Privacy Policy

1. Introduction & Scope

CreditDispute.com is published and operated by Consumer Litigation Associates, P.C.(“we,” “us,” or “our”), a plaintiff-side consumer-protection law firm headquartered in Newport News, Virginia. This site is attorney advertising.

This Privacy Policy describes how we collect, use, disclose, and protect personal information that we receive through CreditDispute.com — including its Ask an FCRA Lawyer intake form, the ID-Theft Quiz, the Dispute-Letter Generator, the Cookie-Consent Banner and Cookie Preferences Manager, and the Privacy Request Portal.

This policy does not cover information collected through other channels (telephone calls, postal mail, or direct email correspondence with the firm) except where specifically noted.

2. Information We Collect

We describe the categories below using the framework of the California Consumer Privacy Act (CCPA/CPRA). Items marked ⚠ Sensitive are treated as sensitive personal information under California and Virginia law.

A. Identifiers

Name, email address, phone number, and mailing address — collected when you submit the intake form, opt in to email delivery from the letter generator, or submit a privacy request.

B. Case / Dispute Information and Submitted Documents

Information about your credit-reporting dispute or identity-theft situation, including the bureau(s) involved, the type of dispute, whether you have filed FTC or police reports, and any documents you upload or describe. This information is collected through the intake form and the letter generator.

C. Free-Text Narratives

The “Describe your situation” or similar free-text fields in the intake form and letter generator. These narratives may contain sensitive details about your finances, credit history, or personal circumstances that you choose to share.

D. Quiz Responses

Your answers to the ID-Theft Quiz (e.g., indicators of potential identity theft on your credit report). Quiz responses are processed in your browser to generate guidance and are not transmitted to or stored on our servers.

E. Letter-Generator Inputs ⚠ Sensitive

The substance of what you enter into the letter generator, which may include date of birth, the last four digits of your Social Security number, account names and numbers, disputed item descriptions, selected legal facts, and any free text you type into the generator. See Section 5 for how this data is handled.

F. Information Collected Automatically

When you visit the site we may collect, through our hosting infrastructure and analytics tools (subject to your cookie choices):

• IP address
• Browser type, version, and language
• Operating system and device type
• Pages viewed, links clicked, and time spent on pages
• Referring URL and search terms used to reach the site
• Cookie identifiers (see Section 7)

IP address may be considered sensitive personal information under some state laws. We use it for security, fraud prevention, and — in connection with the letter-generator attestation — to record that an attestation was made.

3. How We Collect It

• Directly from you. When you fill out a form, use the letter generator, submit a privacy request, or otherwise interact with site features.
• Automatically. Through server logs, cookies, and analytics tools. Non-essential cookies and analytics are activated only after you consent via the cookie banner or Cookie Preferences manager (see Section 7).
• From service providers. We use third-party service providers for hosting, email delivery, and analytics. Those providers may collect technical information on our behalf, subject to their own policies and contractual obligations to us.

4. How We Use It

We use personal information to:

• Respond to inquiries and evaluate potential matters. When you submit an intake form, we use your contact information and case description to read your inquiry and, where appropriate, respond.
• Provide legal services. If you become a client pursuant to a written engagement agreement, we use information you provide in the course of representation.
• Run conflicts checks. Before accepting representation, we may use identifying information to check for conflicts of interest under the Virginia Rules of Professional Conduct.
• Operate, secure, and improve the site. We use technical and usage data to maintain site performance, investigate abuse (including unauthorized access by parties prohibited under our Terms of Use), and improve content and features.
• Send follow-up emails. If you opt in during the letter-generator flow, we send your generated letter and limited follow-up check-ins by email. See Section 6.
• Enforce our Terms of Use. Including the letter-generator attestation and the prohibitions on use by consumer reporting agencies and furnishers.
• Comply with law. Including professional-responsibility rules, court orders, and applicable state and federal law.

5. Dispute-Letter Generator — Data Handling

Before any letter may be generated, you must complete the user attestation required by our Terms of Use § 7. Your IP address, the date and time, and the text of the attestation are recorded as a compliance record.

6. Email Communications & Your Choices

If you provide your email address and opt in during the letter-generator flow, we may send you:

• A copy of your generated dispute letter.
• Up to two follow-up check-ins (at approximately 30 and 45 days) asking whether your dispute was resolved and offering information about your legal options if it was not.

These emails are attorney advertising from Consumer Litigation Associates, P.C. Each email will include:

• An accurate sender name and “From” address.
• A clear subject line that is not deceptive.
• Our physical postal address (763 J. Clyde Morris Blvd., Suite 1-A, Newport News, VA 23601).
• A working unsubscribe link. Opt-out requests are honored within 10 business days as required by CAN-SPAM, 15 U.S.C. § 7704.

We do not send promotional or marketing email to persons who have not opted in through the generator flow or separately consented to receive email from us.

7. Cookies & Tracking

We use three categories of cookies:

Your controls. When you first visit the site, a cookie banner asks for your choices. You can change those choices at any time through the Cookie Preferences manager (linked in the site footer). Withdrawing consent removes non-essential cookies on your next page load.

Global Privacy Control (GPC). We honor the GPC browser signal. If your browser transmits a GPC signal, we treat it as an opt-out of non-essential cookies and, where applicable, a request to limit the use of your sensitive personal information, without requiring any additional action by you.

You may also control cookies through your browser settings. Note that disabling strictly-necessary cookies may affect site functionality.

8. Sale / Sharing of Personal Information

We share personal information only in the following limited circumstances:

• Service providers. We share information with vendors who assist us in operating the site and delivering our services — for example, web hosting, email-delivery platforms, and analytics providers. These providers are contractually required to use personal information only to perform services for us and not for their own purposes.
• Legal compliance. We may disclose information as required by law, court order, or valid legal process, or to respond to lawful requests from government authorities.
• Protection of rights. We may disclose information to investigate, prevent, or address fraud, security breaches, unauthorized access (including by parties prohibited under our Terms), or other illegal activity, and to protect the rights, property, or safety of the firm, its clients, or the public.
• With your consent. For any other purpose, with your explicit consent.

9. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy or as required by law. The following guidelines apply:

10. Your Privacy Rights

Depending on the state where you reside, you may have the following rights with respect to your personal information:

California Residents (CCPA / CPRA)

• Right to Know / Access. Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, our business purposes, and the categories of third parties with whom we share it.
• Right to Correct. Request correction of inaccurate personal information.
• Right to Delete. Request deletion of personal information we have collected, subject to exceptions (e.g., legal obligations, professional-responsibility rules).
• Right to Opt Out of Sale / Sharing. We do not sell or share personal information for cross-context behavioral advertising, so this right is not triggered. If our practices change, we will update this policy and provide an opt-out mechanism.
• Right to Limit Use of Sensitive Personal Information. You may direct us to limit use of sensitive personal information to what is necessary to provide our services.
• Right to Non-Discrimination. We will not deny, charge different prices for, or provide a lower-quality service because you exercised a privacy right.

Virginia Residents (VCDPA)

• Right to Access. Confirm whether we process your personal data and obtain a copy.
• Right to Correct. Request correction of inaccuracies in your personal data.
• Right to Delete. Request deletion of personal data you have provided or that we have collected about you.
• Right to Data Portability. Obtain a portable copy of personal data you have provided to us, in a readily usable format.
• Right to Opt Out. Opt out of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in these activities, but you may submit a request if you believe otherwise.
• Right to Appeal. If we deny your request, you may appeal. See Section 11.

Residents of Other States

Colorado, Connecticut, Texas, Montana, Oregon, and other states have enacted comprehensive consumer privacy laws that may give you similar rights. We extend access, correction, deletion, and opt-out rights to residents of all states with comprehensive privacy laws on terms consistent with applicable law. Submit a request through our Privacy Request Portal (Section 11) regardless of your state.

11. How to Exercise Your Rights

Submit requests through our Privacy Request Portal, by email to privacy@creditdispute.com, or by calling (757) 930-3660.

Identity Verification

Before fulfilling an access or deletion request, we will verify your identity to a reasonable degree of certainty. For most requests this means confirming information that matches what we have on file (e.g., the email address associated with your submission). For requests involving sensitive personal information or a high risk of harm, we may require a higher degree of verification. We will not use information provided for verification purposes for any other purpose.

Response Timeline

We will respond to verifiable requests within 45 days of receipt. Where reasonably necessary, we may extend the response period by an additional 45 days, in which case we will notify you of the extension and the reason for it within the initial 45-day period.

Virginia Right to Appeal

If we deny your request in whole or in part, we will provide you with a written explanation. Virginia residents may appeal a denial by contacting us at the address or email above and labeling the communication “Privacy Rights Appeal.” We will respond to your appeal within 60 days. If your appeal is denied, we will provide you with information about how to submit a complaint to the Virginia Attorney General.

Authorized Agents

California residents may designate an authorized agent to submit requests on their behalf. We will require written proof of the authorization and may verify the consumer's identity directly.

12. Attorney-Client & Prospective-Client Confidentiality

Information you share with us once a written engagement agreement is signed is protected by attorney-client privilege and our professional duty of confidentiality under the Virginia Rules of Professional Conduct (Va. RPC 1.6). We will not disclose such information except as those rules permit or as required by law.

If you contact us seeking representation but we do not ultimately represent you, you may be a prospective client under Va. RPC 1.18. We have duties to protect information you share in that preliminary consultation, including not using it against you and maintaining appropriate confidentiality, even if no representation results.

These professional duties may affect how we respond to certain privacy rights requests — for example, we cannot delete information that we are professionally obligated to retain. We will explain any such limitation when we respond to your request.

13. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, and destruction. These include encrypted transmission (HTTPS), access controls, and vendor security requirements.

No method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your information, and transmission of personal information is at your own risk.

14. Children's Privacy

This site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will delete it.

This site includes educational content about child identity theft. That content is directed to parents, guardians, and other adults acting on a child's behalf — not to the children themselves.

15. Third-Party Links

This site contains links to third-party websites, including government agencies, credit bureaus, and consumer organizations. We are not responsible for the content, accuracy, or privacy practices of those sites. Clicking a link to a third-party site means you are leaving CreditDispute.com, and the third party's privacy policy — not ours — governs your information on that site. We encourage you to review the privacy policy of any site you visit.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the law, or our services. When we do, we will post the revised policy at /privacyand update the “Last updated” date at the top. The revised policy is effective on the date posted.

We encourage you to review this policy periodically. Your continued use of the site after a revised policy is posted constitutes your acceptance of the updated policy.

17. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or to submit a privacy rights request, please contact us by any of the following methods: