Privacy Policy
Introduction
CredKey LLC (“CredKey,” “we,” “us,” or “our”) respects your privacy and
takes the protection of personal information seriously. This Privacy Policy
explains how we collect, use, share, and safeguard your data when you
interact with our website, services, and affiliates. By submitting
information or using our services, you agree to this Policy and the
practices described herein.
Scope
This Privacy Policy applies to all visitors, customers, and affiliates who
engage with CredKey through our website, web forms, phone calls, or
digital platforms, including Forth CRM and other approved systems used
to process consumer data. This Policy complies with the
Gramm-Leach-Bliley Act (GLBA), Fair Credit Reporting Act (FCRA),
California Consumer Privacy Act (CCPA/CPRA), and applicable federal and
state privacy laws.
Information We Collect
We may collect Non‐Public Personal Information (“NPI”), including:
• Personal identifiers such as name, address, phone number, and email
address;
• Financial details such as total debt amount, creditor information, or loan
data;
• Credit‐related data such as the last four digits of SSN or credit score
range;
• Communication and interaction data such as call recordings and form
submissions; and
• Device and session data such as IP address or browser type.
How We Use Your Information
We use your information to verify identity, assess eligibility for programs,
and connect you with licensed debt‐relief providers. We also use data to
improve our services, ensure compliance, prevent fraud, and maintain
security. CredKey does not sell consumer data. Any information shared is
solely for fulfilling your requested services.
Information Sharing
We share information only with trusted entities that support our services:
• Licensed backend partners to complete program enrollment;
• Vendors providing secure CRM, hosting, or credit‐pull technology;
• Regulators or auditors, when required by law; and
• Affiliate partners for verification and reporting purposes.
All vendors are contractually obligated to uphold equivalent GLBA‐level
safeguards.
Data Security
CredKey enforces advanced technical and organizational measures,
including multi‐factor authentication, TLS 1.2+ encryption for data in
transit, AES‐256 encryption for data at rest, strict user access control, IP
whitelisting, and regular compliance reviews. These measures align with
our internal Written Information Security Program (WISP).
Data Retention
Records, consents, and related documentation are securely retained for a
minimum of five (5) years within our authorized systems. When no longer
required, data is permanently deleted or destroyed in accordance with
NIST 800‐88 standards.
Consumer Rights
You may request to access, correct, or delete your data, or opt‐out of marketing communications. Requests should be sent to info@mycredkey.com or mailed to:
CredKey LLC, Attn: Privacy Compliance
400 Continental Blvd, 6th Floor, Suite 6176
El Segundo, CA 90245
We verify and respond to all legitimate privacy requests within required
timeframes.
Children’s Privacy
Our services are intended for adults. CredKey does not knowingly collect
or store information from individuals under 18 years of age.
Data Transfers
If your information is transferred outside the United States, CredKey
ensures that contractual and technical safeguards provide an equivalent
level of data protection.
Policy Updates
We may amend this Privacy Policy periodically to reflect legal,
operational, or regulatory changes. Updates will be posted on our website
with the effective date clearly noted.
Contact Us
If you have questions regarding this Privacy Policy or our data practices,
please contact us at:
info@mycredkey.com or call (888) 941-2666