Privacy Statement

KREDITOR SERVICES USA INC.
operating as KSI

Effective Date: October 1, 2026 | Last Updated: October 1, 2026

Kreditor Services USA Inc., operating as KSI (“KSI”, “we”, “us” or “our”), is committed to protecting your personally identifiable information. This Privacy Statement explains how KSI receives, uses, discloses, protects and retains personal information, and the choices and rights available to you.

1. Who We Are and Scope of This Statement

KSI is a Washington, D.C. corporation that provides third-party collection and accounts receivable management services to creditors and other businesses (our “clients”). KSI is a debt collector. KSI is not a law firm and does not provide legal advice.

This Privacy Statement applies to personal information KSI collects through our website at kreditorservices.com; through letters, telephone calls, email, text messages and other communications; from clients that place accounts with us; and in connection with employment inquiries. It does not apply to third-party websites. This Privacy Statement supplements, and does not replace, any privacy notice provided to you by your creditor, or any disclosure required by law in connection with a specific account. KSI employees and job applicants may receive a separate notice.

2. How KSI Receives Your Information

KSI may receive your personal information in a number of ways, including:

Information you provide to us directly, including in response to a call, letter or other communication we have sent to you;
Information provided by our clients (for example, a bank, credit card issuer, utility or other creditor) in the course of our contracted business relationship with them;
Information from public records, location-information providers, consumer reporting agencies where legally permitted, and other lawful sources; and
Information you provide as a visitor to KSI’s website, or that you choose to send to us in connection with an employment inquiry.

The types of personal information we receive may include:

Contact information and other identifiers, such as name, address, telephone number, email address, government-assigned identifier, or bank account number, as required to provide our services;
Account information, such as the creditor name, account number, balance and payment history relating to the account we have been engaged to service;
Demographic information, such as date of birth, gender, marital status and military status;
Recordings of telephone calls with us; and
Employment information, such as date of hire, employment status, pay history, tax withholding information, performance records and date of termination.

Please do not send Social Security numbers, complete financial-account numbers or payment-card information to us by unsecured email.

3. How KSI Uses Your Information

KSI uses personal information to service and collect accounts on behalf of our clients; verify identity; communicate with you; process payments you authorize; respond to disputes, complaints and requests; maintain accurate records; detect and prevent fraud and security incidents; operate and secure our website; evaluate employment applications; and comply with legal, regulatory, licensing and contractual obligations. Personal information that KSI receives from a client is used only to perform services for that client and for other purposes permitted by the Gramm-Leach-Bliley Act and its implementing regulations. KSI does not use personal information for marketing.

4. How KSI Discloses Your Information

KSI will not sell your personally identifiable information to any third party. KSI does not share personal information for cross-context behavioral or targeted advertising.

When we are collecting a debt from you, we will not communicate with third parties about that debt except as permitted by the federal Fair Debt Collection Practices Act and Regulation F (12 C.F.R. Part 1006), and applicable state law. Subject to those limits, KSI may disclose personal information:

To the client that placed your account with us, and to that client’s attorney;
To service providers that perform functions on our behalf (such as letter printing and mailing, payment processing, telephone and messaging services, data hosting and information security), under contracts that limit their use of the information;
To third parties, for the limited purpose of obtaining your location information, as permitted by law;
To consumer reporting agencies, where permitted by law;
To any person you authorize, or with your prior consent given directly to us;
As required or permitted by law, including in response to a court order, subpoena, regulatory examination or lawful request of law enforcement or a government agency;
As necessary to protect the property, interests, rights and security of KSI, our clients or others, and to prevent fraud; and
In connection with a proposed or actual sale, merger or transfer of all or part of KSI’s business, subject to applicable law and confidentiality protections.

5. Credit Reporting

KSI furnishes information about accounts to consumer reporting agencies. Where KSI furnishes information, it does so in accordance with the Fair Credit Reporting Act and Regulation V, and KSI will not furnish information about a debt before communicating with you about that debt as required by 12 C.F.R. §1006.30(a). You may dispute the accuracy of information we have furnished by writing to us at the address in the “Contact Us” section. Please include your name, KSI reference number, the information you are disputing, the reason for your dispute and any supporting documents.

6. Your Communication Choices

Electronic communications. You may opt out of receiving email or text messages from KSI at any time by following the opt-out instructions in the message (for example, by replying STOP to a text message) or by contacting us.

Times, places and methods. You may tell us that a time, place or method of communication is inconvenient for you, or that you do not want us to contact you at work, and we will honor your request as required by law.

Cease communication. You may ask us in writing to stop communicating with you about a debt. After we receive your request, we will contact you only as permitted by law.

Calls and texts. You may revoke any consent you have given to receive autodialed or prerecorded calls or text messages at any time and by any reasonable means.

Call recording. Telephone calls with KSI may be monitored or recorded for quality assurance, training and compliance purposes.

A privacy request under Section 13 is separate from a debt dispute, a request for validation information or a communication preference. To exercise account-related rights, please follow the instructions in the communication you received from KSI or contact us.

7. Cookies, Online Tracking and Do Not Track

When you visit kreditorservices.com, our servers automatically collect limited technical information, such as your IP address, browser type, device information, pages viewed and the date and time of your visit. KSI’s website uses only those cookies and similar technologies needed for website operation, security, accessibility and performance analytics. KSI does not use advertising or cross-site tracking technologies and does not permit third parties to collect personally identifiable information about your online activities over time and across different websites when you use our website.

Do Not Track is a privacy preference you can set in your web browser. Because KSI does not track users across websites, KSI supports Do Not Track across all pages of its website, and your experience on our website does not change whether or not you activate it. KSI also honors opt-out preference signals such as Global Privacy Control as described in Section 13. For more information about Do Not Track, please visit donottrack.us.

8. KSI’s Commitment to Protecting Personally Identifiable Information

KSI maintains a written information security program with administrative, technical and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, loss or destruction, consistent with the Federal Trade Commission’s Safeguards Rule (16 C.F.R. Part 314). These safeguards include access controls limited to employees with a job-related need to access personal information, multi-factor authentication, encryption, system monitoring designed to detect unauthorized access, employee training, oversight of service providers, incident-response procedures and secure disposal practices. KSI’s platform is independently audited under SOC 2 Type II and the Payment Card Industry Data Security Standard (PCI DSS). Additional information about our security program is available through the KSI Trust Center at https://app.vanta.com/ksilaw/trust/hl58w4j6nttafr1pzxgxr.

No method of transmission or storage is completely secure. If KSI experiences a security incident involving your personal information, we will notify you and the appropriate authorities as required by applicable law.

9. Social Security Number Protection

KSI protects the confidentiality of Social Security numbers it collects in the course of business. KSI: (a) limits access to Social Security numbers to employees and service providers with a business need to know; (b) prohibits the unlawful disclosure of Social Security numbers; (c) does not publicly display Social Security numbers or print them on mailings, except as permitted by law; and (d) securely destroys documents and media containing Social Security numbers when they are no longer needed. This section constitutes KSI’s privacy protection policy for Social Security numbers under applicable state law, including Conn. Gen. Stat. §42-471 and Mich. Comp. Laws §445.84.

10. Data Retention

KSI retains personal information for a period of twelve (12) months from the date our services relating to that information end, unless a longer period is required by law (including the record-retention requirements of Regulation F, 12 C.F.R. §1006.100), by our contract with the client, or to resolve disputes or establish, exercise or defend legal claims. When personal information is no longer needed, we take reasonable steps to securely delete, destroy or de-identify it. Retention information for California residents is also provided in Section 14.

11. Making Corrections

KSI is committed to accurately maintaining your personally identifiable information. Although we cannot guarantee that your personal information will be accurate at all times, we will take reasonable steps to correct personal information that is properly identified as incorrect. If you need to update or correct your personal information, please contact us toll-free at 1-833-207-3200 or by email at [email protected]. In some circumstances only our client (your creditor or service provider), and not KSI, may have the authority to update or correct your personal information. Where that is the case, we will forward your request to our client.

12. Children’s Privacy

Our website and services are intended for adults and are not directed to children under 13. KSI does not knowingly collect personal information online from children under 13, and does not sell or use for targeted advertising the personal data of any consumer it knows to be under 18. If we learn that we have collected personal information from a child under 13 through our website, we will take reasonable steps to delete it.

13. Your State Privacy Rights

Residents of certain states, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, may have rights regarding their personal information under state privacy laws. These laws do not apply to some of the personal information KSI processes, such as information collected, processed or disclosed under the Gramm-Leach-Bliley Act or subject to the Fair Credit Reporting Act, and some state laws do not apply to KSI at all. Where an exemption applies, we will tell you when we respond to your request.

Rights that may be available to you

Depending on your state of residence, and subject to exceptions, you may have the right to:

Confirm whether we process your personal data, and access that personal data;
Obtain a copy of your personal data in a portable and, where technically feasible, readily usable format;
Correct inaccuracies in your personal data;
Delete your personal data;
Opt out of the sale of personal data, targeted advertising and profiling in furtherance of decisions that produce legal or similarly significant effects;
Obtain a list of the specific third parties to which we have disclosed your personal data (for example, in Connecticut, Delaware, Minnesota and Oregon);
Where profiling has been used to make a significant decision about you, question the result, learn the reasons for the decision and review the personal data used (for example, in Connecticut and Minnesota); and
Appeal our decision on your request.

KSI does not sell personal data, does not process personal data for targeted advertising, and does not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers. KSI processes sensitive data only as reasonably necessary to provide the services requested and as permitted by law, and obtains consent where required.

How to submit a request

You, or an authorized agent acting on your behalf, may submit a request by calling us toll-free at 1-833-207-3200 or by emailing [email protected] with “Privacy Request” in the subject line. Please include your name, state of residence, KSI reference number (if any) and the right you wish to exercise. We will verify your identity by matching the information you provide against information we already hold, and may require an authorized agent to provide proof of authority. We will use information provided for verification only for that purpose. We will respond within forty-five (45) days, or within any longer period permitted by law if we notify you of an extension. KSI will not discriminate or retaliate against you for exercising your privacy rights.

Appeals

If we decline to take action on your request, you may appeal by emailing [email protected] with “Privacy Request Appeal” in the subject line within a reasonable period after receiving our decision. We will respond to your appeal in writing within the period required by applicable law (generally forty-five (45) to sixty (60) days), explaining any action taken or not taken and the reasons. If your appeal is denied, you may contact the Attorney General of your state.

Opt-out preference signals

Where required by applicable law, KSI treats opt-out preference signals, such as Global Privacy Control, as a valid request to opt out of the sale of personal data and targeted advertising for the browser or device sending the signal. Because KSI does not sell personal data or engage in targeted advertising, no further action is needed on your part.

14. Notice to California Residents

This section supplements the rest of this Privacy Statement and applies only to residents of California. It is provided under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and its implementing regulations (together, the “CCPA”), and the California Online Privacy Protection Act. Terms defined in the CCPA have the same meaning when used in this section.

Information exempt from the CCPA

Much of the personal information KSI processes in the course of collecting accounts is exempt from the CCPA, including personal information collected, processed, sold or disclosed under the federal Gramm-Leach-Bliley Act and its implementing regulations, and personal information that is subject to the federal Fair Credit Reporting Act. Where an exemption applies, the rights described in this section may not be available. This section still describes our practices for all categories of personal information so that you have a complete picture, and we will tell you if an exemption applies when we respond to a request.

Sensitive personal information

KSI uses and discloses sensitive personal information only for the purposes permitted by Section 7027(m) of the CCPA regulations, such as verifying your identity, performing the services you reasonably expect, processing payments and complying with law. KSI does not use or disclose sensitive personal information to infer characteristics about you. Because of this, the right to limit the use and disclosure of sensitive personal information does not apply.

No sale or sharing of personal information

KSI does not sell personal information and does not share personal information for cross-context behavioral advertising, and has not done so in the preceding twelve (12) months. KSI has no actual knowledge of selling or sharing the personal information of consumers under sixteen (16) years of age.

Opt-out preference signals

KSI processes opt-out preference signals, such as Global Privacy Control, as a valid request to opt out of the sale and sharing of personal information for the browser or device that sends the signal and, if known, for the consumer. Because KSI does not sell or share personal information, no further action is needed on your part.

Retention of personal information

KSI retains each category of personal information described above for twelve (12) months from the date our services relating to that information end, unless a longer period is required by law (including the record-retention requirements of Regulation F, 12 C.F.R. §1006.100), by our contract with the client, or to establish, exercise or defend legal claims.

Your California privacy rights

Subject to the exemptions and exceptions in the CCPA, California residents have the following rights:

Right to know. You may request that we disclose the categories of personal information we have collected about you, the categories of sources, the business or commercial purpose for collecting it, the categories of third parties to whom we disclosed it, and the specific pieces of personal information we have collected about you.
Right to delete. You may request that we delete personal information we collected from you. We may deny a request where an exception applies, for example where we need the information to complete a transaction, perform a contract with our client, comply with a legal obligation, or establish, exercise or defend legal claims.
Right to correct. You may request that we correct inaccurate personal information we maintain about you.
Right to opt out of sale or sharing. You have the right to opt out of the sale or sharing of your personal information. KSI does not sell or share personal information.
Right to limit use of sensitive personal information. KSI uses sensitive personal information only for permitted purposes, so this right does not apply.
Right to non-discrimination and non-retaliation. KSI will not discriminate or retaliate against you for exercising any of your CCPA rights.

How to submit a request

You, or an authorized agent acting for you, may submit a request to know, delete or correct by calling us toll-free at 1-833-207-3200, or by emailing [email protected] with “California Privacy Request” in the subject line.

Verification. We must verify your identity before responding. We will ask you to provide information that matches information we already hold, such as your name, address, telephone number and KSI reference number. The level of verification required depends on the sensitivity of the information and the type of request.

Authorized agents. An authorized agent may submit a request on your behalf. We may require the agent to provide your signed written permission, and may require you to verify your own identity directly with us, unless the agent holds a valid power of attorney under California Probate Code Sections 4121 to 4130.

Response timing. We will confirm receipt of a request to know, delete or correct within ten (10) business days and will respond within forty-five (45) calendar days. If we need more time (up to a further 45 calendar days), we will tell you why in writing. Responses to requests to know will cover the twelve (12) months before the request, or a longer period where you ask for it and providing it does not involve disproportionate effort, but not information collected before January 1, 2022. If we deny a request in whole or in part, we will explain why.

Shine the Light

Under California Civil Code Section 1798.83, California residents may request, once per calendar year, information about the personal information we have disclosed to third parties for their direct marketing purposes in the preceding calendar year. KSI does not disclose personal information to third parties for their direct marketing purposes. You may submit such a request using the methods listed above, and we will respond within thirty (30) days.

15. Notice to Nevada Residents

Nevada residents may submit a request directing us not to sell covered information that we have collected or will collect about them. KSI does not sell covered information as defined in Nevada Revised Statutes Chapter 603A. You may nonetheless submit a request by emailing [email protected].

16. Accessibility

This Privacy Statement is available in an alternative format for consumers with disabilities on request at 1-833-207-3200 or [email protected]. Our Accessibility Policy is available at kreditorservices.com/accessibility-policy.

17. Changes to This Privacy Statement

We may update this Privacy Statement from time to time and will review it at least once every twelve (12) months. We will post the updated Privacy Statement on this page with a new “Last Updated” date and, where we make material changes in the way we treat personal information, we will place a prominent notice on our website and provide any additional notice or obtain any consent required by law. We encourage you to review this Privacy Statement periodically.

18. Contact Us

If you have any questions or complaints about KSI’s use of your personal information or about this Privacy Statement, please contact us:

Kreditor Services USA Inc. (KSI)
Attention: Privacy Officer
1717 N Street NW, STE 1
Washington, DC 20036
Toll-free: 1-833-207-3200
Email: [email protected]
Website: https://kreditorservices.com

The effective date of this Privacy Statement is October 1, 2026.