service provider);
  • Government entities.
  • Directly from a third party (e.g., third parties contacted during location activities pursuant to 15 U.S.C. 1692b, such as your friends, neighbors, relatives, and/or employer);
  • Consumer reporting agencies (CRAs)
  • From a third party with your consent (e.g., your authorized representative and/or attorney); and
  • From activity on our website.

How We Share Your Information

CPC may share personally identifiable information it collects with its employees who need to know that information to service your account. Except as provided below, CPC does not share or disclose any personally identifiable information to any company or marketing group external to CPC. CPC may share your personal information with third parties to the extent it is reasonably necessary to manage or service your account, verify employment, determine location, process payment, fulfill a transaction, provide customer service, or as otherwise authorized by law.

Further, CPC may disclose personally identifiable information (i) to another entity with which CPC enters or reasonably may enter into a corporate transaction, such as, for example, a merger, consolidation, acquisition, or asset purchase, (ii) to a third party pursuant to a subpoena, court order, or other form of legal process or in response to a request by or on behalf of any local, state, federal, or other government agency, department, or body, whether or not pursuant to a subpoena, court order, or other form of legal process, or in connection with litigation brought against, or on behalf of, CPC, where appropriate, (iii) to a third party if determined by CPC in its sole judgment that such disclosure is appropriate to protect the life, health, or property of CPC or any other person or entity, all in compliance with applicable law, (iv) to third parties as authorized or designated by you, or (v) to conduct any other legitimate business activity not otherwise prohibited by law. The foregoing is not intended to obviate or displace any legal obligations or duties applicable to CPC.

Except as necessary for CPC to provide the services, information, or products requested by a website user, or except for the disclosures identified in the preceding paragraphs, the user may opt out of having his or her personally identifiable information, which has been voluntarily provided to CPC through or from its website, prospectively retained by CPC, used by CPC for secondary purposes, or disclosed by CPC to third parties.

E-mail posted or sent to CPC may not be secure against interception by unauthorized individuals. To protect against interception by unauthorized individuals, or because we can not verify your identity, we may be unable to respond to e-mail requests concerning accounts placed for collection unless you have requested or authorized us to do so.

Sale of Personal Information

We do not sell and will not sell your personal information. We also do not “share” your personal information as that term is defined in the California Privacy Rights Act.

Sharing your information with Consumer Reporting Agencies

Consumer Reporting Agencies (CRAs) collect and maintain information on consumer and business credit profiles on behalf of organizations in the United States. We may share information about you with CRAs and may carry out periodic searches with them to verify your identity or manage your account.

Details of your account(s) with us may be sent to CRAs and recorded by them. This information may be supplied by CRAs and may be used and searched by us and other organizations, such as debt collection agencies, in order to:

  • locate debtors and recover debts; and
  • manage your accounts.

CPC may furnish account information to Experian, Equifax, and Trans Union. You have a right to obtain an annual copy of your credit file from CRAs by visiting https://www.annualcreditreport.com.

Your Choices

CPC offers you certain choices in connection with the personal data it collects from you, including:

Your CPC Account: You may review, update and correct your contact information, including your telephone number and email address, after logging in to the website, or by calling our office.

Your Choice to Decline Cookies: You may adjust your browser settings to decline cookies if you do not want to accept CPC’s cookies. However, declining cookies may affect proper operation of CPC’s website.

Your Payments: You can elect not to utilize the payment portal of CPC’s website and not to make payments via credit card or check.

If you have any questions regarding any of these choices, please contact CPC.

Our Contact Address is:

10249 Yellow Circle Drive

Suite 200,

Minnetonka, MN 55343

Toll-free Telephone Number: 1-800-606-6841

E-Mail: [email protected]

How Long We Keep Your Information

CPC will retain your personal data until we determine the information is no longer needed to perform its services, or as otherwise required by law. CPC thereafter deletes or anonymizes such information in accordance with applicable laws.

CPC will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our service, or we are legally obligated to retain this data for longer time periods.

How We Protect Information

CPC has implemented administrative, physical, and technical security safeguards to protect against the unauthorized release of or access to personal information. We employ internal and external system safeguards designed to protect confidentiality and security of personal information.

The confidentiality of any communication or material transmitted to or from CPC via the website or via e-mail cannot be, and is not, guaranteed. You acknowledge that the technical processing and transmission of the website’s content may be transferred unencrypted and involve: (a) transmissions over various networks; and (b) changes to confirm and adapt to technical requirements of connecting networks or devices.

We will collect the IP Address of all visitors to the CPC website for internal security and other proprietary purposes. We do not release this data outside of our corporate team nor utilize the data other than for internal purposes.

If any questions arise about security, please contact CPC using the information provided above.

Your Rights

  • Access personal information – You may submit a verifiable request for access to your personal information that we collected about you, subject to certain exceptions. This may include the categories and specific pieces of information collected, the sources of that information and the business or commercial purpose for the collection or disclosure of that information.
  • Request correction of personal data we hold about you – You have the right to request that we correct the personal information we maintain about you, if that information is inaccurate or incomplete, subject to certain exceptions.
  • Request deletion of personal information – You may request that we delete your personal information, subject to certain exceptions., For instance, state and federal law may prohibit us from deleting personal information, which CPC will disclose to you.
  • Object to processing of your personal data – Where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms, you may object to processing of such data. You may also object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
  • Request restriction of processing of your personal data – This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
  • Request the transfer of your personal data to you or to a third party – We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this option only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
  • Withdraw consent at any time where we are relying on consent to process your personal data – however, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
  • Automated decision making and profiling – ‘Automated Decision Making’ refers to credit decisions regarding consumer lending terms or conditions predicated solely on the creditor’s automated processing of personal data. This means credit decisions may be made by a creditor, for example, using software code or an algorithm which does not require human intervention. We do not extend credit or make credit decisions for any person and we do not use your personal data as part of any such automated decision making or profiling when servicing your account.
  • Non-discrimination – We will not discriminate against you if you exercise any of these options.
  • Use of an authorized agent – You can designate an authorized agent to make any of these requests by providing your express written authorization. We must be able to verify your identity and the authorization must include the authorized agent’s name, address, telephone number, and email address (for providing the personal information collected or to respond to a request for deletion).

If you wish to exercise any of these options, please contact CPC by doing one of the following:

  1. Submit online to: [email protected]
  2. By mailing a request to: Central Portfolio Control, 10249 Yellow Circle Drive, Suite 200, Minnetonka, MN 55343
  3. Toll-free Telephone Number: 1-800-606-6841

If you choose to contact us directly by one of the above methods, you will need to provide us with:

  • Enough information to identify you (e.g., your full name, address and customer or matter reference number);
  • Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
  • Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf. To prevent anyone other than you, or your authorized agent, from exercising the option to know or the option to delete with respect to your personal information, we follow procedures to verify your, or your agent’s, identity. These procedures seek to confirm that the person making a request is the person about whom we have collected personal information or that person’s authorized agent. The verification procedures involve matching data points that you provide with your request against information about you we already have in our records and that we have determined to be reliable for purposes of verifying your identity. We will use information you provide in your completed request form to verify your identity, and we may request additional information if necessary to complete the verification process.

You will not have to pay a fee to access your personal data (or to exercise any of the other options). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

If you would like to appeal of our decision with respect to your exercise of the above options, an appeal may be sent to the data controller using the same process for submitting initial requests. A response to an appeal may take up to 60 days, at which time CPC shall respond to your request.

Children Under the Age of Thirteen

Our Website and services are not intended for anyone under 13 years of age. No one under age 13 may provide any Personal Information on our services. We do not knowingly collect Personal Information from anyone under 13 years of age. If you are under 13 years of age, do not use or provide any information on our services. If we learn that we have collected or received Personal Information from a person under 13 years of age without verification of parental consent and supervision, we will delete such Personal Information. If you believe that a person under 13 years of age has submitted Personal Information on or through any of our Services without the consent and supervision of a parent or guardian, please contact us at [email protected].

Links to Other Websites

Our website may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide while visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

SMS / Text Messaging

No mobile information, including phone numbers, text messaging originator opt-in data, and consent information, will be sold or shared with third parties/affiliates for marketing or promotional purposes.

Privacy Notice Changes

CPC may change this Privacy Notice at any time. Notice of any new or revised Privacy Notice, as well as the location of the new or revised statement, will be posted on the website after the change. It is the obligation of users visiting the website before the change to learn of changes to the Privacy Notice since their last visit.

If there are material changes to the privacy statement or in how we will use your personal data, we will notify you by prominently posting a notice of such changes before they take effect or by directly sending you a notification.

Last Updated: 7/24/2024

Effective Date: 7/24/2024