Website Privacy Policy

Last updated: April 7, 2026

  1. Introduction

    2. This Privacy Policy explains how the Freedom to Work Payment Portal ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you use our secure online payment service. We are committed to protecting your privacy and ensuring that our data practices comply with applicable global and state specific data protection laws.

  2. Information We Collect

    3. To process your transactions and manage your account securely, we collect the following categories of information:

    • Identifying Information: First and last name, physical address, email address, and telephone number.
    • Financial Information: Bank account details, credit/debit card numbers, and billing addresses. We adhere strictly to the required security compliance standards.
    • Protected Health Information (PHI): To the extent that our services facilitate payments related to healthcare, we may collect and/or process information classified as PHI.
    • Technical & Usage Data: IP addresses, browser types, operating systems, and session activity collected via cookies and tracking technologies.
  3. How We Use Your Information

    4. We process your personal data under the legal grounds of contractual necessity, legal obligation, and legitimate business interests for the following purposes:

    • Service Delivery: To securely process payments, authenticate users, and provide customer support.
    • Communication: To send transaction receipts, technical notices, and security alerts.
    • Compliance & Security: To detect and prevent fraud, conduct security investigations, and comply with financial auditing and legal obligations.
    • Marketing: To forward service updates or product announcements (subject to your right to opt-out).
  4. Financial Data Compliance

    5. We do not retain full credit/debit card numbers or Sensitive Authentication Data (SAD) internally on our side post authorization. All payment processing is conducted using secure tokenization and encryption methods through our PCI DSS compliant banking partners and payment gateways.

  5. Cookies and Tracking Technologies

    6. We utilize cookies to ensure portal functionality and security.

    • Strictly Necessary Cookies: Required for session management, user authentication, and load balancing. The platform cannot function without these.
    • Analytical/Performance Cookies: Used to measure traffic and optimize portal performance (aggregated and anonymous).
    • Targeting/Marketing Cookies: Used to deliver relevant communications.

    You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from executing secure transactions.

  6. Disclosures and Data Sharing

    7. We do not sell your personal information. We only share your data on a strict, appropriate need and/or requirement basis with:

    • Service Providers: Technology partners and financial institutions required to process your payments. These entities are bound by strict confidentiality and data protection agreements.
    • Legal and Regulatory Authorities: When required by law, subpoena, or to protect the rights, property, and safety of our users or the public.
  7. State and Global Regulatory Disclosures
    1. California Privacy Rights (CCPA / CPRA)

      2. If you are a resident of California, CPRA grants you specific rights regarding your personal information:

      • Right to Know and Access: You may request details about the categories and specific pieces of data we have collected about you.
      • Right to Delete and Correct: You may request the deletion or correction of inaccurate personal data, subject to certain legal and financial retention exceptions.
      • Right to Limit Use of Sensitive Information: You may restrict the use of sensitive personal information to exactly what is necessary to perform the services.
      • Right to Opt-Out of Sale/Sharing: We do not "sell" your personal information for monetary value, nor do we "share" it for cross context behavioral advertising.
    2. European Economic Area (EEA) and UK Rights (GDPR)

      3. If you are in the EEA or the UK, you possess the following rights:

      • Right to Erasure (Right to be Forgotten): Request the deletion of your data when it is no longer necessary for the purposes collected.
      • Right to Data Portability: Request a structured, commonly used, and machine readable format of your data.
      • Right to Restrict or Object: Object to the processing of your data, particularly for direct marketing purposes.
      • International Transfers: Data transferred outside the EEA/UK will be protected by Standard Contractual Clauses (SCCs) or other legally approved adequacy mechanisms.
    3. Health Information Privacy (HIPAA)

      4. If the information you provide constitutes Protected Health Information (PHI), it is governed by HIPAA. We implement administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of all electronic PHI we create, receive, maintain, or transmit. Disclosures of PHI are strictly limited to those permitted under HIPAA, such as for payment processing and healthcare operations.

    4. Children’s Privacy (COPPA)

      5. Our services are not directed toward children. We do not knowingly collect personal information from individuals under the age of 13. If we discover that a child under 13 has provided us with personal information without verifiable parental consent, we will aid to immediately delete that information from applicable systems.

  8. Data Retention

    9. We retain personal information only for the duration necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law (e.g., tax, accounting, or legal compliance). Upon expiration of the applicable retention period, data is securely destroyed or irreversibly anonymized.

  9. Security and Incident Response

    10. We utilize industry standard security measures, including Transport Layer Security (TLS) encryption, strict access controls, and regular vulnerability assessments. In the event of a data breach compromising your personal data, we will activate our Incident Response Plan and notify you and the relevant regulatory authorities within the timeframes mandated by applicable laws.

  10. Contact Information and Exercising Your Rights

    11. To exercise any of your privacy rights, request an opt out, or ask questions regarding this policy, please contact following:

    Phone: +1 (800) 642-3195

    Email: contact@lq-pay.com

Print This Page
Privacy Policy
Terms and Conditions