Privacy Policy

Template [Last Updated December 2025] 

COLORADO, CONNECTICUT, DELAWARE, INDIANA, IOWA, KENTUCKY, MARYLAND, MINNESOTA, MONTANA, NEBRASKA, NEW HAMPSHIRE, NEW JERSEY, OREGON, RHODE ISLAND, TENNESSEE, TEXAS, UTAH AND VIRGINIA RESIDENTS: 

‍

TUCKER, ALBIN AND ASSOCIATES, INC’S PRIVACY POLICY NOTICE

‍

This Privacy Policy Notice is intended for Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia residents pursuant to the Colorado Privacy Act, the Connecticut Data Privacy Act, the Delaware Personal Data Privacy Act, the Indiana Consumer Data Protection Act, the Iowa Consumer Data Protection Act, the Kentucky Consumer Data Protection Act, the Maryland Online Data Privacy Act, the Minnesota Consumer Data Privacy Act, the Montana Consumer Data Privacy Act, the Nebraska Data Privacy Act, the New Hampshire Consumer Data Privacy Act, the New Jersey Data Privacy Act, the Oregon Consumer Privacy Act, the Rhode Island Data Transparency and Privacy Protection Act, the Tennessee Information Protection Act, the Texas Data Privacy and Security Act, the Utah Consumer Privacy Act and the Virginia Consumer Data Protection Act, respectively. This policy supplements the information contained in the above Privacy Policy.  Any terms defined in these laws and related regulations have the same meaning as used in this Privacy Policy Notice.  

1.   Personal Data We Collect About You

‍

We may process personal data that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be directly or indirectly linked, with a consumer, device, or household (“personal data”).

‍

Personal data does not include:

• Publicly available information from government records.
• Deidentified or aggregated consumer information.
• Information excluded from the scope of the above privacy laws, such as (but not limited to) information governed by the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the Fair Credit Reporting Act (“FCRA”), and the Gramm-Leach-Bliley Act (“GLBA”). 

‍

We regularly process (and have processed in the past 12 months) several types of personal data about individuals regarding accounts we service or purchase, including: 

‍

Category

Examples

Identifiers

Name, signature, postal address, Internet Protocol address, email address, telephone number, account number, Social Security number, or other similar identifiers

Financial information 

Bank account number, credit card number, debit card number, or other financial information; medical insurance information

Protected classifications 

Age, gender, medical condition, disability, veteran or military status

Commercial information

Records of products or services purchased, obtained

Internet or other similar network activity

Information on a consumer's interaction with our website(s) or  application(s)

Audio, electronic, visual or similar data

Call recordings

Professional, or employment-related information

Current or past job history

Non-public education information 

Student financial information 

Inferences drawn from personal information

To create a profile reflecting the consumer’s preferences, characteristics, aptitudes, or behavior

Personal information

A consumer's social security number, driver's license, state identification card, or passport number; a consumer's account log-in in combination with any required security or access code, password, or credentials allowing access to the account

2.  Why We Process Your Personal Data 

‍

We regularly process personal data for one or more of the following business purposes:

‍

• Fulfill the reason you provided the information. For example, if you share your personal data to make a payment, we will use that information to process your payment.
• Perform services on behalf of a business or service provider, including maintaining or servicing accounts, providing customer service, processing transactions, verifying customer information, processing payments, providing analytic services, or providing similar services on behalf of the business or service provider.
• Provide you with information or services that you request from us
• Auditing related to consumer interactions. 
• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity.
• Debugging to identify and repair errors that impair existing intended functionality.
• Short-term, transient use, where the personal information is not disclosed to another third party and is not used to build a profile about a consumer or otherwise alter an individual consumer’s experience outside the current interaction.
• Undertaking activities to verify or maintain the quality of a service or device that is owned, made by or for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, made by or for, or controlled by us.
• Respond to law enforcement requests and as required by applicable law or court order.
• As appropriate to protect the rights, property, or safety of us, our clients, or others.
• As described to you when collecting your personal information or as otherwise permitted by law. 

We will not collect additional categories of personal data or use the personal data we collected for materially different purposes without providing you notice.

3. Third Parties To Whom We Disclose Personal Data

We regularly disclose (and have disclosed in the past 12 months) the above listed categories of personal data for business purposes to one or more of the following categories of third parties: our creditor clients, our service providers (payment processing, mailing, collection, call analytics and other vendors), credit reporting agencies, regulatory and law enforcement agencies. 

4. We Do Not Sell Personal Data Or Engage In Targeted Advertising Or Profiling

We do not sell your personal data, process your personal data for targeted advertising, or process your personal data for automated decision-making including profiling in furtherance of decisions that produce legal or similarly significant effect on you. 

‍

5. How To Request To Exercise Your Rights

‍

Upon our verification of identity through commercially reasonable means, you may request to exercise one or more of the following rights:

‍

• To confirm whether or not we are processing your personal data and to access such personal data;
• To delete personal data provided by or obtained about you;
• To obtain a copy of your personal data that you previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the data to another company without hindrance, where the processing is carried out by automated means.
• To correct inaccuracies in your personal data.

‍

Delaware, Maryland, Minnesota and Oregon residents may also obtain confirmation of the specific third parties to whom we have disclosed your personal data.

‍

You may request to exercise these rights by one of the following methods:

‍

• Via our website tuckeralbin.com
• Calling us at 469-424-3033
• Emailing us at: compliance@tuckeralbin.com 
• Mailing us at : 

TUCKER, ALBIN & ASSOCIATES, INC.

1702 N. Collins Blvd., Ste. 100

Richardson, TX 75080

If we decline to take action on your request, in whole or in part, where required by applicable law, you may appeal our decision by contacting us using any of the methods listed above and clearly identifying your communication as an “Appeal of Privacy Rights Request Decision.”

‍

We will review and respond to your appeal in accordance with applicable law.

‍

6. Data Retention Policy

‍

We retain each category of personal information or sensitive personal information no longer than is reasonably necessary for the purposes for which it was collected as stated in this privacy policy, unless extending the retention period is otherwise required or permitted by law.  Subject to this limitation, the retention period of each category of personal information or sensitive personal information is determined by considering the following: the time required to retain the information to fulfill our business purposes; the time applicable to maintaining corresponding transaction and business records; the time necessary to respond to consumer queries, complaints or lawsuits; data retention requirements of applicable laws or contracts; and applicable data retention policies as may be in place from time to time.

‍

Last modified: 05/15/2026

‍