Privacy Policy & Data Compliance

Last Updated: June 4, 2026

1. Data Collection & Processing

What we collect:

• PayPal payments only: Name, email, payment information (processed by PayPal, not stored by us)
• Email inquiries: Name, email, institution name (only if you contact us)
• No cookies: We do not use cookies, tracking pixels, or analytics
• No third-party tracking: No Google Analytics, Mixpanel, Amplitude, or similar services

2. GDPR Compliance (EU/EEA)

Legal Basis: Legitimate interest (payment processing) and consent (email inquiries)

• ✓ Right to access your data
• ✓ Right to delete your data (right to be forgotten)
• ✓ Right to data portability
• ✓ Right to object to processing
• ✓ Right to restrict processing

Data Retention: Payment records retained for 7 years (tax compliance). Email inquiries deleted after 90 days unless you request otherwise.

Data Controller: ENVOLVP LLC, Houston, Texas

Your Rights: Contact hello@mortgagesurvivalplaybook.com to exercise any GDPR rights.

3. CCPA Compliance (California)

Your Rights Under CCPA:

• ✓ Right to know what personal information is collected
• ✓ Right to delete personal information
• ✓ Right to opt-out of data sales (we do NOT sell data)
• ✓ Right to non-discrimination for exercising CCPA rights

Data Sales: We do NOT sell, rent, or share personal data with third parties.

Contact: hello@mortgagesurvivalplaybook.com to submit CCPA requests

4. PIPEDA Compliance (Canada)

Principles: We collect personal information only for identified purposes and with consent.

• ✓ Accountability: Clear data handling practices
• ✓ Openness: Transparent privacy policies
• ✓ Individual access: Right to access your information
• ✓ Accuracy: Commitment to data accuracy
• ✓ Safeguards: Secure data storage

5. International Compliance

6. PayPal Payment Processing

Payment Processor: PayPal (hello@mortgagesurvivalplaybook.com)

PayPal processes payments according to their Privacy Policy. We do NOT store credit card information, bank details, or payment data. All payment data is encrypted and processed by PayPal.

7. No Cookies or Tracking

We do NOT use:

• ✗ Cookies (session, persistent, or third-party)
• ✗ Tracking pixels or web beacons
• ✗ Google Analytics or similar analytics tools
• ✗ Advertising networks or retargeting pixels
• ✗ Social media tracking (Facebook Pixel, LinkedIn Insight Tag, etc.)
• ✗ Heatmaps or session recording tools

8. Data Security

Security Measures:

• ✓ HTTPS encryption for all data in transit
• ✓ Secure server hosting (Netlify CDN)
• ✓ No personal data stored on our servers
• ✓ Email data encrypted at rest
• ✓ Regular security audits

9. Third-Party Links

This site links to external resources (ATTOM Data Solutions, MBA, CFPB). We are NOT responsible for their privacy practices. Review their privacy policies independently.

10. Children's Privacy

This site is intended for institutional/business use only. We do NOT knowingly collect data from individuals under 18. If you believe we have collected data from a minor, contact hello@mortgagesurvivalplaybook.com immediately.

11. Data Breach Notification

In the unlikely event of a data breach, we will notify affected individuals within 72 hours (GDPR requirement) via email at the address provided during payment or inquiry.

12. Changes to This Policy

We may update this policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the site constitutes acceptance of changes.

13. Contact & Data Subject Rights

Data Protection Officer / Privacy Contact:

ENVOLVP LLC
Houston, Texas
hello@mortgagesurvivalplaybook.com

Response Time: We respond to all privacy requests within 30 days.

14. Compliance Certifications

This site complies with:

• ✓ GDPR Article 13 (Information to be provided where personal data are collected)
• ✓ CCPA Section 1798.100 (Consumer right to know)
• ✓ PIPEDA Schedule 1 (Principles of Fair Information Practices)
• ✓ ePrivacy Directive 2002/58/EC (Cookie Law)

Questions? Contact us at hello@mortgagesurvivalplaybook.com with any privacy concerns or data subject requests.