Privacy Policy

PRIVACY POLICY

TECHSPOT LLC
Effective Date: August 20, 2025

1. INTRODUCTION

TechSpot LLC ("we," "us," "our," "TechSpot") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our repair services, visit our website, or interact with our business.

2. LEGAL COMPLIANCE AND CONSUMER PROTECTIONS

2.1 Federal Privacy Protections

We comply with all applicable federal and state privacy laws, including:

• Fair Credit Reporting Act (FCRA) - Protects credit and payment information

• Gramm-Leach-Bliley Act (GLBA) - Safeguards financial information

• Children's Online Privacy Protection Act (COPPA) - Protects minors under 13

• Electronic Communications Privacy Act (ECPA) - Protects electronic communications

• Computer Fraud and Abuse Act (CFAA) - Ensures authorized access only

2.2 Industry Standards

• Payment Card Industry Data Security Standard (PCI DSS) - Secure payment processing

• NIST Cybersecurity Framework - Best practices for data protection

• ISO 27001 principles - Information security management

2.3 State Protections

• California Consumer Privacy Act (CCPA) - Enhanced rights for California residents

• Arkansas Personal Information Protection Act - Breach notification requirements

• State data breach laws - Timely notification of any security incidents

3. INFORMATION WE COLLECT

3.1 Personal Information You Provide

• Contact Information: Name, phone number, email address, physical address

• Payment Information: Credit/debit card numbers, billing address

• Device Information: Make, model, serial number, IMEI/ESN

• Account Credentials: Device passwords, PINs (only as necessary for repair)

• Business Information: Company name, business address, tax ID (for business accounts)

3.2 Information Collected During Service

• Device Diagnostics: Error logs, system information, hardware status

• Repair History: Previous repairs, warranty claims, service notes

• Communication Records: Email correspondence, text messages, phone call logs

• Security Footage: In-store video surveillance for security purposes

3.3 Information from Mail-In Repairs

• Shipping Information: Tracking numbers, delivery confirmation

• Package Contents: Device condition documentation, included accessories

• Return Preferences: Shipping address, delivery instructions

3.4 Website Information

• Usage Data: IP address, browser type, pages visited, time spent

• Cookies: Session data, preferences, analytics

• Online Forms: Service requests, quote inquiries, feedback

4. HOW WE USE YOUR INFORMATION

4.1 Service Delivery

• Process and complete repair services

• Diagnose device issues

• Communicate repair status and updates

• Process payments and refunds

• Fulfill warranty obligations

• Provide data recovery services

4.2 Business Operations

• Maintain accurate business records

• Improve our services and processes

• Train staff and ensure quality control

• Manage inventory and order parts

• Prevent fraud and enhance security

• Comply with legal obligations

4.3 Communications

• Send repair status updates via text/email

• Provide quotes and invoices

• Respond to customer inquiries

• Send appointment reminders

• Notify about warranty expirations

• Share relevant service information

4.4 Marketing (With Consent)

• Inform about new services

• Send promotional offers

• Share technical tips and device care information

• Request customer feedback and reviews

5. DATA HANDLING DURING REPAIRS

4.1 Device Access

• Technicians access only areas necessary for repair

• Personal files not intentionally viewed

• Test procedures may reveal some content

• Screenshots taken only for diagnostic purposes

4.2 Data Recovery Services

• Access limited to recovering requested data

• Recovered data immediately transferred to customer

• No copies retained after successful recovery

• Failed recovery attempts result in no data access

4.3 Privacy Protection Measures

• Technicians trained in privacy protocols

• Work areas monitored for security

• Devices stored securely when not being serviced

• Clean room protocols for sensitive repairs

6. INFORMATION SHARING AND DISCLOSURE

5.1 We DO NOT Sell Your Information

TechSpot LLC never sells, rents, or trades your personal information to third parties for marketing purposes.

5.2 Service Providers

We may share information with:

• Parts Suppliers: For warranty claims and parts ordering

• Shipping Companies: For mail-in repair logistics

• Payment Processors: For transaction processing

• Insurance Providers: For covered repairs (with your consent)

• Professional Services: Accountants, lawyers (as necessary)

5.3 Legal Requirements

We may disclose information when required to:

• Comply with legal obligations

• Respond to lawful requests by public authorities

• Protect our rights and property

• Report suspected illegal activities

• Ensure personal safety

5.4 Business Transfers

If TechSpot LLC is sold or merged, customer information may be transferred to the new owner to continue providing services.

7. DATA SECURITY

7.1 Physical Security

• Locked storage for devices and records

• Security cameras in service areas

• Restricted access to work areas

• Secure disposal of device components

7.2 Digital Security

• Encrypted payment processing (PCI DSS compliant)

• Password-protected systems with multi-factor authentication

• Regular security updates and patches

• Firewall and antivirus protection

• Secure data destruction protocols (DOD 5220.22-M standard)

• SSL/TLS encryption for data transmission

7.3 Employee Training

• Privacy training for all staff

• Confidentiality agreements required

• Limited access based on job needs

• Regular security awareness updates

• Background checks for all employees

7.4 Compliance with Federal Standards

• HIPAA-compliant handling if health data is encountered

• FTC Safeguards Rule compliance for customer information

• Red Flags Rule compliance for identity theft prevention

8. DATA RETENTION

7.1 Retention Periods

• Repair Records: 7 years for warranty and legal purposes

• Financial Records: 7 years per IRS requirements

• Customer Communications: 2 years

• Security Footage: 30 days unless needed for investigation

• Marketing Lists: Until opt-out requested

7.2 Data Deletion

• Customer may request data deletion (subject to legal requirements)

• Abandoned device data destroyed after 60 days

• Payment information deleted after transaction completion

• Warranty data retained for warranty period plus 1 year

9. YOUR RIGHTS AND CHOICES

9.1 Access and Correction

• Request copy of your personal information

• Correct inaccurate information

• Update contact preferences

• Access repair history

9.2 Communication Preferences

• Opt-out of marketing communications (CAN-SPAM Act compliant)

• Choose preferred contact method

• Unsubscribe from email lists

• Manage text message preferences (TCPA compliant)

9.3 Data Portability

• Request data in common format

• Transfer repair history

• Export warranty information

9.4 Rights Under Federal Law

• Right to Financial Privacy Act - Control over financial record disclosure

• Telephone Consumer Protection Act (TCPA) - Control over marketing calls/texts

• CAN-SPAM Act - Opt-out of commercial emails

• Right to deletion under applicable state laws

10. CHILDREN'S PRIVACY

9.1 Age Restrictions

• Services intended for ages 18+

• Parental consent required for minors

• No knowing collection from children under 13

9.2 Parental Rights

• Parents may request child's information

• Can request deletion of child's data

• May prohibit future collection

11. CALIFORNIA PRIVACY RIGHTS

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what information is collected

• Right to delete personal information

• Right to opt-out of information sale (we don't sell data)

• Right to non-discrimination for exercising privacy rights

12. COOKIES AND TRACKING

11.1 Website Cookies

• Essential cookies for site functionality

• Analytics cookies for site improvement

• Preference cookies for user experience

• Marketing cookies (only with consent)

11.2 Managing Cookies

• Browser settings control cookie acceptance

• "Do Not Track" signals honored

• Cookie-free browsing may limit functionality

13. THIRD-PARTY LINKS

Our website may contain links to third-party sites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies separately.

14. INTERNATIONAL VISITORS

TechSpot LLC operates in the United States. If you access our services from outside the U.S., your information will be transferred to and processed in the United States.

15. CHANGES TO THIS PRIVACY POLICY

15.1 Updates

• We may update this policy periodically

• Material changes will be prominently posted

• Continued use constitutes acceptance

• Previous versions available upon request

15.2 Effective Date

This Privacy Policy is effective as of August 20, 2025.

16. CONTACT INFORMATION

For privacy-related questions or concerns:

TechSpot LLC
Privacy Officer
Fort Smith, Arkansas
Phone: 479-437-6111
Email: [email protected]
Website: www.techspotllc.com

15.1 Response Time

• Acknowledge receipt within 2 business days

• Substantive response within 30 days

• Complex requests may require additional time

17. COMPLAINT PROCESS

16.1 Internal Resolution

• Contact us directly with privacy concerns

• We investigate all privacy complaints

• Written response provided when requested

16.2 External Options

If unsatisfied with our response, you may contact:

• Arkansas Attorney General's Office

• Better Business Bureau

• Federal Trade Commission

18. SPECIAL CIRCUMSTANCES

18.1 Law Enforcement Requests

• We may be required to provide information to law enforcement

• Fourth Amendment protections - We require valid warrants/subpoenas

• Customer notified unless prohibited by law

• Only minimum necessary information disclosed

• Stored Communications Act compliance for electronic data

18.2 Illegal Content

• Suspected illegal content may be reported

• Child exploitation material immediately reported (NCMEC/CyberTipline)

• Stolen device databases checked

• 18 U.S.C. § 2258A compliance for CSAM reporting

18.3 Data Breaches

• Affected customers notified per legal requirements

• State breach notification laws followed (within 72 hours where required)

• Notification includes nature of breach and steps taken

• Credit monitoring offered if appropriate

• FTC breach notification if applicable

• Reports filed with state Attorneys General as required

19. CONSENT AND ACKNOWLEDGMENT

By using our services, visiting our website, or providing your information to TechSpot LLC, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

Questions?
We're committed to transparency. If anything in this Privacy Policy is unclear, please contact us for clarification.

This Privacy Policy was last updated on August 20, 2025.