Privacy Policy

1. About this Policy

White Sand, an independent business operating from Denton, Texas, operates the Site and provides credit strategy, credit-building, and related consulting services (collectively, the "Services").

We are not a lender, bank, or financial institution. All credit offers referenced on the Site are issued by third-party financial institutions and are subject to their underwriting and approval.

2. Information we collect

2.1 Information you provide directly

When you fill out a form, book a call, or otherwise interact with us, we may collect:

Identifying information: first and last name, business name
Contact information: email address, phone number, mailing address
Business and financial information: estimated personal credit score range, credit goal, primary use of funds, time in business, entity type
Communications: messages, notes, voicemails, and any other content you submit through the Site, email, phone, SMS, or scheduling tools

Booking and scheduling data — the time you select and the answers you give when you book — is collected directly by us through the scheduling tool built into this Site. The resulting calendar invitation and video meeting are created in Google Workspace (see Section 4).

2.2 Information collected automatically

When you visit the Site, we (or our service providers) may automatically collect:

Device and browser information: IP address, browser type and version, operating system, device type
Usage information: pages viewed, time spent, referring URL, clicks
Technical logs needed to operate, secure, and troubleshoot the Site

At this time, we do not use third-party analytics or advertising cookies. If we add analytics in the future, we will update this Policy and provide consent mechanisms where required.

2.3 Information from third parties

We may receive information about you from third parties such as:

Email and communication service providers
Service providers that help us prevent fraud or comply with law

3. How we use your information

We use the information we collect to:

Provide, deliver, and improve the Services, including preparing for and conducting your strategy call
Communicate with you about your inquiry, applications, and engagement with our Services
Send transactional messages (e.g., booking confirmations, reminders, updates)
With your consent, send marketing communications you can unsubscribe from at any time
Maintain records, comply with legal obligations, and respond to lawful requests
Detect, investigate, and prevent fraud, abuse, or violations of our terms
Operate, maintain, and secure the Site

We do not sell your personal information for monetary consideration. We do not share your personal information with third parties for their own independent advertising purposes.

We share information only as described below:

4.1 Service providers (processors)

We use third-party vendors that process information on our behalf under written agreements, including:

Google LLC (Google Workspace) — calendar invitations and Google Meet video meetings for scheduled calls. Google's Privacy Policy.
Vercel, Inc. — website hosting and content delivery. Vercel's Privacy Policy.
Email service providers (e.g., Google Workspace / Gmail) — sending and receiving email.

4.2 Lending and credit partners

With your authorization, we may share your information with third-party lenders, issuing banks, credit bureaus, or other financial institutions in connection with credit-card applications, tradeline reporting, or related services. Each such third party operates under its own privacy practices.

4.3 Legal and safety disclosures

We may share information when we believe in good faith that disclosure is necessary to:

Comply with a law, regulation, subpoena, court order, or governmental request
Enforce our Terms of Service or other agreements
Protect the rights, property, or safety of White Sand, our clients, or others
Investigate or prevent fraud or security issues

4.4 Business transfers

If we are involved in a merger, acquisition, financing, or sale of all or part of our business, information may be transferred as part of that transaction, subject to standard confidentiality protections.

5. Cookies & similar technologies

The Site uses only strictly necessary cookies and local storage required for basic operation (for example, to remember your scroll position or form input on the same page).

We do not currently use advertising cookies or third-party analytics cookies. If this changes, we will update this Policy and provide an in-product cookie banner or consent control where required by law.

6. Data retention

We retain personal information for as long as needed for the purposes described in this Policy, including:

To provide ongoing Services and communicate with you
To comply with our legal, accounting, tax, and reporting obligations
To resolve disputes and enforce our agreements

Typical retention period for active client records: 7 years after the last service date, unless a longer period is required by law. Leads who never engaged in Services may be deleted earlier upon request.

7. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. All data transmitted via the Site is encrypted in transit using TLS (HTTPS).

No security measure is perfect, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and any device you use to access our Services.

8. Your rights — California residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"), gives you the following rights regarding your personal information:

Right to know — request the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which we collected it, and the categories of third parties with whom we shared it
Right to delete — request that we delete personal information we have collected from you, subject to certain exceptions
Right to correct — request correction of inaccurate personal information
Right to opt out of "sale" or "sharing" — we do not sell personal information; we will honor opt-out requests
Right to limit use of sensitive personal information
Right to non-discrimination — we will not discriminate against you for exercising any of these rights

To exercise these rights, contact us using the details in Section 13. We may need to verify your identity before responding. You may also designate an authorized agent to make a request on your behalf.

We do not knowingly collect or sell personal information of consumers under 16 years of age.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (and equivalent UK and Swiss laws) provides you the following rights:

Right of access to your personal data
Right to rectification of inaccurate or incomplete data
Right to erasure (the "right to be forgotten"), subject to legal exceptions
Right to restrict processing in certain circumstances
Right to data portability — receive your data in a structured, commonly used, machine-readable format
Right to object to processing based on legitimate interests or direct marketing
Right to withdraw consent at any time where processing is based on consent
Right to lodge a complaint with your local supervisory authority

Legal bases we rely on:

Performance of a contract — to deliver Services you request
Legitimate interests — to operate, secure, and improve the Services in ways that do not override your rights
Consent — for optional marketing communications (which you can withdraw at any time)
Legal obligation — to comply with applicable law

To exercise these rights, contact us using the details in Section 13.

10. International data transfers

White Sand operates primarily in the United States, and our service providers are typically based in the United States. If you access the Site or use the Services from outside the United States, your personal information will be transferred to, and processed in, the United States, where data protection laws may differ from those in your country.

Where required by applicable law (including for transfers from the EEA, UK, or Switzerland), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or other lawful transfer mechanisms.

11. Children's privacy

The Site and Services are intended for adults (18 years of age or older) who are business owners or operators. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us so we can promptly delete it.

12. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Effective date" at the top of this page and, where appropriate, provide additional notice (such as an in-product banner or an email). Your continued use of the Site after the effective date constitutes your acceptance of the updated Policy.

13. How to contact us

For questions, requests, or complaints regarding this Policy or your personal information, please contact us at:

White Sand
Attn: Privacy
624 W University Dr #440, Denton, TX 76201

Email: kan@skyfah.com