1. Data Controller Identity
The controller responsible for processing your personal data is:
- Legal name: Startit Services LLC
- State of incorporation: Florida, United States
- Florida registration number: L23000525983
- Legal contact email: privacy@startitservices.com
- Website: www.startitservices.com
This Privacy Policy applies to all services offered by Startit Services LLC through startitservices.com and its subdomains, including the corporate website, the book From Debt to Capital, the Capital Path application, and any other product or service that Startit Services LLC makes available to the public.
2. Personal Data Collected
We collect the following types of personal data through our platform:
Data you provide directly
- Full name or first and last name
- Email address
- Phone number (optional, when submitting contact forms)
- Project or business description (contact forms)
- Estimated budget or package of interest
- Payment information processed through Stripe (card number, expiration date — never stored directly by Startit)
Automatically collected data
- IP address
- Browser type and version
- Operating system
- Pages visited and visit duration
- Referral URL (where you came from)
- Cookie and similar technology data (see section 9)
- Session identifiers
Subscription data
- Email and name for the From Debt to Capital newsletter
- Subscription status and subscription/cancellation date
- Consent record (date, accepted text)
3. Processing Purposes and Legal Basis
We process your data only for the purposes described below, each supported by a specific legal basis:
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to inquiries and contact forms | Name, email, phone, description | Legitimate interest / Consent |
| Delivering contracted services | Name, email, payment data | Contract performance |
| Newsletter and marketing communications | Name, email | Consent (explicit opt-in) |
| Analytics and site improvement | IP, browsing behavior, cookies | Legitimate interest |
| Payment processing | Card data (via Stripe) | Contract performance |
| Security, fraud and abuse prevention | IP, access logs, usage patterns | Legitimate interest |
| Legal and tax compliance | Name, email, transaction data | Legal obligation |
4. Third-Party Data Recipients
Startit Services LLC shares personal data only with service providers strictly necessary to operate the platform. We do not sell, rent, or transfer personal data to third parties for their own commercial purposes:
Secure credit/debit card payment processing
Data: Payment data, cardholder name, email
Privacy policy →Traffic analytics and user behavior on the site
Data: IP (anonymized), browsing behavior, device, traffic source
Privacy policy →Transactional email sending (confirmations, welcomes, sample chapter)
Data: Name, email address
Privacy policy →Scheduling consulting meetings with clients
Data: Name, email, selected time slot
Privacy policy →Website hosting, database, and static file storage
Data: All data stored on the platform
Privacy policy →5. International Data Transfers
Startit Services LLC operates from the United States. When using our services from other countries, your personal data will be transferred to and processed in the United States and potentially in other countries where our service providers operate (for example, Hetzner servers in Germany).
For users outside the United States, these transfers are carried out under the following safeguards: (a) Standard Contractual Clauses approved by the European Commission where applicable; (b) Data Processing Agreements with each provider; (c) Specific contractual guarantees regarding data security and confidentiality.
6. Data Retention Period
We retain your personal data only for as long as necessary for the stated purposes and as required by applicable law:
| Data category | Retention period |
|---|---|
| Leads and contact forms | 3 years from last contact |
| Newsletter subscription data | Until cancellation + 1 year |
| Transaction and payment records | 7 years (federal tax compliance) |
| Access logs and IP | 12 months |
| Analytics cookies | 13 months from last visit |
| Deletion request data | Minimum 2-year record (to demonstrate compliance) |
After these periods, data is securely deleted or irreversibly anonymized.
7. Your Rights
As a user of our services, you have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of your data when no longer necessary for original purposes, except where legal obligation requires retention.
- Right to data portability: request your data in a structured, machine-readable format.
- Right to object: object to processing based on legitimate interest, including direct marketing.
- Right to withdraw consent: withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact privacy@startitservices.com. We will respond within 30 days of receiving your request.
8. Your CCPA/CPRA Rights (California Residents)
The California Consumer Privacy Act (CCPA) grants California residents specific rights over their personal information. If you are a California resident, you have the following rights:
Right to Know
You have the right to request information about the categories of personal information we collect, the sources of that information, the business purposes for which we use it, and the categories of third parties with whom we share it.
Right to Delete
You have the right to request deletion of the personal information we have collected about you, subject to certain legal exceptions (for example, compliance with legal obligations, defense of legal claims, or completing an ongoing transaction).
Right to Opt-Out of Sale
Startit Services LLC does not sell personal information. We do not share, rent, or transfer your personal information to third parties in exchange for monetary consideration. If we were to change this practice in the future, we would notify you at least 30 days in advance and give you the option to opt-out before any sale.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, provide you with a different level of quality, or suggest that you will receive a different price or quality of goods or services as a result of exercising your rights.
Right to Data Portability
You have the right to receive the personal information you have provided to us in a portable, readable, and usable format that allows you to transmit it to another provider without hindrance.
How to submit a CCPA request
To exercise your CCPA rights, follow these steps:
- Step 1 — Send an email to privacy@startitservices.com
- Step 2 — In the subject line, state: "CCPA Request — [right type]"
- Step 3 — In the body, include: (a) your full name, (b) the email address with which you interacted with Startit, (c) the type of request (know / delete / portability / opt-out), and (d) a brief description of your request.
- Step 4 — Accepted format: plain text email or attached PDF form. We do not accept requests via social media or phone calls.
Response time: We will respond to your verifiable request within 45 calendar days of receipt. If we need more time (up to 90 days in complex cases), we will notify you within the initial 45-day period with the reason for the extension.
CCPA requests are free of charge. If a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on it.
CPRA: additional rights and sensitive data
Under the California Privacy Rights Act (CPRA), California residents also have the right to (a) correct inaccurate personal information, and (b) limit the use and disclosure of their "sensitive personal information." Startit Services LLC does not use sensitive information to infer characteristics about you or for purposes other than those permitted by the CPRA. You may designate an authorized agent to submit requests on your behalf; we may request verification of your identity and of the agent's authorization.
Do Not Sell or Share + Global Privacy Control (GPC)
We do not sell or "share" your personal information.
We do not sell personal information nor "share" it for cross-context behavioral advertising as defined by the CPRA. If we adopt technologies subject to these rules in the future, we would honor your browser's Global Privacy Control (GPC) signal as a valid opt-out request. In the meantime, you may exercise any opt-out by writing to privacy@startitservices.com.
10. Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices, applicable law, or the services we offer. When we make material changes, we will notify you through:
- A prominent notice on the website for at least 30 days
- Email to active newsletter subscribers
- Update to the "Last updated" date visible at the top of this page
Version history
| Version | Date | Main changes |
|---|---|---|
| 1.0 | June 22, 2026 | Florida jurisdiction; CCPA/CPRA + Global Privacy Control; children's privacy and marketing; disclaimers. |
11. Children's Privacy and Marketing Communications
Minors
Our services are directed to persons over 18 years of age and not to minors. We do not knowingly collect personal information from children under 13 (nor from minors under 16 without the applicable consent). If you believe a minor has provided us with data, please write to privacy@startitservices.com and we will delete it without delay.
Marketing email and opt-out (CAN-SPAM)
We only send you newsletters or marketing emails if you voluntarily subscribe. Every marketing email includes an unsubscribe link; using it will stop promotional communications, typically within 10 business days, in accordance with the CAN-SPAM Act. Even if you unsubscribe, we may still send you necessary transactional or service emails (e.g. confirmations, responses to your inquiry, or legal notices).
12. Contact and Legal Officer
If you have questions about this Privacy Policy, wish to exercise your rights, or have any complaint related to the processing of your personal data, you can contact us through the following means:
- Legal email (privacy & CCPA): privacy@startitservices.com
- General email: info@startitservices.com
- Response time: maximum 30 calendar days for general inquiries, 45 days for CCPA requests.
If you believe that the processing of your data does not comply with applicable law, you have the right to lodge a complaint with the competent data protection authority in your jurisdiction.