Do Not Sell or Share My Personal Information

Notice of Call Recording: Please note that all telephone calls, video calls, voicemails, text (SMS/MMS) messages, web chats, and other electronic communications between you and the Company may be recorded, transcribed, monitored, and stored for quality assurance, training, dispute resolution, regulatory compliance, fraud prevention, and recordkeeping purposes. By continuing to communicate with us through any of these channels, you consent to such recording, transcription, monitoring, and storage to the fullest extent permitted by applicable federal and state law.

1. Introduction and Scope

This Do Not Sell or Share My Personal Information notice (the “Notice”) supplements our Online Privacy Policy and applies to the website www.privatestudentrelief.com, owned and operated by Joco, doing business as Private Student Relief (also referred to in this Notice as “PSR,” “Company,” “we,” “us,” or “our”).

This Notice explains your right to opt out of any “sale” or “sharing” of your personal information under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), and analogous rights available to residents of other U.S. states with comprehensive consumer-privacy laws, including the right to limit the use of sensitive personal information and the right to opt out of targeted advertising and certain profiling. This Notice also explains how we honor browser-based opt-out signals such as the Global Privacy Control (GPC).

Capitalized terms not defined in this Notice have the meanings given to them in our Privacy Policy.

2. Our Position on the “Sale” and “Sharing” of Personal Information

PSR does not sell your personal information for monetary consideration. We have not sold personal information for money in the preceding twelve (12) months and we do not currently do so. We do not sell or share the personal information of consumers under age sixteen (16).

However, certain data-flows that occur on our Sites in connection with online advertising, conversion measurement, audience-building, retargeting, and analytics may fall within the broad statutory definitions of a “sale” (any disclosure of personal information for monetary or other valuable consideration) or “sharing” (any disclosure of personal information for cross-context behavioral advertising) under the CCPA and similar state laws. Out of an abundance of caution and to maximize consumer choice, we treat the following data-flows as potentially subject to your opt-out right and we give you the controls described in Section 4:

• Advertising cookies, pixels, software-development kits, server-side tags, and similar Tracking Technologies that send online identifiers, internet/network-activity information, device information, or limited contact information to third-party advertising platforms (including, for example, Google Ads, Meta, TikTok, LinkedIn, and similar advertising networks) for the purpose of measuring conversions, building lookalike audiences, retargeting visitors, or attributing ad performance.
• Analytics tags (including, for example, Google Analytics) that may use online identifiers for cross-site analytics, even when our contractual relationship designates the provider as a service-provider / processor.
• Any other third-party tag or integration on the Sites that processes personal information for advertising or audience-building purposes outside the strict service-provider/processor framework.

3. Categories of Personal Information Potentially Sold or Shared

The categories of personal information that may be subject to a “sale” or “sharing” for cross-context behavioral advertising under the CCPA are limited to:

• Identifiers — online identifiers, IP address, device identifiers, cookie identifiers, and limited contact information voluntarily provided in advertising-related forms.
• Internet or other electronic network-activity information — browsing history on the Sites, interaction with advertisements, referring URLs, and limited inferences drawn from on-site behavior.
• Geolocation information — approximate (non-precise) location derived from IP address.
• Commercial information — limited inferences about consumer interest in private-student-loan-relief consulting based on Site activity.

We do not sell or share, for cross-context behavioral advertising, the following: Social Security Numbers, full government-issued ID numbers, financial-account numbers, the contents of your communications with us, or other sensitive personal information.

4. How to Opt Out of the Sale or Sharing of Your Personal Information

You may exercise your right to opt out of the “sale” or “sharing” of your personal information in any of the following ways. We honor opt-out requests free of charge and we will not discriminate against you for exercising this right.

4.1 Browser-Based Opt-Out: Global Privacy Control (GPC)

Our Sites recognize and honor the Global Privacy Control (GPC) signal as a valid opt-out of “sale” and “sharing” for the device and browser from which the signal is sent, for jurisdictions where GPC is recognized as a valid opt-out mechanism (including California, Colorado, Connecticut, and certain other states). To enable GPC, install a GPC-compatible browser or extension (a list of options is available at globalprivacycontrol.org). When your browser sends a GPC signal to our Sites, we will treat it as a request to opt out of sale and sharing for that browser, and we will not require any further action from you for that browser.

Because GPC is a browser-level signal and is not always associated with an identified consumer, GPC opt-out applies on a per-browser/per-device basis. If you use multiple browsers or devices, you should enable GPC on each, or submit a verified consumer request as described in Sections 4.2 through 4.4 to apply the opt-out to your identified personal information across all channels.

4.2 On-Site Cookie-Consent Banner and Preference Center

Our Sites display a Cookie-Consent banner the first time you visit. Through that banner and the related Cookie Preferences page, you may reject or limit the use of advertising and analytics Tracking Technologies. Disabling those categories operates as an opt-out of “sale” and “sharing” for the device and browser on which you make the selection. Your preferences are stored locally and will persist until you clear your browser storage or change your selection.

4.3 Verified Consumer Request — Email or Mail

You may submit a verified consumer request to opt out of the sale or sharing of your personal information, and to limit the use of your sensitive personal information, by contacting us using one of the following methods:

• Email: henry@privatestudentrelief.com — subject line: “Do Not Sell or Share — Privacy Request”.
• Online form: www.privatestudentrelief.com/apply/ — include in the message field that you wish to exercise your Do Not Sell or Share right.
• Mail: Joco — Privacy Office, Attn: Do Not Sell or Share Request, 555 Anton Blvd., Suite 368, Costa Mesa, CA 92626, USA.

To help us locate your records and respond promptly, please include in your request: (a) your first and last name; (b) the email address(es) and telephone number(s) you have used to interact with us; (c) your state of residence; (d) a clear statement of the right you wish to exercise (for example, “I request that PSR opt me out of the sale and sharing of my personal information,” or “I request that PSR limit the use of my sensitive personal information”); and (e) any other information that would help us match your request to records we hold.

4.4 Authorized Agents

You may use an authorized agent to submit an opt-out request on your behalf. The agent must provide us with: (a) written authorization signed by the consumer designating the agent and authorizing the request; (b) information sufficient to verify the agent’s identity (for example, government-issued ID); and (c) information sufficient for us to verify the consumer’s identity, unless the agent provides power-of-attorney under California Probate Code § 4000 et seq.. We may require the consumer to verify their identity directly with us or to confirm with us that they have given the agent permission to submit the request.

5. Right to Limit Use and Disclosure of Sensitive Personal Information (California)

California residents have the right under CCPA § 1798.121 to direct us to limit our use and disclosure of sensitive personal information (such as Social Security Number, government-issued ID, financial-account information, and the contents of your communications) to those purposes necessary to perform the services you have requested, plus a narrow set of additional purposes permitted by regulation (including fraud prevention, security, and quality assurance).

As explained in Section 11 of our Privacy Policy, we already limit our use and disclosure of sensitive personal information to those statutorily permitted purposes. We do not use sensitive personal information to infer characteristics about you for advertising, and we do not disclose sensitive personal information to third parties for cross-context behavioral advertising. To submit a formal request to limit, please follow the procedures in Section 4.3.

6. State-Specific Rights and Procedures

6.1 California (CCPA / CPRA)

California residents have the right to opt out of the sale and sharing of personal information, the right to limit use of sensitive personal information, and the right not to be discriminated against for exercising any of these rights. We honor GPC as an opt-out signal. We will respond to verified requests within forty-five (45) days, with one possible forty-five-day extension upon written notice. Where we deny a request, we will explain the legal basis for the denial.

6.2 Colorado (CPA), Connecticut (CTDPA), and Other Universal Opt-Out States

If you are a resident of Colorado (CPA), Connecticut (CTDPA), or another state that recognizes universal opt-out mechanisms, you may opt out of the sale of personal data and targeted advertising by enabling GPC or another recognized universal opt-out mechanism in your browser. We honor those signals as required by applicable law. You may also submit a verified consumer request using the methods in Section 4.3, and you may appeal a denial of your request within sixty (60) days of receiving our response.

6.3 Virginia (VCDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Iowa (ICDPA), Tennessee (TIPA), Indiana (INCDPA), Delaware (DPDPA), New Hampshire, New Jersey, Minnesota, Maryland (MODPA), Rhode Island, Kentucky, Nebraska

If you are a resident of one of these states (or another U.S. state with a comprehensive consumer-privacy law), you may have the right to opt out of the sale of personal data, of targeted advertising, and of certain profiling that produces legal or similarly significant effects. To exercise these rights, follow the procedures in Section 4. Where the applicable law provides for an appeal of our decision, you may appeal by replying to our response within sixty (60) days. If your appeal is denied, you may contact your state attorney general.

6.4 Nevada (NRS 603A.340)

Under Nevada Revised Statutes § 603A.340, Nevada residents may submit a verified request to opt out of any future sale of certain “covered information” (as defined under Nevada law). Although we do not sell covered information for monetary consideration, we honor verified Nevada opt-out requests. Please submit your request using one of the methods in Section 4.3.

6.5 Florida (Florida Digital Bill of Rights)

Florida residents who qualify under the Florida Digital Bill of Rights may have additional rights regarding sensitive data and the operation of certain large-platform processors. To exercise any Florida-specific rights, follow the procedures in Section 4.

6.6 Washington (My Health My Data Act)

We do not knowingly collect “consumer health data” as defined under the Washington My Health My Data Act. If you believe you have provided such information and wish to limit its use, contact us using the methods in Section 4.3.

7. EU/EEA, UK, and Switzerland

Our services are directed to U.S. residents in the 48 states we serve. We do not market services in the European Union, European Economic Area, United Kingdom, or Switzerland. If you are a resident of one of those regions and choose to interact with our Sites, you may have additional rights under the General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection (FADP), and the EU ePrivacy Directive, including the right to object to processing of your personal data for direct marketing (which encompasses any form of profiling related to such direct marketing). To exercise those rights, contact us using the methods in Section 4.3. You also have the right to lodge a complaint with your competent supervisory authority.

8. Verification Process

To protect the security and privacy of your personal information, we may verify your identity before responding to an opt-out, limit-sensitive-PI, or other consumer-rights request. Verification methods may include:

• Knowledge-based authentication (matching information you provide to information already in our records);
• Confirmation of contact information (email and/or telephone) that you have used to interact with us previously;
• Document verification (where appropriate, a redacted government-issued ID, with sensitive identifiers blacked out);
• Third-party identity-verification vendors operating under written contracts that limit their use of the verification information to providing services to us.

For opt-out requests that do not require sensitive disclosures (such as GPC-based opt-outs or simple email-list suppression), we apply a lower verification standard. For requests that involve disclosure, deletion, or correction of personal information, we apply a higher verification standard. We will not require additional information from you beyond what is necessary to verify the request.

9. Response Timeline

We will acknowledge your verified request within ten (10) business days of receipt, and we will respond substantively within forty-five (45) days, with one possible forty-five-day extension upon written notice if reasonably necessary. For GPC and on-site cookie-banner opt-outs, the opt-out takes effect immediately at the browser level and we have no separate notification obligation.

If we cannot reasonably verify your identity or the authority of your authorized agent, we will respond to inform you of the reason and the additional information we need. Where we deny a request in whole or in part, we will explain the legal basis for the denial and your right to appeal (where applicable).

10. Right to Non-Discrimination

We will not discriminate against you for exercising any of the rights described in this Notice. We will not deny you services, charge you a different price, provide a different level or quality of service, or suggest that you will receive a different price or quality of service because you exercised an opt-out or other consumer right. We do not currently offer financial incentives in exchange for personal information.

11. Records of Requests

We maintain records of consumer rights requests we receive and of the actions we took in response, in accordance with the recordkeeping requirements of applicable state law (generally a minimum of twenty-four (24) months). These records may be used to demonstrate compliance with applicable consumer-privacy laws and to defend against any related claim. The records are stored consistent with the safeguards described in Section 9 of our Privacy Policy.

12. Other Privacy Rights

In addition to the right to opt out of the sale or sharing of your personal information, you may have additional rights under applicable law, including the right to know what personal information we have collected about you, the right to access a copy of that information, the right to correct inaccurate information, the right to request deletion (subject to legal exceptions), and the right to data portability. For a full description of these rights and how to exercise them, please see Section 13 of our Privacy Policy.

13. Changes to This Notice

We may update this Notice from time to time. The “Last Updated” date at the top of this page indicates when this Notice was last revised. Material changes will be communicated by posting a prominent notice on the Sites and, where required by law, by direct notice to you.

14. How to Contact Us

If you have questions about this Notice or wish to submit a consumer-rights request, please contact us using one of the following methods:

• Email: henry@privatestudentrelief.com
• Online form: www.privatestudentrelief.com/apply/
• Mail: Joco — Privacy Office, 555 Anton Blvd., Suite 368, Costa Mesa, CA 92626, USA

If you have a complaint that we have not resolved to your satisfaction, you may contact your state attorney general or the appropriate supervisory authority for your jurisdiction.

Private Student Relief is owned and operated by Joco, located at 555 Anton Blvd., Suite 368, Costa Mesa, CA 92626. We are a private-student-loan-payment-relief consulting organization. We are not a law firm, debt-settlement company, debt-consolidation company, or loan provider. We do not provide legal, tax, or financial advice. We do not assume consumer debt or make payments to creditors on your behalf. We help clients reduce their private student loan payments through debt-validation consulting and lender-negotiation strategies. Results vary based on individual financial circumstances. Not available in South Carolina or Mississippi. Calls may be recorded for quality and training purposes.